@jungjaehoon/mama-os 0.53.1 → 0.58.0

package/dist/connectors/private-connector-policy.d.ts

@@ -1,174 +0,0 @@
-import type { GatewayToolExecutionContext, GatewayToolName } from '../agent/types.js';
-import type { RoleConfig } from '../cli/config/types.js';
-import type { ConnectorConfigLoadResult } from './config-loader.js';
-export type ConnectorCapabilitySurface = 'owner_console' | 'os_agent' | 'legacy-unbound' | 'multi-agent-generic' | 'operator-report';
-export interface PrivateConnectorToolDefinition {
-    readonly name: GatewayToolName;
-    readonly description: string;
-    readonly category: 'business_data';
-    readonly params?: string;
-    readonly codeAct: {
-        readonly params: readonly {
-            readonly name: string;
-            readonly type: string;
-            readonly required: boolean;
-            readonly description?: string;
-        }[];
-        readonly returnType: string;
-        readonly category: 'memory';
-    };
-}
-export interface PrivateConnectorPolicy {
-    readonly fingerprint: string;
-    readonly configuredPrivateConnectors: readonly string[];
-    readonly enabledPrivateConnectors: readonly string[];
-    isConfigured(name: string): boolean;
-    isEnabled(name: string): boolean;
-    toolsFor(surface: ConnectorCapabilitySurface): readonly string[];
-    toolDefinitionsFor(surface: ConnectorCapabilitySurface): readonly PrivateConnectorToolDefinition[];
-    projectRawConnectors(surface: ConnectorCapabilitySurface, connectors: readonly string[]): readonly string[];
-    projectRole(surface: ConnectorCapabilitySurface, role: RoleConfig): RoleConfig;
-    promptOverlayFor(surface: ConnectorCapabilitySurface): string;
-}
-export interface ProjectedToolPolicy {
-    readonly allowedTools: readonly string[];
-    readonly blockedTools: readonly string[];
-}
-export declare const PRIVATE_CONNECTOR_TOOL_DEFINITIONS: readonly (Readonly<{
-    name: "kagemusha_overview";
-    description: "Get overview: room/task/message counts across all channels";
-    category: "business_data";
-    params: "(none)";
-    codeAct: Readonly<{
-        params: readonly never[];
-        returnType: "{ rooms: { total: number; byChannel: Record<string, number> }; tasks: { total: number; byStatus: Record<string, number> }; messages: { total: number; recent30d: number } }";
-        category: "memory";
-    }>;
-}> | Readonly<{
-    name: "kagemusha_entities";
-    description: "List people and project channels with activity stats";
-    category: "business_data";
-    params: "channel?, activeOnly?, limit?";
-    codeAct: Readonly<{
-        params: readonly (Readonly<{
-            name: "channel";
-            type: "string";
-            required: false;
-            description: "Filter by platform: 'kakao', 'slack', 'chatwork', 'line', 'telegram'";
-        }> | Readonly<{
-            name: "activeOnly";
-            type: "boolean";
-            required: false;
-            description: "Only entities active in last 30 days";
-        }> | Readonly<{
-            name: "limit";
-            type: "number";
-            required: false;
-        }>)[];
-        returnType: "{ entities: Array<{ id: string; name: string; channel: string; type: string; totalMessages: number; recentMessages: number; activeTasks: number; totalTasks: number; lastActive: string }> }";
-        category: "memory";
-    }>;
-}> | Readonly<{
-    name: "kagemusha_tasks";
-    description: "Query tasks by room, status, priority, or text search. READ-ONLY project-task truth. Status vocabulary: pending|in_progress|review|done|completed|cancelled|dismissed|active (no \"blocked\" - an empty result for an unknown status is a vocabulary miss, not missing work).";
-    category: "business_data";
-    params: "sourceRoom?, status?, priority?, search?, limit?";
-    codeAct: Readonly<{
-        params: readonly (Readonly<{
-            name: "sourceRoom";
-            type: "string";
-            required: false;
-            description: "Room ID from kagemusha_entities (e.g., \"slack:CHANNEL_ID\")";
-        }> | Readonly<{
-            name: "status";
-            type: "string";
-            required: false;
-            description: "pending, in_progress, review, done, completed, cancelled, dismissed, active";
-        }> | Readonly<{
-            name: "priority";
-            type: "string";
