@jungjaehoon/mama-os 0.53.0 → 0.57.0

package/dist/agent/model-runner.d.ts

@@ -1,180 +0,0 @@
-/**
- * IModelRunner — Unified interface for CLI backends (STORY-011)
- *
- * Abstracts over Claude (PersistentCLI) and Codex (app-server) backends
- * so AgentLoop depends on a contract, not concrete implementations.
- */
-import type { CompletedToolExchange, GatewayToolExecutionContext, PromptCallbacks, PromptResult } from './types.js';
-export type { PromptResult } from './types.js';
-export type HostToolJsonValue = null | boolean | number | string | HostToolJsonValue[] | {
-    [key: string]: HostToolJsonValue;
-};
-export interface HostToolInputSchema {
-    readonly type: 'object';
-    readonly properties: Readonly<Record<string, HostToolJsonValue>>;
-    readonly required?: readonly string[];
-    readonly additionalProperties: boolean;
-}
-/** Codex app-server dynamic function definition. */
-export interface HostToolDefinition {
-    type: 'function';
-    name: string;
-    description: string;
-    inputSchema: HostToolInputSchema;
-}
-/** A dynamic function call received from the model host. */
-export interface HostToolCall {
-    callId: string;
-    name: string;
-    input: Record<string, unknown>;
-    /** Aborted when the owning model turn fails, times out, or is disconnected. */
-    signal?: AbortSignal;
-}
-/** Serialized result returned to the model host. */
-export interface HostToolCallResult {
-    content: string;
-    isError: boolean;
-    stop?: boolean;
-    /** Fail the active model turn after returning this error result to the host. */
-    abort?: boolean;
-    /** Trusted host-tool terminal code; never derived from model-visible text. */
-    terminalCode?: HostToolTerminalCode;
-}
-/** Tools and executor scoped to one prompt run. */
-export interface HostToolBridge {
-    readonly tools: readonly HostToolDefinition[];
-    execute(call: HostToolCall): Promise<HostToolCallResult>;
-}
-export type HostToolTerminalCode = 'CODE_ACT_MUTATION_COMMITTED_AFTER_ABORT' | 'CODE_ACT_MUTATION_OUTCOME_UNKNOWN' | 'TOOL_CONTRACT_REPEAT';
-export declare function isHostToolTerminalCode(value: unknown): value is HostToolTerminalCode;
-/** Typed transport for a trusted host-tool terminal result across model runtimes. */
-export declare class HostToolTerminalError extends Error {
-    readonly terminalCode: HostToolTerminalCode;
-    readonly completedToolExchanges?: readonly CompletedToolExchange[] | undefined;
-    readonly retryable = false;
-    constructor(terminalCode: HostToolTerminalCode, message: string, completedToolExchanges?: readonly CompletedToolExchange[] | undefined);
-}
-/** A host tool deliberately stopped a run without claiming a terminal mutation outcome. */
-export declare class HostToolAbortError extends Error {
-    readonly completedToolExchanges: readonly CompletedToolExchange[];
-    readonly retryable = false;
-    constructor(message: string, completedToolExchanges: readonly CompletedToolExchange[]);
-}
-/**
- * Options passed to prompt() that are backend-agnostic.
- */
-export interface PromptOptions {
-    model?: string;
-    resumeSession?: boolean;
-    allowedTools?: string[];
-    disallowedTools?: string[];
-    /** Allow the backend's native single-agent delegation primitive for this route. */
-    allowSpawnAgent?: boolean;
-    /** Allow the backend's native multi-agent team primitive for this route. */
-    allowAgentTeams?: boolean;
-    hostToolBridge?: HostToolBridge;
-    /** Per-run counted-token budget; enforced inside a codex turn (see CodexAppServerProcess). */
-    runTokenBudget?: number;
-    systemPrompt?: string;
-    /** Stable source/channel route used by persistent backends across daemon restarts. */
-    sessionKey?: string;
-    /** Stable identity/rules fingerprint, excluding dynamic conversation context. */
-    sessionPolicyFingerprint?: string;
-    /**
-     * Pool ROUTING key (SessionPool id) for THIS call, NOT the CLI --session-id.
-     * The pool spawns processes with its own randomUUID() so the CLI never
-     * reloads disk history. Routes this prompt to this session's process
-     * without mutating shared adapter state.
