@jini-ai/daemon 0.5.0 → 0.5.2

package/CHANGELOG.md

@@ -1,4 +1,13 @@
-## Unreleased
+## 0.5.2 — 2026-10-06
+
+- No slow-run notice while a delegated tool waits on a surface: the first `emitSurface` of a call suspends the notice and the call's end resumes it. Suspensions are counted, so with two calls in flight the first to finish does not re-arm the notice over the other's open form; `resume()` drops suspensions left by an ended run.
+
+## 0.5.1 — 2026-10-05
+
+- The `@jini-ai/db` peer range is `^0.2.0 || ^0.3.0` (daemon uses only db's kernel and store entries, which 0.3.0 leaves unchanged), so a host on db 0.3.0 installs without a peer conflict.
+- Internal `@jini-ai/*` runtime dependencies are caret ranges (`workspace:^`) instead of exact pins.
+
+## Unreleased (shipped in 0.5.0)
 
 ### Fixes
 

package/dist/delegated-tool-bridge.js

@@ -109,9 +109,19 @@ export function createDelegatedToolBridge(options) {
          * screen, with no call left to answer it.
          */
         let settled = false;
+        // A handler emits a surface mid-call because it is about to WAIT on the human (a form, a card).
+        // Nothing reaches the run's event stream while they answer, so the slow-run watchdog would read
+        // that silence as a stall and post "Still working…" over an open form — which then reappears
+        // once the form is answered. Suspended from the first surface until the call settles (the
+        // `finally` below); the watchdog re-arms then, so a genuine stall afterwards is still caught.
+        let slowRunSuspended = false;
         const emitSurface = async (emission) => {
             if (settled)
                 throw new Error(`emitSurface: tool call ${toolUseId} has already completed`);
+            if (!slowRunSuspended) {
+                slowRunSuspended = true;
+                lifecycle.suspendSlowRunNotice({ runId: runId });
+            }
             // Cast because `RunAgentPayload` is a closed union and `channel` is deliberately an open
             // string — a seam that only accepts channels this file already knows about is not a
             // channel-neutral seam. This mirrors `@jini-ai/protocol`'s own posture of typing each
@@ -202,6 +212,8 @@ export function createDelegatedToolBridge(options) {
         finally {
             unsubscribeCancel();
             invocation.signal?.removeEventListener('abort', abortFromTransport);
+            if (slowRunSuspended)
+                lifecycle.resumeSlowRunNotice({ runId: runId });
         }
     }
     return { execute };

package/dist/run-lifecycle.d.ts

@@ -106,6 +106,7 @@ export interface RunLifecycle {
      * on a run that never actually stalled. A driver that knows exactly why a run is quiet must say so
      * rather than leaving the watchdog to guess from silence alone. No-op if `runId` is unknown,
      * already terminal, or the slow-run notice is disabled kernel-wide (`slowRunThresholdMs: null`).
+     * Pairs nest: the notice stays suspended until every open suspension has been resumed.
      */
     suspendSlowRunNotice(args: {
         readonly runId: string;