-            required: false;
-            description: "urgent, high, normal";
-        }> | Readonly<{
-            name: "search";
-            type: "string";
-            required: false;
-            description: "Text search in title";
-        }> | Readonly<{
-            name: "limit";
-            type: "number";
-            required: false;
-        }>)[];
-        returnType: "{ tasks: Array<{ id: number; title: string; status: string; priority: string; deadline: string | null; sourceRoom: string | null; createdAt: string }> }";
-        category: "memory";
-    }>;
-}> | Readonly<{
-    name: "kagemusha_messages";
-    description: "Read raw messages from a specific channel (follow entities -> tasks -> messages). Progressive: a bounded page newest-first (limit 1..50, default 25) with total/returned/nextCursor over an append-only asOf upper bound - walk nextCursor for the rest, and an empty nextCursor is the END of this channel's matches, not that all channels were read. An unknown channel is a loud missing-source error, never an empty success. Long message content is a reachable code-point window (content_offset/content_limit), never a hidden slice; pass messageId (bound to the same channel/time/search scope) to page ONE long message without its peers. All time strings are strictly validated ISO-8601.";
-    category: "business_data";
-    params: "channelId (required), since?, before?, search?, limit? (1..50, default 25), cursor?, messageId? (one scoped message), content_offset?, content_limit? (1..4000, default 2000)";
-    codeAct: Readonly<{
-        params: readonly (Readonly<{
-            name: "channelId";
-            type: "string";
-            required: true;
-            description: "Channel ID from kagemusha_entities result (e.g., \"kakao:ROOM_NAME\")";
-        }> | Readonly<{
-            name: "since";
-            type: "string";
-            required: false;
-            description: "ISO date/timestamp (default: 7 days ago)";
-        }> | Readonly<{
-            name: "before";
-            type: "string";
-            required: false;
-            description: "ISO date/timestamp upper bound (inclusive)";
-        }> | Readonly<{
-            name: "search";
-            type: "string";
-            required: false;
-            description: "Text search in content";
-        }> | Readonly<{
-            name: "limit";
-            type: "number";
-            required: false;
-            description: "integer 1..50, default 25";
-        }> | Readonly<{
-            name: "cursor";
-            type: "string";
-            required: false;
-            description: "previous page's nextCursor";
-        }> | Readonly<{
-            name: "messageId";
-            type: "number";
-            required: false;
-            description: "read ONE scoped message across content offsets, without its peers";
-        }> | Readonly<{
-            name: "content_offset";
-            type: "number";
-            required: false;
-            description: "code-point offset into each message content, default 0";
-        }> | Readonly<{
-            name: "content_limit";
-            type: "number";
-            required: false;
-            description: "code points per content window, default 2000, max 4000";
-        }>)[];
-        returnType: "{ messages: Array<{ id: number; channel: string; channelId: string; author: string; role: string; content: { value: string; offset: number; limit: number; total: number; nextOffset: number | null; complete: boolean }; timestamp: string }>; total: number; returned: number; nextCursor: string | null; observedAt: string; snapshot: { asOfId: number; note: string } }";
-        category: "memory";
-    }>;
-}>)[];
-export declare const PRIVATE_CONNECTOR_PROMPT_OVERLAY: string;
-export declare function projectPrivateToolPolicy(surface: ConnectorCapabilitySurface, role: Pick<RoleConfig, 'allowedTools' | 'blockedTools'>, policy: PrivateConnectorPolicy): ProjectedToolPolicy;
-/**
- * Attenuate a host-issued raw connector snapshot for one trusted execution surface.
- *
- * Public connectors pass through unchanged. A private connector survives only when the
- * surface is eligible and the connector is enabled in the boot policy. This function never
- * adds authority that was absent from the supplied snapshot.
