@inhuman.tools/harness 0.0.0-stage → 0.2.0

package/dist/extensions/pack-plugin-host.js

@@ -0,0 +1,6 @@
+export class PackPluginCatalogHost {
+    constructor(_ops) { }
+    async sync(_rows) { }
+    [Symbol.dispose]() { }
+}
+//# sourceMappingURL=pack-plugin-host.js.map

package/dist/extensions/pack-plugin-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-plugin-host.js","sourceRoot":"","sources":["../../src/extensions/pack-plugin-host.ts"],"names":[],"mappings":"AA0BA,MAAM,OAAO,qBAAqB;IAChC,YAAY,IAAmB,IAAG,CAAC;IAEnC,KAAK,CAAC,IAAI,CAAC,KAA+B,IAAkB,CAAC;IAE7D,CAAC,MAAM,CAAC,OAAO,CAAC,KAAU,CAAC;CAC5B"}

package/dist/extensions/pin.d.ts

@@ -0,0 +1,16 @@
+import type { BehaviorSelection } from "./manifest.js";
+export type BehaviorPin = {
+    readonly plugin: string;
+    readonly programPath: string;
+    readonly source: string;
+    readonly modules: readonly {
+        readonly path: string;
+        readonly source: string;
+    }[];
+    readonly configuration: Readonly<Record<string, unknown>>;
+    readonly revision: string;
+    readonly bindings: BehaviorSelection["bindings"];
+};
+/** Pin every module the program loaded, not only the entry file. */
+export declare function pinSources(plugin: string, programPath: string, modules: ReadonlyMap<string, string>, configuration: Readonly<Record<string, unknown>>, bindings: BehaviorSelection["bindings"]): BehaviorPin;
+//# sourceMappingURL=pin.d.ts.map

package/dist/extensions/pin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pin.d.ts","sourceRoot":"","sources":["../../src/extensions/pin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGvD,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,EAAE,CAAC;IACJ,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;CAClD,CAAC;AAEF,oEAAoE;AACpE,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EACpC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAChD,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,GACtC,WAAW,CAYb"}

package/dist/extensions/pin.js

@@ -0,0 +1,17 @@
+import { programDigest } from "./consent.js";
+import { PluginSurfaceError } from "./surface-error.js";
+/** Pin every module the program loaded, not only the entry file. */
+export function pinSources(plugin, programPath, modules, configuration, bindings) {
+    const source = modules.get(programPath) ?? "";
+    PluginSurfaceError.invariant(source.trim() !== "", "pinned source unavailable");
+    return {
+        plugin,
+        programPath,
+        source,
+        modules: [...modules].map(([path, text]) => ({ path, source: text })),
+        configuration,
+        revision: programDigest(modules),
+        bindings,
+    };
+}
+//# sourceMappingURL=pin.js.map

package/dist/extensions/pin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pin.js","sourceRoot":"","sources":["../../src/extensions/pin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAexD,oEAAoE;AACpE,MAAM,UAAU,UAAU,CACxB,MAAc,EACd,WAAmB,EACnB,OAAoC,EACpC,aAAgD,EAChD,QAAuC;IAEvC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAC9C,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,2BAA2B,CAAC,CAAC;IAChF,OAAO;QACL,MAAM;QACN,WAAW;QACX,MAAM;QACN,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,aAAa;QACb,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC;QAChC,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/extensions/private-mcp.d.ts