package/dist/run-lifecycle.js

@@ -102,6 +102,7 @@ function rehydratedRunRecord(runId, entries) {
             terminalEndEntry: endEntry,
             watchdog: undefined,
             slowRunWatchdog: undefined,
+            slowRunSuspensions: 0,
             startPromise: undefined,
             finishPromise: undefined,
             retentionTimer: undefined,
@@ -290,6 +291,7 @@ function buildNewRunRecord(startInput, runId, now) {
         terminalEndEntry: undefined,
         watchdog: undefined,
         slowRunWatchdog: undefined,
+        slowRunSuspensions: 0,
         startPromise: undefined,
         finishPromise: undefined,
         retentionTimer: undefined,
@@ -748,7 +750,9 @@ export function createRunLifecycle(requiredArgs, optionalArgs = {}) {
             // freshly-started one does. Without this, `finish()`'s `record.slowRunWatchdog?.cancel()` (which
             // never fires again on its own — the underlying timer is one-shot) left the notice permanently
             // dark for the rest of a resumed run's life, silently disabling a feature the run is otherwise
-            // still eligible for.
+            // still eligible for. Suspensions left open when the run ended can never be resumed (resume is a
+            // no-op on a terminal run), so they are dropped here or they would keep the notice dark forever.
+            record.slowRunSuspensions = 0;
             armSlowRunWatchdogIfConfigured({ record: record, timeoutMs: slowRunThresholdMs, onTimeout: () => {
                     void handleSlowRunNotice(runId);
                 } });
@@ -762,12 +766,18 @@ export function createRunLifecycle(requiredArgs, optionalArgs = {}) {
             const record = runs.get(runId);
             if (!record || isTerminalRunState({ state: record.status.state }))
                 return;
+            record.slowRunSuspensions += 1;
             record.slowRunWatchdog?.cancel({});
         },
         resumeSlowRunNotice({ runId }) {
             const record = runs.get(runId);
             if (!record || isTerminalRunState({ state: record.status.state }))
                 return;
+            // Re-arm only when the LAST open suspension closes (see `RunRecord.slowRunSuspensions`).
+            if (record.slowRunSuspensions > 0)
+                record.slowRunSuspensions -= 1;
+            if (record.slowRunSuspensions > 0)
+                return;
             // Suspension cancels permanently. Resuming must create a new window, never revive that handle.
             record.slowRunWatchdog?.cancel({});
             armSlowRunWatchdogIfConfigured({ record, timeoutMs: slowRunThresholdMs, onTimeout: () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/daemon",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "The stateful agent daemon runtime: run lifecycle, durable event-log port, the tool-execution boundary, agent executor, terminal sessions, and routines.",
   "license": "Apache-2.0",
   "repository": {
@@ -116,10 +116,10 @@
     "registry": "https://registry.npmjs.org"
   },
   "dependencies": {
-    "@jini-ai/core": "0.4.0",
-    "@jini-ai/agent-runtime": "0.4.0",
-    "@jini-ai/protocol": "0.4.0",
-    "@jini-ai/platform": "0.5.0"
+    "@jini-ai/agent-runtime": "^0.4.0",
+    "@jini-ai/core": "^0.4.1",
+    "@jini-ai/platform": "^0.5.1",
+    "@jini-ai/protocol": "^0.4.0"
   },
   "devDependencies": {
     "@vitest/coverage-v8": "^2.1.9",
@@ -132,13 +132,13 @@
     "@types/pg": "8.23.1",
     "express": "^4.21.0",
     "@types/express": "^4.17.21",
-    "@jini-ai/db": "0.2.0",
+    "@jini-ai/db": "0.3.0",
     "@jini-ai/http-kit": "0.4.0",
-    "@jini-ai/chat": "0.5.0"
+    "@jini-ai/chat": "0.5.3"
   },
   "peerDependencies": {
     "node-pty": "^1.1.0",
-    "@jini-ai/db": "^0.2.0",
+    "@jini-ai/db": "^0.2.0 || ^0.3.0",
     "kysely": "^0.29.6",
     "better-sqlite3": "^13.0.0",
     "@electric-sql/pglite": "0.5.8",

package/dist/artifacts/index.d.ts

@@ -1,14 +0,0 @@
-/**
- * @module artifacts
- *
- * The generic artifact-store kernel port, ported from OD's
- * `apps/daemon/src/artifacts/` (6 files). See `source-map.md` for full
- * per-file provenance and the design decisions behind each generalization.
- */
-export * from './manifest.js';
-export * from './store.js';
-export * from './publication-guard.js';
-export * from './runtime-compat.js';
-export * from './stub-guard.js';
-export * from './text-suppression.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/artifacts/index.js