- */
-export declare function projectPrivateRawConnectorScope(surface: ConnectorCapabilitySurface, connectors: readonly string[], policy: PrivateConnectorPolicy): readonly string[];
-export declare function resolvePrivateConnectorPolicy(result: ConnectorConfigLoadResult): PrivateConnectorPolicy;
-export declare function visibleConnectorNames(configuredNames: readonly string[]): readonly string[];
-export declare function resolvePrivatePrincipalSurface(context: Pick<GatewayToolExecutionContext, 'agentContext'>): ConnectorCapabilitySurface;
-//# sourceMappingURL=private-connector-policy.d.ts.map

package/dist/connectors/private-connector-policy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"private-connector-policy.d.ts","sourceRoot":"","sources":["../../src/connectors/private-connector-policy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAGpE,MAAM,MAAM,0BAA0B,GAClC,eAAe,GACf,UAAU,GACV,gBAAgB,GAChB,qBAAqB,GACrB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,MAAM,EAAE,SAAS;YACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;SAC/B,EAAE,CAAC;QACJ,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,2BAA2B,EAAE,SAAS,MAAM,EAAE,CAAC;IACxD,QAAQ,CAAC,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,0BAA0B,GAAG,SAAS,MAAM,EAAE,CAAC;IACjE,kBAAkB,CAChB,OAAO,EAAE,0BAA0B,GAClC,SAAS,8BAA8B,EAAE,CAAC;IAC7C,oBAAoB,CAClB,OAAO,EAAE,0BAA0B,EACnC,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,SAAS,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC/E,gBAAgB,CAAC,OAAO,EAAE,0BAA0B,GAAG,MAAM,CAAC;CAC/D;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAID,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAoJO,CAAC;AAMvD,eAAO,MAAM,gCAAgC,QAIjC,CAAC;AAuFb,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,0BAA0B,EACnC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,GAAG,cAAc,CAAC,EACvD,MAAM,EAAE,sBAAsB,GAC7B,mBAAmB,CAerB;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,0BAA0B,EACnC,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,MAAM,EAAE,sBAAsB,GAC7B,SAAS,MAAM,EAAE,CASnB;AAED,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,yBAAyB,GAChC,sBAAsB,CA0CxB;AAED,wBAAgB,qBAAqB,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAK3F;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,IAAI,CAAC,2BAA2B,EAAE,cAAc,CAAC,GACzD,0BAA0B,CAe5B"}

package/dist/connectors/private-connector-policy.js

@@ -1,299 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PRIVATE_CONNECTOR_PROMPT_OVERLAY = exports.PRIVATE_CONNECTOR_TOOL_DEFINITIONS = void 0;
-exports.projectPrivateToolPolicy = projectPrivateToolPolicy;
-exports.projectPrivateRawConnectorScope = projectPrivateRawConnectorScope;
-exports.resolvePrivateConnectorPolicy = resolvePrivateConnectorPolicy;
-exports.visibleConnectorNames = visibleConnectorNames;
-exports.resolvePrivatePrincipalSurface = resolvePrivatePrincipalSurface;
-const node_crypto_1 = require("node:crypto");
-const index_js_1 = require("./index.js");
-const ELIGIBLE_SURFACES = new Set(['owner_console', 'operator-report']);
-exports.PRIVATE_CONNECTOR_TOOL_DEFINITIONS = Object.freeze([
-    Object.freeze({
-        name: 'kagemusha_overview',
-        description: 'Get overview: room/task/message counts across all channels',
-        category: 'business_data',
-        params: '(none)',
-        codeAct: Object.freeze({
-            params: Object.freeze([]),
-            returnType: '{ rooms: { total: number; byChannel: Record<string, number> }; tasks: { total: number; byStatus: Record<string, number> }; messages: { total: number; recent30d: number } }',
-            category: 'memory',
-        }),
-    }),
-    Object.freeze({
-        name: 'kagemusha_entities',
-        description: 'List people and project channels with activity stats',
-        category: 'business_data',
-        params: 'channel?, activeOnly?, limit?',
-        codeAct: Object.freeze({
-            params: Object.freeze([
-                Object.freeze({
-                    name: 'channel',
-                    type: 'string',
-                    required: false,
-                    description: "Filter by platform: 'kakao', 'slack', 'chatwork', 'line', 'telegram'",
-                }),
-                Object.freeze({
-                    name: 'activeOnly',
-                    type: 'boolean',
-                    required: false,
-                    description: 'Only entities active in last 30 days',
-                }),
-                Object.freeze({ name: 'limit', type: 'number', required: false }),
-            ]),
