@jungjaehoon/mama-os 0.53.1 → 0.57.0

package/dist/envelope/signature.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/envelope/signature.ts"],"names":[],"mappings":";;AAqBA,oCAoBC;AAED,wCAuBC;AAlED,6CAA0D;AAC1D,iDAAqD;AAoBrD,SAAgB,YAAY,CAAC,QAAkB,EAAE,UAA8B;IAC7E,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAE/B,MAAM,YAAY,GAAG,IAAA,kCAAmB,EAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,6DAA6D;YAC3D,GAAG,QAAQ,CAAC,aAAa,QAAQ,YAAY,EAAE,CAClD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,QAAQ;QACX,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE;YACT,IAAI,EAAE,oBAAoB,CAAC,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC;YACxD,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,WAAW,EAAE,UAAU,CAAC,WAAW;SACpC;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,cAAc,CAAC,QAAkB,EAAE,SAA4B;IAC7E,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,kCAAmB,EAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,QAAQ,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACjF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAE9D,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAA,6BAAe,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,UAA8B;IACxD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoB,EAAE,GAAwB;IAC1E,OAAO,0BAA0B,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,0BAA0B,CAAC,YAAoB,EAAE,GAAwB;IAChF,OAAO,IAAA,wBAAU,EAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AACvF,CAAC;AAED,SAAS,YAAY,CAAC,GAAwB;IAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,kEAAkE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxF,CAAC"}

package/dist/envelope/store.d.ts

@@ -1,16 +0,0 @@
-import type { SQLiteDatabase } from '../sqlite.js';
-import type { Envelope } from './types.js';
-export declare class EnvelopeStore {
-    private readonly db;
-    constructor(db: SQLiteDatabase);
-    insert(env: Envelope): void;
-    getByHash(envelopeHash: string): Envelope | undefined;
-    getByInstanceId(instanceId: string): Envelope | undefined;
-    private rowToEnvelope;
-    private envelopeToParams;
-    private sameEnvelopeParams;
-    private parseTier;
-    private parseEnvelopeJsonField;
-    private isUniqueConstraintError;
-}
-//# sourceMappingURL=store.d.ts.map

package/dist/envelope/store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/envelope/store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3C,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,cAAc;IAE/C,MAAM,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI;IAyC3B,SAAS,CAAC,YAAY,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAOrD,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAOzD,OAAO,CAAC,aAAa;IA+BrB,OAAO,CAAC,gBAAgB;IAiBxB,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,SAAS;IAUjB,OAAO,CAAC,sBAAsB;IAe9B,OAAO,CAAC,uBAAuB;CAQhC"}

