@cuylabs/agent-core 4.8.1 → 4.10.0

package/dist/safety/errors.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Thrown when a user or rule denies an operation.
+ */
+export declare class ApprovalDeniedError extends Error {
+    readonly tool: string;
+    readonly args: unknown;
+    readonly feedback?: string;
+    constructor(tool: string, args: unknown, detail?: string);
+}
+/**
+ * Thrown when an approval request times out.
+ */
+export declare class ApprovalTimeoutError extends Error {
+    readonly tool: string;
+    readonly timeoutMs: number;
+    constructor(tool: string, timeoutMs: number);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/safety/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/safety/errors.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;aAI1B,IAAI,EAAE,MAAM;aACZ,IAAI,EAAE,OAAO;IAJ/B,SAAgB,QAAQ,CAAC,EAAE,MAAM,CAAC;gBAGhB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EAC7B,MAAM,CAAC,EAAE,MAAM;CAMlB;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;aAE3B,IAAI,EAAE,MAAM;aACZ,SAAS,EAAE,MAAM;gBADjB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM;CAKpC"}

package/dist/safety/handler.d.ts

@@ -0,0 +1,16 @@
+import type { ApprovalConfig, ApprovalEventContext, ApprovalEvaluation, ApprovalRule, RiskLevel, RuleSource } from "./types.js";
+import type { ToolCapabilities } from "../types/tool.js";
+/**
+ * Creates an approval handler for managing tool execution permissions.
+ */
+export declare function createApprovalHandler(config?: ApprovalConfig): {
+    evaluate: (sessionId: string, tool: string, args: unknown, customRisks?: Record<string, RiskLevel>, capabilities?: ToolCapabilities, patternExtractor?: (input: unknown) => string[], extraRules?: ApprovalRule[]) => ApprovalEvaluation;
+    request: (sessionId: string, tool: string, args: unknown, customRisks?: Record<string, RiskLevel>, capabilities?: ToolCapabilities, patternExtractor?: (input: unknown) => string[], extraRules?: ApprovalRule[], eventContext?: ApprovalEventContext) => Promise<void>;
+    cancelAll: (_reason?: string) => void;
+    addRule: (rule: ApprovalRule) => void;
+    getRules: () => readonly ApprovalRule[];
+    clearSessionRules: () => void;
+    clearBySource: (source: RuleSource) => void;
+};
+export type ApprovalHandler = ReturnType<typeof createApprovalHandler>;
+//# sourceMappingURL=handler.d.ts.map

package/dist/safety/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/safety/handler.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,cAAc,EAEd,oBAAoB,EACpB,kBAAkB,EAElB,YAAY,EAEZ,SAAS,EACT,UAAU,EACX,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAoEzD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,GAAE,cAAmB;0BA0IlD,MAAM,QACX,MAAM,QACN,OAAO,gBACC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,iBACxB,gBAAgB,qBACZ,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,EAAE,eACnC,YAAY,EAAE,KACzB,kBAAkB;yBAjIR,MAAM,QACX,MAAM,QACN,OAAO,gBACC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,iBACxB,gBAAgB,qBACZ,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,EAAE,eACnC,YAAY,EAAE,iBACZ,oBAAoB,KACjC,OAAO,CAAC,IAAI,CAAC;0BA4La,MAAM,KAAG,IAAI;oBAOnB,YAAY,KAAG,IAAI;oBAIrB,SAAS,YAAY,EAAE;6BAKd,IAAI;4BAKH,UAAU,KAAG,IAAI;EAiBjD;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/safety/index.d.ts

