@letta-ai/letta-code 0.30.2 → 0.30.3

package/dist/types/permissions/cli.d.ts

@@ -0,0 +1,59 @@
+/**
+ * CLI permission overrides that are set via --allowedTools and --disallowedTools flags.
+ * These rules override settings.json permissions for the current session.
+ */
+export declare class CliPermissions {
+    private allowedTools;
+    private disallowedTools;
+    private memoryGuardDisabled;
+    /**
+     * Parse and set allowed tools from CLI flag
+     * Format: "Bash,Read" or "Bash(npm install),Read(src/**)"
+     */
+    setAllowedTools(toolsString: string): void;
+    /**
+     * Parse and set disallowed tools from CLI flag
+     * Format: "WebFetch,Bash(curl:*)"
+     */
+    setDisallowedTools(toolsString: string): void;
+    /**
+     * Disable the cross-agent memory guard for this parent CLI process. Parent
+     * processes start guarded by default; this is only set by the explicit
+     * --disable-memory-guard override. Subagent processes ignore this setting
+     * when evaluating the guard.
+     */
+    setMemoryGuardDisabled(disabled: boolean): void;
+    /**
+     * Parse comma-separated tool list into individual patterns
+     * Handles: "Bash,Read" and "Bash(npm install),Read(src/**)"
+     *
+     * Special handling:
+     * - "Bash" without params becomes "Bash(:*)" to match all Bash commands
+     * - "Read" without params becomes "Read" (matches all Read calls)
+     */
+    private parseToolList;
+    /**
+     * Normalize a tool pattern.
+     * - "Bash" becomes "Bash(:*)" to match all commands
+     * - File tools (Read, Write, Edit, Glob, Grep) become "ToolName(**)" to match all files
+     * - Tool patterns with parentheses stay as-is
+     */
+    private normalizePattern;
+    /**
+     * Get all allowed tool patterns
+     */
+    getAllowedTools(): string[];
+    /**
+     * Get all disallowed tool patterns
+     */
+    getDisallowedTools(): string[];
+    /**
+     * Whether --disable-memory-guard was set on the CLI.
+     */
+    isMemoryGuardDisabled(): boolean;
+    /**
+     * Clear all CLI permission overrides
+     */
+    clear(): void;
+}
+//# sourceMappingURL=cli.d.ts.map

package/dist/types/permissions/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/permissions/cli.ts"],"names":[],"mappings":"AAYA;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,eAAe,CAAgB;IACvC,OAAO,CAAC,mBAAmB,CAAS;IAEpC;;;OAGG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAI1C;;;OAGG;IACH,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAI7C;;;;;OAKG;IACH,sBAAsB,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI;IAI/C;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAoCrB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAwBxB;;OAEG;IACH,eAAe,IAAI,MAAM,EAAE;IAI3B;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,qBAAqB,IAAI,OAAO;IAIhC;;OAEG;IACH,KAAK,IAAI,IAAI;CAKd"}

