@geminilight/mindos 1.1.8 → 1.1.10

package/dist/agent/global-state.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Process-global state registry for the agent core.
+ *
+ * One Node process can load more than one copy of these modules: the Next.js
+ * server bundle inlines a copy while API helpers resolve the node_modules
+ * copy, web shims re-export the core subpath, and a duplicated install can
+ * physically ship two files. Module-level state would silently fork per copy
+ * — a lock taken through one copy would be invisible to the other. Keying
+ * the state through `Symbol.for` (the realm-wide symbol registry) makes
+ * every copy share a single instance.
+ *
+ * All agent-domain `Symbol.for('mindos.*')` keys live in this file
+ * (spec-agent-core-consolidation 关键设计决策). Every key documents why
+ * cross-copy sharing is required; adding a key requires review.
+ */
+/** Resolve (or lazily create) the shared value for a registered key. */
+export declare function getProcessGlobal<T>(key: symbol, create: () => T): T;
+/** Drop the shared value so the next access re-creates it (test reloads). */
+export declare function deleteProcessGlobal(key: symbol): void;
+/**
+ * File write lock map (file-write-lock.ts). Two agent runs writing the same
+ * note must conflict even when their call paths import different module
+ * copies; a forked lock map would let both writers proceed.
+ */
+export declare const AGENT_FILE_WRITE_LOCKS_KEY: unique symbol;
+/**
+ * In-memory run ledger store (run-ledger.ts). The ledger is hydrated from
+ * disk once per process; a forked store would double-hydrate and the two
+ * copies would diverge as runs progress (UI reads one, runtime writes the
+ * other).
+ */
+export declare const AGENT_RUN_LEDGER_STORE_KEY: unique symbol;
+/**
+ * Realtime ledger event subscribers (run-ledger.ts). SSE routes subscribe
+ * through the web shim while runtimes emit through the core path — both must
+ * land in one subscriber set or live updates silently stop.
+ */
+export declare const AGENT_RUN_LEDGER_SUBSCRIBERS_KEY: unique symbol;
+/**
+ * Per-process ledger shard identity (run-ledger.ts). Every module copy must
+ * agree on the one `agent-run-ledger.<pid>-<startTs>.jsonl` file this
+ * process owns; two copies computing their own start timestamp would write
+ * two shards for one process and break the single-writer-per-shard
+ * invariant.
+ */
+export declare const AGENT_RUN_LEDGER_SHARD_KEY: unique symbol;
+/**
+ * Run cancellation handler map (run-cancellation.ts). The cancel API route
+ * resolves handlers registered by the streaming route; a forked map means
+ * cancellation requests find no handler and runs become unkillable.
+ */
+export declare const AGENT_RUN_CANCEL_HANDLERS_KEY: unique symbol;
+/**
+ * Native runtime permission bridge state (runtime-permission-bridge.ts).
+ * Pending permission requests are created inside the runtime stream and
+ * resolved by a separate HTTP route; both sides must see one pending map.
+ */
+export declare const RUNTIME_PERMISSION_BRIDGE_KEY: unique symbol;
+/**
+ * AskUserQuestion bridge state (user-question-bridge.ts). Same shape as the
+ * permission bridge: questions are raised mid-stream and answered via a
+ * separate route.
+ */
+export declare const ASK_USER_QUESTION_BRIDGE_KEY: unique symbol;
+/**
+ * Request-scoped KB permission policy storage (kb-extension.ts). The pi
+ * DefaultResourceLoader imports the host's kb-extension entry file in its own
+ * module graph, so the AsyncLocalStorage written by the /api/ask route and
+ * the one read during extension reload() only meet through this key. The key
+ * string predates the consolidation — keep it stable.
+ */
+export declare const KB_PERMISSION_POLICY_STORAGE_KEY: unique symbol;
+/**
+ * Module-level fallback KB policy (kb-extension.ts) used outside a scoped
+ * runWithKbPermissionPolicy() call (setKbMode/setKbPermissionPolicy). Same
+ * dual-module-graph problem as the storage above: a fallback set through the
+ * web module copy must be visible to the loader-imported copy.
+ */
+export declare const KB_PERMISSION_POLICY_FALLBACK_KEY: unique symbol;
+/**
+ * Host toolkit for the KB extension (kb-extension.ts). The pi loader imports
+ * the host's kb-extension entry file with jiti, which resolves no host path
+ * aliases (`@/...`), so the entry cannot import the host's tool registry or
+ * audit log directly — any webpack-land import in its module graph makes the
+ * whole entry fail to load and silently drops every KB tool. The host
+ * registers its toolkit here (webpack module graph) and the entry reads it
+ * back (jiti module graph).
+ */
+export declare const KB_EXTENSION_HOST_KEY: unique symbol;
+/**
+ * Buffered early subagent async completions (subagent-ledger-extension.ts).
+ * A fast async subagent can emit its completion event before the tool
+ * wrapper stores the asyncId on the ledger record; the payload is buffered
+ * here until the wrapper registers the run. The event handler lives in the
+ * pi loader's module graph while the wrapper may run through the host's copy
+ * — both must share one buffer or early completions are lost. The key string
+ * predates the consolidation — keep it stable.
+ */
+export declare const SUBAGENT_EARLY_ASYNC_COMPLETIONS_KEY: unique symbol;
+/**
+ * Unsubscribe handle for the subagent async-complete event listener
+ * (subagent-ledger-extension.ts). Extension reload() re-executes the entry
+ * module — possibly a different copy than the one that subscribed — so the
+ * previous listener can only be cleaned up through a shared slot. Replaces
+ * the pre-consolidation `__mindosSubagentLedgerEventUnsubscribe` string key
+ * on globalThis.
+ */
+export declare const SUBAGENT_LEDGER_EVENT_UNSUBSCRIBE_KEY: unique symbol;
+//# sourceMappingURL=global-state.d.ts.map