@@ -0,0 +1,51 @@
+export type PluginBotBinding = {
+    readonly pluginName: string;
+    readonly botName: string;
+    readonly serverName: string;
+    readonly tools: readonly string[];
+    readonly approval: "allow" | "policy";
+};
+export type PrivateMcpServerDefinition = {
+    readonly name: string;
+    readonly visibility: "private" | "public";
+    readonly scope: "session" | "workspace" | "global";
+    readonly transport: {
+        readonly type: "stdio";
+        readonly command: string;
+        readonly args: readonly string[];
+        readonly cwd: "plugin" | "workspace";
+        readonly env?: Readonly<Record<string, string>> | ((ctx: {
+            readonly pluginRoot: string;
+            readonly workspaceRoot: string;
+        }) => Record<string, string>);
+    };
+};
+export type InstalledPrivateMcpServer = {
+    readonly pluginName: string;
+    readonly definition: PrivateMcpServerDefinition;
+    readonly listedTools: readonly string[];
+};
+export type PrivateMcpPluginRecord = {
+    readonly pluginName: string;
+    readonly definition: {
+        readonly mcpServers: readonly PrivateMcpServerDefinition[];
+    };
+    readonly privateServers: readonly InstalledPrivateMcpServer[];
+    readonly bindings: readonly PluginBotBinding[];
+};
+export type PrivateMcpInstallState = {
+    readonly plugins: {
+        readonly get: (pluginName: string) => PrivateMcpPluginRecord | undefined;
+        readonly values: () => Iterable<PrivateMcpPluginRecord>;
+    };
+};
+export type PrivateMcpAdmission = {
+    readonly allowed: boolean;
+    readonly reason?: string;
+};
+/** Stable contribution revision for `call` pinning and MCP env. */
+export declare function pluginContributionRevision(record: {
+    readonly definition: unknown;
+}): string;
+export declare function admitPrivateMcpTool(state: PrivateMcpInstallState, callerRecipeName: string, pluginName: string, serverName: string, toolName: string): PrivateMcpAdmission;
+//# sourceMappingURL=private-mcp.d.ts.map

package/dist/extensions/private-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-mcp.d.ts","sourceRoot":"","sources":["../../src/extensions/private-mcp.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;QACjC,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,WAAW,CAAC;QACrC,QAAQ,CAAC,GAAG,CAAC,EACT,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAChC,CAAC,CAAC,GAAG,EAAE;YAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;SAAE,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KACxG,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,UAAU,EAAE,SAAS,0BAA0B,EAAE,CAAC;KAC5D,CAAC;IACF,QAAQ,CAAC,cAAc,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC9D,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,sBAAsB,GAAG,SAAS,CAAC;QACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,QAAQ,CAAC,sBAAsB,CAAC,CAAC;KACzD,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,mEAAmE;AACnE,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAE3F;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,sBAAsB,EAC7B,gBAAgB,EAAE,MAAM,EACxB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,mBAAmB,CAmCrB"}

package/dist/extensions/private-mcp.js

@@ -0,0 +1,45 @@
+/**
+ * Private MCP binding and admission.
+ */
+import { createHash } from "node:crypto";
+/** Stable contribution revision for `call` pinning and MCP env. */
+export function pluginContributionRevision(record) {
+    return createHash("sha256").update(JSON.stringify(record.definition)).digest("hex").slice(0, 16);
+}
+export function admitPrivateMcpTool(state, callerRecipeName, pluginName, serverName, toolName) {
+    const record = state.plugins.get(pluginName);
+    const server = record?.privateServers.find((row) => row.definition.name === serverName);
+    if (record == null || server == null) {
+        return { allowed: false, reason: "unknown private server" };
+    }
+    if (server.definition.visibility !== "private") {
+        return { allowed: false, reason: "server is not private" };
+    }
+    if (callerRecipeName === "") {
+        return {
+            allowed: false,
+            reason: "foreground cannot call private MCP tools",
+        };
+    }
+    const binding = record.bindings.find((row) => row.botName === callerRecipeName && row.serverName === serverName);
+    if (binding == null) {
+        return {
+            allowed: false,
+            reason: `${callerRecipeName} is not bound to ${serverName}`,
+        };
+    }
+    if (!binding.tools.includes(toolName)) {
+        return {
+            allowed: false,
+            reason: `${callerRecipeName} cannot use ${toolName} on ${serverName}`,
+        };
+    }
+    if (server.listedTools.length > 0 && !server.listedTools.includes(toolName)) {
+        return {
+            allowed: false,
+            reason: `${toolName} is unavailable on ${serverName}`,
+        };
+    }
+    return { allowed: true };
+}
+//# sourceMappingURL=private-mcp.js.map

package/dist/extensions/private-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-mcp.js","sourceRoot":"","sources":["../../src/extensions/private-mcp.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAoDzC,mEAAmE;AACnE,MAAM,UAAU,0BAA0B,CAAC,MAAwC;IACjF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAA6B,EAC7B,gBAAwB,EACxB,UAAkB,EAClB,UAAkB,EAClB,QAAgB;IAEhB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACxF,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,gBAAgB,KAAK,EAAE,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,0CAA0C;SACnD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,gBAAgB,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IACjH,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,GAAG,gBAAgB,oBAAoB,UAAU,EAAE;SAC5D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,GAAG,gBAAgB,eAAe,QAAQ,OAAO,UAAU,EAAE;SACtE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5E,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,GAAG,QAAQ,sBAAsB,UAAU,EAAE;SACtD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/extensions/rewind.d.ts