package/dist/types/permissions/cross-agent-guard.d.ts

@@ -0,0 +1,74 @@
+export interface CrossAgentGuardOptions {
+    env?: NodeJS.ProcessEnv;
+    currentAgentId?: string | null;
+    disableMemoryGuard?: boolean;
+}
+export declare function isMemoryGuardDisabled(options?: CrossAgentGuardOptions): boolean;
+/**
+ * Resolve the set of agent IDs a guarded process is allowed to operate
+ * against without disabling the guard.
+ */
+export declare function resolveAllowedAgents(options?: CrossAgentGuardOptions): Set<string>;
+type ToolArgs = Record<string, unknown>;
+export interface CrossAgentTargets {
+    /** Agent IDs extracted from any path references in the tool args. */
+    agentIds: Set<string>;
+    /**
+     * True iff at least one target path resolved under a cross-agent memory tree
+     * (`~/.letta/agents/<id>/...` on API, `<storage>/memfs/<id>/...` on local) —
+     * the only case where the guard is concerned at all.
+     */
+    anyAgentScoped: boolean;
+}
+/**
+ * Classification of a path relative to a cross-agent memory tree:
+ *  - `outside`     — path is unrelated to the tree.
+ *  - `agents-root` — path is exactly the tree root (enumeration of every agent
+ *                    on the machine).
+ *  - `ancestor`    — path is an ancestor of the tree root (e.g. `$HOME`, `/`).
+ *                    Recursive tools (Glob/ListDir) entering this path would
+ *                    walk into other agents' directories.
+ *  - `agent`       — path is inside a specific agent's directory (any depth,
+ *                    including the bare agent dir). The `id` is the agent ID
+ *                    component (the segment right under the tree root).
+ */
+export type AgentsTreeClassification = {
+    kind: "outside";
+} | {
+    kind: "agents-root";
+} | {
+    kind: "ancestor";
+} | {
+    kind: "agent";
+    id: string;
+};
+/**
+ * Extract file directives from an apply_patch / memory_apply_patch input.
+ */
+export declare function extractApplyPatchPaths(input: string): string[];
+export declare function extractFilePath(toolArgs: ToolArgs): string | null;
+/**
+ * Extract the agent IDs referenced by the target paths of an in-process file
+ * tool call. Returns `anyAgentScoped: false` for tool calls that don't touch
+ * agent memory at all (the guard's fast path). Shell tools are NOT handled
+ * here — the kernel sandbox confines spawned shells.
+ */
+export declare function extractTargetAgentPaths(toolName: string, toolArgs: ToolArgs, workingDirectory: string, env?: NodeJS.ProcessEnv, homeDir?: string): CrossAgentTargets;
+export interface CrossAgentGuardResult {
+    matchedRule: "cross-agent guard";
+    reason: string;
+    offendingAgentIds: string[];
+}
+/**
+ * Evaluate whether an in-process file tool call should be hard-denied because
+ * it targets another agent's memory. Returns null when the guard is not
+ * concerned.
+ *
+ * Shell tools are not evaluated: spawned shells are confined by the kernel
+ * filesystem sandbox. A subagent confined as a whole process by the kernel
+ * (sandbox sentinel set) is also skipped — its every tool, in-process file ops
+ * included, is already kernel-isolated.
+ */
+export declare function evaluateCrossAgentGuard(toolName: string, toolArgs: ToolArgs, workingDirectory: string, options?: CrossAgentGuardOptions): CrossAgentGuardResult | null;
+export {};
+//# sourceMappingURL=cross-agent-guard.d.ts.map

package/dist/types/permissions/cross-agent-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-agent-guard.d.ts","sourceRoot":"","sources":["../../../src/permissions/cross-agent-guard.ts"],"names":[],"mappings":"AA8CA,MAAM,WAAW,sBAAsB;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAYD,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAIT;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,GAAE,sBAA2B,GACnC,GAAG,CAAC,MAAM,CAAC,CAWb;AAMD,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAExC,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AA6BD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,wBAAwB,GAChC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AA2DlC;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAe9D;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAqBjE;AAwBD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,QAAQ,EAClB,gBAAgB,EAAE,MAAM,EACxB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,OAAO,GAAE,MAAkB,GAC1B,iBAAiB,CAwFnB;AAMD,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,mBAAmB,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAeD;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,QAAQ,EAClB,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,sBAA2B,GACnC,qBAAqB,GAAG,IAAI,CAgD9B"}

package/dist/types/permissions/loader.d.ts

@@ -0,0 +1,29 @@
+import type { PermissionRules, PermissionRuleType } from "./types";
+type UserSettingsPathsOptions = {
+    homeDir?: string;
+    xdgConfigHome?: string;
+};
+export declare function getUserSettingsPaths(options?: UserSettingsPathsOptions): {
+    canonical: string;
+    legacy: string;
+};
+export declare function resetPermissionLoaderCacheForTests(): void;
+/**
+ * Load permissions from all settings files and merge them hierarchically.
+ *
+ * Precedence (highest to lowest):
+ * 1. Local project settings (.letta/settings.local.json)
+ * 2. Project settings (.letta/settings.json)
+ * 3. User settings (~/.letta/settings.json)
+ * 4. Legacy user settings (~/.config/letta/settings.json)
+ *
+ * Rules are merged by concatenating arrays (more specific settings add to broader ones)
+ */
+export declare function loadPermissions(workingDirectory?: string): Promise<PermissionRules>;
+export declare function loadPermissionMode(workingDirectory?: string): Promise<PermissionRules["mode"] | null>;
+/**
+ * Save a permission rule to a specific scope
+ */
+export declare function savePermissionRule(rule: string, ruleType: PermissionRuleType, scope: "project" | "local" | "user", workingDirectory?: string): Promise<void>;
+export {};
+//# sourceMappingURL=loader.d.ts.map