-            returnType: '{ entities: Array<{ id: string; name: string; channel: string; type: string; totalMessages: number; recentMessages: number; activeTasks: number; totalTasks: number; lastActive: string }> }',
-            category: 'memory',
-        }),
-    }),
-    Object.freeze({
-        name: 'kagemusha_tasks',
-        description: 'Query tasks by room, status, priority, or text search. READ-ONLY project-task truth. Status vocabulary: pending|in_progress|review|done|completed|cancelled|dismissed|active (no "blocked" - an empty result for an unknown status is a vocabulary miss, not missing work).',
-        category: 'business_data',
-        params: 'sourceRoom?, status?, priority?, search?, limit?',
-        codeAct: Object.freeze({
-            params: Object.freeze([
-                Object.freeze({
-                    name: 'sourceRoom',
-                    type: 'string',
-                    required: false,
-                    description: 'Room ID from kagemusha_entities (e.g., "slack:CHANNEL_ID")',
-                }),
-                Object.freeze({
-                    name: 'status',
-                    type: 'string',
-                    required: false,
-                    description: 'pending, in_progress, review, done, completed, cancelled, dismissed, active',
-                }),
-                Object.freeze({
-                    name: 'priority',
-                    type: 'string',
-                    required: false,
-                    description: 'urgent, high, normal',
-                }),
-                Object.freeze({
-                    name: 'search',
-                    type: 'string',
-                    required: false,
-                    description: 'Text search in title',
-                }),
-                Object.freeze({ name: 'limit', type: 'number', required: false }),
-            ]),
-            returnType: '{ tasks: Array<{ id: number; title: string; status: string; priority: string; deadline: string | null; sourceRoom: string | null; createdAt: string }> }',
-            category: 'memory',
-        }),
-    }),
-    Object.freeze({
-        name: 'kagemusha_messages',
-        description: "Read raw messages from a specific channel (follow entities -> tasks -> messages). Progressive: a bounded page newest-first (limit 1..50, default 25) with total/returned/nextCursor over an append-only asOf upper bound - walk nextCursor for the rest, and an empty nextCursor is the END of this channel's matches, not that all channels were read. An unknown channel is a loud missing-source error, never an empty success. Long message content is a reachable code-point window (content_offset/content_limit), never a hidden slice; pass messageId (bound to the same channel/time/search scope) to page ONE long message without its peers. All time strings are strictly validated ISO-8601.",
-        category: 'business_data',
-        params: 'channelId (required), since?, before?, search?, limit? (1..50, default 25), cursor?, messageId? (one scoped message), content_offset?, content_limit? (1..4000, default 2000)',
-        codeAct: Object.freeze({
-            params: Object.freeze([
-                Object.freeze({
-                    name: 'channelId',
-                    type: 'string',
-                    required: true,
-                    description: 'Channel ID from kagemusha_entities result (e.g., "kakao:ROOM_NAME")',
-                }),
-                Object.freeze({
-                    name: 'since',
-                    type: 'string',
-                    required: false,
-                    description: 'ISO date/timestamp (default: 7 days ago)',
-                }),
-                Object.freeze({
-                    name: 'before',
-                    type: 'string',
-                    required: false,
-                    description: 'ISO date/timestamp upper bound (inclusive)',
-                }),
-                Object.freeze({
-                    name: 'search',
-                    type: 'string',
-                    required: false,
-                    description: 'Text search in content',
-                }),
-                Object.freeze({
-                    name: 'limit',
-                    type: 'number',
-                    required: false,
-                    description: 'integer 1..50, default 25',
-                }),
-                Object.freeze({
-                    name: 'cursor',
-                    type: 'string',