package/dist/envelope/store.js

@@ -1,118 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EnvelopeStore = void 0;
-const canonical_js_1 = require("./canonical.js");
-class EnvelopeStore {
-    db;
-    constructor(db) {
-        this.db = db;
-    }
-    insert(env) {
-        if (!env.signature) {
-            throw new Error('[envelope] EnvelopeStore.insert: envelope must be signed. ' +
-                'Use EnvelopeAuthority.persist or buildAndPersist.');
-        }
-        const params = this.envelopeToParams(env);
-        const stmt = this.db.prepare(`
-      INSERT INTO envelopes (
-        envelope_hash, instance_id, parent_instance_id, agent_id, source,
-        channel_id, trigger_context, scope, tier, budget, expires_at, signature
-      ) VALUES (
-        @envelope_hash, @instance_id, @parent_instance_id, @agent_id, @source,
-        @channel_id, @trigger_context, @scope, @tier, @budget, @expires_at, @signature
-      )
-    `);
-        try {
-            stmt.run(params);
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            if (this.isUniqueConstraintError(error)) {
-                const existing = this.getByHash(env.envelope_hash);
-                if (existing && this.sameEnvelopeParams(this.envelopeToParams(existing), params)) {
-                    return;
-                }
-                throw new Error(`[envelope] EnvelopeStore.insert conflict for envelope_hash=${env.envelope_hash}: ${message}`);
-            }
-            throw new Error(`[envelope] EnvelopeStore.insert failed for envelope_hash=${env.envelope_hash}: ${message}`);
-        }
-    }
-    getByHash(envelopeHash) {
-        const row = this.db
-            .prepare('SELECT * FROM envelopes WHERE envelope_hash = ?')
-            .get(envelopeHash);
-        return row ? this.rowToEnvelope(row) : undefined;
-    }
-    getByInstanceId(instanceId) {
-        const row = this.db.prepare('SELECT * FROM envelopes WHERE instance_id = ?').get(instanceId);
-        return row ? this.rowToEnvelope(row) : undefined;
-    }
-    rowToEnvelope(row) {
-        const envelopeHash = String(row.envelope_hash);
-        const envelope = {
-            envelope_hash: envelopeHash,
-            instance_id: String(row.instance_id),
-            agent_id: String(row.agent_id),
-            source: row.source,
-            trigger_context: this.parseEnvelopeJsonField(row, 'trigger_context', envelopeHash),
-            scope: this.parseEnvelopeJsonField(row, 'scope', envelopeHash),
-            tier: this.parseTier(row.tier, envelopeHash),
-            budget: this.parseEnvelopeJsonField(row, 'budget', envelopeHash),
-            expires_at: String(row.expires_at),
-            signature: row.signature
-                ? this.parseEnvelopeJsonField(row, 'signature', envelopeHash)
-                : undefined,
-        };
-        if (row.parent_instance_id !== null && row.parent_instance_id !== undefined) {
-            envelope.parent_instance_id = String(row.parent_instance_id);
-        }
-        if (row.channel_id !== null && row.channel_id !== undefined) {
-            envelope.channel_id = String(row.channel_id);
-        }
-        return envelope;
-    }
-    envelopeToParams(env) {
-        return {
-            envelope_hash: env.envelope_hash,
-            instance_id: env.instance_id,
-            parent_instance_id: env.parent_instance_id ?? null,
-            agent_id: env.agent_id,
-            source: env.source,
-            channel_id: env.channel_id ?? null,
-            trigger_context: (0, canonical_js_1.canonicalJson)(env.trigger_context),
-            scope: (0, canonical_js_1.canonicalJson)(env.scope),
-            tier: env.tier,
-            budget: (0, canonical_js_1.canonicalJson)(env.budget),
-            expires_at: env.expires_at,
-            signature: env.signature ? (0, canonical_js_1.canonicalJson)(env.signature) : null,
-        };
-    }
-    sameEnvelopeParams(left, right) {
-        return (0, canonical_js_1.canonicalJson)(left) === (0, canonical_js_1.canonicalJson)(right);
-    }
-    parseTier(value, envelopeHash) {
-        const tier = Number(value);
-        if (tier !== 1 && tier !== 2 && tier !== 3) {
-            throw new Error(`[envelope] corrupted tier for envelope_hash=${envelopeHash}: expected 1, 2, or 3`);
-        }
-        return tier;
-    }
-    parseEnvelopeJsonField(row, fieldName, envelopeHash) {
-        try {
-            return JSON.parse(String(row[fieldName]));
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            throw new Error(`[envelope] corrupted JSON field ${fieldName} for envelope_hash=${envelopeHash}: ${message}`);
-        }
-    }
-    isUniqueConstraintError(error) {
-        if (!(error instanceof Error)) {
-            return false;
-        }
-        const code = error.code;
-        return code === 'SQLITE_CONSTRAINT_UNIQUE' || code === 'SQLITE_CONSTRAINT_PRIMARYKEY';
-    }
-}
-exports.EnvelopeStore = EnvelopeStore;
-//# sourceMappingURL=store.js.map