@@ -0,0 +1,18 @@
+import type { StateDirectory } from "./state.js";
+/**
+ * Session plugin logs recorded on the nearest ended turn. Empty when the
+ * trajectory has no snapshot yet. Project and global state do not move.
+ * A live turn's `pluginState` face wins over its JSON string.
+ */
+export declare function pluginStateSnapshotFromHead(head: unknown): Record<string, string>;
+/**
+ * Replace live session pluginState and replay the same logs in the directory.
+ * Caller owns document-action wrapping (`runInAction`).
+ */
+export declare function restoreSessionPluginState(opts: {
+    readonly directory: StateDirectory;
+    readonly sessionId: string;
+    readonly live: Record<string, string>;
+    readonly snapshot: Record<string, string>;
+}): void;
+//# sourceMappingURL=rewind.d.ts.map

package/dist/extensions/rewind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rewind.d.ts","sourceRoot":"","sources":["../../src/extensions/rewind.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAkBjD;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAoBjF;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C,GAAG,IAAI,CAYP"}

package/dist/extensions/rewind.js

@@ -0,0 +1,62 @@
+import { decodeLog, sessionStateKey } from "./state-store.js";
+function stringRecord(value) {
+    if (value == null || typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    const out = {};
+    for (const [key, item] of Object.entries(value)) {
+        if (typeof item !== "string")
+            return undefined;
+        out[key] = item;
+    }
+    return out;
+}
+/**
+ * Session plugin logs recorded on the nearest ended turn. Empty when the
+ * trajectory has no snapshot yet. Project and global state do not move.
+ * A live turn's `pluginState` face wins over its JSON string.
+ */
+export function pluginStateSnapshotFromHead(head) {
+    let unit = head;
+    while (unit != null && typeof unit === "object") {
+        const row = unit;
+        if ("pluginState" in row) {
+            if (row.pluginState != null) {
+                const face = stringRecord(row.pluginState);
+                if (face !== undefined)
+                    return face;
+            }
+        }
+        else if (typeof row.pluginStateJson === "string" && row.pluginStateJson !== "") {
+            try {
+                const face = stringRecord(JSON.parse(row.pluginStateJson));
+                if (face !== undefined)
+                    return face;
+            }
+            catch {
+                /* a broken snapshot is not a restore point */
+            }
+        }
+        unit = row.turnTail;
+    }
+    return {};
+}
+/**
+ * Replace live session pluginState and replay the same logs in the directory.
+ * Caller owns document-action wrapping (`runInAction`).
+ */
+export function restoreSessionPluginState(opts) {
+    const { live, snapshot, directory, sessionId } = opts;
+    for (const key of Object.keys(live)) {
+        if (!(key in snapshot))
+            delete live[key];
+    }
+    for (const [key, json] of Object.entries(snapshot)) {
+        if (live[key] !== json)
+            live[key] = json;
+    }
+    for (const id of directory.sessionOwners(sessionId)) {
+        const key = sessionStateKey(directory.parts(id));
+        directory.reset(id, Object.hasOwn(snapshot, key) ? decodeLog(snapshot[key]) : []);
+    }
+}
+//# sourceMappingURL=rewind.js.map

package/dist/extensions/rewind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rewind.js","sourceRoot":"","sources":["../../src/extensions/rewind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAS9D,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzF,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC/C,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAa;IACvD,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,OAAO,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,IAAsB,CAAC;QACnC,IAAI,aAAa,IAAI,GAAG,EAAE,CAAC;YACzB,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC3C,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;YACtC,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,IAAI,GAAG,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;YACjF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;gBAC3D,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC;QACD,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAKzC;IACC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAC3C,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC"}