@@ -1,14 +0,0 @@
-/**
- * @module artifacts
- *
- * The generic artifact-store kernel port, ported from OD's
- * `apps/daemon/src/artifacts/` (6 files). See `source-map.md` for full
- * per-file provenance and the design decisions behind each generalization.
- */
-export * from './manifest.js';
-export * from './store.js';
-export * from './publication-guard.js';
-export * from './runtime-compat.js';
-export * from './stub-guard.js';
-export * from './text-suppression.js';
-//# sourceMappingURL=index.js.map

package/dist/artifacts/manifest.d.ts

@@ -1,90 +0,0 @@
-/**
- * @module artifacts/manifest
- *
- * Generic artifact-manifest validation: bounded-length string checks, path-
- * traversal rejection on `entry`/`primary`/`supportingFiles`, a JSON-size
- * cap on `metadata`, and version/timestamp stamping. Ported from OD's
- * `apps/daemon/src/artifacts/manifest.ts`.
- *
- * De-branded: the origin's `kind`/`renderer` fields were validated against
- * hardcoded `ALLOWED_KINDS`/`ALLOWED_RENDERERS` sets that bake in OD's own
- * artifact taxonomy — including a literal `'design-system'` kind, OD's own
- * product concept, not a generic engine noun. Both sets are now a
- * caller-supplied {@link ArtifactManifestTaxonomy} instead of module
- * constants — a host (like an OD adapter) supplies its own kind/renderer/
- * export vocabulary; the validation *mechanism* (bounded strings, traversal
- * rejection, size caps, version stamping) is what this module owns. `status`
- * (`'streaming' | 'complete' | 'error'`) is kept as a fixed literal union —
- * that's a generic artifact-lifecycle concept, not a product taxonomy.
- */
-export type ArtifactStatus = 'streaming' | 'complete' | 'error';
-/**
- * A host's own artifact-kind/renderer/export vocabulary. The engine treats
- * every value as an opaque string it only bounds-checks and validates
- * membership against — it assigns no meaning to any particular kind name.
- */
-export interface ArtifactManifestTaxonomy {
-    readonly allowedKinds: ReadonlySet<string>;
-    readonly allowedRenderers: ReadonlySet<string>;
-    readonly allowedExports: ReadonlySet<string>;
-}
-/** A taxonomy that accepts nothing — forces a host to supply its own before any manifest can validate. */
-export declare const emptyArtifactManifestTaxonomy: ArtifactManifestTaxonomy;
-export interface ArtifactManifest {
-    readonly version: number;
-    readonly kind: string;
-    readonly title: string;
-    readonly entry: string;
-    readonly renderer: string;
-    readonly status: ArtifactStatus;
-    readonly exports: readonly string[];
-    readonly primary?: string | true;
-    readonly supportingFiles?: readonly string[];
-    readonly createdAt: string;
-    readonly updatedAt: string;
-    /** Generic "what produced or relates to this artifact" reference (OD: a skill id). Opaque to the engine. */
-    readonly sourceContextId?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-type JsonRecord = Record<string, unknown>;
-type ValidationResult = {
-    ok: true;
-    value: ArtifactManifest | null;
-} | {
-    ok: false;
-    error: string;
-};
-export interface ValidateManifestOptions {
-    /** Keep an existing `updatedAt` instead of stamping the current time (used when re-parsing a persisted manifest). */
-    preserveUpdatedAt?: boolean;
-}
-/**
- * Validates a freeform manifest payload against `taxonomy`, returning a
- * sanitized, stamped {@link ArtifactManifest} on success. `manifest == null`
- * is a valid "no manifest supplied" outcome (`{ ok: true, value: null }`) —
- * callers that require a manifest check for `value === null` themselves
- * (see `store.ts`'s `resolveArtifactManifest`).
- */
-export declare function validateArtifactManifestInput(manifest: unknown, entry: unknown, taxonomy: ArtifactManifestTaxonomy, options?: ValidateManifestOptions): ValidationResult;
-/** Normalizes a validated manifest payload into the stamped, canonical {@link ArtifactManifest} shape. */
-export declare function sanitizeManifest(manifest: JsonRecord, entry: string, options?: ValidateManifestOptions): ArtifactManifest;
-/**
- * Re-validates a manifest read back from persistence (e.g. a sidecar file),
- * preserving its original `updatedAt`. Returns `null` on any validation
- * failure or version mismatch/parse error rather than throwing — a corrupt
- * or stale sidecar should degrade to "no manifest", not crash the reader.
- */
-export declare function parsePersistedManifest(raw: string, fallbackEntry: string, taxonomy: ArtifactManifestTaxonomy): ArtifactManifest | null;
-/**
- * Injectable seam for a host's own "what kind of artifact is this path"
- * heuristic (OD: extension-based HTML/deck/markdown/svg inference). The
- * engine has no default beyond "infer nothing" — see
- * {@link noopManifestInferrer} — a host wires in its own file-kind
- * classification (per the task brief: "keep OD's file-kind classification
- * as adapter").
- */
-export type ManifestInferrer = (entry: string) => Partial<ArtifactManifest> | null;
-/** Infers nothing — every create call must supply an explicit manifest. */
-export declare const noopManifestInferrer: ManifestInferrer;
-export {};
-//# sourceMappingURL=manifest.d.ts.map

