@harrylabsj/kiwi 0.6.0

package/dist/agent/system-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-prompt.js","sourceRoot":"","sources":["../../src/agent/system-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAYH,MAAM,UAAU,gBAAgB,CAAC,OAAqB,EAAE,SAAoB;IAC1E,MAAM,QAAQ,GACZ,OAAO,CAAC,IAAI,KAAK,OAAO;QACtB,CAAC,CAAC,2EAA2E;QAC7E,CAAC,CAAC,sEAAsE,CAAC;IAC7E,MAAM,kBAAkB,GACtB,OAAO,CAAC,IAAI,KAAK,UAAU;QACzB,CAAC,CAAC;YACE,EAAE;YACF,OAAO;YACP,iDAAiD;YACjD,6GAA6G;YAC7G,8EAA8E;YAC9E,gFAAgF;SACjF,CAAC,IAAI,CAAC,IAAI,CAAC;QACd,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,aAAa,GACjB,OAAO,CAAC,IAAI,KAAK,OAAO;QACtB,CAAC,CAAC;YACE,EAAE;YACF,WAAW;YACX,wBAAwB;YACxB,gFAAgF;YAChF,8LAA8L;YAC9L,6EAA6E;YAC7E,mEAAmE;YACnE,yBAAyB;YACzB,iGAAiG;SAClG,CAAC,IAAI,CAAC,IAAI,CAAC;QACd,CAAC,CAAC,EAAE,CAAC;IACT,OAAO;QACL,GAAG,QAAQ,EAAE;QACb,aAAa;QACb,EAAE;QACF,OAAO;QACP,0FAA0F;QAC1F,kFAAkF;QAClF,kDAAkD;QAClD,gCAAgC;QAChC,kBAAkB;QAClB,EAAE;QACF,OAAO;QACP,mDAAmD;QACnD,uBAAuB;QACvB,eAAe;QACf,EAAE;QACF,QAAQ,SAAS,CAAC,YAAY,OAAO,SAAS,CAAC,IAAI,GAAG;KACvD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,QAA2B;IAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,IAAI,CAAC,CAAC,eAAe,KAAK,eAAe,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,UAAU,SAAS,CAAC,CAAC,GAAG,yBAAyB,CAAC;QACtG,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACzH,CAAC,CAAC,CAAC;IACH,OAAO;QACL,kDAAkD;QAClD,GAAG,KAAK;KACT,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/agent/write-gate.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Shared write-gate for main-conversation write tools (design §16).
+ *
+ * Every write operation produces a content-hashed WriteApprovalCandidate
+ * (arguments_hash + preconditions_hash + risk + expires_at). The gate routes
+ * by mode:
+ *   manual      -> advice only (never executes);
+ *   supervised  -> pending_approval; the operator approves via /approve;
+ *   autopilot   -> executes immediately unless a risk escalation applies.
+ *
+ * Execution always re-reads the preconditions and re-hashes them — a stale
+ * approval is superseded, never executed. Only the stored (approved)
+ * arguments are executed; nothing is re-read from the model at execution
+ * time. Restricted values never enter candidate arguments or preconditions.
+ */
+import type { AgentProfile } from "../config/profile.js";
+import type { OperatorApprovalStatusSource } from "../handoff/operator-approval.js";
+import type { AgentMode } from "./mode.js";
+import { type WriteApprovalCandidate, type WriteApprovalCandidateStore } from "./merchant/action-candidate.js";
+/** Default approval window (design §16 expires_at). */
+export declare const APPROVAL_TTL_MS: number;
+export type WriteGateResult = {
+    kind: "executed";
+    candidate: WriteApprovalCandidate;
+    output: unknown;
+} | {
+    kind: "pending_approval";
+    candidate: WriteApprovalCandidate;
+} | {
+    kind: "advice_only";
+    candidate: WriteApprovalCandidate;
+} | {
+    kind: "forbidden";
+    reason: string;
+};
+export interface WriteGateDeps {
+    mode: () => AgentMode;
+    approvals: WriteApprovalCandidateStore;
+    profile: AgentProfile;
+    now: () => string;
+    /**
+     * Register execution hooks for a pending candidate so the kernel's
+     * `/approve` can execute it later. Hooks are process-lifetime only: a
+     * candidate left pending across a restart cannot be re-validated and is
+     * expired on recovery (design §18.3), exactly like the operator plane.
+     */
+    registerPending?: (candidateId: string, hooks: {
+        readPreconditions: () => Promise<Record<string, unknown>> | Record<string, unknown>;
+        execute: (args: Record<string, unknown>) => Promise<unknown>;
+    }) => void;
+}
+/**
+ * Adapt a WriteApprovalCandidateStore into the handoff operator-approval status
+ * seam. The bridge (OperatorApprovalAuthorizationProvider) consults this so an
+ * approval that is revoked / superseded / expired in the candidate store also
+ * invalidates any checkout authorization minted from it. Unknown candidates
+ * surface as `undefined` (fail closed).
+ */
+export declare function writeApprovalStatusSource(store: WriteApprovalCandidateStore): OperatorApprovalStatusSource;
+export interface WriteCandidateInput {
+    tool: string;
+    arguments: Record<string, unknown>;
+    preconditions: Record<string, unknown>;
+    risk: string;
+    task_id?: string;
+    ttl_ms?: number;
+    /** Execute the write with the approved (stored) arguments. */
+    execute: (args: Record<string, unknown>) => Promise<unknown>;
+    /** Re-read the current precondition state for stale detection. */
+    readPreconditions: () => Promise<Record<string, unknown>> | Record<string, unknown>;
+    /**
+     * Autopilot risk escalation: return a reason when this specific write must
+     * still go to a human, or undefined to auto-execute within HardPolicy.
+     */
+    autopilotEscalation?: (args: Record<string, unknown>) => string | undefined;
+    /**
+     * Draft semantics: the candidate is always pending /approve (never
+     * auto-executed, even in autopilot) — design §16 "生成公开草稿".
+     */
+    force_pending?: boolean;
+}
+/** Create + route one write candidate. Returns the gate outcome. */
+export declare function routeWriteCandidate(deps: WriteGateDeps, input: WriteCandidateInput): Promise<WriteGateResult>;