-     */
-    sessionId?: string;
-    /**
-     * Per-call CLI request timeout (ms) applied when this call spawns a fresh
-     * pooled process. Undefined leaves the pool's construction-time default in
-     * place, so only callers that opt in (operator worker runs) are affected.
-     */
-    requestTimeout?: number;
-    /** Host-issued authority for this exact prompt attempt; persistent Claude binds it to MCP. */
-    toolExecutionContext?: GatewayToolExecutionContext | null;
-    /**
-     * Rebuilds the FULL instructions for a backend that has to rehydrate a durable
-     * session on this call. Codex re-anchors the resumed thread with them
-     * (thread/resume accepts baseInstructions) instead of replaying a per-call prompt
-     * as user text. Lazy: backends invoke it only when a resume actually happens, so
-     * live sessions never pay the rebuild.
-     */
-    resumeInstructions?: () => Promise<string>;
-    /** Measurement only: host lane and brief state for the per-turn [prompt] log line. */
-    promptTelemetry?: {
-        kind: string;
-        brief: 'sent' | 'omitted';
-    };
-}
-export type SessionPolicyStatus = 'missing' | 'compatible' | 'mismatch';
-/**
- * Runtime metrics collected by a model runner.
- */
-export interface RunnerMetrics {
-    requestCount: number;
-    failureCount: number;
-    avgLatencyMs: number;
-    lastRequestAt: number | null;
-}
-/**
- * Standardized error categories for backend failures.
- */
-export type ModelRunnerErrorCode = 'timeout' | 'crash' | 'context_overflow' | 'auth_failure' | 'rate_limit' | 'unknown';
-/**
- * Typed error thrown by IModelRunner implementations.
- */
-export declare class ModelRunnerError extends Error {
-    readonly code: ModelRunnerErrorCode;
-    readonly retryable: boolean;
-    constructor(message: string, code: ModelRunnerErrorCode, retryable?: boolean);
-}
-/**
- * Backend type identifier.
- */
-export type BackendType = 'claude' | 'codex' | 'cline';
-/**
- * Unified model runner interface.
- *
- * Both PersistentCLIAdapter (Claude) and CodexRuntimeProcess (Codex)
- * implement this contract so AgentLoop is backend-agnostic.
- */
-export interface IModelRunner {
-    /** Backend identifier */
-    readonly backendType: BackendType;
-    /**
-     * Whether THIS runner can spawn a native subagent the host can observe.
-     *
-     * A contract that asks for delegation is only honest on a runner that has the primitive
-     * AND a spawn observation path: codex app-server has both (`onSubagentStart`). The
-     * persistent Claude CLI persona runs with `--tools ""` (no native Agent tool) and has no
-     * subagent stream, and the Cline adapter has neither - on those, a "spawn one subagent"
-     * instruction can only be wasted steps or a reported failure. Read this capability rather
-     * than string-matching a backend name.
-     */
-    readonly supportsNativeSubagents: boolean;
-    /** Send a prompt and receive a response */
-    prompt(content: string, callbacks?: PromptCallbacks, options?: PromptOptions): Promise<PromptResult>;
-    /** Read-only durable-session policy preflight. Codex uses this to rotate before a request. */
-    getSessionPolicyStatus?(options: PromptOptions): SessionPolicyStatus;
-    /** Retire one exact routed backend session before replacing its authority policy. */
-    resetSession?(sessionId?: string): void | Promise<void>;
-    /** Set the session/channel ID */
-    setSessionId(id: string): void;
-    /** Set or update the system prompt (affects new processes only) */
-    setSystemPrompt(prompt: string): void;
-    /**
-     * Send a tool result back to the model (Claude-specific).
-     * Optional: Codex backends may leave this unimplemented.
-     */
-    sendToolResult?(toolUseId: string, result: string, isError?: boolean, callbacks?: PromptCallbacks): Promise<PromptResult>;
-    /** Check if the runner is alive and ready to accept prompts */
-    isHealthy(): boolean;
-    /** Collect runtime metrics */
-    getMetrics(): RunnerMetrics;
-    /** Gracefully stop all processes */
-    stop(): void | Promise<void>;
-}
-//# sourceMappingURL=model-runner.d.ts.map