package/dist/artifacts/manifest.js

@@ -1,229 +0,0 @@
-/**
- * @module artifacts/manifest
- *
- * Generic artifact-manifest validation: bounded-length string checks, path-
- * traversal rejection on `entry`/`primary`/`supportingFiles`, a JSON-size
- * cap on `metadata`, and version/timestamp stamping. Ported from OD's
- * `apps/daemon/src/artifacts/manifest.ts`.
- *
- * De-branded: the origin's `kind`/`renderer` fields were validated against
- * hardcoded `ALLOWED_KINDS`/`ALLOWED_RENDERERS` sets that bake in OD's own
- * artifact taxonomy — including a literal `'design-system'` kind, OD's own
- * product concept, not a generic engine noun. Both sets are now a
- * caller-supplied {@link ArtifactManifestTaxonomy} instead of module
- * constants — a host (like an OD adapter) supplies its own kind/renderer/
- * export vocabulary; the validation *mechanism* (bounded strings, traversal
- * rejection, size caps, version stamping) is what this module owns. `status`
- * (`'streaming' | 'complete' | 'error'`) is kept as a fixed literal union —
- * that's a generic artifact-lifecycle concept, not a product taxonomy.
- */
-const MANIFEST_VERSION = 1;
-const MAX_TITLE_LENGTH = 200;
-const MAX_SOURCE_CONTEXT_ID_LENGTH = 128;
-const MAX_SUPPORTING_FILE_LENGTH = 260;
-const MAX_SUPPORTING_FILES = 128;
-const MAX_METADATA_BYTES = 16 * 1024;
-const ALLOWED_STATUS = new Set(['streaming', 'complete', 'error']);
-/** A taxonomy that accepts nothing — forces a host to supply its own before any manifest can validate. */
-export const emptyArtifactManifestTaxonomy = {
-    allowedKinds: new Set(),
-    allowedRenderers: new Set(),
-    allowedExports: new Set(),
-};
-function isPlainObject(value) {
-    if (!value || typeof value !== 'object' || Array.isArray(value))
-        return false;
-    const proto = Object.getPrototypeOf(value);
-    return proto === Object.prototype || proto === null;
-}
-function validateBoundedString(value, field, maxLen, { allowEmpty = false } = {}) {
-    if (typeof value !== 'string')
-        return `${field} must be a string`;
-    if (!allowEmpty && value.length === 0)
-        return `${field} is required`;
-    if (value.length > maxLen)
-        return `${field} exceeds max length (${maxLen})`;
-    return null;
-}
-function validateSupportingPath(value) {
-    if (typeof value !== 'string')
-        return 'supportingFiles entries must be strings';
-    if (value.length === 0)
-        return 'supportingFiles entries cannot be empty';
-    if (value.length > MAX_SUPPORTING_FILE_LENGTH) {
-        return `supportingFiles entries exceed max length (${MAX_SUPPORTING_FILE_LENGTH})`;
-    }
-    if (/^[A-Za-z]:/.test(value) || value.startsWith('/')) {
-        return 'supportingFiles cannot contain absolute paths';
-    }
-    if (value.includes('\u0000'))
-        return 'supportingFiles cannot contain null bytes';
-    const normalized = value.replace(/\\/g, '/');
-    if (normalized.includes('..'))
-        return 'supportingFiles cannot contain traversal segments';
-    const parts = normalized.split('/').filter(Boolean);
-    if (parts.length === 0 || parts.some((p) => p === '.' || p === '..')) {
-        return 'supportingFiles cannot contain traversal segments';
-    }
-    return null;
-}
-/**
- * Validates a freeform manifest payload against `taxonomy`, returning a
- * sanitized, stamped {@link ArtifactManifest} on success. `manifest == null`
- * is a valid "no manifest supplied" outcome (`{ ok: true, value: null }`) —
- * callers that require a manifest check for `value === null` themselves
- * (see `store.ts`'s `resolveArtifactManifest`).
- */