package/dist/envelope/store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/envelope/store.ts"],"names":[],"mappings":";;;AACA,iDAA+C;AAK/C,MAAa,aAAa;IACK;IAA7B,YAA6B,EAAkB;QAAlB,OAAE,GAAF,EAAE,CAAgB;IAAG,CAAC;IAEnD,MAAM,CAAC,GAAa;QAClB,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,4DAA4D;gBAC1D,mDAAmD,CACtD,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;KAQ5B,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEvE,IAAI,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACnD,IAAI,QAAQ,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;oBACjF,OAAO;gBACT,CAAC;gBAED,MAAM,IAAI,KAAK,CACb,8DAA8D,GAAG,CAAC,aAAa,KAAK,OAAO,EAAE,CAC9F,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,KAAK,CACb,4DAA4D,GAAG,CAAC,aAAa,KAAK,OAAO,EAAE,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,SAAS,CAAC,YAAoB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,iDAAiD,CAAC;aAC1D,GAAG,CAAC,YAAY,CAA4B,CAAC;QAChD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,CAAC;IAED,eAAe,CAAC,UAAkB;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,UAAU,CAE9E,CAAC;QACd,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,CAAC;IAEO,aAAa,CAAC,GAAgB;QACpC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAa;YACzB,aAAa,EAAE,YAAY;YAC3B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;YACpC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC9B,MAAM,EAAE,GAAG,CAAC,MAA4B;YACxC,eAAe,EAAE,IAAI,CAAC,sBAAsB,CAC1C,GAAG,EACH,iBAAiB,EACjB,YAAY,CACb;YACD,KAAK,EAAE,IAAI,CAAC,sBAAsB,CAAoB,GAAG,EAAE,OAAO,EAAE,YAAY,CAAC;YACjF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC;YAC5C,MAAM,EAAE,IAAI,CAAC,sBAAsB,CAAqB,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC;YACpF,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;YAClC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACtB,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAwB,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC;gBACpF,CAAC,CAAC,SAAS;SACd,CAAC;QAEF,IAAI,GAAG,CAAC,kBAAkB,KAAK,IAAI,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC5E,QAAQ,CAAC,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC5D,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,gBAAgB,CAAC,GAAa;QACpC,OAAO;YACL,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,IAAI,IAAI;YAClD,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;YAClC,eAAe,EAAE,IAAA,4BAAa,EAAC,GAAG,CAAC,eAAe,CAAC;YACnD,KAAK,EAAE,IAAA,4BAAa,EAAC,GAAG,CAAC,KAAK,CAAC;YAC/B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,IAAA,4BAAa,EAAC,GAAG,CAAC,MAAM,CAAC;YACjC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,4BAAa,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;SAC/D,CAAC;IACJ,CAAC;IAEO,kBAAkB,CACxB,IAA6B,EAC7B,KAA8B;QAE9B,OAAO,IAAA,4BAAa,EAAC,IAAI,CAAC,KAAK,IAAA,4BAAa,EAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAEO,SAAS,CAAC,KAAc,EAAE,YAAoB;QACpD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,+CAA+C,YAAY,uBAAuB,CACnF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,sBAAsB,CAC5B,GAAgB,EAChB,SAA+D,EAC/D,YAAoB;QAEpB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAM,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,IAAI,KAAK,CACb,mCAAmC,SAAS,sBAAsB,YAAY,KAAK,OAAO,EAAE,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,uBAAuB,CAAC,KAAc;QAC5C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAI,KAAoC,CAAC,IAAI,CAAC;QACxD,OAAO,IAAI,KAAK,0BAA0B,IAAI,IAAI,KAAK,8BAA8B,CAAC;IACxF,CAAC;CACF;AAlJD,sCAkJC"}