package/dist/extensions/schemas/bot-definition.d.ts

@@ -0,0 +1,80 @@
+import { z } from "zod";
+export declare const behaviorBindingSchema: z.ZodObject<{
+    plugin: z.ZodString;
+    scope: z.ZodEnum<{
+        session: "session";
+        global: "global";
+        project: "project";
+    }>;
+    methods: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+/** Bot-selected behavior. Program is required when the block is present. */
+export declare const behaviorSelectionSchema: z.ZodObject<{
+    program: z.ZodString;
+    environment: z.ZodOptional<z.ZodString>;
+    configuration: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+    bindings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        plugin: z.ZodString;
+        scope: z.ZodEnum<{
+            session: "session";
+            global: "global";
+            project: "project";
+        }>;
+        methods: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export declare const botDefinitionSchema: z.ZodPreprocess<z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    recipeScope: z.ZodPipe<z.ZodDefault<z.ZodEnum<{
+        invocation: "invocation";
+        session: "session";
+        workspace: "workspace";
+        global: "global";
+    }>>, z.ZodTransform<"session" | "global" | "project", "invocation" | "session" | "workspace" | "global">>;
+    instructions: z.ZodDefault<z.ZodString>;
+    description: z.ZodDefault<z.ZodString>;
+    tools: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    keepAlive: z.ZodDefault<z.ZodBoolean>;
+    invokes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    reasoningEffort: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        minimal: "minimal";
+        low: "low";
+        medium: "medium";
+        high: "high";
+        xhigh: "xhigh";
+        max: "max";
+    }>>;
+    modelPreferences: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    skills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    behavior: z.ZodOptional<z.ZodObject<{
+        program: z.ZodString;
+        environment: z.ZodOptional<z.ZodString>;
+        configuration: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+        bindings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            plugin: z.ZodString;
+            scope: z.ZodEnum<{
+                session: "session";
+                global: "global";
+                project: "project";
+            }>;
+            methods: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>>;
+    mcp: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        server: z.ZodString;
+        tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        account: z.ZodOptional<z.ZodString>;
+        session: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+    mcpServers: z.ZodOptional<z.ZodNever>;
+    permissionMode: z.ZodOptional<z.ZodNever>;
+    hooks: z.ZodOptional<z.ZodNever>;
+    isolation: z.ZodOptional<z.ZodNever>;
+    memory: z.ZodOptional<z.ZodNever>;
+    "allowed-tools": z.ZodOptional<z.ZodNever>;
+    allowedTools: z.ZodOptional<z.ZodNever>;
+}, z.core.$strict>>;
+/** Defined in the contract package; re-exported so existing imports keep working. */
+export { type BotMcpGrant, botMcpGrantSchema } from "@inhuman.tools/harness-contract";
+//# sourceMappingURL=bot-definition.d.ts.map

package/dist/extensions/schemas/bot-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot-definition.d.ts","sourceRoot":"","sources":["../../../src/extensions/schemas/bot-definition.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,eAAO,MAAM,qBAAqB;;;;;;;;kBAIhC,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;kBAKlC,CAAC;AAUH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAsC/B,CAAC;AAEF,qFAAqF;AACrF,OAAO,EAAE,KAAK,WAAW,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/extensions/schemas/bot-definition.js