-export function validateArtifactManifestInput(manifest, entry, taxonomy, options = {}) {
-    if (manifest == null)
-        return { ok: true, value: null };
-    if (!isPlainObject(manifest)) {
-        return { ok: false, error: 'artifactManifest must be an object' };
-    }
-    const kindErr = validateBoundedString(manifest.kind, 'artifactManifest.kind', 64);
-    if (kindErr)
-        return { ok: false, error: kindErr };
-    // Cast, not a runtime guard: validateBoundedString's first check is
-    // `typeof value !== 'string'`, which already returned above for any
-    // non-string `kind` — this only narrows the type for `taxonomy.allowedKinds.has`.
-    if (!taxonomy.allowedKinds.has(manifest.kind)) {
-        return { ok: false, error: 'artifactManifest.kind is not allowed' };
-    }
-    const rendererErr = validateBoundedString(manifest.renderer, 'artifactManifest.renderer', 64);
-    if (rendererErr)
-        return { ok: false, error: rendererErr };
-    // Same reasoning as `kind` above.
-    if (!taxonomy.allowedRenderers.has(manifest.renderer)) {
-        return { ok: false, error: 'artifactManifest.renderer is not allowed' };
-    }
-    if (!Array.isArray(manifest.exports) || manifest.exports.length === 0) {
-        return { ok: false, error: 'artifactManifest.exports must be a non-empty array' };
-    }
-    for (const exp of manifest.exports) {
-        if (typeof exp !== 'string') {
-            return { ok: false, error: 'artifactManifest.exports must contain strings' };
-        }
-        if (!taxonomy.allowedExports.has(exp)) {
-            return { ok: false, error: `artifactManifest.exports contains unsupported value: ${exp}` };
-        }
-    }
-    if (manifest.status !== undefined) {
-        if (typeof manifest.status !== 'string') {
-            return { ok: false, error: 'artifactManifest.status must be a string' };
-        }
-        if (!ALLOWED_STATUS.has(manifest.status)) {
-            return { ok: false, error: 'artifactManifest.status is not allowed' };
-        }
-    }
-    if (manifest.primary !== undefined) {
-        if (manifest.primary !== true) {
-            const primaryErr = validateSupportingPath(manifest.primary);
-            if (primaryErr)
-                return { ok: false, error: `artifactManifest.primary ${primaryErr}` };
-        }
-    }
-    if (manifest.supportingFiles !== undefined) {
-        if (!Array.isArray(manifest.supportingFiles)) {
-            return { ok: false, error: 'artifactManifest.supportingFiles must be an array' };
-        }
-        if (manifest.supportingFiles.length > MAX_SUPPORTING_FILES) {
-            return {
-                ok: false,
-                error: `artifactManifest.supportingFiles exceeds max items (${MAX_SUPPORTING_FILES})`,
-            };
-        }
-        for (const rel of manifest.supportingFiles) {
-            const relErr = validateSupportingPath(rel);
-            if (relErr)
-                return { ok: false, error: relErr };
-        }
-    }
-    if (manifest.title !== undefined) {
-        const titleErr = validateBoundedString(manifest.title, 'artifactManifest.title', MAX_TITLE_LENGTH, {
-            allowEmpty: false,
-        });
-        if (titleErr)
-            return { ok: false, error: titleErr };
-    }
-    if (manifest.sourceContextId !== undefined) {
-        const sourceErr = validateBoundedString(manifest.sourceContextId, 'artifactManifest.sourceContextId', MAX_SOURCE_CONTEXT_ID_LENGTH, { allowEmpty: true });
-        if (sourceErr)
-            return { ok: false, error: sourceErr };
-    }
-    if (manifest.metadata !== undefined) {
-        if (!isPlainObject(manifest.metadata)) {