package/dist/envelope/tool-connector-scope.d.ts

@@ -1,35 +0,0 @@
-/**
- * Connector read scope for gateway tools that read a raw connector DIRECTLY.
- *
- * Most connector evidence reaches a run through `context_compile`, `raw.*`, or a
- * connector-specific reader that already declares its target, so the envelope
- * enforcer can derive the requested connector from the call itself. A handful of
- * tools instead answer straight from a live connector API. Those had NO mapping,
- * which meant `envelope.scope.raw_connectors` never applied to them: whoever held
- * the tool in their role allowlist could read the connector regardless of scope,
- * and the Code-Act projection likewise handed the tool to any sandbox whose role
- * listed it.
- *
- * This module is the single place that says "tool X reads connector Y". Both the
- * envelope enforcer (runtime denial) and the Code-Act tool projection (the tool is
- * never offered in the first place) consult it, so the two layers cannot drift.
- *
- * Adding a direct connector reader WITHOUT registering it here silently re-opens
- * the same hole.
- */
-/**
- * The raw connector a tool reads directly, or null when the tool is not a direct
- * connector reader (its scope, if any, is derived from its arguments elsewhere).
- */
-export declare function directConnectorReadForTool(toolName: string): string | null;
-/**
- * Whether a direct connector reader may be offered/executed under the given
- * envelope raw-connector scope.
- *
- * `null` means the caller supplied no envelope information at all (non-runtime
- * callers, tests) and must not be filtered; `[]` means an envelope exists and
- * grants no connector read authority, which denies every direct reader. This
- * matches how destination scope is already treated.
- */
-export declare function directConnectorReadAllowed(toolName: string, envelopeRawConnectors: readonly string[] | null): boolean;
-//# sourceMappingURL=tool-connector-scope.d.ts.map

package/dist/envelope/tool-connector-scope.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool-connector-scope.d.ts","sourceRoot":"","sources":["../../src/envelope/tool-connector-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAiBH;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE1E;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,qBAAqB,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAC9C,OAAO,CAMT"}

package/dist/envelope/tool-connector-scope.js

@@ -1,61 +0,0 @@
-"use strict";
-/**
- * Connector read scope for gateway tools that read a raw connector DIRECTLY.
- *
- * Most connector evidence reaches a run through `context_compile`, `raw.*`, or a
- * connector-specific reader that already declares its target, so the envelope
- * enforcer can derive the requested connector from the call itself. A handful of
- * tools instead answer straight from a live connector API. Those had NO mapping,
- * which meant `envelope.scope.raw_connectors` never applied to them: whoever held
- * the tool in their role allowlist could read the connector regardless of scope,
- * and the Code-Act projection likewise handed the tool to any sandbox whose role
- * listed it.
- *
- * This module is the single place that says "tool X reads connector Y". Both the
- * envelope enforcer (runtime denial) and the Code-Act tool projection (the tool is
- * never offered in the first place) consult it, so the two layers cannot drift.
- *
- * Adding a direct connector reader WITHOUT registering it here silently re-opens
- * the same hole.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.directConnectorReadForTool = directConnectorReadForTool;
-exports.directConnectorReadAllowed = directConnectorReadAllowed;
-/** Tools that read a raw connector directly, mapped to the connector they read. */
-const DIRECT_CONNECTOR_READ_TOOLS = new Map([
-    ['kagemusha_overview', 'kagemusha'],
-    ['kagemusha_entities', 'kagemusha'],
-    ['kagemusha_tasks', 'kagemusha'],
-    ['kagemusha_messages', 'kagemusha'],
-    ['trello_card', 'trello'],
-    ['trello_kanban', 'trello'],
-    ['trello_search', 'trello'],
-    // Correlation reads the same live board internally to resolve ledger rows against
-    // it; registering it here keeps that read under the same scope instead of making
-    // the tool a way around it.
-    ['task_external_correlation', 'trello'],
-]);
-/**
- * The raw connector a tool reads directly, or null when the tool is not a direct
- * connector reader (its scope, if any, is derived from its arguments elsewhere).
- */
-function directConnectorReadForTool(toolName) {
-    return DIRECT_CONNECTOR_READ_TOOLS.get(toolName) ?? null;
-}
-/**
- * Whether a direct connector reader may be offered/executed under the given
- * envelope raw-connector scope.
- *
- * `null` means the caller supplied no envelope information at all (non-runtime
- * callers, tests) and must not be filtered; `[]` means an envelope exists and
- * grants no connector read authority, which denies every direct reader. This
- * matches how destination scope is already treated.
- */
-function directConnectorReadAllowed(toolName, envelopeRawConnectors) {
-    const required = directConnectorReadForTool(toolName);
-    if (required === null || envelopeRawConnectors === null) {
-        return true;
-    }
-    return envelopeRawConnectors.includes(required);
-}
-//# sourceMappingURL=tool-connector-scope.js.map