@@ -1,135 +1,13 @@
-import { ck as RiskLevel, aw as ApprovalRule, au as ApprovalRequest, ax as ApprovalRuleContext, cl as RuleSource, aj as ApprovalCascadePolicy, at as ApprovalRememberScope, am as ApprovalDecision, ak as ApprovalConfig } from '../instance-Bg61WSyz.js';
-export { ag as ApprovalAction, ai as ApprovalCascadeMode, al as ApprovalCorrection, an as ApprovalEvaluation, ap as ApprovalEventContext, aq as ApprovalHandler, ar as ApprovalLifecycleEvent, av as ApprovalResolution, dR as createApprovalHandler } from '../instance-Bg61WSyz.js';
-import '../types-C_LCeYNg.js';
-import 'ai';
-import '../types-RSCv7nQ4.js';
-import 'zod';
-import '../types-CQaXbRsS.js';
-import '../types-DMjoFKKv.js';
-import '@modelcontextprotocol/sdk/client/auth.js';
-import '@modelcontextprotocol/sdk/types.js';
-import '@ai-sdk/provider-utils';
-import '../sandbox/index.js';
-import '../llm-error-D93FNNLY.js';
-
 /**
- * Get the risk level for a tool.
+ * Safety module for @cuylabs/agent-core
  *
- * Resolution order (first match wins):
- *  1. Caller-supplied `customRisks` map (e.g. from ApprovalMiddlewareConfig)
- *  2. Tool-declared `riskLevel` from capabilities (set via Tool.define)
- *  3. Built-in `DEFAULT_TOOL_RISKS` map
- *  4. Fallback: `"moderate"`
- */
-declare function getToolRisk(tool: string, customRisks?: Record<string, RiskLevel>, 
-/** Risk level declared by the tool's own capabilities. */
-declaredRisk?: RiskLevel): RiskLevel;
-
-/**
- * Thrown when a user or rule denies an operation.
- */
-declare class ApprovalDeniedError extends Error {
-    readonly tool: string;
-    readonly args: unknown;
-    readonly feedback?: string;
-    constructor(tool: string, args: unknown, detail?: string);
-}
-/**
- * Thrown when an approval request times out.
- */
-declare class ApprovalTimeoutError extends Error {
-    readonly tool: string;
-    readonly timeoutMs: number;
-    constructor(tool: string, timeoutMs: number);
-}
-
-type ApprovalRuleCondition = NonNullable<ApprovalRule["when"]>;
-declare function createConditionalApprovalRule(rule: Omit<ApprovalRule, "when">, when: ApprovalRuleCondition): ApprovalRule;
-declare function allApprovalConditions(...conditions: ApprovalRuleCondition[]): ApprovalRuleCondition;
-declare function anyApprovalConditions(...conditions: ApprovalRuleCondition[]): ApprovalRuleCondition;
-declare function matchApprovalSessions(...sessionIds: string[]): ApprovalRuleCondition;
-declare function matchApprovalRisks(...risks: RiskLevel[]): ApprovalRuleCondition;
-declare function matchApprovalArgValue(path: string, predicate: (value: unknown, context: ApprovalRuleContext) => boolean): ApprovalRuleCondition;
-interface ApprovalNumericThresholdOptions {
-    gt?: number;
-    gte?: number;
-    lt?: number;
-    lte?: number;
-}
-declare function matchApprovalNumericArg(path: string, thresholds: ApprovalNumericThresholdOptions): ApprovalRuleCondition;
-declare function matchApprovalStringPrefixes(path: string, ...prefixes: string[]): ApprovalRuleCondition;
-declare function normalizeApprovalCascadePolicy(input?: ApprovalCascadePolicy): Required<ApprovalCascadePolicy>;
-declare function normalizeRememberScopes(scopes?: readonly ApprovalRememberScope[]): ApprovalRememberScope[];
-declare function selectRememberScope(decision: ApprovalDecision, request: ApprovalRequest, fallback?: ApprovalRememberScope): ApprovalRememberScope;
-declare function createRememberedApprovalRules(request: ApprovalRequest, source?: RuleSource): ApprovalRule[];
-declare function approvalRequestsOverlap(left: ApprovalRequest, right: ApprovalRequest): boolean;
-declare function shouldCascadeApprovalDecision(resolved: ApprovalRequest, candidate: ApprovalRequest, decision: ApprovalDecision): boolean;
-declare function formatApprovalDeniedReason(tool: string, detail?: string): string;
-declare function createApprovalCorrection(tool: string, detail?: string): {
-    kind: "approval-denied";
-    tool: string;
-    reason: string;
-    feedback?: string;
-};
-declare function buildApprovalRuleContext(sessionId: string, tool: string, args: unknown, risk: RiskLevel, patternExtractor?: (input: unknown) => string[]): ApprovalRuleContext;
-
-type ApprovalPolicyPresetName = "interactive" | "headless-deny" | "dangerously-allow-all" | "risk-tier";
-interface ApprovalPolicyPresetOptions {
-    onRequest?: ApprovalConfig["onRequest"];
-    rules?: ApprovalRule[];
-    timeout?: number;
-    rememberScope?: ApprovalRememberScope;
-    allowedRememberScopes?: ApprovalConfig["allowedRememberScopes"];
-    cascade?: ApprovalConfig["cascade"];
-}
-interface RiskTierApprovalPolicyOptions extends ApprovalPolicyPresetOptions {
-    safe?: ApprovalConfig["defaultAction"];
-    moderate?: ApprovalConfig["defaultAction"];
-    dangerous?: ApprovalConfig["defaultAction"];
-    source?: RuleSource;
-}
-interface TrustedSessionApprovalPolicyOptions extends ApprovalPolicyPresetOptions {
-    sessionIds: string[];
-    tools?: string[];
-    patterns?: string[];
-    risks?: RiskLevel[];
-    source?: RuleSource;
-}
