@hoangsonw/forge 0.1.0

package/dist/permissions/manager.js

@@ -0,0 +1,159 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clearSession = exports.assertAllowed = exports.requestPermission = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const prompts_1 = __importDefault(require("prompts"));
+const errors_1 = require("../types/errors");
+const index_db_1 = require("../persistence/index-db");
+const risk_1 = require("./risk");
+const logger_1 = require("../logging/logger");
+const loader_1 = require("../config/loader");
+const interactive_host_1 = require("../core/interactive-host");
+const session = {
+    grants: new Map(),
+    approvals: new Map(),
+    denyCache: new Set(),
+};
+const checkBlanketFlags = (req, flags) => {
+    if (flags.strict)
+        return null; // fall through to normal prompt
+    if (req.sideEffect === 'write' && flags.allowFiles)
+        return 'allow_session';
+    if (req.sideEffect === 'execute' && flags.allowShell)
+        return 'allow_session';
+    if (req.sideEffect === 'network') {
+        if (req.tool.startsWith('web.') && flags.allowWeb)
+            return 'allow_session';
+        if (req.tool.startsWith('mcp.') && flags.allowMcp)
+            return 'allow_session';
+        if (flags.allowNetwork)
+            return 'allow_session';
+    }
+    return null;
+};
+const tryCachedGrant = (req) => {
+    // Session cache
+    const sessionKey = req.tool;
+    const cached = session.grants.get(sessionKey);
+    if (cached === 'session' || cached === 'project' || cached === 'global') {
+        return 'allow_session';
+    }
+    // Persistent grants (project + global scopes)
+    const grants = (0, index_db_1.loadPermissionGrants)(req.tool, req.projectId);
+    for (const g of grants) {
+        if (g.scope === 'global' || g.scope === 'project') {
+            return 'allow_session';
+        }
+    }
+    return null;
+};
+const promptUser = async (req) => {
+    const header = chalk_1.default.bold.yellow('🔐 Permission required');
+    const risk = chalk_1.default.dim(`[${req.risk}/${req.sideEffect}]`);
+    process.stdout.write(`\n${header} ${risk}\n  tool:   ${chalk_1.default.cyan(req.tool)}\n  action: ${req.action}\n${req.target ? `  target: ${req.target}\n` : ''}`);
+    const choices = [
+        { title: 'Allow once', value: 'allow' },
+        { title: 'Allow for this session', value: 'allow_session' },
+        { title: 'Deny', value: 'deny' },
+    ];
+    // Only non-high-risk tools can be saved as persistent grants.
+    if (req.risk !== 'critical' && req.risk !== 'high') {
+        choices.splice(2, 0, { title: 'Allow for this project (remember)', value: 'allow_project' });
+    }
+    const resp = await (0, prompts_1.default)({
+        type: 'select',
+        name: 'value',
+        message: 'Decision',
+        choices,
+        initial: 0,
+    });
+    if (!resp || !resp.value)
+        return 'deny';
+    if (resp.value === 'allow_project') {
+        (0, index_db_1.savePermissionGrant)({
+            tool: req.tool,
+            project_id: req.projectId,
+            scope: 'project',
+            granted_at: new Date().toISOString(),
+            expires_at: null,
+        });
+        return 'allow_session';
+    }
+    return resp.value;
+};
+const requestPermission = async (req, flags = {}) => {
+    // Blocked critical risk: even strict approval mode should surface, but we
+    // still prompt if interactive — operator must acknowledge.
+    if (session.denyCache.has(req.tool)) {
+        return 'deny';
+    }
+    // Delegate to the interactive host first (UI / custom frontends).
+    const host = (0, interactive_host_1.currentHost)();
+    if (host) {
+        const decision = await host.requestPermission(req, flags);
+        if (decision === 'allow' || decision === 'allow_session') {
+            session.grants.set(req.tool, decision === 'allow' ? 'once' : 'session');
+            session.approvals.set(req.tool, (session.approvals.get(req.tool) ?? 0) + 1);
+        }
+        else if (decision === 'deny') {
+            session.denyCache.add(req.tool);
+        }
+        return decision;
+    }
+    const blanket = checkBlanketFlags(req, flags);
+    if (blanket && !(0, risk_1.shouldAlwaysAsk)({ risk: req.risk, sideEffect: req.sideEffect }, true)) {
+        return blanket;
+    }
+    // Cached decision
+    const cached = tryCachedGrant(req);
+    if (cached && !(0, risk_1.shouldAlwaysAsk)({ risk: req.risk, sideEffect: req.sideEffect }, true)) {
+        return cached;
+    }
+    const cfg = (0, loader_1.loadGlobalConfig)();
+    const trustThreshold = cfg.permissions.trust.autoAllowAfter;
+    const approvals = session.approvals.get(req.tool) ?? 0;
+    if (!(0, risk_1.shouldAlwaysAsk)({ risk: req.risk, sideEffect: req.sideEffect }, true) &&
+        flags.skipRoutine &&
+        approvals >= trustThreshold) {
+        logger_1.log.debug('trust-calibration auto-allow', { tool: req.tool, approvals });
+        return 'allow_session';
+    }
+    // At this point we need to prompt (or we're non-interactive).
+    if (flags.nonInteractive) {
+        if (req.risk === 'low' && flags.skipRoutine)
+            return 'allow_session';
+        logger_1.log.warn('permission denied: non-interactive', { tool: req.tool, risk: req.risk });
+        return 'deny';
+    }
+    const decision = await promptUser(req);
+    if (decision === 'allow' || decision === 'allow_session') {
+        session.grants.set(req.tool, decision === 'allow' ? 'once' : 'session');
+        session.approvals.set(req.tool, approvals + 1);
+    }
+    else if (decision === 'deny') {
+        session.denyCache.add(req.tool);
+    }
+    return decision;
+};
+exports.requestPermission = requestPermission;
+const assertAllowed = async (req, flags = {}) => {
+    const d = await (0, exports.requestPermission)(req, flags);
+    if (d === 'deny' || d === 'ask') {
+        throw new errors_1.ForgeRuntimeError({
+            class: 'permission_denied',
+            message: `Permission denied for ${req.tool} (${req.action}).`,
+            retryable: false,
+        });
+    }
+};
+exports.assertAllowed = assertAllowed;
+const clearSession = () => {
+    session.grants.clear();
+    session.approvals.clear();
+    session.denyCache.clear();
+};
+exports.clearSession = clearSession;
+//# sourceMappingURL=manager.js.map