package/dist/envelope/tool-connector-scope.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool-connector-scope.js","sourceRoot":"","sources":["../../src/envelope/tool-connector-scope.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;AAqBH,gEAEC;AAWD,gEASC;AAzCD,mFAAmF;AACnF,MAAM,2BAA2B,GAAgC,IAAI,GAAG,CAAC;IACvE,CAAC,oBAAoB,EAAE,WAAW,CAAC;IACnC,CAAC,oBAAoB,EAAE,WAAW,CAAC;IACnC,CAAC,iBAAiB,EAAE,WAAW,CAAC;IAChC,CAAC,oBAAoB,EAAE,WAAW,CAAC;IACnC,CAAC,aAAa,EAAE,QAAQ,CAAC;IACzB,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3B,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3B,kFAAkF;IAClF,iFAAiF;IACjF,4BAA4B;IAC5B,CAAC,2BAA2B,EAAE,QAAQ,CAAC;CACxC,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAgB,0BAA0B,CAAC,QAAgB;IACzD,OAAO,2BAA2B,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;AAC3D,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,0BAA0B,CACxC,QAAgB,EAChB,qBAA+C;IAE/C,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,IAAI,IAAI,qBAAqB,KAAK,IAAI,EAAE,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAClD,CAAC"}

package/dist/envelope/types.d.ts

@@ -1,60 +0,0 @@
-/**
- * Envelope schema per spec v2.3 section 4.4.
- * Every worker instance is bound to one envelope at spawn.
- */
-export type EnvelopeSource = 'telegram' | 'slack' | 'chatwork' | 'discord' | 'viewer' | 'cron' | 'watch';
-export interface ProjectRef {
-    kind: 'project';
-    id: string;
-}
-export interface MemoryScope {
-    kind: 'global' | 'user' | 'channel' | 'project';
-    id: string;
-}
-export interface DestinationRef {
-    kind: 'telegram' | 'slack' | 'chatwork' | 'discord' | 'webchat' | 'obsidian' | 'dashboard_slot' | 'drive';
-    id: string;
-}
-export interface TriggerContext {
-    user_text?: string;
-    scheduled_at?: string;
-    watch_event?: {
-        type: string;
-        raw_id?: string;
-        [key: string]: unknown;
-    };
-    parent_task?: string;
-}
-export interface EnvelopeBudget {
-    wall_seconds: number;
-    token_limit?: number;
-    cost_cap?: number;
-}
-export interface EnvelopeSignature {
-    hmac: string;
-    key_id: string;
-    key_version: number;
-}
-export interface Envelope {
-    agent_id: string;
-    instance_id: string;
-    parent_instance_id?: string;
-    source: EnvelopeSource;
-    channel_id?: string;
-    trigger_context: TriggerContext;
-    scope: {
-        project_refs: ProjectRef[];
-        raw_connectors: string[];
-        memory_scopes: MemoryScope[];
-        allowed_destinations: DestinationRef[];
-        as_of?: string;
-        eval_privileged?: boolean;
-    };
-    tier: 1 | 2 | 3;
-    budget: EnvelopeBudget;
-    expires_at: string;
-    envelope_hash: string;
-    signature?: EnvelopeSignature;
-}
-export declare const ENVELOPE_HASH_EXCLUDED_FIELDS: readonly ["envelope_hash", "signature"];
-//# sourceMappingURL=types.d.ts.map

package/dist/envelope/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/envelope/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,cAAc,GACtB,UAAU,GACV,OAAO,GACP,UAAU,GACV,SAAS,GACT,QAAQ,GACR,MAAM,GACN,OAAO,CAAC;AAEZ,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IAChD,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EACA,UAAU,GACV,OAAO,GACP,UAAU,GACV,SAAS,GACT,SAAS,GACT,UAAU,GACV,gBAAgB,GAChB,OAAO,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,cAAc,CAAC;IAChC,KAAK,EAAE;QACL,YAAY,EAAE,UAAU,EAAE,CAAC;QAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,aAAa,EAAE,WAAW,EAAE,CAAC;QAC7B,oBAAoB,EAAE,cAAc,EAAE,CAAC;QACvC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,CAAC;IACF,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B;AAED,eAAO,MAAM,6BAA6B,yCAA0C,CAAC"}