-interface ThresholdApprovalRuleOptions {
-    tool: string;
-    pattern?: string;
-    action: "allow" | "deny";
-    argPath: string;
-    gt?: number;
-    gte?: number;
-    lt?: number;
-    lte?: number;
-    source?: RuleSource;
-    reason?: string;
-}
-declare function createInteractiveApprovalPolicy(options?: ApprovalPolicyPresetOptions): ApprovalConfig;
-declare function createHeadlessDenyApprovalPolicy(options?: Omit<ApprovalPolicyPresetOptions, "onRequest">): ApprovalConfig;
-declare function createDangerouslyAllowAllApprovalPolicy(options?: Omit<ApprovalPolicyPresetOptions, "onRequest">): ApprovalConfig;
-declare function createRiskTierApprovalPolicy(options?: RiskTierApprovalPolicyOptions): ApprovalConfig;
-declare function createTrustedSessionApprovalPolicy(options: TrustedSessionApprovalPolicyOptions): ApprovalConfig;
-declare function createThresholdApprovalRule(options: ThresholdApprovalRuleOptions): ApprovalRule;
-declare function createApprovalPolicyPreset(name: ApprovalPolicyPresetName, options?: ApprovalPolicyPresetOptions | RiskTierApprovalPolicyOptions): ApprovalConfig;
-
-/**
- * Simple glob-style pattern matching.
- * Supports: `*` (any chars), `?` (single char)
- *
- * Uses an iterative two-pointer approach instead of regex
- * to avoid ReDoS risk from user-provided patterns.
- */
-declare function matchApprovalPattern(pattern: string, value: string): boolean;
-/**
- * Extract approval patterns from tool arguments for "remember" functionality.
- */
-declare function extractApprovalPatterns(tool: string, args: unknown): string[];
-/**
- * Generate a human-readable description of an operation.
- */
-declare function describeApprovalOperation(tool: string, args: unknown): string;
-
-export { ApprovalCascadePolicy, ApprovalConfig, ApprovalDecision, ApprovalDeniedError, type ApprovalPolicyPresetName, type ApprovalPolicyPresetOptions, ApprovalRememberScope, ApprovalRequest, ApprovalRule, type ApprovalRuleCondition, ApprovalRuleContext, ApprovalTimeoutError, RiskLevel, type RiskTierApprovalPolicyOptions, RuleSource, type ThresholdApprovalRuleOptions, type TrustedSessionApprovalPolicyOptions, allApprovalConditions, anyApprovalConditions, approvalRequestsOverlap, buildApprovalRuleContext, createApprovalCorrection, createApprovalPolicyPreset, createConditionalApprovalRule, createDangerouslyAllowAllApprovalPolicy, createHeadlessDenyApprovalPolicy, createInteractiveApprovalPolicy, createRememberedApprovalRules, createRiskTierApprovalPolicy, createThresholdApprovalRule, createTrustedSessionApprovalPolicy, describeApprovalOperation, extractApprovalPatterns, formatApprovalDeniedReason, getToolRisk, matchApprovalArgValue, matchApprovalNumericArg, matchApprovalPattern, matchApprovalRisks, matchApprovalSessions, matchApprovalStringPrefixes, normalizeApprovalCascadePolicy, normalizeRememberScopes, selectRememberScope, shouldCascadeApprovalDecision };
+ * Approval handler, risk classification, pattern matching.
+ */
+export type { ApprovalAction, ApprovalCascadeMode, ApprovalCascadePolicy, ApprovalCorrection, ApprovalConfig, ApprovalDecision, ApprovalEventContext, ApprovalEvaluation, ApprovalLifecycleEvent, ApprovalRememberScope, ApprovalRequest, ApprovalResolution, ApprovalRule, ApprovalRuleContext, RiskLevel, RuleSource, } from "./types.js";
+export { getToolRisk } from "./risk.js";
+export { ApprovalDeniedError, ApprovalTimeoutError } from "./errors.js";
+export { createApprovalHandler, type ApprovalHandler } from "./handler.js";
+export { allApprovalConditions, anyApprovalConditions, approvalRequestsOverlap, buildApprovalRuleContext, createApprovalCorrection, createConditionalApprovalRule, createRememberedApprovalRules, formatApprovalDeniedReason, matchApprovalArgValue, matchApprovalNumericArg, matchApprovalRisks, matchApprovalSessions, matchApprovalStringPrefixes, normalizeApprovalCascadePolicy, normalizeRememberScopes, selectRememberScope, shouldCascadeApprovalDecision, type ApprovalRuleCondition, } from "./policy.js";
+export { createApprovalPolicyPreset, createDangerouslyAllowAllApprovalPolicy, createHeadlessDenyApprovalPolicy, createInteractiveApprovalPolicy, createRiskTierApprovalPolicy, createThresholdApprovalRule, createTrustedSessionApprovalPolicy, type ApprovalPolicyPresetName, type ApprovalPolicyPresetOptions, type RiskTierApprovalPolicyOptions, type ThresholdApprovalRuleOptions, type TrustedSessionApprovalPolicyOptions, } from "./presets.js";
+export { describeApprovalOperation, extractApprovalPatterns, matchApprovalPattern, } from "./patterns.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/safety/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/safety/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,8BAA8B,EAC9B,uBAAuB,EACvB,mBAAmB,EACnB,6BAA6B,EAC7B,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,uCAAuC,EACvC,gCAAgC,EAChC,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,EAC3B,kCAAkC,EAClC,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,mCAAmC,GACzC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,eAAe,CAAC"}