package/dist/agent/global-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-state.d.ts","sourceRoot":"","sources":["../../src/agent/global-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAMnE;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAGrD;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,eAA2C,CAAC;AAEnF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,eAAsC,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,eAAkD,CAAC;AAEhG;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,eAA4C,CAAC;AAEpF;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,eAAqD,CAAC;AAEhG;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,eAA+C,CAAC;AAE1F;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,eAA6C,CAAC;AAEvF;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC,eAAiD,CAAC;AAE/F;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,eAAkD,CAAC;AAEjG;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,eAAuC,CAAC;AAE1E;;;;;;;;GAQG;AACH,eAAO,MAAM,oCAAoC,eAAqD,CAAC;AAEvG;;;;;;;GAOG;AACH,eAAO,MAAM,qCAAqC,eAAsD,CAAC"}

package/dist/agent/global-state.js

@@ -0,0 +1,118 @@
+/**
+ * Process-global state registry for the agent core.
+ *
+ * One Node process can load more than one copy of these modules: the Next.js
+ * server bundle inlines a copy while API helpers resolve the node_modules
+ * copy, web shims re-export the core subpath, and a duplicated install can
+ * physically ship two files. Module-level state would silently fork per copy
+ * — a lock taken through one copy would be invisible to the other. Keying
+ * the state through `Symbol.for` (the realm-wide symbol registry) makes
+ * every copy share a single instance.
+ *
+ * All agent-domain `Symbol.for('mindos.*')` keys live in this file
+ * (spec-agent-core-consolidation 关键设计决策). Every key documents why
+ * cross-copy sharing is required; adding a key requires review.
+ */
+/** Resolve (or lazily create) the shared value for a registered key. */
+export function getProcessGlobal(key, create) {
+    const root = globalThis;
+    if (root[key] === undefined) {
+        root[key] = create();
+    }
+    return root[key];
+}
+/** Drop the shared value so the next access re-creates it (test reloads). */
+export function deleteProcessGlobal(key) {
+    const root = globalThis;
+    delete root[key];
+}
+/**
+ * File write lock map (file-write-lock.ts). Two agent runs writing the same
+ * note must conflict even when their call paths import different module
+ * copies; a forked lock map would let both writers proceed.
+ */
+export const AGENT_FILE_WRITE_LOCKS_KEY = Symbol.for('mindos.agentFileWriteLocks');
+/**
+ * In-memory run ledger store (run-ledger.ts). The ledger is hydrated from
+ * disk once per process; a forked store would double-hydrate and the two
+ * copies would diverge as runs progress (UI reads one, runtime writes the
+ * other).
+ */
+export const AGENT_RUN_LEDGER_STORE_KEY = Symbol.for('mindos.agentRunLedger');
+/**
+ * Realtime ledger event subscribers (run-ledger.ts). SSE routes subscribe
+ * through the web shim while runtimes emit through the core path — both must
+ * land in one subscriber set or live updates silently stop.
+ */
+export const AGENT_RUN_LEDGER_SUBSCRIBERS_KEY = Symbol.for('mindos.agentRunLedger.subscribers');
+/**
+ * Per-process ledger shard identity (run-ledger.ts). Every module copy must
+ * agree on the one `agent-run-ledger.<pid>-<startTs>.jsonl` file this
+ * process owns; two copies computing their own start timestamp would write
+ * two shards for one process and break the single-writer-per-shard
+ * invariant.
+ */
+export const AGENT_RUN_LEDGER_SHARD_KEY = Symbol.for('mindos.agentRunLedger.shard');
+/**
+ * Run cancellation handler map (run-cancellation.ts). The cancel API route
+ * resolves handlers registered by the streaming route; a forked map means
+ * cancellation requests find no handler and runs become unkillable.
+ */
+export const AGENT_RUN_CANCEL_HANDLERS_KEY = Symbol.for('mindos.agentRunCancellation.handlers');
+/**
+ * Native runtime permission bridge state (runtime-permission-bridge.ts).