package/dist/types/permissions/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/permissions/loader.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAWnE,KAAK,wBAAwB,GAAG;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAoBF,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,wBAA6B,GAAG;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAWA;AAiJD,wBAAgB,kCAAkC,IAAI,IAAI,CAMzD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,gBAAgB,GAAE,MAAsB,GACvC,OAAO,CAAC,eAAe,CAAC,CA2C1B;AAED,wBAAsB,kBAAkB,CACtC,gBAAgB,GAAE,MAAsB,GACvC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAGzC;AAgDD;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,EACnC,gBAAgB,GAAE,MAAsB,GACvC,OAAO,CAAC,IAAI,CAAC,CA+Df"}

package/dist/types/permissions/matcher.d.ts

@@ -0,0 +1,43 @@
+export interface MatcherOptions {
+    canonicalizeToolNames?: boolean;
+    allowBareToolFallback?: boolean;
+}
+/**
+ * Check if a file path matches a permission pattern.
+ *
+ * Patterns follow Claude Code's glob syntax:
+ * - "Read(file.txt)" - exact match in working directory
+ * - "Read(*.txt)" - glob pattern
+ * - "Read(src/**)" - recursive glob
+ * - "Read(//absolute/path/**)" - absolute path pattern
+ * - "Read(~/.zshrc)" - tilde expansion
+ *
+ * @param query - The query to check (e.g., "Read(.env)")
+ * @param pattern - The permission pattern (e.g., "Read(src/**)")
+ * @param workingDirectory - Current working directory
+ */
+export declare function matchesFilePattern(query: string, pattern: string, workingDirectory: string, options?: MatcherOptions): boolean;
+/**
+ * Check if a bash command matches a permission pattern.
+ *
+ * Bash patterns use PREFIX matching, not regex:
+ * - "Bash(git diff:*)" matches "Bash(git diff ...)", "Bash(git diff HEAD)", etc.
+ * - "Bash(npm run lint)" matches exactly "Bash(npm run lint)"
+ * - The :* syntax is a special wildcard for "this command and any args"
+ *
+ * @param query - The bash query to check (e.g., "Bash(git diff HEAD)")
+ * @param pattern - The permission pattern (e.g., "Bash(git diff:*)")
+ */
+export declare function matchesBashPattern(query: string, pattern: string, options?: MatcherOptions): boolean;
+/**
+ * Check if a tool name matches a permission pattern.
+ *
+ * For non-file tools, we match by tool name:
+ * - "WebFetch" matches all WebFetch calls
+ * - "*" matches all tools
+ *
+ * @param toolName - The tool name
+ * @param pattern - The permission pattern
+ */
+export declare function matchesToolPattern(toolName: string, pattern: string, options?: MatcherOptions): boolean;
+//# sourceMappingURL=matcher.d.ts.map

package/dist/types/permissions/matcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matcher.d.ts","sourceRoot":"","sources":["../../../src/permissions/matcher.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,cAAc;IAC7B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAkGD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,EACxB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CA4ET;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAmET;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAuBT"}

package/dist/types/permissions/memory-paths.d.ts

@@ -0,0 +1,23 @@
+export interface ResolveAllowedMemoryRootsOptions {
+    env?: NodeJS.ProcessEnv;
+    currentAgentId?: string | null;
+    parentAgentId?: string | null;
+    homeDir?: string;
+}
+export interface ResolvedMemoryRoots {
+    roots: string[];
+    primaryRoot: string | null;
+    usedFallback: boolean;
+}
+export declare function normalizeMemoryPath(path: string): string;
+export declare function expandHomePath(path: string): string;
+export declare function resolveMemoryTargetPath(targetPath: string, workingDirectory: string): string | null;
+export declare function isPathWithinRoots(path: string, roots: string[]): boolean;
+/**
+ * Resolve the current agent ID from: (1) the explicit argument, (2) the
+ * `AGENT_ID` / `LETTA_AGENT_ID` env vars, or (3) the in-process agent
+ * context. Returns null when none of those sources yields a non-empty ID.
+ */
+export declare function deriveAgentId(env: NodeJS.ProcessEnv, explicitAgentId?: string | null): string | null;
+export declare function resolveAllowedMemoryRoots(options?: ResolveAllowedMemoryRootsOptions): ResolvedMemoryRoots;
+//# sourceMappingURL=memory-paths.d.ts.map