-                    required: false,
-                    description: "previous page's nextCursor",
-                }),
-                Object.freeze({
-                    name: 'messageId',
-                    type: 'number',
-                    required: false,
-                    description: 'read ONE scoped message across content offsets, without its peers',
-                }),
-                Object.freeze({
-                    name: 'content_offset',
-                    type: 'number',
-                    required: false,
-                    description: 'code-point offset into each message content, default 0',
-                }),
-                Object.freeze({
-                    name: 'content_limit',
-                    type: 'number',
-                    required: false,
-                    description: 'code points per content window, default 2000, max 4000',
-                }),
-            ]),
-            returnType: '{ messages: Array<{ id: number; channel: string; channelId: string; author: string; role: string; content: { value: string; offset: number; limit: number; total: number; nextOffset: number | null; complete: boolean }; timestamp: string }>; total: number; returned: number; nextCursor: string | null; observedAt: string; snapshot: { asOfId: number; note: string } }',
-            category: 'memory',
-        }),
-    }),
-]);
-const PRIVATE_TOOL_NAMES = Object.freeze(exports.PRIVATE_CONNECTOR_TOOL_DEFINITIONS.map((definition) => definition.name));
-exports.PRIVATE_CONNECTOR_PROMPT_OVERLAY = [
-    '## Private business data',
-    '',
-    "Use Kagemusha read tools only when they are present in this run's catalog. Explore progressively: overview, then entities or tasks, then messages for a specific channel.",
-].join('\n');
-function uniqueStrings(values) {
-    return Object.freeze([...new Set(values)]);
-}
-function privateNamesFrom(result) {
-    if (!result.ok) {
-        return Object.freeze([]);
-    }
-    return uniqueStrings(index_js_1.PRIVATE_CONNECTORS.filter((name) => Object.hasOwn(result.config, name)));
-}
-function enabledPrivateNamesFrom(result) {
-    if (!result.ok) {
-        return Object.freeze([]);
-    }
-    const enabledNames = new Set(result.enabledNames);
-    return uniqueStrings(index_js_1.PRIVATE_CONNECTORS.filter((name) => enabledNames.has(name) && result.config[name]?.enabled === true));
-}
-function isEligibleSurface(surface) {
-    return ELIGIBLE_SURFACES.has(surface);
-}
-function privateToolsFor(surface, enabledPrivateConnectors) {
-    if (!isEligibleSurface(surface) || enabledPrivateConnectors.length === 0) {
-        return Object.freeze([]);
-    }
-    return PRIVATE_TOOL_NAMES;
-}
-function definitionsFor(surface, enabledPrivateConnectors) {
-    if (!isEligibleSurface(surface) || enabledPrivateConnectors.length === 0) {
-        return Object.freeze([]);
-    }
-    return exports.PRIVATE_CONNECTOR_TOOL_DEFINITIONS;
-}
-function overlayFor(surface, enabledPrivateConnectors) {
-    return isEligibleSurface(surface) && enabledPrivateConnectors.length > 0
-        ? exports.PRIVATE_CONNECTOR_PROMPT_OVERLAY
-        : '';
-}
-function fingerprintFor(configuredPrivateConnectors, enabledPrivateConnectors) {
-    const surfaceBundles = Object.fromEntries([
-        'owner_console',
-        'os_agent',
-        'legacy-unbound',
-        'multi-agent-generic',
-        'operator-report',
-    ].map((surface) => [surface, privateToolsFor(surface, enabledPrivateConnectors)]));
-    const canonicalJson = JSON.stringify({
-        configuredPrivateConnectors,
-        enabledPrivateConnectors,
-        surfaceBundles,
-    });
-    return (0, node_crypto_1.createHash)('sha256').update(canonicalJson).digest('hex');
-}
-function appendUnique(values, additions) {
-    return uniqueStrings([...values, ...additions]);
-}
-function projectPrivateToolPolicy(surface, role, policy) {
-    const allowedTools = [...role.allowedTools];
-    const blockedTools = [...(role.blockedTools ?? [])];
-    if (isEligibleSurface(surface) && policy.enabledPrivateConnectors.length > 0) {
-        return {
-            allowedTools: appendUnique(allowedTools, policy.toolsFor(surface)),
-            blockedTools: uniqueStrings(blockedTools),
-        };
-    }
-    return {
-        allowedTools: uniqueStrings(allowedTools),
-        blockedTools: appendUnique(blockedTools, PRIVATE_TOOL_NAMES),
-    };
-}
-/**
- * Attenuate a host-issued raw connector snapshot for one trusted execution surface.