package/dist/permissions/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/permissions/manager.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAC1B,sDAA8B;AAE9B,4CAAoD;AACpD,sDAAmG;AACnG,iCAAyC;AACzC,8CAAwC;AACxC,6CAAoD;AACpD,+DAAuD;AAiBvD,MAAM,OAAO,GAAkB;IAC7B,MAAM,EAAE,IAAI,GAAG,EAAE;IACjB,SAAS,EAAE,IAAI,GAAG,EAAE;IACpB,SAAS,EAAE,IAAI,GAAG,EAAE;CACrB,CAAC;AAaF,MAAM,iBAAiB,GAAG,CACxB,GAAsB,EACtB,KAAsB,EACK,EAAE;IAC7B,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,gCAAgC;IAC/D,IAAI,GAAG,CAAC,UAAU,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU;QAAE,OAAO,eAAe,CAAC;IAC3E,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU;QAAE,OAAO,eAAe,CAAC;IAC7E,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,eAAe,CAAC;QAC1E,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,eAAe,CAAC;QAC1E,IAAI,KAAK,CAAC,YAAY;YAAE,OAAO,eAAe,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,GAAsB,EAA6B,EAAE;IAC3E,gBAAgB;IAChB,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxE,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,8CAA8C;IAC9C,MAAM,MAAM,GAAoB,IAAA,+BAAoB,EAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAClD,OAAO,eAAe,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,KAAK,EAAE,GAAsB,EAA+B,EAAE;IAC/E,MAAM,MAAM,GAAG,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,eAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,MAAM,IAAI,IAAI,eAAe,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,MAAM,KAC7E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAC7C,EAAE,CACH,CAAC;IAEF,MAAM,OAAO,GAAG;QACd,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE;QACvC,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,eAAe,EAAE;QAC3D,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;KACjC,CAAC;IACF,8DAA8D;IAC9D,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,IAAA,iBAAO,EAAC;QACzB,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,UAAU;QACnB,OAAO;QACP,OAAO,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QACnC,IAAA,8BAAmB,EAAC;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,GAAG,CAAC,SAAS;YACzB,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC,KAA2B,CAAC;AAC1C,CAAC,CAAC;AAEK,MAAM,iBAAiB,GAAG,KAAK,EACpC,GAAsB,EACtB,QAAyB,EAAE,EACE,EAAE;IAC/B,0EAA0E;IAC1E,2DAA2D;IAC3D,IAAI,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kEAAkE;IAClE,MAAM,IAAI,GAAG,IAAA,8BAAW,GAAE,CAAC;IAC3B,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1D,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACzD,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACxE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC/B,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,IAAI,CAAC,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QACtF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kBAAkB;IAClB,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,CAAC,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QACrF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,GAAG,GAAG,IAAA,yBAAgB,GAAE,CAAC;IAC/B,MAAM,cAAc,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,IACE,CAAC,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC;QACtE,KAAK,CAAC,WAAW;QACjB,SAAS,IAAI,cAAc,EAC3B,CAAC;QACD,YAAG,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACzE,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,8DAA8D;IAC9D,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,WAAW;YAAE,OAAO,eAAe,CAAC;QACpE,YAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACxE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;SAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AA7DW,QAAA,iBAAiB,qBA6D5B;AAEK,MAAM,aAAa,GAAG,KAAK,EAChC,GAAsB,EACtB,QAAyB,EAAE,EACZ,EAAE;IACjB,MAAM,CAAC,GAAG,MAAM,IAAA,yBAAiB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,0BAAiB,CAAC;YAC1B,KAAK,EAAE,mBAAmB;YAC1B,OAAO,EAAE,yBAAyB,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,IAAI;YAC7D,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAZW,QAAA,aAAa,iBAYxB;AAEK,MAAM,YAAY,GAAG,GAAS,EAAE;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAC1B,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;AAC5B,CAAC,CAAC;AAJW,QAAA,YAAY,gBAIvB"}