package/dist/types/permissions/memory-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-paths.d.ts","sourceRoot":"","sources":["../../../src/permissions/memory-paths.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,gCAAgC;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIxD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAenD;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,GACvB,MAAM,GAAG,IAAI,CAWf;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CASxE;AA0CD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,GAC9B,MAAM,GAAG,IAAI,CAWf;AAoDD,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,gCAAqC,GAC7C,mBAAmB,CAyBrB"}

package/dist/types/permissions/read-only-shell.d.ts

@@ -0,0 +1,18 @@
+export declare const SAFE_GIT_SUBCOMMAND_LIST: readonly ["status", "diff", "log", "show", "grep", "branch", "tag", "remote", "rev-parse", "ls-files", "ls-tree", "cat-file", "describe", "blame", "shortlog", "name-rev", "rev-list", "for-each-ref", "count-objects", "verify-commit", "verify-tag"];
+export declare const SAFE_GH_COMMANDS: Record<string, Set<string> | null>;
+export interface ReadOnlyShellOptions {
+    allowExternalPaths?: boolean;
+    allowedPathRoots?: string[];
+}
+export declare function isReadOnlyShellCommand(command: string | string[] | undefined | null, options?: ReadOnlyShellOptions): boolean;
+type ScopedShellOptions = {
+    env?: NodeJS.ProcessEnv;
+    workingDirectory?: string;
+};
+export declare function isScopedMemoryShellCommand(command: string | string[] | undefined | null, allowedRoots: string[], options?: ScopedShellOptions): boolean;
+/**
+ * Check if a shell command exclusively targets the agent's memory directory.
+ */
+export declare function isMemoryDirCommand(command: string | string[] | undefined | null, agentId: string): boolean;
+export {};
+//# sourceMappingURL=read-only-shell.d.ts.map

package/dist/types/permissions/read-only-shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-only-shell.d.ts","sourceRoot":"","sources":["../../../src/permissions/read-only-shell.ts"],"names":[],"mappings":"AAiFA,eAAO,MAAM,wBAAwB,wPAsB3B,CAAC;AAoFX,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAS/D,CAAC;AAwzBF,MAAM,WAAW,oBAAoB;IACnC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,EAC7C,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAgCT;AAmRD,KAAK,kBAAkB,GAAG;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAqlBF,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,EAC7C,YAAY,EAAE,MAAM,EAAE,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAuDT;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,EAC7C,OAAO,EAAE,MAAM,GACd,OAAO,CAMT"}

package/dist/types/permissions/rule-normalization.d.ts

@@ -0,0 +1,3 @@
+export declare function normalizePermissionRule(rule: string): string;
+export declare function permissionRulesEquivalent(left: string, right: string): boolean;
+//# sourceMappingURL=rule-normalization.d.ts.map

package/dist/types/permissions/rule-normalization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-normalization.d.ts","sourceRoot":"","sources":["../../../src/permissions/rule-normalization.ts"],"names":[],"mappings":"AAoBA,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAiB5D;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ,OAAO,CAET"}

package/dist/types/permissions/sandbox-gate.d.ts

@@ -0,0 +1,39 @@
+import { type SandboxAvailability } from "../sandbox/availability";
+import { type SandboxBackend } from "../sandbox/policy";
+/**
+ * Everything `applyShellSandbox` needs to wrap a launcher, resolved once. The
+ * gate computes the backend, the agents trees, and the agent's memory roots
+ * while deciding whether to wrap at all; returning them lets the wrapper build
+ * the policy without re-probing the host or re-resolving the same paths.
+ */
+export interface ShellSandboxContext {
+    /** The validated backend to wrap with (never null). */
+    backend: SandboxBackend;
+    /** Resolved bwrap binary path, when `backend === "bwrap"`. */
+    bwrapPath?: string;
+    /** Both backend agents trees to wall off (canonical). */
+    agentsTreeRoots: string[];
+    /** The agent's resolvable memory roots, to carve self back out of the trees. */
+    memoryRoots: string[];
+}
+/**
+ * Resolve the context for confining an agent process's shell commands under the
+ * kernel cross-agent sandbox, or null when this process's shells must not be
+ * wrapped (not opted in, already sandboxed, no backend, cwd inside the agents
+ * tree, or no resolvable self roots).
+ *
+ * Opt-in via `LETTA_FS_SANDBOX=1`: by default only memory subagents are
+ * sandboxed (as whole processes) and agent shells run unconfined. When opted
+ * in, the kernel sandbox is the sole cross-agent enforcement for spawned shells
+ * (the static cross-agent guard no longer analyzes shell commands), so this is
+ * what `applyShellSandbox` consults to decide whether — and with what — to wrap.
+ */
+export declare function resolveShellSandboxContext(cwd: string, env: NodeJS.ProcessEnv, availability?: SandboxAvailability): ShellSandboxContext | null;
+/**
+ * Whether an agent process's shell commands will be confined by the kernel
+ * cross-agent sandbox — i.e. exactly the conditions under which
+ * `applyShellSandbox` wraps the launcher. Thin boolean view over
+ * {@link resolveShellSandboxContext}.
+ */
+export declare function willSandboxShell(cwd: string, env: NodeJS.ProcessEnv, availability?: SandboxAvailability): boolean;
+//# sourceMappingURL=sandbox-gate.d.ts.map