- *
- * Public connectors pass through unchanged. A private connector survives only when the
- * surface is eligible and the connector is enabled in the boot policy. This function never
- * adds authority that was absent from the supplied snapshot.
- */
-function projectPrivateRawConnectorScope(surface, connectors, policy) {
-    return uniqueStrings(connectors.filter((connector) => {
-        if (!index_js_1.PRIVATE_CONNECTORS.includes(connector)) {
-            return connector.trim().length > 0;
-        }
-        return isEligibleSurface(surface) && policy.isEnabled(connector);
-    }));
-}
-function resolvePrivateConnectorPolicy(result) {
-    const configuredPrivateConnectors = privateNamesFrom(result);
-    const enabledPrivateConnectors = enabledPrivateNamesFrom(result);
-    const fingerprint = fingerprintFor(configuredPrivateConnectors, enabledPrivateConnectors);
-    return Object.freeze({
-        fingerprint,
-        configuredPrivateConnectors,
-        enabledPrivateConnectors,
-        isConfigured(name) {
-            return configuredPrivateConnectors.includes(name);
-        },
-        isEnabled(name) {
-            return enabledPrivateConnectors.includes(name);
-        },
-        toolsFor(surface) {
-            return privateToolsFor(surface, enabledPrivateConnectors);
-        },
-        toolDefinitionsFor(surface) {
-            return definitionsFor(surface, enabledPrivateConnectors);
-        },
-        projectRawConnectors(surface, connectors) {
-            return projectPrivateRawConnectorScope(surface, connectors, this);
-        },
-        projectRole(surface, role) {
-            const projectedTools = projectPrivateToolPolicy(surface, role, this);
-            return {
-                ...role,
-                allowedTools: [...projectedTools.allowedTools],
-                blockedTools: [...projectedTools.blockedTools],
-                allowedPaths: role.allowedPaths === undefined ? undefined : [...role.allowedPaths],
-            };
-        },
-        promptOverlayFor(surface) {
-            return overlayFor(surface, enabledPrivateConnectors);
-        },
-    });
-}
-function visibleConnectorNames(configuredNames) {
-    const configuredPrivateNames = configuredNames.filter((name) => index_js_1.PRIVATE_CONNECTORS.includes(name));
-    return uniqueStrings([...index_js_1.AVAILABLE_CONNECTORS, ...configuredPrivateNames]);
-}
-function resolvePrivatePrincipalSurface(context) {
-    const agentContext = context.agentContext;
-    if (agentContext === undefined) {
-        return 'legacy-unbound';
-    }
-    if (agentContext.source === 'viewer') {
-        return 'os_agent';
-    }
-    switch (agentContext.roleName) {
-        case 'owner_console':
-        case 'operator-report':
-            return agentContext.roleName;
-        default:
-            return 'multi-agent-generic';
-    }
-}
-//# sourceMappingURL=private-connector-policy.js.map

package/dist/connectors/private-connector-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"private-connector-policy.js","sourceRoot":"","sources":["../../src/connectors/private-connector-policy.ts"],"names":[],"mappings":";;;AA8SA,4DAmBC;AASD,0EAaC;AAED,sEA4CC;AAED,sDAKC;AAED,wEAiBC;AA/ZD,6CAAyC;AAMzC,yCAAsE;AAiDtE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAA6B,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAEvF,QAAA,kCAAkC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9D,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,oBAA6B;QACnC,WAAW,EAAE,4DAA4D;QACzE,QAAQ,EAAE,eAAwB;QAClC,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,UAAU,EACR,6KAA6K;YAC/K,QAAQ,EAAE,QAAiB;SAC5B,CAAC;KACH,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,oBAA6B;QACnC,WAAW,EAAE,sDAAsD;QACnE,QAAQ,EAAE,eAAwB;QAClC,MAAM,EAAE,+BAA+B;QACvC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpB,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,sEAAsE;iBACpF,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