package/dist/agent/model-runner.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-runner.d.ts","sourceRoot":"","sources":["../../src/agent/model-runner.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC3B,eAAe,EACf,YAAY,EACb,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI/C,MAAM,MAAM,iBAAiB,GACzB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,iBAAiB,EAAE,GACnB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAA;CAAE,CAAC;AAEzC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;CACxC;AAED,oDAAoD;AACpD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,mBAAmB,CAAC;CAClC;AAED,4DAA4D;AAC5D,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,+EAA+E;IAC/E,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,oDAAoD;AACpD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,gFAAgF;IAChF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC;AAED,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC9C,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC1D;AAED,MAAM,MAAM,oBAAoB,GAC5B,yCAAyC,GACzC,mCAAmC,GACnC,sBAAsB,CAAC;AAE3B,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,oBAAoB,CAMpF;AAED,qFAAqF;AACrF,qBAAa,qBAAsB,SAAQ,KAAK;IAI5C,QAAQ,CAAC,YAAY,EAAE,oBAAoB;IAE3C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,qBAAqB,EAAE;IALpE,QAAQ,CAAC,SAAS,SAAS;gBAGhB,YAAY,EAAE,oBAAoB,EAC3C,OAAO,EAAE,MAAM,EACN,sBAAsB,CAAC,EAAE,SAAS,qBAAqB,EAAE,YAAA;CAKrE;AAED,2FAA2F;AAC3F,qBAAa,kBAAmB,SAAQ,KAAK;IAKzC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,qBAAqB,EAAE;IAJnE,QAAQ,CAAC,SAAS,SAAS;gBAGzB,OAAO,EAAE,MAAM,EACN,sBAAsB,EAAE,SAAS,qBAAqB,EAAE;CAKpE;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,mFAAmF;IACnF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,8FAA8F;IAC9F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8FAA8F;IAC9F,oBAAoB,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;IAC1D;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,sFAAsF;IACtF,eAAe,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;CAC/D;AAED,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,YAAY,GAAG,UAAU,CAAC;AAIxE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAID;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAC5B,SAAS,GACT,OAAO,GACP,kBAAkB,GAClB,cAAc,GACd,YAAY,GACZ,SAAS,CAAC;AAEd;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,UAAQ;CAM3E;AAID;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,yBAAyB;IACzB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC;;;;;;;;;OASG;IACH,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAE1C,2CAA2C;IAC3C,MAAM,CACJ,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,eAAe,EAC3B,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB,8FAA8F;IAC9F,sBAAsB,CAAC,CAAC,OAAO,EAAE,aAAa,GAAG,mBAAmB,CAAC;IAErE,qFAAqF;IACrF,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExD,iCAAiC;IACjC,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/B,mEAAmE;IACnE,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtC;;;OAGG;IACH,cAAc,CAAC,CACb,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,OAAO,EACjB,SAAS,CAAC,EAAE,eAAe,GAC1B,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB,+DAA+D;IAC/D,SAAS,IAAI,OAAO,CAAC;IAErB,8BAA8B;IAC9B,UAAU,IAAI,aAAa,CAAC;IAE5B,oCAAoC;IACpC,IAAI,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B"}