package/dist/types/permissions/sandbox-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-gate.d.ts","sourceRoot":"","sources":["../../../src/permissions/sandbox-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAEzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAOxE;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,uDAAuD;IACvD,OAAO,EAAE,cAAc,CAAC;IACxB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gFAAgF;IAChF,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,YAAY,CAAC,EAAE,mBAAmB,GACjC,mBAAmB,GAAG,IAAI,CAqC5B;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,YAAY,CAAC,EAAE,mBAAmB,GACjC,OAAO,CAET"}

package/dist/types/permissions/session.d.ts

@@ -0,0 +1,27 @@
+import type { PermissionRules, PermissionRuleType } from "./types";
+/**
+ * Session-only permissions that are not persisted to disk.
+ * These rules are cleared when the application exits.
+ */
+declare class SessionPermissions {
+    private sessionRules;
+    /**
+     * Add a permission rule for this session only
+     */
+    addRule(rule: string, type: PermissionRuleType): void;
+    /**
+     * Get all session rules
+     */
+    getRules(): PermissionRules;
+    /**
+     * Clear all session rules
+     */
+    clear(): void;
+    /**
+     * Check if a rule exists in session permissions
+     */
+    hasRule(rule: string, type: PermissionRuleType): boolean;
+}
+export declare const sessionPermissions: SessionPermissions;
+export {};
+//# sourceMappingURL=session.d.ts.map

package/dist/types/permissions/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/permissions/session.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAEnE;;;GAGG;AACH,cAAM,kBAAkB;IACtB,OAAO,CAAC,YAAY,CAKlB;IAEF;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,IAAI;IAOrD;;OAEG;IACH,QAAQ,IAAI,eAAe;IAS3B;;OAEG;IACH,KAAK,IAAI,IAAI;IASb;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO;CAGzD;AAGD,eAAO,MAAM,kBAAkB,oBAA2B,CAAC"}

package/dist/types/permissions/shell-analysis.d.ts

@@ -0,0 +1,43 @@
+export type ShellAnalysisNode = {
+    type: "command";
+    segment: string;
+} | {
+    type: "if";
+    condition: string;
+    thenBody: ShellAnalysisNode[];
+} | {
+    type: "for";
+    variableName: string;
+    items: string[];
+    body: ShellAnalysisNode[];
+};
+/**
+ * Split a shell command into segments on unquoted separators: |, &&, ||, ;
+ * Returns null if dangerous operators are found:
+ * - redirects (>, >>) outside quotes (unless targeting /dev/null or fd duplication)
+ * - command substitution ($(), backticks) outside single quotes
+ */
+export declare function splitShellSegments(input: string): string[] | null;
+/**
+ * Split a shell command into segments on top-level separators while tolerating
+ * `$(...)` command substitutions. This is useful for approval rule generation
+ * and matching, where we still want to identify the outer command even when a
+ * setup segment contains an inner pipe (e.g. `export FOO=$(grep ... | cut ...)`).
+ *
+ * Unlike `splitShellSegments`, this still rejects unsafe redirects, but it does
+ * not reject `$()` command substitutions.
+ */
+export declare function splitShellSegmentsAllowCommandSubstitution(input: string): string[] | null;
+export declare function isShellExecutor(command: string): boolean;
+export declare function stripShellQuotes(value: string): string;
+export declare function tokenizeShellWords(segment: string): string[];
+export declare function extractDashCArgument(tokens: string[]): string | undefined;
+export declare function substituteShellVariable(segment: string, variableName: string, value: string): string;
+/**
+ * Convert already-split shell segments into a structured analysis tree.
+ * Returns null when the segment sequence uses unsupported or malformed control
+ * flow so callers can fall back to a conservative deny.
+ */
+export declare function parseShellAnalysisSegments(segments: string[]): ShellAnalysisNode[] | null;
+export declare function parseShellAnalysis(command: string): ShellAnalysisNode[] | null;
+//# sourceMappingURL=shell-analysis.d.ts.map