package/dist/safety/patterns.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Simple glob-style pattern matching.
+ * Supports: `*` (any chars), `?` (single char)
+ *
+ * Uses an iterative two-pointer approach instead of regex
+ * to avoid ReDoS risk from user-provided patterns.
+ */
+export declare function matchApprovalPattern(pattern: string, value: string): boolean;
+/**
+ * Extract approval patterns from tool arguments for "remember" functionality.
+ */
+export declare function extractApprovalPatterns(tool: string, args: unknown): string[];
+/**
+ * Generate a human-readable description of an operation.
+ */
+export declare function describeApprovalOperation(tool: string, args: unknown): string;
+//# sourceMappingURL=patterns.d.ts.map

package/dist/safety/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../src/safety/patterns.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAkC5E;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,EAAE,CA0B7E;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAoC7E"}

package/dist/safety/policy.d.ts

@@ -0,0 +1,31 @@
+import type { ApprovalCascadePolicy, ApprovalDecision, ApprovalRememberScope, ApprovalRequest, ApprovalRule, ApprovalRuleContext, RiskLevel, RuleSource } from "./types.js";
+export type ApprovalRuleCondition = NonNullable<ApprovalRule["when"]>;
+export declare function createConditionalApprovalRule(rule: Omit<ApprovalRule, "when">, when: ApprovalRuleCondition): ApprovalRule;
+export declare function allApprovalConditions(...conditions: ApprovalRuleCondition[]): ApprovalRuleCondition;
+export declare function anyApprovalConditions(...conditions: ApprovalRuleCondition[]): ApprovalRuleCondition;
+export declare function matchApprovalSessions(...sessionIds: string[]): ApprovalRuleCondition;
+export declare function matchApprovalRisks(...risks: RiskLevel[]): ApprovalRuleCondition;
+export declare function matchApprovalArgValue(path: string, predicate: (value: unknown, context: ApprovalRuleContext) => boolean): ApprovalRuleCondition;
+export interface ApprovalNumericThresholdOptions {
+    gt?: number;
+    gte?: number;
+    lt?: number;
+    lte?: number;
+}
+export declare function matchApprovalNumericArg(path: string, thresholds: ApprovalNumericThresholdOptions): ApprovalRuleCondition;
+export declare function matchApprovalStringPrefixes(path: string, ...prefixes: string[]): ApprovalRuleCondition;
+export declare function normalizeApprovalCascadePolicy(input?: ApprovalCascadePolicy): Required<ApprovalCascadePolicy>;
+export declare function normalizeRememberScopes(scopes?: readonly ApprovalRememberScope[]): ApprovalRememberScope[];
+export declare function selectRememberScope(decision: ApprovalDecision, request: ApprovalRequest, fallback?: ApprovalRememberScope): ApprovalRememberScope;
+export declare function createRememberedApprovalRules(request: ApprovalRequest, source?: RuleSource): ApprovalRule[];
+export declare function approvalRequestsOverlap(left: ApprovalRequest, right: ApprovalRequest): boolean;
+export declare function shouldCascadeApprovalDecision(resolved: ApprovalRequest, candidate: ApprovalRequest, decision: ApprovalDecision): boolean;
+export declare function formatApprovalDeniedReason(tool: string, detail?: string): string;
+export declare function createApprovalCorrection(tool: string, detail?: string): {
+    kind: "approval-denied";
+    tool: string;
+    reason: string;
+    feedback?: string;
+};
+export declare function buildApprovalRuleContext(sessionId: string, tool: string, args: unknown, risk: RiskLevel, patternExtractor?: (input: unknown) => string[]): ApprovalRuleContext;
+//# sourceMappingURL=policy.d.ts.map