package/dist/agent/model-runner.js

@@ -1,54 +0,0 @@
-"use strict";
-/**
- * IModelRunner — Unified interface for CLI backends (STORY-011)
- *
- * Abstracts over Claude (PersistentCLI) and Codex (app-server) backends
- * so AgentLoop depends on a contract, not concrete implementations.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ModelRunnerError = exports.HostToolAbortError = exports.HostToolTerminalError = void 0;
-exports.isHostToolTerminalCode = isHostToolTerminalCode;
-function isHostToolTerminalCode(value) {
-    return (value === 'CODE_ACT_MUTATION_COMMITTED_AFTER_ABORT' ||
-        value === 'CODE_ACT_MUTATION_OUTCOME_UNKNOWN' ||
-        value === 'TOOL_CONTRACT_REPEAT');
-}
-/** Typed transport for a trusted host-tool terminal result across model runtimes. */
-class HostToolTerminalError extends Error {
-    terminalCode;
-    completedToolExchanges;
-    retryable = false;
-    constructor(terminalCode, message, completedToolExchanges) {
-        super(message);
-        this.terminalCode = terminalCode;
-        this.completedToolExchanges = completedToolExchanges;
-        this.name = 'HostToolTerminalError';
-    }
-}
-exports.HostToolTerminalError = HostToolTerminalError;
-/** A host tool deliberately stopped a run without claiming a terminal mutation outcome. */
-class HostToolAbortError extends Error {
-    completedToolExchanges;
-    retryable = false;
-    constructor(message, completedToolExchanges) {
-        super(message);
-        this.completedToolExchanges = completedToolExchanges;
-        this.name = 'HostToolAbortError';
-    }
-}
-exports.HostToolAbortError = HostToolAbortError;
-/**
- * Typed error thrown by IModelRunner implementations.
- */
-class ModelRunnerError extends Error {
-    code;
-    retryable;
-    constructor(message, code, retryable = false) {
-        super(message);
-        this.name = 'ModelRunnerError';
-        this.code = code;
-        this.retryable = retryable;
-    }
-}
-exports.ModelRunnerError = ModelRunnerError;
-//# sourceMappingURL=model-runner.js.map

package/dist/agent/model-runner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-runner.js","sourceRoot":"","sources":["../../src/agent/model-runner.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAmEH,wDAMC;AAND,SAAgB,sBAAsB,CAAC,KAAc;IACnD,OAAO,CACL,KAAK,KAAK,yCAAyC;QACnD,KAAK,KAAK,mCAAmC;QAC7C,KAAK,KAAK,sBAAsB,CACjC,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAa,qBAAsB,SAAQ,KAAK;IAInC;IAEA;IALF,SAAS,GAAG,KAAK,CAAC;IAE3B,YACW,YAAkC,EAC3C,OAAe,EACN,sBAAyD;QAElE,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,iBAAY,GAAZ,YAAY,CAAsB;QAElC,2BAAsB,GAAtB,sBAAsB,CAAmC;QAGlE,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAXD,sDAWC;AAED,2FAA2F;AAC3F,MAAa,kBAAmB,SAAQ,KAAK;IAKhC;IAJF,SAAS,GAAG,KAAK,CAAC;IAE3B,YACE,OAAe,EACN,sBAAwD;QAEjE,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,2BAAsB,GAAtB,sBAAsB,CAAkC;QAGjE,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAVD,gDAUC;AA4ED;;GAEG;AACH,MAAa,gBAAiB,SAAQ,KAAK;IAChC,IAAI,CAAuB;IAC3B,SAAS,CAAU;IAE5B,YAAY,OAAe,EAAE,IAA0B,EAAE,SAAS,GAAG,KAAK;QACxE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAVD,4CAUC"}