package/dist/agent/write-gate.js

@@ -0,0 +1,76 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { executeApprovedCandidate, } from "./merchant/action-candidate.js";
+/** Default approval window (design §16 expires_at). */
+export const APPROVAL_TTL_MS = 15 * 60 * 1000;
+/**
+ * Adapt a WriteApprovalCandidateStore into the handoff operator-approval status
+ * seam. The bridge (OperatorApprovalAuthorizationProvider) consults this so an
+ * approval that is revoked / superseded / expired in the candidate store also
+ * invalidates any checkout authorization minted from it. Unknown candidates
+ * surface as `undefined` (fail closed).
+ */
+export function writeApprovalStatusSource(store) {
+    return {
+        getApprovalState(candidateId) {
+            const candidate = store.get(candidateId);
+            if (candidate === undefined)
+                return undefined;
+            return { status: candidate.status, expires_at: candidate.expires_at };
+        },
+    };
+}
+/** Create + route one write candidate. Returns the gate outcome. */
+export async function routeWriteCandidate(deps, input) {
+    const mode = deps.mode();
+    const candidate = deps.approvals.create({
+        tool: input.tool,
+        arguments: input.arguments,
+        preconditions: input.preconditions,
+        risk: input.risk,
+        ...(input.task_id !== undefined ? { task_id: input.task_id } : {}),
+        expires_at: new Date(Date.parse(deps.now()) + (input.ttl_ms ?? APPROVAL_TTL_MS)).toISOString(),
+    });
+    const pendingHooks = { readPreconditions: input.readPreconditions, execute: input.execute };
+    if (mode === "manual") {
+        deps.registerPending?.(candidate.candidate_id, pendingHooks);
+        return { kind: "advice_only", candidate };
+    }
+    if (mode === "supervised") {
+        deps.registerPending?.(candidate.candidate_id, pendingHooks);
+        return { kind: "pending_approval", candidate };
+    }
+    // autopilot: escalate on risk, otherwise execute within HardPolicy.
+    const escalate = input.autopilotEscalation?.(input.arguments);
+    if (escalate !== undefined) {
+        deps.registerPending?.(candidate.candidate_id, pendingHooks);
+        return { kind: "pending_approval", candidate };
+    }
+    // Draft semantics: always pending, never auto-execute.
+    if (input.force_pending === true) {
+        deps.registerPending?.(candidate.candidate_id, pendingHooks);
+        return { kind: "pending_approval", candidate };
+    }
+    deps.approvals.markApproved(candidate.candidate_id);
+    const outcome = await executeApprovedCandidate(deps.approvals, candidate.candidate_id, { readPreconditions: input.readPreconditions, execute: input.execute });
+    if (outcome.kind === "executed") {
+        return { kind: "executed", candidate: outcome.candidate, output: outcome.output };
+    }
+    // Fresh candidates should never be stale/expired on immediate execution,
+    // but fail safe rather than pretending an unexecuted write happened.
+    return { kind: "pending_approval", candidate: outcome.candidate };
+}
+//# sourceMappingURL=write-gate.js.map

package/dist/agent/write-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-gate.js","sourceRoot":"","sources":["../../src/agent/write-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAqBH,OAAO,EACL,wBAAwB,GAGzB,MAAM,gCAAgC,CAAC;AAExC,uDAAuD;AACvD,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AA4B9C;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAkC;IAElC,OAAO;QACL,gBAAgB,CAAC,WAAW;YAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzC,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC9C,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC;QACxE,CAAC;KACF,CAAC;AACJ,CAAC;AAyBD,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAmB,EACnB,KAA0B;IAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QACtC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,UAAU,EAAE,IAAI,IAAI,CAClB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,CAC3D,CAAC,WAAW,EAAE;KAChB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC5F,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC;IACD,oEAAoE;IACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC;IACD,uDAAuD;IACvD,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAC5C,IAAI,CAAC,SAAS,EACd,SAAS,CAAC,YAAY,EACtB,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CACvE,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACpF,CAAC;IACD,yEAAyE;IACzE,qEAAqE;IACrE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;AACpE,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export declare function main(argv?: string[]): Promise<number>;
+export declare function isInvokedAsScript(): boolean;