+ * Pending permission requests are created inside the runtime stream and
+ * resolved by a separate HTTP route; both sides must see one pending map.
+ */
+export const RUNTIME_PERMISSION_BRIDGE_KEY = Symbol.for('mindos.runtimePermissionBridge');
+/**
+ * AskUserQuestion bridge state (user-question-bridge.ts). Same shape as the
+ * permission bridge: questions are raised mid-stream and answered via a
+ * separate route.
+ */
+export const ASK_USER_QUESTION_BRIDGE_KEY = Symbol.for('mindos.askUserQuestionBridge');
+/**
+ * Request-scoped KB permission policy storage (kb-extension.ts). The pi
+ * DefaultResourceLoader imports the host's kb-extension entry file in its own
+ * module graph, so the AsyncLocalStorage written by the /api/ask route and
+ * the one read during extension reload() only meet through this key. The key
+ * string predates the consolidation — keep it stable.
+ */
+export const KB_PERMISSION_POLICY_STORAGE_KEY = Symbol.for('mindos.kbPermissionPolicyStorage');
+/**
+ * Module-level fallback KB policy (kb-extension.ts) used outside a scoped
+ * runWithKbPermissionPolicy() call (setKbMode/setKbPermissionPolicy). Same
+ * dual-module-graph problem as the storage above: a fallback set through the
+ * web module copy must be visible to the loader-imported copy.
+ */
+export const KB_PERMISSION_POLICY_FALLBACK_KEY = Symbol.for('mindos.kbPermissionPolicyFallback');
+/**
+ * Host toolkit for the KB extension (kb-extension.ts). The pi loader imports
+ * the host's kb-extension entry file with jiti, which resolves no host path
+ * aliases (`@/...`), so the entry cannot import the host's tool registry or
+ * audit log directly — any webpack-land import in its module graph makes the
+ * whole entry fail to load and silently drops every KB tool. The host
+ * registers its toolkit here (webpack module graph) and the entry reads it
+ * back (jiti module graph).
+ */
+export const KB_EXTENSION_HOST_KEY = Symbol.for('mindos.kbExtensionHost');
+/**
+ * Buffered early subagent async completions (subagent-ledger-extension.ts).
+ * A fast async subagent can emit its completion event before the tool
+ * wrapper stores the asyncId on the ledger record; the payload is buffered
+ * here until the wrapper registers the run. The event handler lives in the
+ * pi loader's module graph while the wrapper may run through the host's copy
+ * — both must share one buffer or early completions are lost. The key string
+ * predates the consolidation — keep it stable.
+ */
+export const SUBAGENT_EARLY_ASYNC_COMPLETIONS_KEY = Symbol.for('mindos.subagentEarlyAsyncCompletions');
+/**
+ * Unsubscribe handle for the subagent async-complete event listener
+ * (subagent-ledger-extension.ts). Extension reload() re-executes the entry
+ * module — possibly a different copy than the one that subscribed — so the
+ * previous listener can only be cleaned up through a shared slot. Replaces
+ * the pre-consolidation `__mindosSubagentLedgerEventUnsubscribe` string key
+ * on globalThis.
+ */
+export const SUBAGENT_LEDGER_EVENT_UNSUBSCRIBE_KEY = Symbol.for('mindos.subagentLedgerEventUnsubscribe');
+//# sourceMappingURL=global-state.js.map

package/dist/agent/global-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-state.js","sourceRoot":"","sources":["../../src/agent/global-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAI,GAAW,EAAE,MAAe;IAC9D,MAAM,IAAI,GAAG,UAAyD,CAAC;IACvE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAM,CAAC;AACxB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,IAAI,GAAG,UAAyD,CAAC;IACvE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAEnF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;AAEhG;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AAEhG;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;AAE1F;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;AAEvF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AAE/F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;AAEjG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AAEvG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,MAAM,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC"}