package/dist/permissions/risk.d.ts

@@ -0,0 +1,13 @@
+import { Risk, SideEffect, Tool, ToolSchema } from '../types';
+/**
+ * Risk-scoring helpers. Called whenever we need a decision about whether a
+ * tool invocation is routine or needs explicit approval.
+ */
+export declare const riskRank: (r: Risk) => number;
+export declare const maxRisk: (a: Risk, b: Risk) => Risk;
+export declare const requiresExplicitApproval: (schema: ToolSchema) => boolean;
+export declare const mergeRisk: (toolRisk: Risk, actionRisk: Risk) => Risk;
+export declare const shouldAlwaysAsk: (tool: Pick<ToolSchema, "risk" | "sideEffect">, skipRoutinePrompts: boolean) => boolean;
+export declare const describeSideEffect: (side: SideEffect) => string;
+export declare const summarizeTool: (tool: Tool) => string;
+//# sourceMappingURL=risk.d.ts.map

package/dist/permissions/risk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../../src/permissions/risk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,QAAQ,GAAI,GAAG,IAAI,KAAG,MAC0B,CAAC;AAE9D,eAAO,MAAM,OAAO,GAAI,GAAG,IAAI,EAAE,GAAG,IAAI,KAAG,IAA4C,CAAC;AAExF,eAAO,MAAM,wBAAwB,GAAI,QAAQ,UAAU,KAAG,OAI7D,CAAC;AAEF,eAAO,MAAM,SAAS,GAAI,UAAU,IAAI,EAAE,YAAY,IAAI,KAAG,IAAqC,CAAC;AAEnG,eAAO,MAAM,eAAe,GAC1B,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,YAAY,CAAC,EAC7C,oBAAoB,OAAO,KAC1B,OAOF,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,MAAM,UAAU,KAAG,MAO5C,CAAC;AAEX,eAAO,MAAM,aAAa,GAAI,MAAM,IAAI,KAAG,MACwD,CAAC"}