package/dist/agent/native-effect-observer.d.ts

@@ -1,20 +0,0 @@
-/** Notifications are observations, not backend pre-execution authorization hooks. */
-export interface NativeEffectObserver {
-    started(name: string, input: Record<string, unknown>): void;
-    settled(name: string, toolUseId: string, isError: boolean): void;
-    interrupted(): void;
-    /** Settle the durable admission marker only after a clean run return. */
-    finished?(): void;
-}
-export declare function isDelegationToolName(name: string): boolean;
-/** TG-03/04/05/06: a completed shell invocation is still unsafe to replay. */
-export declare class NativeEffectReplayBoundary {
-    private readonly observer?;
-    private observed;
-    constructor(observer?: NativeEffectObserver | undefined);
-    started(name: string, input: Record<string, unknown>): void;
-    settled(name: string, toolUseId: string, isError: boolean): void;
-    finished(): void;
-    failure(error: unknown, allowPreExecutionRecovery?: boolean): unknown;
-}
-//# sourceMappingURL=native-effect-observer.d.ts.map

package/dist/agent/native-effect-observer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"native-effect-observer.d.ts","sourceRoot":"","sources":["../../src/agent/native-effect-observer.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACjE,WAAW,IAAI,IAAI,CAAC;IACpB,yEAAyE;IACzE,QAAQ,CAAC,IAAI,IAAI,CAAC;CACnB;AAoCD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,8EAA8E;AAC9E,qBAAa,0BAA0B;IAEzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IADtC,OAAO,CAAC,QAAQ,CAAS;gBACI,QAAQ,CAAC,EAAE,oBAAoB,YAAA;IAE5D,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAS3D,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAQhE,QAAQ,IAAI,IAAI;IAIhB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,yBAAyB,UAAQ,GAAG,OAAO;CAqBpE"}

package/dist/agent/native-effect-observer.js

@@ -1,86 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.NativeEffectReplayBoundary = void 0;
-exports.isDelegationToolName = isDelegationToolName;
-const types_js_1 = require("./types.js");
-const NATIVE_EFFECT_NAMES = new Set([
-    'bash',
-    'write',
-    'edit',
-    'multiedit',
-    'apply_patch',
-    'exec_command',
-    'shell',
-    'shell_command',
-    'commandexecution',
-    'filechange',
-    'execute_command',
-    'write_to_file',
-    'replace_in_file',
-]);
-/**
- * Delegation is an admission, not an effect. Spawning a native subagent (Claude `Agent`/
- * `Task`, Codex `spawn_agent`/`send_input`/`resume_agent`) names nothing the replay gate
- * can re-execute: every effect the child performs carries its own ledger row through the
- * gateway. Measured 2026-09-10: a Claude `Agent` tool_use recorded as `native_tool`
- * under the reused `workorder:board:full:repair` occurrence blocked every later board
- * order ("owner effect requires reconciliation before replay", orders #4805-#4807).
- * Codex spawns already bypass this boundary via `onSubagentStart`; the Claude spawn
- * arrives as an ordinary tool_use, so the name set must not claim it.
- */
-const DELEGATION_NAMES = new Set([
-    'agent',
-    'task',
-    'spawn_agent',
-    'collabagenttoolcall',
-    'send_input',
-    'resume_agent',
-]);
-function isDelegationToolName(name) {
-    return DELEGATION_NAMES.has(name.toLowerCase());
-}
-/** TG-03/04/05/06: a completed shell invocation is still unsafe to replay. */
-class NativeEffectReplayBoundary {
-    observer;
-    observed = false;
-    constructor(observer) {
-        this.observer = observer;
-    }
-    started(name, input) {
-        if (!NATIVE_EFFECT_NAMES.has(name.toLowerCase())) {
-            return;
-        }
-        // Latch before persistence: an observer failure must also prevent retry.
-        this.observed = true;
-        this.observer?.started(name, input);
-    }
-    settled(name, toolUseId, isError) {
-        if (!NATIVE_EFFECT_NAMES.has(name.toLowerCase())) {
-            return;
-        }
-        this.observed = true;
-        this.observer?.settled(name, toolUseId, isError);
-    }
-    finished() {
-        this.observer?.finished?.();
-    }
-    failure(error, allowPreExecutionRecovery = false) {
-        // Only AgentLoop's trusted recoverable-session predicate may permit a reset.
-        // Once a native effect is observed, even a session error cannot allow replay.
-        if (allowPreExecutionRecovery && !this.observed) {
-            return error;
-        }
-        if (!this.observed && !this.observer) {
-            return error;
-        }
-        try {
-            this.observer?.interrupted();
-        }
-        catch {
-            // The durable started reservation remains unresolved if settlement fails.
-        }
-        return new types_js_1.AgentError('Native run effect outcome is uncertain; reconcile effects before replaying the occurrence.', 'CODE_ACT_MUTATION_OUTCOME_UNKNOWN', error instanceof Error ? error : new Error(String(error)), false);
-    }
-}
-exports.NativeEffectReplayBoundary = NativeEffectReplayBoundary;
-//# sourceMappingURL=native-effect-observer.js.map