package/dist/safety/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/safety/policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,UAAU,EACX,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;AAStE,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,EAChC,IAAI,EAAE,qBAAqB,GAC1B,YAAY,CAKd;AAED,wBAAgB,qBAAqB,CACnC,GAAG,UAAU,EAAE,qBAAqB,EAAE,GACrC,qBAAqB,CAEvB;AAED,wBAAgB,qBAAqB,CACnC,GAAG,UAAU,EAAE,qBAAqB,EAAE,GACrC,qBAAqB,CAEvB;AAED,wBAAgB,qBAAqB,CACnC,GAAG,UAAU,EAAE,MAAM,EAAE,GACtB,qBAAqB,CAKvB;AAED,wBAAgB,kBAAkB,CAChC,GAAG,KAAK,EAAE,SAAS,EAAE,GACpB,qBAAqB,CAGvB;AAiBD,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,KAAK,OAAO,GACnE,qBAAqB,CAEvB;AAED,MAAM,WAAW,+BAA+B;IAC9C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,+BAA+B,GAC1C,qBAAqB,CAmBvB;AAED,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,GAAG,QAAQ,EAAE,MAAM,EAAE,GACpB,qBAAqB,CASvB;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,CAAC,EAAE,qBAAqB,GAC5B,QAAQ,CAAC,qBAAqB,CAAC,CAKjC;AAED,wBAAgB,uBAAuB,CACrC,MAAM,CAAC,EAAE,SAAS,qBAAqB,EAAE,GACxC,qBAAqB,EAAE,CAYzB;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,eAAe,EACxB,QAAQ,GAAE,qBAA8C,GACvD,qBAAqB,CAOvB;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,eAAe,EACxB,MAAM,GAAE,UAAmE,GAC1E,YAAY,EAAE,CAUhB;AAeD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,eAAe,GACrB,OAAO,CAQT;AAED,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,eAAe,EACzB,SAAS,EAAE,eAAe,EAC1B,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAeT;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,CAKR;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd;IACD,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CASA;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,SAAS,EACf,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,EAAE,GAC9C,mBAAmB,CAUrB"}

package/dist/safety/presets.d.ts

@@ -0,0 +1,43 @@
+import type { ApprovalConfig, ApprovalRememberScope, ApprovalRule, RiskLevel, RuleSource } from "./types.js";
+export type ApprovalPolicyPresetName = "interactive" | "headless-deny" | "dangerously-allow-all" | "risk-tier";
+export interface ApprovalPolicyPresetOptions {
+    onRequest?: ApprovalConfig["onRequest"];
+    rules?: ApprovalRule[];
+    timeout?: number;
+    rememberScope?: ApprovalRememberScope;
+    allowedRememberScopes?: ApprovalConfig["allowedRememberScopes"];
+    cascade?: ApprovalConfig["cascade"];
+}
+export interface RiskTierApprovalPolicyOptions extends ApprovalPolicyPresetOptions {
+    safe?: ApprovalConfig["defaultAction"];
+    moderate?: ApprovalConfig["defaultAction"];
+    dangerous?: ApprovalConfig["defaultAction"];
+    source?: RuleSource;
+}
+export interface TrustedSessionApprovalPolicyOptions extends ApprovalPolicyPresetOptions {
+    sessionIds: string[];
+    tools?: string[];
+    patterns?: string[];
+    risks?: RiskLevel[];
+    source?: RuleSource;
+}
+export interface ThresholdApprovalRuleOptions {
+    tool: string;
+    pattern?: string;
+    action: "allow" | "deny";
+    argPath: string;
+    gt?: number;
+    gte?: number;
+    lt?: number;
+    lte?: number;
+    source?: RuleSource;
+    reason?: string;
+}
+export declare function createInteractiveApprovalPolicy(options?: ApprovalPolicyPresetOptions): ApprovalConfig;
+export declare function createHeadlessDenyApprovalPolicy(options?: Omit<ApprovalPolicyPresetOptions, "onRequest">): ApprovalConfig;
+export declare function createDangerouslyAllowAllApprovalPolicy(options?: Omit<ApprovalPolicyPresetOptions, "onRequest">): ApprovalConfig;
+export declare function createRiskTierApprovalPolicy(options?: RiskTierApprovalPolicyOptions): ApprovalConfig;
+export declare function createTrustedSessionApprovalPolicy(options: TrustedSessionApprovalPolicyOptions): ApprovalConfig;
+export declare function createThresholdApprovalRule(options: ThresholdApprovalRuleOptions): ApprovalRule;
+export declare function createApprovalPolicyPreset(name: ApprovalPolicyPresetName, options?: ApprovalPolicyPresetOptions | RiskTierApprovalPolicyOptions): ApprovalConfig;
+//# sourceMappingURL=presets.d.ts.map