package/dist/envelope/types.js

@@ -1,9 +0,0 @@
-"use strict";
-/**
- * Envelope schema per spec v2.3 section 4.4.
- * Every worker instance is bound to one envelope at spawn.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ENVELOPE_HASH_EXCLUDED_FIELDS = void 0;
-exports.ENVELOPE_HASH_EXCLUDED_FIELDS = ['envelope_hash', 'signature'];
-//# sourceMappingURL=types.js.map

package/dist/envelope/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/envelope/types.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AA2EU,QAAA,6BAA6B,GAAG,CAAC,eAAe,EAAE,WAAW,CAAU,CAAC"}

package/dist/evidence/effects.d.ts

@@ -1,125 +0,0 @@
-/**
- * What kind of durable change happened. Closed on purpose - see the module
- * note. HONESTY: live writers today are the task kinds (task-ledger),
- * memory_write (gateway mama_save/mama_update receipt, v0.41.0), file_export
- * (operator/file-export.ts), repair_request and run_budget_stop (One MAMA
- * Phase 3). `task_reclassify` records as task_update; its payload's changed
- * resolution_kind preserves that semantic subtype. report_update/report_publish/wiki_write remain declared surface
- * with zero recorders; coverage claims must say so.
- */
-export type EffectKind = 'task_create' | 'task_update' | 'report_update' | 'report_publish' | 'memory_write' | 'wiki_write' | 'file_export' | 'repair_request' | 'run_budget_stop';
-/** What it happened to. */
-export type EffectTarget = 'task' | 'report_slot' | 'memory' | 'wiki_page' | 'file' | 'issue' | 'run';
-/** Whether the change could name what caused it. */
-export type CauseState = 'attributed' | 'unattributed';
-/**
- * WHY the change happened - the closed set (S2). `event` is the only kind that
- * carries source event ids; the others are honestly id-less: a clock advanced,
- * the owner asked in chat, or a card transition cascaded. Writers pass their
- * kind explicitly - the ledger never infers.
- */
-export type CauseKind = 'event' | 'owner_message' | 'clock' | 'card_transition';
-/** Kinds an unattributed (id-less) change may claim. */
-export type UnattributedCauseKind = Exclude<CauseKind, 'event'>;
-/** Fields every durable change carries, whether or not it can name a cause. */
-export interface ChangeInput {
-    /**
-     * The model run that produced the change, so it is traceable to a transcript.
-     * Null when no model run did - a host-internal write is not made more honest by
-     * inventing a run id for it.
-     */
-    runId?: string | null;
-    /** Evidence channel this change concerns, when it concerns one. */
-    channelId?: string | null;
-    kind: EffectKind;
-    targetType: EffectTarget;
-    targetId: string;
-    /** The written payload; hashed, never stored, so the ledger cannot leak content. */
-    payload: unknown;
-    atMs: number;
-}
-export interface EffectInput extends ChangeInput {
-    /** Events that caused it. Must not be empty. */
-    sourceEventIds: readonly string[];
-}
-export interface EffectRecord {
-    id: number;
-    runId: string | null;
-    channelId: string | null;
-    causeState: CauseState;
-    causeKind: CauseKind;
-    sourceEventIds: string[];
-    kind: EffectKind;
-    targetType: EffectTarget;
-    targetId: string;
-    payloadHash: string;
-    atMs: number;
-}
-/**
- * Whether a value can serve as a cause at all.
- *
- * Callers ask before writing rather than discovering it as a constraint violation,
- * because the answer changes what they record, not whether they may proceed: a malformed
- * cause makes a change unattributed, it does not make the change illegitimate. Legacy
- * rows really do carry 400-character source identifiers, and refusing to let the operator
- * update a work item because its upstream id is the wrong shape would be enforcement
- * bought with the owner's work.
- */
-export declare function isUsableCause(value: string | null | undefined): value is string;
-export declare const EVIDENCE_EFFECTS_DDL: string;
-interface EffectAdapter {
-    prepare(sql: string): {
-        run(...params: unknown[]): {
-            lastInsertRowid?: number | bigint;
-        };
-        all(...params: unknown[]): unknown[];
-    };
-}
-export declare function ensureEffectLedger(adapter: EffectAdapter): void;
-export declare class EffectWithoutCauseError extends Error {
-    constructor(kind: EffectKind, targetId: string);
-}
-/** Stable hash of what was written. The ledger proves a change happened, not what it said. */
-export declare function payloadHash(payload: unknown): string;
-/**
- * Record a durable change.
- *
- * Throws rather than returning a failure when the cause is missing. A caller that wrote
- * something and then could not say why must not proceed as if the write were accounted
- * for - silently skipping the ledger row is how 1,169 runs closed as `done` while five
- * receipts existed.
- */
-export declare function recordEffect(adapter: EffectAdapter, input: EffectInput): number;
-/**
- * Record a durable change that could not name what caused it.
- *
- * Deliberately a separate function with an uncomfortable name. Every call is an admission
- * that the system changed something it cannot explain, and the point is that the count of
- * these is visible next to the count of real effects rather than absent from both.
- */
-export declare function recordUnattributedChange(adapter: EffectAdapter, input: ChangeInput, causeKind: UnattributedCauseKind): number;
-export interface EffectQuery {
-    runId?: string;
-    targetType?: EffectTarget;
-    targetId?: string;
-    causeState?: CauseState;
-    sinceMs?: number;
-    limit?: number;
-}
-/** Read effects back, newest first - the substrate a report projects from. */
-export declare function listEffects(adapter: EffectAdapter, query?: EffectQuery): EffectRecord[];
-export interface ChangeCoverage {
-    /** Changes that named the events behind them. */
-    attributed: number;
-    /** Changes the system made and could not explain. */
-    unattributed: number;
-}
-/**
- * How much of what the system changed rests on evidence.
- *
- * The single number this ledger exists to make answerable, and the one the previous shape
- * of the system could not produce at all.
- */
-export declare function changeCoverage(adapter: EffectAdapter, sinceMs?: number, targetType?: EffectTarget): ChangeCoverage;
-export {};
-//# sourceMappingURL=effects.d.ts.map