@@ -0,0 +1,70 @@
+import { botMcpGrantSchema } from "@inhuman.tools/harness-contract";
+import { REASONING_EFFORTS } from "@inhuman.tools/plugin-sdk";
+import { z } from "zod";
+const nonempty = z.string().trim().min(1);
+const jsonDataSchema = z.lazy(() => z.union([
+    z.string(),
+    z.number().finite(),
+    z.boolean(),
+    z.null(),
+    z.array(jsonDataSchema),
+    z.record(z.string(), jsonDataSchema),
+]));
+export const behaviorBindingSchema = z.strictObject({
+    plugin: nonempty,
+    scope: z.enum(["session", "project", "global"]),
+    methods: z.array(nonempty).min(1),
+});
+/** Bot-selected behavior. Program is required when the block is present. */
+export const behaviorSelectionSchema = z.strictObject({
+    program: nonempty,
+    environment: nonempty.optional(),
+    configuration: z.record(z.string(), jsonDataSchema).optional(),
+    bindings: z.record(nonempty, behaviorBindingSchema).optional(),
+});
+function adoptRecipeScopeKey(value) {
+    if (value == null || typeof value !== "object" || Array.isArray(value))
+        return value;
+    const rec = { ...value };
+    if (rec.recipeScope === undefined && "scope" in rec)
+        rec.recipeScope = rec.scope;
+    delete rec.scope;
+    return rec;
+}
+export const botDefinitionSchema = z.preprocess(adoptRecipeScopeKey, z.strictObject({
+    name: z
+        .string()
+        .trim()
+        .min(1, "invalid name")
+        .refine((value) => !value.includes("__"), { message: "invalid name" })
+        .optional(),
+    recipeScope: z
+        .enum(["invocation", "session", "workspace", "global"])
+        .default("session")
+        .transform((scope) => scope === "workspace" ? "project" : scope === "global" ? "global" : "session"),
+    instructions: z.string().trim().default(""),
+    description: z.string().trim().default(""),
+    tools: z.array(nonempty).default([]),
+    keepAlive: z.boolean().default(false),
+    invokes: z.array(nonempty).default([]),
+    reasoningEffort: z.enum(REASONING_EFFORTS).optional(),
+    modelPreferences: z.array(nonempty).default([]),
+    skills: z.array(nonempty).default([]),
+    behavior: behaviorSelectionSchema.optional(),
+    /**
+     * Named access to an existing server. The server name is required.
+     * An omitted tool list is every tool of that server. `account` and
+     * `session` narrow which connection of that name. This does not spawn.
+     */
+    mcp: z.array(botMcpGrantSchema).default([]),
+    mcpServers: z.never({ error: "forbidden key mcpServers" }).optional(),
+    permissionMode: z.never({ error: "forbidden key permissionMode" }).optional(),
+    hooks: z.never({ error: "forbidden key hooks" }).optional(),
+    isolation: z.never({ error: "forbidden key isolation" }).optional(),
+    memory: z.never({ error: "forbidden key memory" }).optional(),
+    "allowed-tools": z.never({ error: "forbidden key allowed-tools" }).optional(),
+    allowedTools: z.never({ error: "forbidden key allowedTools" }).optional(),
+}));
+/** Defined in the contract package; re-exported so existing imports keep working. */
+export { botMcpGrantSchema } from "@inhuman.tools/harness-contract";
+//# sourceMappingURL=bot-definition.js.map

package/dist/extensions/schemas/bot-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot-definition.js","sourceRoot":"","sources":["../../../src/extensions/schemas/bot-definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE1C,MAAM,cAAc,GAAuB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CACrD,CAAC,CAAC,KAAK,CAAC;IACN,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE;IACnB,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,IAAI,EAAE;IACR,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IACvB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC;CACrC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC;IAClD,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD,OAAO,EAAE,QAAQ;IACjB,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE;IAC9D,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC;AAEH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrF,MAAM,GAAG,GAAG,EAAE,GAAI,KAAiC,EAAE,CAAC;IACtD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,IAAI,GAAG;QAAE,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC;IACjF,OAAO,GAAG,CAAC,KAAK,CAAC;IACjB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,UAAU,CAC7C,mBAAmB,EACnB,CAAC,CAAC,YAAY,CAAC;IACb,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC;SACtB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;SACrE,QAAQ,EAAE;IACb,WAAW,EAAE,CAAC;SACX,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;SACtD,OAAO,CAAC,SAAS,CAAC;SAClB,SAAS,CAAC,CAAC,KAAK,EAAoC,EAAE,CACrD,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAC9E;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IACrD,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC5C;;;;OAIG;IACH,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrE,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7E,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7D,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7E,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1E,CAAC,CACH,CAAC;AAEF,qFAAqF;AACrF,OAAO,EAAoB,iBAAiB,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/extensions/schemas/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./plugin-manifest.js";
+export * from "./bot-definition.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/extensions/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/extensions/schemas/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC"}

package/dist/extensions/schemas/index.js

@@ -0,0 +1,3 @@
+export * from "./plugin-manifest.js";
+export * from "./bot-definition.js";
+//# sourceMappingURL=index.js.map

package/dist/extensions/schemas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/extensions/schemas/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC"}