-            return { ok: false, error: 'artifactManifest.metadata must be a plain object' };
-        }
-        // JSON.stringify always returns a string (never undefined) when called
-        // directly on a plain object — undefined-return only happens when the
-        // top-level argument itself is a function/symbol/undefined, which
-        // isPlainObject above already rejected.
-        const serialized = JSON.stringify(manifest.metadata);
-        if (Buffer.byteLength(serialized, 'utf8') > MAX_METADATA_BYTES) {
-            return {
-                ok: false,
-                error: `artifactManifest.metadata exceeds max size (${MAX_METADATA_BYTES} bytes)`,
-            };
-        }
-    }
-    const manifestEntry = typeof manifest.entry === 'string' && manifest.entry.trim() ? manifest.entry.trim() : entry;
-    const entryErr = validateSupportingPath(manifestEntry);
-    if (entryErr) {
-        return { ok: false, error: `artifactManifest.entry ${entryErr}` };
-    }
-    const safeEntry = manifestEntry.replace(/\\/g, '/');
-    return { ok: true, value: sanitizeManifest(manifest, safeEntry, options) };
-}
-/** Normalizes a validated manifest payload into the stamped, canonical {@link ArtifactManifest} shape. */
-export function sanitizeManifest(manifest, entry, options = {}) {
-    const now = new Date().toISOString();
-    const supportingFiles = Array.isArray(manifest.supportingFiles)
-        ? manifest.supportingFiles.map((x) => String(x).replace(/\\/g, '/'))
-        : undefined;
-    const primary = manifest.primary === true
-        ? true
-        : typeof manifest.primary === 'string'
-            ? manifest.primary.replace(/\\/g, '/')
-            : undefined;
-    return {
-        version: MANIFEST_VERSION,
-        kind: manifest.kind,
-        title: manifest.title || entry,
-        entry,
-        renderer: manifest.renderer,
-        status: typeof manifest.status === 'string' && ALLOWED_STATUS.has(manifest.status)
-            ? manifest.status
-            : 'complete',
-        exports: manifest.exports,
-        ...(primary !== undefined ? { primary } : {}),
-        ...(supportingFiles !== undefined ? { supportingFiles } : {}),
-        createdAt: typeof manifest.createdAt === 'string' ? manifest.createdAt : now,
-        updatedAt: options.preserveUpdatedAt && typeof manifest.updatedAt === 'string'
-            ? manifest.updatedAt
-            : now,
-        ...(manifest.sourceContextId !== undefined ? { sourceContextId: manifest.sourceContextId } : {}),
-        ...(manifest.metadata !== undefined ? { metadata: manifest.metadata } : {}),
-    };
-}
-/**
- * Re-validates a manifest read back from persistence (e.g. a sidecar file),
- * preserving its original `updatedAt`. Returns `null` on any validation
- * failure or version mismatch/parse error rather than throwing — a corrupt
- * or stale sidecar should degrade to "no manifest", not crash the reader.
- */
-export function parsePersistedManifest(raw, fallbackEntry, taxonomy) {
-    try {
-        const parsed = JSON.parse(raw);
-        if (!isPlainObject(parsed) || parsed.version !== MANIFEST_VERSION)
-            return null;
-        const entry = typeof parsed.entry === 'string' && parsed.entry ? parsed.entry : fallbackEntry;
-        const result = validateArtifactManifestInput(parsed, entry, taxonomy, { preserveUpdatedAt: true });
-        return result.ok ? result.value : null;
-    }
-    catch {
-        return null;
-    }
-}
-/** Infers nothing — every create call must supply an explicit manifest. */
-export const noopManifestInferrer = () => null;
-//# sourceMappingURL=manifest.js.map