package/dist/permissions/risk.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.summarizeTool = exports.describeSideEffect = exports.shouldAlwaysAsk = exports.mergeRisk = exports.requiresExplicitApproval = exports.maxRisk = exports.riskRank = void 0;
+/**
+ * Risk-scoring helpers. Called whenever we need a decision about whether a
+ * tool invocation is routine or needs explicit approval.
+ */
+const riskRank = (r) => ({ low: 0, medium: 1, high: 2, critical: 3 })[r];
+exports.riskRank = riskRank;
+const maxRisk = (a, b) => ((0, exports.riskRank)(a) >= (0, exports.riskRank)(b) ? a : b);
+exports.maxRisk = maxRisk;
+const requiresExplicitApproval = (schema) => {
+    if (schema.risk === 'critical' || schema.risk === 'high')
+        return true;
+    if (schema.sideEffect === 'execute' || schema.sideEffect === 'network')
+        return true;
+    return false;
+};
+exports.requiresExplicitApproval = requiresExplicitApproval;
+const mergeRisk = (toolRisk, actionRisk) => (0, exports.maxRisk)(toolRisk, actionRisk);
+exports.mergeRisk = mergeRisk;
+const shouldAlwaysAsk = (tool, skipRoutinePrompts) => {
+    // `--skip-permissions` drops only *routine* prompts (low/medium). High-risk
+    // and destructive actions always require explicit approval — this matches
+    // the spec's baseline in Operational Control §8.4.
+    if (tool.risk === 'critical' || tool.risk === 'high')
+        return true;
+    if (tool.sideEffect === 'execute' || tool.sideEffect === 'network')
+        return true;
+    return !skipRoutinePrompts;
+};
+exports.shouldAlwaysAsk = shouldAlwaysAsk;
+const describeSideEffect = (side) => ({
+    pure: 'no side effect',
+    readonly: 'reads only',
+    write: 'writes files',
+    network: 'makes network calls',
+    execute: 'executes shell commands',
+})[side];
+exports.describeSideEffect = describeSideEffect;
+const summarizeTool = (tool) => `${tool.schema.name} [${tool.schema.risk}/${tool.schema.sideEffect}]: ${tool.schema.description}`;
+exports.summarizeTool = summarizeTool;
+//# sourceMappingURL=risk.js.map

package/dist/permissions/risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../src/permissions/risk.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACI,MAAM,QAAQ,GAAG,CAAC,CAAO,EAAU,EAAE,CACzC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAW,CAAC,CAAC,CAAC,CAAC;AADjD,QAAA,QAAQ,YACyC;AAEvD,MAAM,OAAO,GAAG,CAAC,CAAO,EAAE,CAAO,EAAQ,EAAE,CAAC,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC,IAAI,IAAA,gBAAQ,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAA3E,QAAA,OAAO,WAAoE;AAEjF,MAAM,wBAAwB,GAAG,CAAC,MAAkB,EAAW,EAAE;IACtE,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpF,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAJW,QAAA,wBAAwB,4BAInC;AAEK,MAAM,SAAS,GAAG,CAAC,QAAc,EAAE,UAAgB,EAAQ,EAAE,CAAC,IAAA,eAAO,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAAtF,QAAA,SAAS,aAA6E;AAE5F,MAAM,eAAe,GAAG,CAC7B,IAA6C,EAC7C,kBAA2B,EAClB,EAAE;IACX,4EAA4E;IAC5E,0EAA0E;IAC1E,mDAAmD;IACnD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClE,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChF,OAAO,CAAC,kBAAkB,CAAC;AAC7B,CAAC,CAAC;AAVW,QAAA,eAAe,mBAU1B;AAEK,MAAM,kBAAkB,GAAG,CAAC,IAAgB,EAAU,EAAE,CAC7D,CAAC;IACC,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,YAAY;IACtB,KAAK,EAAE,cAAc;IACrB,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,yBAAyB;CACnC,CAAC,CAAC,IAAI,CAAC,CAAC;AAPE,QAAA,kBAAkB,sBAOpB;AAEJ,MAAM,aAAa,GAAG,CAAC,IAAU,EAAU,EAAE,CAClD,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;AADvF,QAAA,aAAa,iBAC0E"}