package/dist/safety/presets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../src/safety/presets.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,YAAY,EAEZ,SAAS,EACT,UAAU,EACX,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,wBAAwB,GAChC,aAAa,GACb,eAAe,GACf,uBAAuB,GACvB,WAAW,CAAC;AAEhB,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;IACxC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,qBAAqB,CAAC,EAAE,cAAc,CAAC,uBAAuB,CAAC,CAAC;IAChE,OAAO,CAAC,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,6BAA8B,SAAQ,2BAA2B;IAChF,IAAI,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;IACvC,QAAQ,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;IAC3C,SAAS,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,WAAW,mCAAoC,SAAQ,2BAA2B;IACtF,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAmBD,wBAAgB,+BAA+B,CAC7C,OAAO,GAAE,2BAAgC,GACxC,cAAc,CAEhB;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,GAAE,IAAI,CAAC,2BAA2B,EAAE,WAAW,CAAM,GAC3D,cAAc,CAEhB;AAED,wBAAgB,uCAAuC,CACrD,OAAO,GAAE,IAAI,CAAC,2BAA2B,EAAE,WAAW,CAAM,GAC3D,cAAc,CAEhB;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,6BAAkC,GAC1C,cAAc,CAoChB;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,mCAAmC,GAC3C,cAAc,CAkChB;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,GACpC,YAAY,CAoBd;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,wBAAwB,EAC9B,OAAO,GAAE,2BAA2B,GAAG,6BAAkC,GACxE,cAAc,CAahB"}

package/dist/safety/risk.d.ts

@@ -0,0 +1,14 @@
+import type { RiskLevel } from "./types.js";
+/**
+ * Get the risk level for a tool.
+ *
+ * Resolution order (first match wins):
+ *  1. Caller-supplied `customRisks` map (e.g. from ApprovalMiddlewareConfig)
+ *  2. Tool-declared `riskLevel` from capabilities (set via Tool.define)
+ *  3. Built-in `DEFAULT_TOOL_RISKS` map
+ *  4. Fallback: `"moderate"`
+ */
+export declare function getToolRisk(tool: string, customRisks?: Record<string, RiskLevel>, 
+/** Risk level declared by the tool's own capabilities. */
+declaredRisk?: RiskLevel): RiskLevel;
+//# sourceMappingURL=risk.d.ts.map

package/dist/safety/risk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../../src/safety/risk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AA0B5C;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC;AACvC,0DAA0D;AAC1D,YAAY,CAAC,EAAE,SAAS,GACvB,SAAS,CAWX"}