package/dist/artifacts/publication-guard.d.ts

@@ -1,28 +0,0 @@
-export declare const ARTIFACT_PUBLICATION_BLOCKED_CODE: "ARTIFACT_PUBLICATION_BLOCKED";
-export interface PublicationGuardConfig {
-    /** Artifact kinds this guard scans. A kind not in this set is never blocked, whatever its content. */
-    readonly guardedKinds: ReadonlySet<string>;
-    /** Substrings that mark an artifact as containing an unresolved placeholder. Matching is case-sensitive. */
-    readonly blockedPlaceholders: readonly string[];
-}
-/** A guard that blocks nothing — no guarded kinds, no placeholder markers configured. */
-export declare const emptyPublicationGuardConfig: PublicationGuardConfig;
-export declare class ArtifactPublicationBlockedError extends Error {
-    readonly code: "ARTIFACT_PUBLICATION_BLOCKED";
-    readonly placeholders: readonly string[];
-    constructor(placeholders: readonly string[]);
-}
-export declare function isPublicationGuardedKind(kind: unknown, config: PublicationGuardConfig): boolean;
-/** Returns every configured placeholder marker found in `value`'s stringified content, in declaration order. */
-export declare function findBlockedPlaceholders(value: unknown, config: PublicationGuardConfig): string[];
-export declare function shouldBlockPublication(value: unknown, config: PublicationGuardConfig): boolean;
-export declare function buildArtifactPublicationBlockedMessage(placeholders: readonly string[]): string;
-/**
- * Throws {@link ArtifactPublicationBlockedError} when `value` (for a
- * `kind` in `config.guardedKinds`) contains any of `config.blockedPlaceholders`.
- * No-ops for a kind outside `config.guardedKinds` — a guard scoped to
- * user-facing rendered documents shouldn't reject content in other kinds
- * where the same substrings could be legitimate.
- */
-export declare function assertArtifactPublicationAllowed(kind: unknown, value: unknown, config: PublicationGuardConfig): void;
-//# sourceMappingURL=publication-guard.d.ts.map