package/dist/agent/index.d.ts

@@ -7,4 +7,21 @@ export type MindosAgentDescriptor = {
 export declare function defineMindosAgent(descriptor: MindosAgentDescriptor): MindosAgentDescriptor;
 export { AGENT_SYSTEM_PROMPT, CHAT_SYSTEM_PROMPT, ORGANIZE_SYSTEM_PROMPT, } from './prompts.js';
 export { buildMindosAskSystemPrompt, compactMindosPromptForTokenBudget, formatMindosAskTimeContext, type BuildMindosAskSystemPromptInput, type BuildMindosAskSystemPromptServices, type CompactMindosPromptOptions, type MindosAskActiveRecallConfig, type MindosAskInitializationContext, type MindosAskPromptMessage, type MindosKnowledgeFile, } from './prompt-builder.js';
+export * from './run-ledger-types.js';
+export * from './agent-run-context.js';
+export * from './file-write-lock.js';
+export * from './result-reducer.js';
+export * from './permission-policy.js';
+export * from './global-state.js';
+export * from './redaction.js';
+export * from './run-ledger.js';
+export * from './run-timeline-events.js';
+export * from './run-cancellation.js';
+export * from './runtime-permission-bridge.js';
+export * from './user-question-bridge.js';
+export * from './line-diff.js';
+export * from './paragraph-extract.js';
+export * from './kb-tools.js';
+export * from './kb-extension.js';
+export * from './capability-registry.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/agent/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC;CACrD,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,qBAAqB,GAAG,qBAAqB,CAK1F;AAED,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,EACjC,0BAA0B,EAC1B,KAAK,+BAA+B,EACpC,KAAK,kCAAkC,EACvC,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,8BAA8B,EACnC,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC;CACrD,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,qBAAqB,GAAG,qBAAqB,CAK1F;AAED,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,EACjC,0BAA0B,EAC1B,KAAK,+BAA+B,EACpC,KAAK,kCAAkC,EACvC,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,8BAA8B,EACnC,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAE7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC"}

package/dist/agent/index.js

@@ -9,4 +9,21 @@ export function defineMindosAgent(descriptor) {
 }
 export { AGENT_SYSTEM_PROMPT, CHAT_SYSTEM_PROMPT, ORGANIZE_SYSTEM_PROMPT, } from './prompts.js';
 export { buildMindosAskSystemPrompt, compactMindosPromptForTokenBudget, formatMindosAskTimeContext, } from './prompt-builder.js';
+export * from './run-ledger-types.js';
+export * from './agent-run-context.js';
+export * from './file-write-lock.js';
+export * from './result-reducer.js';
+export * from './permission-policy.js';
+export * from './global-state.js';
+export * from './redaction.js';
+export * from './run-ledger.js';
+export * from './run-timeline-events.js';
+export * from './run-cancellation.js';
+export * from './runtime-permission-bridge.js';
+export * from './user-question-bridge.js';
+export * from './line-diff.js';
+export * from './paragraph-extract.js';
+export * from './kb-tools.js';
+export * from './kb-extension.js';
+export * from './capability-registry.js';
 //# sourceMappingURL=index.js.map

package/dist/agent/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,iBAAiB,CAAC,UAAiC;IACjE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3F,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,CAAC,EAAE,uCAAuC,CAAC,CAAC;IACxH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,EACjC,0BAA0B,GAQ3B,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,iBAAiB,CAAC,UAAiC;IACjE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3F,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,CAAC,EAAE,uCAAuC,CAAC,CAAC;IACxH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,EACjC,0BAA0B,GAQ3B,MAAM,qBAAqB,CAAC;AAE7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC"}

package/dist/agent/kb-extension.d.ts

@@ -0,0 +1,38 @@
+import type { ExtensionAPI } from '@earendil-works/pi-coding-agent';
+import { type MindosAgentPermissionPolicy } from './permission-policy.js';
+import { type MindosAgentTool } from './kb-tools.js';
+export type KbMode = 'agent' | 'chat' | 'organize';
+/** Run fn with a request-scoped policy; the kb extension reads it during reload(). */
+export declare function runWithKbPermissionPolicy<T>(policy: MindosAgentPermissionPolicy, fn: () => T): T;
+/** Set the mode before resourceLoader.reload(). Determines which tools get registered. */
+export declare function setKbMode(mode: KbMode): void;
+export declare function setKbPermissionPolicy(policy: MindosAgentPermissionPolicy): void;
+/** The policy the extension will register tools for: request-scoped, else fallback. */
+export declare function getEffectiveKbPermissionPolicy(): MindosAgentPermissionPolicy;
+export interface MindosKbAuditEntry {
+    ts: string;
+    tool: string;
+    params: Record<string, unknown>;
+    result: 'ok' | 'error';
+    message?: string;
+    durationMs?: number;
+    agentName?: string;
+}
+export interface MindosKbExtensionHost {
+    /** Toolkit lookup for the effective policy — typically MindosKbToolkit.getToolsForPolicy. */
+    getToolsForPolicy(policy: MindosAgentPermissionPolicy): MindosAgentTool[];
+    /** Audit sink for executed tool calls. Write path is a host concern; must never throw. */
+    logAgentOp?(entry: MindosKbAuditEntry): void;
+}
+export declare function createMindosKbExtension(host: MindosKbExtensionHost): (pi: ExtensionAPI) => void;
+/** Register the host toolkit. Must run before resourceLoader.reload(). Idempotent. */
+export declare function registerMindosKbExtensionHost(host: MindosKbExtensionHost): void;
+/** The toolkit registered by the host runtime, if any. */
+export declare function getMindosKbExtensionHost(): MindosKbExtensionHost | undefined;
+/**
+ * Extension factory for host entry files: resolves the host toolkit from the
+ * registered slot at execution time, so the entry file's own import graph
+ * stays free of host modules (jiti-loadable).
+ */
+export declare function createMindosKbExtensionFromRegisteredHost(): (pi: ExtensionAPI) => void;
+//# sourceMappingURL=kb-extension.d.ts.map