package/dist/types/permissions/shell-analysis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-analysis.d.ts","sourceRoot":"","sources":["../../../src/permissions/shell-analysis.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IACE,IAAI,EAAE,IAAI,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;CAC/B,GACD;IACE,IAAI,EAAE,KAAK,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,iBAAiB,EAAE,CAAC;CAC3B,CAAC;AA6CN;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAoHjE;AAED;;;;;;;;GAQG;AACH,wBAAgB,0CAA0C,CACxD,KAAK,EAAE,MAAM,GACZ,MAAM,EAAE,GAAG,IAAI,CAoKjB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQtD;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAM5D;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAWzE;AAMD,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,MAAM,CAKR;AAkKD;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAAE,GACjB,iBAAiB,EAAE,GAAG,IAAI,CA0C5B;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GACd,iBAAiB,EAAE,GAAG,IAAI,CAY5B"}

package/dist/types/permissions/shell-command-normalization.d.ts

@@ -0,0 +1,4 @@
+export declare function unwrapShellLauncherCommand(command: string): string;
+export declare function extractPrimaryShellCommand(command: string): string;
+export declare function normalizeBashRulePayload(payload: string): string;
+//# sourceMappingURL=shell-command-normalization.d.ts.map

package/dist/types/permissions/shell-command-normalization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-command-normalization.d.ts","sourceRoot":"","sources":["../../../src/permissions/shell-command-normalization.ts"],"names":[],"mappings":"AAiOA,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAclE;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAclE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAiBhE"}

package/dist/types/permissions/types.d.ts

@@ -0,0 +1,51 @@
+import type { PermissionMode } from "./mode";
+/**
+ * Permission rules following Claude Code's format
+ */
+export interface PermissionRules {
+    mode?: PermissionMode;
+    allow?: string[];
+    deny?: string[];
+    ask?: string[];
+    alwaysAsk?: string[];
+    additionalDirectories?: string[];
+}
+/**
+ * Permission decision for a tool execution
+ */
+export type PermissionDecision = "allow" | "deny" | "ask" | "alwaysAsk";
+export type PermissionRuleType = PermissionDecision;
+/**
+ * Scope for saving permission rules
+ */
+export type PermissionScope = "project" | "local" | "user";
+export type PermissionEngine = "v1" | "v2";
+export interface PermissionTraceEvent {
+    stage: string;
+    matched?: boolean;
+    pattern?: string;
+    message?: string;
+}
+export interface PermissionShadowComparison {
+    engine: PermissionEngine;
+    decision: PermissionDecision;
+    matchedRule?: string;
+}
+export interface PermissionCheckTrace {
+    engine: PermissionEngine;
+    toolName: string;
+    canonicalToolName: string;
+    query: string;
+    events: PermissionTraceEvent[];
+    shadow?: PermissionShadowComparison;
+}
+/**
+ * Result of a permission check
+ */
+export interface PermissionCheckResult {
+    decision: PermissionDecision;
+    matchedRule?: string;
+    reason?: string;
+    trace?: PermissionCheckTrace;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types/permissions/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/permissions/types.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AAE7C;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,WAAW,CAAC;AAExE,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAEpD;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAE3D,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,MAAM,CAAC,EAAE,0BAA0B,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B"}