,sCAAsC;iBACpD,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;aAClE,CAAC;YACF,UAAU,EACR,8LAA8L;YAChM,QAAQ,EAAE,QAAiB;SAC5B,CAAC;KACH,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,iBAA0B;QAChC,WAAW,EACT,6QAA6Q;QAC/Q,QAAQ,EAAE,eAAwB;QAClC,MAAM,EAAE,kDAAkD;QAC1D,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpB,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,4DAA4D;iBAC1E,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EACT,6EAA6E;iBAChF,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,sBAAsB;iBACpC,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,sBAAsB;iBACpC,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;aAClE,CAAC;YACF,UAAU,EACR,0JAA0J;YAC5J,QAAQ,EAAE,QAAiB;SAC5B,CAAC;KACH,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,oBAA6B;QACnC,WAAW,EACT,2qBAA2qB;QAC7qB,QAAQ,EAAE,eAAwB;QAClC,MAAM,EACJ,+KAA+K;QACjL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpB,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,qEAAqE;iBACnF,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,0CAA0C;iBACxD,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,4CAA4C;iBAC1D,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,wBAAwB;iBACtC,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,2BAA2B;iBACzC,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,4BAA4B;iBAC1C,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,mEAAmE;iBACjF,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,wDAAwD;iBACtE,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,wDAAwD;iBACtE,CAAC;aACH,CAAC;YACF,UAAU,EACR,8WAA8W;YAChX,QAAQ,EAAE,QAAiB;SAC5B,CAAC;KACH,CAAC;CACiD,CAAC,CAAC;AAEvD,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CACtC,0CAAkC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CACxE,CAAC;AAEW,QAAA,gCAAgC,GAAG;IAC9C,0BAA0B;IAC1B,EAAE;IACF,2KAA2K;CAC5K,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAS,aAAa,CAAC,MAAyB;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAiC;IACzD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,aAAa,CAAC,6BAAkB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAiC;IAChE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClD,OAAO,aAAa,CAClB,6BAAkB,CAAC,MAAM,CACvB,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK,IAAI,CAC1E,CACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAmC;IAC5D,OAAO,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CACtB,OAAmC,EACnC,wBAA2C;IAE3C,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,wBAAwB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,SAAS,cAAc,CACrB,OAAmC,EACnC,wBAA2C;IAE3C,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,wBAAwB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,0CAAkC,CAAC;AAC5C,CAAC;AAED,SAAS,UAAU,CACjB,OAAmC,EACnC,wBAA2C;IAE3C,OAAO,iBAAiB,CAAC,OAAO,CAAC,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC;QACtE,CAAC,CAAC,wCAAgC;QAClC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,cAAc,CACrB,2BAA8C,EAC9C,wBAA2C;IAE3C,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAErC;QACE,eAAe;QACf,UAAU;QACV,gBAAgB;QAChB,qBAAqB;QACrB,iBAAiB;KAEpB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAClF,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC;QACnC,2BAA2B;QAC3B,wBAAwB;QACxB,cAAc;KACf,CAAC,CAAC;IACH,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,MAAyB,EAAE,SAA4B;IAC3E,OAAO,aAAa,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAgB,wBAAwB,CACtC,OAAmC,EACnC,IAAuD,EACvD,MAA8B;IAE9B,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;IAEpD,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7E,OAAO;YACL,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClE,YAAY,EAAE,aAAa,CAAC,YAAY,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,YAAY,EAAE,aAAa,CAAC,YAAY,CAAC;QACzC,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,kBAAkB,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,+BAA+B,CAC7C,OAAmC,EACnC,UAA6B,EAC7B,MAA8B;IAE9B,OAAO,aAAa,CAClB,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