package/dist/evidence/effects.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"effects.d.ts","sourceRoot":"","sources":["../../src/evidence/effects.ts"],"names":[],"mappings":"AAqDA;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAClB,aAAa,GACb,aAAa,GACb,eAAe,GACf,gBAAgB,GAChB,cAAc,GACd,YAAY,GACZ,aAAa,GACb,gBAAgB,GAChB,iBAAiB,CAAC;AAEtB,2BAA2B;AAC3B,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,aAAa,GACb,QAAQ,GACR,WAAW,GACX,MAAM,GACN,OAAO,GACP,KAAK,CAAC;AAEV,oDAAoD;AACpD,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,cAAc,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,eAAe,GAAG,OAAO,GAAG,iBAAiB,CAAC;AAEhF,wDAAwD;AACxD,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAEhE,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,YAAY,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC9C,gDAAgD;IAChD,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,YAAY,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AA4BD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,IAAI,MAAM,CAI/E;AAID,eAAO,MAAM,oBAAoB,QAsBhC,CAAC;AAsDF,UAAU,aAAa;IACrB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG;QACpB,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG;YAAE,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAC;QACjE,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;KACtC,CAAC;CACH;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAS/D;AAiHD,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM;CAM/C;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAKpD;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,GAAG,MAAM,CAQ/E;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,qBAAqB,GAC/B,MAAM,CAER;AA8BD,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,YAAY,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,GAAE,WAAgB,GAAG,YAAY,EAAE,CA+C3F;AAED,MAAM,WAAW,cAAc;IAC7B,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,YAAY,GACxB,cAAc,CA0BhB"}