package/dist/persistence/compression.d.ts

@@ -0,0 +1,9 @@
+export interface CompressionResult {
+    compressed: number;
+    bytesReclaimed: number;
+}
+export declare const compressAgedSessions: (projectRoot: string, options?: {
+    olderThanDays?: number;
+}) => CompressionResult;
+export declare const listArchived: (limit?: number) => unknown[];
+//# sourceMappingURL=compression.d.ts.map

package/dist/persistence/compression.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.d.ts","sourceRoot":"","sources":["../../src/persistence/compression.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAkCD,eAAO,MAAM,oBAAoB,GAC/B,aAAa,MAAM,EACnB,UAAS;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,KACvC,iBAiCF,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,cAAU,cAOtC,CAAC"}

package/dist/persistence/compression.js

@@ -0,0 +1,126 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listArchived = exports.compressAgedSessions = void 0;
+/**
+ * Session compression / summarization. Periodically (from the daemon) aged
+ * JSONL sessions are summarized into a one-line synopsis so we can drop the
+ * raw file. The synopsis goes into the SQLite `sessions` table for fast
+ * lookup and cross-project search without paying full replay cost.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const paths_1 = require("../config/paths");
+const index_db_1 = require("../persistence/index-db");
+const redact_1 = require("../security/redact");
+const logger_1 = require("../logging/logger");
+const migrate = () => {
+    // Base `sessions` table exists already.
+    (0, index_db_1.getDb)().exec(`
+    CREATE TABLE IF NOT EXISTS session_archive (
+      project_id TEXT NOT NULL,
+      session_id TEXT NOT NULL,
+      synopsis TEXT NOT NULL,
+      archived_at TEXT NOT NULL,
+      PRIMARY KEY (project_id, session_id)
+    );
+  `);
+};
+const summarize = (entries) => {
+    const types = new Map();
+    let firstUser = '';
+    let lastResult = '';
+    for (const line of entries) {
+        try {
+            const obj = JSON.parse(line);
+            types.set(obj.type, (types.get(obj.type) ?? 0) + 1);
+            if (obj.type === 'user' && !firstUser)
+                firstUser = String(obj.content?.title ?? obj.content ?? '').slice(0, 200);
+            if (obj.type === 'result')
+                lastResult = String(obj.content?.summary ?? '').slice(0, 200);
+        }
+        catch {
+            /* skip */
+        }
+    }
+    const typeSummary = [...types.entries()].map(([k, v]) => `${k}=${v}`).join(' ');
+    return (0, redact_1.redactString)(`"${firstUser}" → ${lastResult} · ${typeSummary}`);
+};
+const compressAgedSessions = (projectRoot, options = {}) => {
+    migrate();
+    const sub = (0, paths_1.ensureProjectDir)(projectRoot);
+    const days = options.olderThanDays ?? 14;
+    const cutoff = Date.now() - days * 86_400_000;
+    const db = (0, index_db_1.getDb)();
+    let compressed = 0;
+    let reclaimed = 0;
+    if (!fs.existsSync(sub.sessions))
+        return { compressed: 0, bytesReclaimed: 0 };
+    for (const file of fs.readdirSync(sub.sessions)) {
+        if (!file.endsWith('.jsonl'))
+            continue;
+        const fp = path.join(sub.sessions, file);
+        try {
+            const stat = fs.statSync(fp);
+            if (stat.mtimeMs > cutoff)
+                continue;
+            const entries = fs.readFileSync(fp, 'utf8').split('\n').filter(Boolean);
+            if (entries.length === 0)
+                continue;
+            const synopsis = summarize(entries);
+            const pid = path.basename(projectRoot); // project identity uses hash elsewhere; not needed here for archive
+            const sessionId = path.basename(file, '.jsonl');
+            db.prepare(`INSERT INTO session_archive (project_id, session_id, synopsis, archived_at)
+         VALUES (?, ?, ?, ?)
+         ON CONFLICT(project_id, session_id) DO UPDATE SET synopsis = excluded.synopsis, archived_at = excluded.archived_at`).run(pid, sessionId, synopsis, new Date().toISOString());
+            reclaimed += stat.size;
+            fs.unlinkSync(fp);
+            compressed++;
+        }
+        catch (err) {
+            logger_1.log.debug('session compress skip', { file, err: String(err) });
+        }
+    }
+    return { compressed, bytesReclaimed: reclaimed };
+};
+exports.compressAgedSessions = compressAgedSessions;
+const listArchived = (limit = 50) => {
+    migrate();
+    return (0, index_db_1.getDb)()
+        .prepare('SELECT session_id, project_id, synopsis, archived_at FROM session_archive ORDER BY archived_at DESC LIMIT ?')
+        .all(limit);
+};
+exports.listArchived = listArchived;
+//# sourceMappingURL=compression.js.map