package/dist/agent/native-effect-observer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"native-effect-observer.js","sourceRoot":"","sources":["../../src/agent/native-effect-observer.ts"],"names":[],"mappings":";;;AA6CA,oDAEC;AA/CD,yCAAwC;AAWxC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,OAAO;IACP,MAAM;IACN,WAAW;IACX,aAAa;IACb,cAAc;IACd,OAAO;IACP,eAAe;IACf,kBAAkB;IAClB,YAAY;IACZ,iBAAiB;IACjB,eAAe;IACf,iBAAiB;CAClB,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,OAAO;IACP,MAAM;IACN,aAAa;IACb,qBAAqB;IACrB,YAAY;IACZ,cAAc;CACf,CAAC,CAAC;AACH,SAAgB,oBAAoB,CAAC,IAAY;IAC/C,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,8EAA8E;AAC9E,MAAa,0BAA0B;IAER;IADrB,QAAQ,GAAG,KAAK,CAAC;IACzB,YAA6B,QAA+B;QAA/B,aAAQ,GAAR,QAAQ,CAAuB;IAAG,CAAC;IAEhE,OAAO,CAAC,IAAY,EAAE,KAA8B;QAClD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QACD,yEAAyE;QACzE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,CAAC,IAAY,EAAE,SAAiB,EAAE,OAAgB;QACvD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,KAAc,EAAE,yBAAyB,GAAG,KAAK;QACvD,6EAA6E;QAC7E,8EAA8E;QAC9E,IAAI,yBAAyB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;QACD,OAAO,IAAI,qBAAU,CACnB,4FAA4F,EAC5F,mCAAmC,EACnC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EACzD,KAAK,CACN,CAAC;IACJ,CAAC;CACF;AA9CD,gEA8CC"}

package/dist/agent/obsidian-cli-args.d.ts

@@ -1,14 +0,0 @@
-/**
- * The ONE production builder for Obsidian CLI arguments.
- *
- * Obsidian's CLI syntax is `obsidian [vault=<name>] <command> key=value ... [flags]`: the
- * vault selector is GLOBAL and must precede the command. Live wiki workorder #4569
- * (2026-09-06) emitted `[command, vault=mama-operator, ...]`, the CLI ignored the trailing
- * selector, and five MAMA pages landed in the owner's focused `finance` vault. The
- * gateway test used to duplicate the wrong algorithm instead of importing this one.
- */
-export declare const OBSIDIAN_BOOLEAN_FLAGS: ReadonlySet<string>;
-export declare function buildObsidianCliArgs(command: string, args: Record<string, string> | undefined, vaultName: string | null | undefined): string[];
-/** Parse the configured vault path from `obsidian vault=<name> vault`. */
-export declare function parseObsidianVaultPath(output: string): string;
-//# sourceMappingURL=obsidian-cli-args.d.ts.map