package/dist/agent/kb-extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-extension.d.ts","sourceRoot":"","sources":["../../src/agent/kb-extension.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,YAAY,EAAkB,MAAM,iCAAiC,CAAC;AAIpF,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EAAe,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAIlE,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,CAAC;AAgBnD,sFAAsF;AACtF,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAEhG;AAED,0FAA0F;AAC1F,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAE5C;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,2BAA2B,GAAG,IAAI,CAE/E;AAED,uFAAuF;AACvF,wBAAgB,8BAA8B,IAAI,2BAA2B,CAE5E;AAID,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAqBD,MAAM,WAAW,qBAAqB;IACpC,6FAA6F;IAC7F,iBAAiB,CAAC,MAAM,EAAE,2BAA2B,GAAG,eAAe,EAAE,CAAC;IAC1E,0FAA0F;IAC1F,UAAU,CAAC,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAC;CAC9C;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,CAAC,EAAE,EAAE,YAAY,KAAK,IAAI,CAwD/F;AAiBD,sFAAsF;AACtF,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,qBAAqB,GAAG,IAAI,CAE/E;AAED,0DAA0D;AAC1D,wBAAgB,wBAAwB,IAAI,qBAAqB,GAAG,SAAS,CAE5E;AAED;;;;GAIG;AACH,wBAAgB,yCAAyC,IAAI,CAAC,EAAE,EAAE,YAAY,KAAK,IAAI,CAYtF"}