package/dist/types/providers/byok-providers.d.ts

@@ -0,0 +1,117 @@
+/**
+ * BYOK (Bring Your Own Key) Provider Service
+ * Unified module for managing custom LLM provider connections
+ */
+import { type ProviderResponse } from "../backend/api/providers";
+import { PROVIDER_TYPE_TO_BASE_PROVIDER } from "../backend/dev/pi-provider-registry";
+import type { LocalProviderTimeout } from "../backend/local/local-provider-timeout";
+export type { ProviderResponse } from "../backend/api/providers";
+export type ProviderStorageTarget = "api" | "local";
+export interface ProviderConnectionOptions {
+    baseURL?: string;
+    timeout?: LocalProviderTimeout;
+}
+export interface ProviderOperationOptions {
+    target?: ProviderStorageTarget;
+    connection?: ProviderConnectionOptions;
+}
+export interface ProviderField {
+    key: string;
+    label: string;
+    placeholder?: string;
+    secret?: boolean;
+    required?: boolean;
+}
+export interface AuthMethod {
+    id: string;
+    label: string;
+    description: string;
+    fields: ProviderField[];
+}
+export interface ByokProvider {
+    id: string;
+    displayName: string;
+    description: string;
+    providerType: string;
+    providerName: string;
+    providerNames?: readonly string[];
+    isOAuth?: boolean;
+    oauthProviderId?: string;
+    requiresApiKey?: boolean;
+    defaultApiKey?: string;
+    fields?: ProviderField[];
+    authMethods?: AuthMethod[];
+}
+export type ByokProviderId = string;
+export declare const CLOUD_BYOK_PROVIDERS: readonly ByokProvider[];
+export declare const BYOK_PROVIDERS: readonly ByokProvider[];
+export declare function getProviderConfigs(target?: ProviderStorageTarget): readonly ByokProvider[];
+export declare function defaultProviderApiKey(provider: ByokProvider): string | undefined;
+export declare function isLocalProviderStoreEnabled(): boolean;
+export declare function defaultProviderStorageTarget(): ProviderStorageTarget;
+export declare function providerStorageTargetLabel(target?: ProviderStorageTarget): string;
+/** Prefixes that always indicate a BYOK handle (subscription aliases + lc-* providers) */
+export declare const STATIC_BYOK_PROVIDER_PREFIXES: string[];
+export { PROVIDER_TYPE_TO_BASE_PROVIDER };
+/**
+ * Build a mapping of BYOK provider names → base provider strings.
+ *
+ * Default aliases are derived from both Letta Cloud and local provider
+ * metadata so all built-in providers are covered. Connected providers are
+ * layered on top to support custom provider names.
+ */
+export declare function buildOpenAICompatibleProxyProviderNames(connectedProviders: Array<Pick<ProviderResponse, "name" | "provider_type" | "provider_category" | "base_url">>): Set<string>;
+export declare function buildByokProviderAliases(connectedProviders?: Array<Pick<ProviderResponse, "name" | "provider_type">>, target?: ProviderStorageTarget): Record<string, string>;
+/**
+ * Check whether a model handle belongs to a BYOK provider.
+ * Matches static prefixes (subscription aliases + lc-* providers) and any
+ * provider name present in the alias map.
+ */
+export declare function isByokHandleForSelector(handle: string, byokProviderAliases: Record<string, string>): boolean;
+/**
+ * List all BYOK providers for the target store.
+ */
+export declare function listProviders(options?: ProviderOperationOptions): Promise<ProviderResponse[]>;
+/**
+ * Get a map of connected providers by name.
+ */
+export declare function getConnectedProviders(options?: ProviderOperationOptions): Promise<Map<string, ProviderResponse>>;
+/**
+ * Check if a specific BYOK provider is connected.
+ */
+export declare function isProviderConnected(providerName: string, options?: ProviderOperationOptions): Promise<boolean>;
+/**
+ * Get a provider by name.
+ */
+export declare function getProviderByName(providerName: string, options?: ProviderOperationOptions): Promise<ProviderResponse | null>;
+/**
+ * Validate an API key with the provider's check endpoint.
+ * Returns true if valid, throws error if invalid.
+ */
+export declare function checkProviderApiKey(providerType: string, apiKey: string, accessKey?: string, region?: string, profile?: string, options?: ProviderOperationOptions): Promise<void>;
+/**
+ * Create a new BYOK provider.
+ */
+export declare function createProvider(providerType: string, providerName: string, apiKey: string, accessKey?: string, region?: string, profile?: string, options?: ProviderConnectionOptions, operationOptions?: ProviderOperationOptions): Promise<ProviderResponse>;
+/**
+ * Update an existing provider's API key.
+ */
+export declare function updateProvider(providerId: string, apiKey: string, accessKey?: string, region?: string, profile?: string, storageDirOrOptions?: string | ProviderOperationOptions, options?: ProviderConnectionOptions): Promise<ProviderResponse>;
+/**
+ * Delete a provider by ID.
+ */
+export declare function deleteProvider(providerId: string, options?: ProviderOperationOptions): Promise<void>;
+/**
+ * Create or update a BYOK provider.
+ * If provider exists, updates the API key; otherwise creates new.
+ */
+export declare function createOrUpdateProvider(providerType: string, providerName: string, apiKey: string, accessKey?: string, region?: string, profile?: string, options?: ProviderConnectionOptions, operationOptions?: ProviderOperationOptions): Promise<ProviderResponse>;
+/**
+ * Remove a provider by name.
+ */
+export declare function removeProviderByName(providerName: string, options?: ProviderOperationOptions): Promise<void>;
+/**
+ * Get provider config by ID for a target.
+ */
+export declare function getProviderConfig(id: ByokProviderId, target?: ProviderStorageTarget): ByokProvider | undefined;
+//# sourceMappingURL=byok-providers.d.ts.map