package/dist/safety/types.d.ts

@@ -0,0 +1,165 @@
+/**
+ * Risk level for operations.
+ */
+export type RiskLevel = "safe" | "moderate" | "dangerous";
+/**
+ * User response to an approval request.
+ */
+export type ApprovalAction = "allow" | "deny" | "remember";
+export type ApprovalRememberScope = "session" | "project" | "user";
+export type ApprovalCascadeMode = "none" | "matching-pending";
+export interface ApprovalCascadePolicy {
+    remember?: ApprovalCascadeMode;
+    deny?: ApprovalCascadeMode;
+}
+export interface ApprovalCorrection {
+    kind: "approval-denied";
+    tool: string;
+    reason: string;
+    feedback?: string;
+}
+/**
+ * Structured approval decision.
+ *
+ * `feedback` is primarily useful for denials, where the user wants to tell the
+ * agent why the action was rejected.
+ */
+export interface ApprovalDecision {
+    action: ApprovalAction;
+    feedback?: string;
+    rememberScope?: ApprovalRememberScope;
+}
+/**
+ * Approval response accepted by handlers.
+ *
+ * Callers may return either the simple string action or the structured object.
+ */
+export type ApprovalResolution = ApprovalAction | ApprovalDecision;
+export type ApprovalLifecycleEvent = {
+    type: "status";
+    status: "waiting-approval" | "processing";
+} | {
+    type: "approval-request";
+    request: ApprovalRequest;
+} | {
+    type: "approval-resolved";
+    id: string;
+    action: ApprovalDecision["action"];
+    feedback?: string;
+    rememberScope?: ApprovalRememberScope;
+};
+export interface ApprovalEventContext {
+    emitEvent?: (event: ApprovalLifecycleEvent) => void | Promise<void>;
+}
+/**
+ * Where a rule came from — used for debugging and selective clearing.
+ *
+ * Priority order (highest wins): `"cli"` > `"session"` > `"project"` > `"user"`.
+ * Within the same source, `"deny"` beats `"allow"`.
+ */
+export type RuleSource = "user" | "project" | "session" | "cli";
+/**
+ * Approval request sent to the UI/handler.
+ */
+export interface ApprovalRequest {
+    /** Unique request ID */
+    id: string;
+    /** Session ID */
+    sessionId: string;
+    /** Tool name */
+    tool: string;
+    /** Tool arguments */
+    args: unknown;
+    /** Human-readable description */
+    description: string;
+    /** Risk level */
+    risk: RiskLevel;
+    /** Patterns that would be remembered if "remember" is chosen */
+    patterns: string[];
+    /** Allowed scopes when the user chooses "remember". */
+    rememberScopes?: ApprovalRememberScope[];
+    /** Default scope applied when the client does not specify one. */
+    defaultRememberScope?: ApprovalRememberScope;
+    /** How matching pending approval requests should cascade. */
+    cascade?: ApprovalCascadePolicy;
+    /** Timestamp */
+    timestamp: number;
+}
+/**
+ * Context available when evaluating dynamic approval rules.
+ */
+export interface ApprovalRuleContext {
+    sessionId: string;
+    tool: string;
+    args: unknown;
+    risk: RiskLevel;
+    patterns: string[];
+}
+export type ApprovalEvaluation = {
+    action: "allow";
+} | {
+    action: "deny";
+    reason: string;
+} | {
+    action: "request";
+    request: ApprovalRequest;
+};
+/**
+ * Rule for auto-approving/denying operations.
+ */
+export interface ApprovalRule {
+    /** Pattern to match (glob-style) */
+    pattern: string;
+    /** Tool to match (`*` for all) */
+    tool: string;
+    /** Action to take */
+    action: "allow" | "deny";
+    /** Optional explanation used when a deny rule matches. */
+    reason?: string;
+    /**
+     * Optional predicate for dynamic conditions.
+     *
+     * Lets hosts express rules like "ask for bash only when command includes curl"
+     * or "allow edits under this threshold". When omitted, the rule is purely
+     * pattern-based.
+     */
+    when?: (context: ApprovalRuleContext) => boolean;
+    /**
+     * Where this rule came from.
+     *
+     * Rules from higher-priority sources override lower ones when both
+     * match the same tool+pattern. Within the same source, `"deny"` wins.
+     *
+     * Omit for "flat" rules with no source tracking.
+     */
+    source?: RuleSource;
+}
+/**
+ * Configuration for the approval handler.
+ */
+export interface ApprovalConfig {
+    /** Default action when no rule matches (default: "ask") */
+    defaultAction?: "allow" | "deny" | "ask";
+    /** Pre-configured rules */
+    rules?: ApprovalRule[];
+    /** Handler for approval requests */
+    onRequest?: (request: ApprovalRequest) => Promise<ApprovalResolution>;
+    /** Timeout for approval requests in ms (default: 5 minutes) */
+    timeout?: number;
+    /** Default scope for remembered approvals (default: "session"). */
+    rememberScope?: ApprovalRememberScope;
+    /**
+     * Allowed scopes for remembered approvals.
+     * Defaults to `["session"]`.
+     */
+    allowedRememberScopes?: ApprovalRememberScope[];
+    /**
+     * Cascade behavior for matching pending approvals.
+     *
+     * Defaults to:
+     * - `remember: "matching-pending"`
+     * - `deny: "matching-pending"`
+     */
+    cascade?: ApprovalCascadePolicy;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/safety/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/safety/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,CAAC;AAE3D,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;AAEnE,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,kBAAkB,CAAC;AAE9D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,IAAI,CAAC,EAAE,mBAAmB,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,qBAAqB,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAEnE,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GACtD;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,qBAAqB,CAAC;CACvC,CAAC;AAEN,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,KAAK,CAAC;AAEhE;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,IAAI,EAAE,OAAO,CAAC;IACd,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB;IACjB,IAAI,EAAE,SAAS,CAAC;IAChB,gEAAgE;IAChE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,uDAAuD;IACvD,cAAc,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACzC,kEAAkE;IAClE,oBAAoB,CAAC,EAAE,qBAAqB,CAAC;IAC7C,6DAA6D;IAC7D,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC;IACjD;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;IACzC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,oCAAoC;IACpC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtE,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC;;;OAGG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAChD;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAC;CACjC"}