package/dist/agent/kb-extension.js

@@ -0,0 +1,140 @@
+// Sunk from packages/web/lib/agent/kb-extension.ts (Wave 3, spec-agent-core-consolidation).
+//
+// Knowledge Base Extension — registers the MindOS KB tools via the Pi
+// Extension API, wrapping them with write-protection and audit logging.
+// Hosts keep a real extension entry file (the pi DefaultResourceLoader loads
+// it by file path) that wires their toolkit into createMindosKbExtension().
+//
+// Mode-based filtering (chat/organize/agent) is controlled by
+// runWithKbPermissionPolicy() (request-scoped) or setKbMode()/
+// setKbPermissionPolicy() (process fallback), evaluated at reload() time.
+//
+// All policy state lives behind Symbol.for keys (global-state.ts): the pi
+// loader imports the host's extension entry in its own module graph, so
+// module-level state here would fork between the route's copy and the
+// loader's copy.
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { assertNotProtected } from '../foundation/security/index.js';
+import { createMindosAgentPermissionPolicy, } from './permission-policy.js';
+import { getProcessGlobal, KB_EXTENSION_HOST_KEY, KB_PERMISSION_POLICY_FALLBACK_KEY, KB_PERMISSION_POLICY_STORAGE_KEY, } from './global-state.js';
+import { WRITE_TOOLS } from './kb-tools.js';
+function getPolicyStorage() {
+    return getProcessGlobal(KB_PERMISSION_POLICY_STORAGE_KEY, () => new AsyncLocalStorage());
+}
+function getPolicyFallback() {
+    return getProcessGlobal(KB_PERMISSION_POLICY_FALLBACK_KEY, () => ({ policy: createMindosAgentPermissionPolicy('agent') }));
+}
+/** Run fn with a request-scoped policy; the kb extension reads it during reload(). */
+export function runWithKbPermissionPolicy(policy, fn) {
+    return getPolicyStorage().run(policy, fn);
+}
+/** Set the mode before resourceLoader.reload(). Determines which tools get registered. */
+export function setKbMode(mode) {
+    getPolicyFallback().policy = createMindosAgentPermissionPolicy(mode);
+}
+export function setKbPermissionPolicy(policy) {
+    getPolicyFallback().policy = policy;
+}
+/** The policy the extension will register tools for: request-scoped, else fallback. */
+export function getEffectiveKbPermissionPolicy() {
+    return getPolicyStorage().getStore() ?? getPolicyFallback().policy;
+}
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+function textResult(text) {
+    return { content: [{ type: 'text', text }], details: undefined };
+}
+function getProtectedPaths(toolName, args) {
+    const paths = [];
+    if (toolName === 'batch_create_files' && Array.isArray(args.files)) {
+        args.files.forEach((f) => { if (f.path)
+            paths.push(f.path); });
+    }
+    else {
+        const p = (args.path ?? args.from_path);
+        if (typeof p === 'string')
+            paths.push(p);
+    }
+    return paths;
+}
+export function createMindosKbExtension(host) {
+    return function kbExtension(pi) {
+        const policy = getEffectiveKbPermissionPolicy();
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const tools = host.getToolsForPolicy(policy);
+        for (const tool of tools) {
+            pi.registerTool({
+                name: tool.name,
+                label: tool.label,
+                description: tool.description,
+                parameters: tool.parameters,
+                execute: async (toolCallId, params, signal, onUpdate) => {
+                    const args = (params ?? {});
+                    // Write-protection guard
+                    if (WRITE_TOOLS.has(tool.name)) {
+                        for (const filePath of getProtectedPaths(tool.name, args)) {
+                            try {
+                                assertNotProtected(filePath, 'modified by AI agent');
+                            }
+                            catch (error) {
+                                const msg = error instanceof Error ? error.message : String(error);
+                                return textResult(`Write-protection error: ${msg}. You CANNOT modify ${filePath} because it is system-protected. Please tell the user you don't have permission to do this.`);
+                            }
+                        }
+                    }
+                    // Execute the actual tool
+                    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                    const result = await tool.execute(toolCallId, params, signal, onUpdate);
+                    // Log the operation
+                    try {
+                        const outputText = result?.content
+                            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                            ?.filter((p) => p.type === 'text')
+                            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                            .map((p) => p.text)
+                            .join('') ?? '';
+                        host.logAgentOp?.({
+                            ts: new Date().toISOString(),
+                            tool: tool.name,
+                            params: args,
+                            result: outputText.startsWith('Error:') ? 'error' : 'ok',
+                            message: outputText.slice(0, 200),
+                            agentName: 'MindOS',
+                        });
+                    }
+                    catch {
+                        // logging must never kill the stream
+                    }
+                    return result;
+                },
+            });
+        }
+    };
+}
+function getHostSlot() {
+    return getProcessGlobal(KB_EXTENSION_HOST_KEY, () => ({ host: undefined }));
+}
+/** Register the host toolkit. Must run before resourceLoader.reload(). Idempotent. */
+export function registerMindosKbExtensionHost(host) {
+    getHostSlot().host = host;
+}
+/** The toolkit registered by the host runtime, if any. */
+export function getMindosKbExtensionHost() {
+    return getHostSlot().host;
+}
+/**
+ * Extension factory for host entry files: resolves the host toolkit from the
+ * registered slot at execution time, so the entry file's own import graph
+ * stays free of host modules (jiti-loadable).
+ */
+export function createMindosKbExtensionFromRegisteredHost() {
+    return function kbExtensionFromRegisteredHost(pi) {
+        const host = getMindosKbExtensionHost();
+        if (!host) {
+            throw new Error('MindOS KB extension host not registered. Call registerMindosKbExtensionHost() '
+                + 'from the host runtime before resourceLoader.reload() — the kb-extension entry '
+                + 'is loaded in the pi loader module graph and cannot import host modules.');
+        }
+        return createMindosKbExtension(host)(pi);
+    };
+}
+//# sourceMappingURL=kb-extension.js.map