package/dist/agent/obsidian-cli-args.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"obsidian-cli-args.d.ts","sourceRoot":"","sources":["../../src/agent/obsidian-cli-args.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAIrD,CAAC;AAEH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EACxC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACnC,MAAM,EAAE,CA0BV;AAED,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAO7D"}

package/dist/agent/obsidian-cli-args.js

@@ -1,57 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OBSIDIAN_BOOLEAN_FLAGS = void 0;
-exports.buildObsidianCliArgs = buildObsidianCliArgs;
-exports.parseObsidianVaultPath = parseObsidianVaultPath;
-/**
- * The ONE production builder for Obsidian CLI arguments.
- *
- * Obsidian's CLI syntax is `obsidian [vault=<name>] <command> key=value ... [flags]`: the
- * vault selector is GLOBAL and must precede the command. Live wiki workorder #4569
- * (2026-09-06) emitted `[command, vault=mama-operator, ...]`, the CLI ignored the trailing
- * selector, and five MAMA pages landed in the owner's focused `finance` vault. The
- * gateway test used to duplicate the wrong algorithm instead of importing this one.
- */
-exports.OBSIDIAN_BOOLEAN_FLAGS = new Set([
-    'silent',
-    'overwrite',
-    'total',
-]);
-function buildObsidianCliArgs(command, args, vaultName) {
-    if (typeof command !== 'string' || command.trim().length === 0) {
-        throw new Error('obsidian command is required');
-    }
-    if (!/^[a-z][a-z0-9:-]*$/.test(command)) {
-        throw new Error('obsidian command must be one CLI command name');
-    }
-    const entries = Object.entries(args ?? {});
-    if (entries.some(([key]) => key === 'vault')) {
-        // The vault is host configuration. A model-supplied selector could redirect a write to
-        // whatever vault it names, which is exactly the failure this module exists to prevent.
-        throw new Error('obsidian args may not override the configured vault');
-    }
-    const cliArgs = [];
-    if (vaultName) {
-        cliArgs.push(`vault=${vaultName}`);
-    }
-    cliArgs.push(command);
-    for (const [key, value] of entries) {
-        if (value === 'true' && exports.OBSIDIAN_BOOLEAN_FLAGS.has(key)) {
-            cliArgs.push(key);
-        }
-        else {
-            cliArgs.push(`${key}=${value}`);
-        }
-    }
-    return cliArgs;
-}
-/** Parse the configured vault path from `obsidian vault=<name> vault`. */
-function parseObsidianVaultPath(output) {
-    const pathLine = output.split(/\r?\n/).find((line) => line.startsWith('path\t'));
-    const path = pathLine?.slice('path\t'.length).trim();
-    if (!path) {
-        throw new Error('Obsidian CLI did not report the configured vault path');
-    }
-    return path;
-}
-//# sourceMappingURL=obsidian-cli-args.js.map

package/dist/agent/obsidian-cli-args.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"obsidian-cli-args.js","sourceRoot":"","sources":["../../src/agent/obsidian-cli-args.ts"],"names":[],"mappings":";;;AAeA,oDA8BC;AAGD,wDAOC;AAvDD;;;;;;;;GAQG;AACU,QAAA,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IACjE,QAAQ;IACR,WAAW;IACX,OAAO;CACR,CAAC,CAAC;AAEH,SAAgB,oBAAoB,CAClC,OAAe,EACf,IAAwC,EACxC,SAAoC;IAEpC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,EAAE,CAAC;QAC7C,uFAAuF;QACvF,uFAAuF;QACvF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,SAAS,SAAS,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,KAAK,KAAK,MAAM,IAAI,8BAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0EAA0E;AAC1E,SAAgB,sBAAsB,CAAC,MAAc;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}