QAC9B,IAAI,CAAC,6BAAkB,CAAC,QAAQ,CAAC,SAAwB,CAAC,EAAE,CAAC;YAC3D,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,iBAAiB,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACnE,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAgB,6BAA6B,CAC3C,MAAiC;IAEjC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,wBAAwB,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,cAAc,CAAC,2BAA2B,EAAE,wBAAwB,CAAC,CAAC;IAE1F,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW;QACX,2BAA2B;QAC3B,wBAAwB;QACxB,YAAY,CAAC,IAAY;YACvB,OAAO,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QACD,SAAS,CAAC,IAAY;YACpB,OAAO,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,QAAQ,CAAC,OAAmC;YAC1C,OAAO,eAAe,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QAC5D,CAAC;QACD,kBAAkB,CAChB,OAAmC;YAEnC,OAAO,cAAc,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QAC3D,CAAC;QACD,oBAAoB,CAClB,OAAmC,EACnC,UAA6B;YAE7B,OAAO,+BAA+B,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC;QACD,WAAW,CAAC,OAAmC,EAAE,IAAgB;YAC/D,MAAM,cAAc,GAAG,wBAAwB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACrE,OAAO;gBACL,GAAG,IAAI;gBACP,YAAY,EAAE,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC;gBAC9C,YAAY,EAAE,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC;gBAC9C,YAAY,EAAE,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;aACnF,CAAC;QACJ,CAAC;QACD,gBAAgB,CAAC,OAAmC;YAClD,OAAO,UAAU,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QACvD,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,qBAAqB,CAAC,eAAkC;IACtE,MAAM,sBAAsB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC7D,6BAAkB,CAAC,QAAQ,CAAC,IAAmB,CAAC,CACjD,CAAC;IACF,OAAO,aAAa,CAAC,CAAC,GAAG,+BAAoB,EAAE,GAAG,sBAAsB,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAgB,8BAA8B,CAC5C,OAA0D;IAE1D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,QAAQ,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC9B,KAAK,eAAe,CAAC;QACrB,KAAK,iBAAiB;YACpB,OAAO,YAAY,CAAC,QAAQ,CAAC;QAC/B;YACE,OAAO,qBAAqB,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/connectors/private-prompt-overlay.d.ts

@@ -1,17 +0,0 @@
-import { type ConnectorCapabilitySurface, type PrivateConnectorPolicy } from './private-connector-policy.js';
-export declare const PRIVATE_PROMPT_OVERLAY_START = "<!-- MAMA private connector overlay:start -->";
-export declare const PRIVATE_PROMPT_OVERLAY_END = "<!-- MAMA private connector overlay:end -->";
-export declare function wrapPrivatePromptOverlay(content: string): string;
-/**
- * Remove private call recipes from a disabled surface without rewriting the
- * user-owned file. Historical prose and path references remain ordinary user
- * context; malformed host markers remain byte-for-byte fail-closed.
- */
-export declare function stripDisabledPrivatePromptRecipes(raw: string, privateToolsEnabled: boolean): string;
-/**
- * Remove only complete host-generated overlays. Any unmatched, nested, or
- * non-canonical marker text makes cleanup fail closed and preserves every byte.
- */
-export declare function stripMarkedPrivatePromptOverlays(raw: string): string;
-export declare function buildPrivatePromptOverlay(surface: ConnectorCapabilitySurface, policy: PrivateConnectorPolicy): string;
-//# sourceMappingURL=private-prompt-overlay.d.ts.map

package/dist/connectors/private-prompt-overlay.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"private-prompt-overlay.d.ts","sourceRoot":"","sources":["../../src/connectors/private-prompt-overlay.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAE5B,MAAM,+BAA+B,CAAC;AAEvC,eAAO,MAAM,4BAA4B,kDAAkD,CAAC;AAC5F,eAAO,MAAM,0BAA0B,gDAAgD,CAAC;AAgBxF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhE;AAkGD;;;;GAIG;AACH,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,MAAM,EACX,mBAAmB,EAAE,OAAO,GAC3B,MAAM,CAmBR;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA0BpE;AAcD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,0BAA0B,EACnC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAOR"}