package/dist/agent/kb-extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-extension.js","sourceRoot":"","sources":["../../src/agent/kb-extension.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,6EAA6E;AAC7E,4EAA4E;AAC5E,EAAE;AACF,8DAA8D;AAC9D,+DAA+D;AAC/D,0EAA0E;AAC1E,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,sEAAsE;AACtE,iBAAiB;AAEjB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EACL,iCAAiC,GAElC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iCAAiC,EACjC,gCAAgC,GACjC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAwB,MAAM,eAAe,CAAC;AAMlE,SAAS,gBAAgB;IACvB,OAAO,gBAAgB,CACrB,gCAAgC,EAChC,GAAG,EAAE,CAAC,IAAI,iBAAiB,EAA+B,CAC3D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,gBAAgB,CACrB,iCAAiC,EACjC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,iCAAiC,CAAC,OAAO,CAAC,EAAE,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,yBAAyB,CAAI,MAAmC,EAAE,EAAW;IAC3F,OAAO,gBAAgB,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,iBAAiB,EAAE,CAAC,MAAM,GAAG,iCAAiC,CAAC,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAmC;IACvE,iBAAiB,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC;AACtC,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,8BAA8B;IAC5C,OAAO,gBAAgB,EAAE,CAAC,QAAQ,EAAE,IAAI,iBAAiB,EAAE,CAAC,MAAM,CAAC;AACrE,CAAC;AAcD,iFAAiF;AAEjF,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,IAA6B;IACxE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,KAAK,oBAAoB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,KAAkC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAuB,CAAC;QAC9D,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAWD,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,OAAO,SAAS,WAAW,CAAC,EAAgB;QAC1C,MAAM,MAAM,GAAG,8BAA8B,EAAE,CAAC;QAChD,8DAA8D;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAqB,CAAC;QAEjE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,EAAE,CAAC,YAAY,CAAC;gBACd,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,KAAK,EAAE,UAAkB,EAAE,MAAe,EAAE,MAAoB,EAAE,QAAkB,EAAE,EAAE;oBAC/F,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;oBAEvD,yBAAyB;oBACzB,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC/B,KAAK,MAAM,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;4BAC1D,IAAI,CAAC;gCACH,kBAAkB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;4BACvD,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gCACnE,OAAO,UAAU,CAAC,2BAA2B,GAAG,uBAAuB,QAAQ,6FAA6F,CAAC,CAAC;4BAChL,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,0BAA0B;oBAC1B,8DAA8D;oBAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAe,CAAC,CAAC;oBAE/E,oBAAoB;oBACpB,IAAI,CAAC;wBACH,MAAM,UAAU,GAAG,MAAM,EAAE,OAAO;4BAChC,8DAA8D;4BAC9D,EAAE,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;4BACvC,8DAA8D;6BAC7D,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;6BACvB,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;wBAClB,IAAI,CAAC,UAAU,EAAE,CAAC;4BAChB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;4BAC5B,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,MAAM,EAAE,IAAI;4BACZ,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;4BACxD,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;4BACjC,SAAS,EAAE,QAAQ;yBACpB,CAAC,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACP,qCAAqC;oBACvC,CAAC;oBAED,OAAO,MAAM,CAAC;gBAChB,CAAC;aACkC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAaD,SAAS,WAAW;IAClB,OAAO,gBAAgB,CAA4B,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,6BAA6B,CAAC,IAA2B;IACvE,WAAW,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC;AAC5B,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,wBAAwB;IACtC,OAAO,WAAW,EAAE,CAAC,IAAI,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yCAAyC;IACvD,OAAO,SAAS,6BAA6B,CAAC,EAAgB;QAC5D,MAAM,IAAI,GAAG,wBAAwB,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,gFAAgF;kBAC9E,gFAAgF;kBAChF,yEAAyE,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;AACJ,CAAC"}