package/dist/persistence/compression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.js","sourceRoot":"","sources":["../../src/persistence/compression.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;GAKG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,2CAAmD;AACnD,sDAAgD;AAChD,+CAAkD;AAClD,8CAAwC;AAOxC,MAAM,OAAO,GAAG,GAAS,EAAE;IACzB,wCAAwC;IACxC,IAAA,gBAAK,GAAE,CAAC,IAAI,CAAC;;;;;;;;GAQZ,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,OAAiB,EAAU,EAAE;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpD,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,SAAS;gBACnC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5E,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChF,OAAO,IAAA,qBAAY,EAAC,IAAI,SAAS,OAAO,UAAU,MAAM,WAAW,EAAE,CAAC,CAAC;AACzE,CAAC,CAAC;AAEK,MAAM,oBAAoB,GAAG,CAClC,WAAmB,EACnB,UAAsC,EAAE,EACrB,EAAE;IACrB,OAAO,EAAE,CAAC;IACV,MAAM,GAAG,GAAG,IAAA,wBAAgB,EAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,UAAU,CAAC;IAC9C,MAAM,EAAE,GAAG,IAAA,gBAAK,GAAE,CAAC;IACnB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAC9E,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS;QACvC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,OAAO,GAAG,MAAM;gBAAE,SAAS;YACpC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,oEAAoE;YAC5G,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAChD,EAAE,CAAC,OAAO,CACR;;4HAEoH,CACrH,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1D,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC;YACvB,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAClB,UAAU,EAAE,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC,CAAC;AApCW,QAAA,oBAAoB,wBAoC/B;AAEK,MAAM,YAAY,GAAG,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE;IACzC,OAAO,EAAE,CAAC;IACV,OAAO,IAAA,gBAAK,GAAE;SACX,OAAO,CACN,6GAA6G,CAC9G;SACA,GAAG,CAAC,KAAK,CAAC,CAAC;AAChB,CAAC,CAAC;AAPW,QAAA,YAAY,gBAOvB"}