package/dist/types/providers/byok-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"byok-providers.d.ts","sourceRoot":"","sources":["../../../src/providers/byok-providers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAOL,KAAK,gBAAgB,EAGtB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EAIL,8BAA8B,EAE/B,MAAM,oCAAoC,CAAC;AAW5C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAGnF,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,MAAM,MAAM,qBAAqB,GAAG,KAAK,GAAG,OAAO,CAAC;AAEpD,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,oBAAoB,CAAC;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,UAAU,CAAC,EAAE,yBAAyB,CAAC;CACxC;AAGD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAGD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;CAC5B;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AA6BpC,eAAO,MAAM,oBAAoB,EAAE,SAAS,YAAY,EA+FvD,CAAC;AAGF,eAAO,MAAM,cAAc,yBAAuB,CAAC;AAuPnD,wBAAgB,kBAAkB,CAChC,MAAM,GAAE,qBAAsD,GAC7D,SAAS,YAAY,EAAE,CAqBzB;AAUD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,YAAY,GACrB,MAAM,GAAG,SAAS,CAKpB;AAED,wBAAgB,2BAA2B,IAAI,OAAO,CAErD;AAED,wBAAgB,4BAA4B,IAAI,qBAAqB,CAEpE;AAQD,wBAAgB,0BAA0B,CACxC,MAAM,GAAE,qBAAsD,GAC7D,MAAM,CAER;AAcD,0FAA0F;AAC1F,eAAO,MAAM,6BAA6B,UAIzC,CAAC;AAEF,OAAO,EAAE,8BAA8B,EAAE,CAAC;AAE1C;;;;;;GAMG;AACH,wBAAgB,uCAAuC,CACrD,kBAAkB,EAAE,KAAK,CACvB,IAAI,CACF,gBAAgB,EAChB,MAAM,GAAG,eAAe,GAAG,mBAAmB,GAAG,UAAU,CAC5D,CACF,GACA,GAAG,CAAC,MAAM,CAAC,CAWb;AAED,wBAAgB,wBAAwB,CACtC,kBAAkB,GAAE,KAAK,CACvB,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,eAAe,CAAC,CAC5C,EACN,MAAM,GAAE,qBAAsD,GAC7D,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAwBxB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1C,OAAO,CAYT;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAK7B;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAOxC;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,OAAO,CAAC,CAGlB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAKlC;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,GAAE,yBAA8B,EACvC,gBAAgB,GAAE,wBAA6B,GAC9C,OAAO,CAAC,gBAAgB,CAAC,CAsB3B;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,EAChB,mBAAmB,CAAC,EAAE,MAAM,GAAG,wBAAwB,EACvD,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,gBAAgB,CAAC,CAsB3B;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,GAAE,yBAA8B,EACvC,gBAAgB,GAAE,wBAA6B,GAC9C,OAAO,CAAC,gBAAgB,CAAC,CAsB3B;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,cAAc,EAClB,MAAM,GAAE,qBAAsD,GAC7D,YAAY,GAAG,SAAS,CAE1B"}

package/dist/types/providers/openai-codex-constants.d.ts

@@ -0,0 +1,2 @@
+export declare const OPENAI_CODEX_PROVIDER_NAME = "chatgpt-plus-pro";
+//# sourceMappingURL=openai-codex-constants.d.ts.map

package/dist/types/providers/openai-codex-constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-codex-constants.d.ts","sourceRoot":"","sources":["../../../src/providers/openai-codex-constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,0BAA0B,qBAAqB,CAAC"}