package/dist/agent/kb-tools.d.ts

@@ -0,0 +1,158 @@
+import type { AgentToolResult } from '@earendil-works/pi-agent-core';
+import { type MindosAgentPermissionPolicy } from './permission-policy.js';
+import { type DiffLine } from './line-diff.js';
+export type MindosAgentTool = {
+    name: string;
+    label: string;
+    description: string;
+    parameters: unknown;
+    execute: (...args: any[]) => Promise<AgentToolResult<any>>;
+};
+/** Loose file-tree node shape — hosts cast their concrete tree type to this. */
+export interface MindosKbFileTreeNode {
+    name: string;
+    type: string;
+    children?: MindosKbFileTreeNode[];
+}
+export interface MindosKbSearchResult {
+    path: string;
+    score: number;
+    snippet: string;
+}
+export interface MindosKbLintReport {
+    healthScore: number;
+    scope: string;
+    stats: {
+        totalFiles: number;
+    };
+    orphans: Array<{
+        path: string;
+    }>;
+    brokenLinks: Array<{
+        source: string;
+        line: number;
+        target: string;
+    }>;
+    stale: Array<{
+        path: string;
+        daysSinceUpdate: number;
+    }>;
+    empty: string[];
+}
+export type MindosKbCompileResult = {
+    ok: true;
+    stats: {
+        spaceName: string;
+        fileCount: number;
+    };
+} | {
+    ok: false;
+    message: string;
+};
+export interface MindosKbDreamingRunSummary {
+    id: string;
+    scope: string;
+    lint: {
+        healthScore: number;
+        stats: {
+            totalFiles: number;
+        };
+    };
+    proposals: Array<{
+        type: string;
+        title: string;
+    }>;
+    artifacts?: {
+        reportMarkdown: string;
+        pendingJson: string;
+    };
+}
+export interface MindosKbDreamingOptions {
+    space?: string;
+    writeArtifacts: boolean;
+}
+export interface MindosKbDreamingResult {
+    run: MindosKbDreamingRunSummary;
+    report: string;
+}
+/** Synchronous knowledge-base file operations the host must provide. */
+export interface MindosKbFileHost {
+    getMindRoot(): string;
+    getFileTree(): MindosKbFileTreeNode[];
+    getFileContent(filePath: string): string;
+    getRecentlyModified(limit: number): Array<{
+        path: string;
+        mtime: number | string | Date;
+    }>;
+    saveFileContent(filePath: string, content: string): void;
+    createFile(filePath: string, content: string): void;
+    appendToFile(filePath: string, content: string): void;
+    insertAfterHeading(filePath: string, heading: string, content: string): void;
+    updateSection(filePath: string, heading: string, content: string): void;
+    updateLines(mindRoot: string, filePath: string, startIndex: number, endIndex: number, lines: string[]): void | Promise<void>;
+    moveToTrashFile(filePath: string): {
+        id: string;
+    };
+    renameFile(filePath: string, newName: string): string;
+    moveFile(fromPath: string, toPath: string): {
+        newPath: string;
+        affectedFiles: string[];
+    };
+    findBacklinks(filePath: string): Array<{
+        source: string;
+        line: number;
+        context: string;
+    }>;
+    gitLog(filePath: string, limit: number): Array<{
+        hash: string;
+        date: string;
+        message: string;
+        author: string;
+    }>;
+    gitShowFile(filePath: string, commit: string): string;
+    appendCsvRow(filePath: string, row: string[]): {
+        newRowCount: number;
+    };
+}
+export interface MindosKbToolsHost {
+    files: MindosKbFileHost;
+    hybridSearch(mindRoot: string, query: string): Promise<MindosKbSearchResult[]>;
+    readSkillContent(name: string): string | null | Promise<string | null>;
+    /** Optional: KB health check backend. The lint tool reports unavailability without it. */
+    runLint?(mindRoot: string, space?: string): MindosKbLintReport | Promise<MindosKbLintReport>;
+    /** Optional: conservative background maintenance pass. */
+    runDreaming?(mindRoot: string, options: MindosKbDreamingOptions): MindosKbDreamingResult | Promise<MindosKbDreamingResult>;
+    /** Optional: AI Space-overview backend. The compile tool reports unavailability without it. */
+    compileSpaceOverview?(space: string): MindosKbCompileResult | Promise<MindosKbCompileResult>;
+    /** Optional: off-thread diff for large files. Resolve null on timeout/unavailable. */
+    computeDiffAsync?(before: string, after: string): Promise<DiffLine[] | null>;
+    /** Optional: delegation tool sets appended per policy.toolScope. */
+    delegationTools?: {
+        a2a?: MindosAgentTool[];
+        acp?: MindosAgentTool[];
+    };
+}
+export declare function truncate(content: string, query?: string): string;
+export declare const WRITE_TOOLS: Set<string>;
+/** Tool names sufficient for the "organize uploaded files" task. */
+export declare const ORGANIZE_TOOL_NAMES: Set<string>;
+/**
+ * Read-only tool set for Chat mode.
+ *
+ * Allows searching and reading the knowledge base + web access,
+ * but blocks all write operations. Extensible: add tool names here
+ * to grant more read-only capabilities to Chat mode.
+ */
+export declare const CHAT_TOOL_NAMES: Set<string>;
+export interface MindosKbToolkit {
+    /** The full knowledge-base tool array (no policy filtering, no delegation tools). */
+    knowledgeBaseTools: MindosAgentTool[];
+    getToolsForPolicy(policy: MindosAgentPermissionPolicy): MindosAgentTool[];
+    /** Lean tool set for organize mode — skips MCP discovery, history, backlinks, etc. */
+    getOrganizeTools(): MindosAgentTool[];
+    getChatTools(): MindosAgentTool[];
+    getRequestScopedTools(): MindosAgentTool[];
+}
+export declare function createMindosKbToolkit(host: MindosKbToolsHost): MindosKbToolkit;
+export declare function buildMindosKnowledgeBaseTools(host: MindosKbToolsHost): MindosAgentTool[];
+//# sourceMappingURL=kb-tools.d.ts.map