package/dist/persistence/conversation-store.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Concurrency-safe JSONL store for conversation files.
+ *
+ * Shared between the CLI REPL and the UI chat surfaces so multiple writers
+ * (multiple terminals, multiple browser tabs, a browser tab + a CLI REPL,
+ * tasks spawned by subagents, etc.) can safely append to the same file and
+ * observe each other's writes in near real-time.
+ *
+ * Safety model:
+ *   • Appends under PIPE_BUF (4 KiB on Linux/macOS) are guaranteed atomic by
+ *     POSIX O_APPEND: the kernel updates the offset and writes the bytes as
+ *     one operation, so interleaved writers never corrupt each other's lines.
+ *   • Larger lines acquire a cooperative lock (mkdir-based, works across
+ *     processes) before appending.
+ *   • Readers never acquire locks. They open, read-to-EOF, split on '\n',
+ *     and skip malformed lines. A writer half-way through writing produces
+ *     at worst a trailing line without '\n' that is skipped until the next
+ *     read.
+ *   • Stale locks (process crashed with lock held) are detected by mtime and
+ *     recovered automatically.
+ *
+ * The module has no knowledge of domain types — it deals in strings and
+ * `Record<string, unknown>` events. Domain typing lives in
+ * src/core/conversation.ts.
+ */
+export interface Lock {
+    release(): Promise<void>;
+}
+/**
+ * Acquire a cooperative lock on `target` using an adjacent `<target>.lock`
+ * directory. Atomic `mkdir` is the only POSIX primitive we need. If the lock
+ * has been held longer than `timeoutMs`, treat it as stale and steal it.
+ */
+export declare const acquireLock: (target: string, timeoutMs?: number) => Promise<Lock>;
+/** Append a single line (newline added if absent). Safe under concurrent
+ * writers. Small lines use POSIX atomic append; large lines take a lock. */
+export declare const atomicAppendLine: (filePath: string, line: string) => Promise<void>;
+/** Sync version for code paths that cannot await (e.g. task-runner callbacks
+ * on task completion). Same semantics; uses sync fs. */
+export declare const atomicAppendLineSync: (filePath: string, line: string) => void;
+/** Read every complete JSON line from a file. Missing file → []. Corrupted
+ * lines are skipped with no error. Safe to run while another process is
+ * appending. */
+export declare const readAllLines: <T = unknown>(filePath: string) => T[];
+/** Delta read: given a previous offset, return only NEW complete lines since
+ * that offset plus the updated offset. Used by watchers to avoid re-parsing
+ * the entire file on every change. */
+export declare const readSince: <T = unknown>(filePath: string, offset: number) => {
+    items: T[];
+    offset: number;
+};
+export interface ConversationWatcher {
+    close(): void;
+}
+/**
+ * Watch `filePath` for appended lines. Callback fires with the new events
+ * decoded from JSON. Re-entrant: the callback may trigger further writes to
+ * the same file without causing reentrancy bugs (the watcher dedupes based
+ * on byte offset, not event count).
+ *
+ * Uses fs.watch with a fs.watchFile fallback — on some network filesystems
+ * (and inside Docker mounts on macOS) fs.watch does not fire reliably.
+ */
+export declare const watchConversation: <T = unknown>(filePath: string, onAppend: (items: T[]) => void) => ConversationWatcher;
+/** Return the current byte-length of the file, or 0 if missing. */
+export declare const fileSize: (filePath: string) => number;
+//# sourceMappingURL=conversation-store.d.ts.map

package/dist/persistence/conversation-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-store.d.ts","sourceRoot":"","sources":["../../src/persistence/conversation-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAmBH,MAAM,WAAW,IAAI;IACnB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW,GAAU,QAAQ,MAAM,EAAE,kBAA2B,KAAG,OAAO,CAAC,IAAI,CAsC3F,CAAC;AAIF;4EAC4E;AAC5E,eAAO,MAAM,gBAAgB,GAAU,UAAU,MAAM,EAAE,MAAM,MAAM,KAAG,OAAO,CAAC,IAAI,CAiBnF,CAAC;AAEF;wDACwD;AACxD,eAAO,MAAM,oBAAoB,GAAI,UAAU,MAAM,EAAE,MAAM,MAAM,KAAG,IA8CrE,CAAC;AAIF;;gBAEgB;AAChB,eAAO,MAAM,YAAY,GAAI,CAAC,GAAG,OAAO,EAAE,UAAU,MAAM,KAAG,CAAC,EAoB7D,CAAC;AAEF;;sCAEsC;AACtC,eAAO,MAAM,SAAS,GAAI,CAAC,GAAG,OAAO,EACnC,UAAU,MAAM,EAChB,QAAQ,MAAM,KACb;IAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAuC9B,CAAC;AAIF,MAAM,WAAW,mBAAmB;IAClC,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,GAAI,CAAC,GAAG,OAAO,EAC3C,UAAU,MAAM,EAChB,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,KAC7B,mBAkEF,CAAC;AAIF,mEAAmE;AACnE,eAAO,MAAM,QAAQ,GAAI,UAAU,MAAM,KAAG,MAM3C,CAAC"}