package/dist/artifacts/publication-guard.js

@@ -1,77 +0,0 @@
-/**
- * @module artifacts/publication-guard
- *
- * A pre-publish content guard: blocks an artifact write when its body
- * contains a caller-declared "unresolved placeholder" marker, scoped to a
- * caller-declared set of guarded kinds. Ported from OD's
- * `apps/daemon/src/artifacts/publication-guard.ts`.
- *
- * De-branded: the origin hardcoded `UNRESOLVED_ARTIFACT_PLACEHOLDERS` — five
- * literal strings ("Name to confirm", "$X.XM", ...) lifted from one specific
- * bundled example template's pitch-deck fill-in-the-blank convention — and
- * `PUBLICATION_GUARDED_ARTIFACT_KINDS = {'html', 'deck'}`. Both are entirely
- * OD's own content, not a generic engine mechanism, so this module now takes
- * a caller-supplied {@link PublicationGuardConfig} (empty by default — a
- * guard that never blocks anything until a host configures it) instead of
- * baking in that one template's marker strings. The guard *mechanism*
- * (scan a guarded-kind body for any configured marker, throw before
- * publish) is what this module owns.
- */
-import { Buffer } from 'node:buffer';
-export const ARTIFACT_PUBLICATION_BLOCKED_CODE = 'ARTIFACT_PUBLICATION_BLOCKED';
-/** A guard that blocks nothing — no guarded kinds, no placeholder markers configured. */
-export const emptyPublicationGuardConfig = {
-    guardedKinds: new Set(),
-    blockedPlaceholders: [],
-};
-export class ArtifactPublicationBlockedError extends Error {
-    code = ARTIFACT_PUBLICATION_BLOCKED_CODE;
-    placeholders;
-    constructor(placeholders) {
-        super(buildArtifactPublicationBlockedMessage(placeholders));
-        this.name = 'ArtifactPublicationBlockedError';
-        this.placeholders = [...placeholders];
-    }
-}
-export function isPublicationGuardedKind(kind, config) {
-    return typeof kind === 'string' && config.guardedKinds.has(kind);
-}
-function stringifyArtifactContent(value) {
-    if (typeof value === 'string')
-        return value;
-    if (Buffer.isBuffer(value))
-        return value.toString('utf8');
-    if (value instanceof Uint8Array)
-        return Buffer.from(value).toString('utf8');
-    return '';
-}
-/** Returns every configured placeholder marker found in `value`'s stringified content, in declaration order. */
-export function findBlockedPlaceholders(value, config) {
-    const text = stringifyArtifactContent(value);
-    if (!text)
-        return [];
-    return config.blockedPlaceholders.filter((placeholder) => text.includes(placeholder));
-}
-export function shouldBlockPublication(value, config) {
-    return findBlockedPlaceholders(value, config).length > 0;
-}
-export function buildArtifactPublicationBlockedMessage(placeholders) {
-    const list = placeholders.length > 0 ? placeholders.join(', ') : 'unknown placeholders';
-    return `Artifact still contains unresolved placeholders: ${list}. Resolve them before publishing.`;
-}
-/**
- * Throws {@link ArtifactPublicationBlockedError} when `value` (for a
- * `kind` in `config.guardedKinds`) contains any of `config.blockedPlaceholders`.
- * No-ops for a kind outside `config.guardedKinds` — a guard scoped to
- * user-facing rendered documents shouldn't reject content in other kinds
- * where the same substrings could be legitimate.
- */
-export function assertArtifactPublicationAllowed(kind, value, config) {
-    if (!isPublicationGuardedKind(kind, config))
-        return;
-    const placeholders = findBlockedPlaceholders(value, config);
-    if (placeholders.length > 0) {
-        throw new ArtifactPublicationBlockedError(placeholders);
-    }
-}
-//# sourceMappingURL=publication-guard.js.map

package/dist/artifacts/runtime-compat.d.ts

@@ -1,37 +0,0 @@
-/**
- * @module artifacts/runtime-compat
- *
- * The runtime-compat injection seam: a hook that gets a chance to rewrite an
- * artifact's body before it's served, for CDN/library-loading quirks a host
- * knows about but the engine can't. Ported from OD's
- * `apps/daemon/src/artifacts/runtime-compat.ts`.
- *
- * De-branded: the origin, `normalizeArtifactRuntimeImports`, is entirely a
- * fix for one specific third-party CDN-bundle bug (the vanilla `dist/
- * motion.js` UMD script tag lacking React hooks, rewritten to `dist/
- * framer-motion.js`) that OD's own system prompt steers models toward
- * hitting. That rewrite rule is product/library-specific knowledge, not a
- * generic engine mechanism — per the task brief ("keep OD's specific logic
- * as adapter"), it is not ported. What *is* generic and kept is the
- * seam itself: a host may need to rewrite an artifact body for any number
- * of environment-specific reasons (a different CDN quirk, a different
- * runtime library entirely) before it reaches a renderer, so the engine
- * defines the hook type and a safe default (identity) rather than hardcode
- * any one library's fix.
- */
-/**
- * Rewrites an artifact body before it is served, keyed by the artifact's
- * file name (a host typically gates on file extension, as OD's origin did
- * with `.html`/`.htm`). Returns the body unchanged when no rewrite applies.
- */
-export type RuntimeCompatNormalizer = (name: string, body: unknown) => unknown;
-/** Applies no rewrite — returns `body` unchanged. Safe default until a host supplies its own normalizer(s). */
-export declare const noopRuntimeCompatNormalizer: RuntimeCompatNormalizer;
-/**
- * Composes several normalizers into one, applying each in order — the
- * output of one becomes the input to the next. Lets a host layer multiple
- * independent CDN/library fixes without each needing to know about the
- * others.
- */
-export declare function composeRuntimeCompatNormalizers(normalizers: readonly RuntimeCompatNormalizer[]): RuntimeCompatNormalizer;
-//# sourceMappingURL=runtime-compat.d.ts.map