package/dist/sandbox/index.d.ts

@@ -1,81 +1,2 @@
-import { T as ToolHost } from '../types-C_LCeYNg.js';
-
-/**
- * Preview endpoint exposed by a managed sandbox environment.
- */
-interface SandboxPreview {
-    /** The internal port inside the environment. */
-    port: number;
-    /** Publicly reachable URL for the preview. */
-    url: string;
-    /** Optional user-facing label. */
-    label?: string;
-}
-/**
- * Snapshot handle returned by a sandbox implementation.
- */
-interface SandboxSnapshotResult {
-    /** Provider-specific snapshot identifier. */
-    id: string;
-    /** Optional display label or description. */
-    label?: string;
-    /** Provider-specific metadata for later restore flows. */
-    metadata?: Record<string, unknown>;
-}
-/**
- * Metadata describing a managed sandbox session.
- */
-interface SandboxSessionMetadata {
-    /** Implementation kind such as "docker", "local", or "cloud". */
-    kind?: string;
-    /** Human-readable label for logs or dashboards. */
-    label?: string;
-    /** Working directory exposed through the embedded ToolHost. */
-    workingDirectory?: string;
-    /** Extra environment details suitable for prompts or UI surfaces. */
-    environmentDetails?: string;
-    /** Preview endpoints exposed by the environment. */
-    previews?: readonly SandboxPreview[];
-    /** Session expiration timestamp when managed by a lease/timeout system. */
-    expiresAt?: number;
-    /** Initial timeout/lease duration in milliseconds. */
-    timeoutMs?: number;
-    /** Provider-specific metadata. */
-    [key: string]: unknown;
-}
-/**
- * Managed execution environment used by host-backed tools.
- *
- * A SandboxSession owns environment lifecycle concerns such as start/stop,
- * snapshots, timeout extension, and preview URLs, while exposing a `ToolHost`
- * for the actual file/shell operations tools perform.
- */
-interface SandboxSession {
-    /** Stable identifier for the environment session. */
-    readonly id: string;
-    /** Tool execution surface exposed by the environment. */
-    readonly host: ToolHost;
-    /** Optional metadata about the environment. */
-    readonly metadata?: SandboxSessionMetadata;
-    /** Stop and clean up the environment. */
-    stop(): Promise<void>;
-    /** Create a restorable snapshot when supported by the provider. */
-    snapshot?(): Promise<SandboxSnapshotResult>;
-    /** Extend the environment lease/timeout when supported. */
-    extendTimeout?(additionalMs: number): Promise<{
-        expiresAt: number;
-    } | void>;
-    /** Return a preview URL for an exposed port when supported. */
-    getPreviewUrl?(port: number): string | undefined;
-}
-/**
- * Factory/connector surface for sandbox implementations.
- *
- * Providers may support only `connect`, only `create`, or both.
- */
-interface SandboxProvider<TConnectOptions = unknown, TCreateOptions = TConnectOptions> {
-    connect?(options: TConnectOptions): Promise<SandboxSession>;
-    create?(options: TCreateOptions): Promise<SandboxSession>;
-}
-
-export type { SandboxPreview, SandboxProvider, SandboxSession, SandboxSessionMetadata, SandboxSnapshotResult };
+export type { SandboxPreview, SandboxProvider, SandboxSession, SandboxSessionMetadata, SandboxSnapshotResult, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/sandbox/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,eAAe,EACf,cAAc,EACd,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,YAAY,CAAC"}