@loomfsm/mcp-server 0.1.0

package/dist/src/lib/parse-task-args.js

@@ -0,0 +1,38 @@
+// Host-neutral flag parser. Pulls a single leading `--flag <rest>` off
+// the raw task string and resolves it to a named policy preset. Hosts
+// that already speak policy_preset directly do not call this — it
+// exists so a $ARGUMENTS-style command can be parsed server-side
+// instead of every skill markdown re-implementing the same regex.
+// The five recognized leading flags. Order is the registration order
+// surfaced by `pipeline_meta.flag_vocabulary` — adding an entry here is
+// the single point of edit; the meta tool derives the vocabulary list
+// from `Object.keys(FLAG_TO_PRESET)` so parser and discovery surface
+// can never drift.
+export const FLAG_TO_PRESET = {
+    "--supervised": "full-supervised",
+    "--auto": "full-autonomous",
+    "--review-plan": "review-plan-only",
+    "--review-final": "review-final-only",
+    "--gates-on-blockers": "gates-on-blockers",
+};
+// Single leading flag: `--name <rest>`. `s` flag preserves newlines
+// inside `rest` so multi-line task descriptions round-trip verbatim.
+const LEADING_FLAG = /^(--[a-z][a-z-]*)\s+(.+)$/s;
+export function parseTaskArgs(raw) {
+    const warnings = [];
+    const trimmed = raw.trim();
+    if (trimmed.length === 0)
+        return { task: "", warnings };
+    const match = LEADING_FLAG.exec(trimmed);
+    if (match === null)
+        return { task: trimmed, warnings };
+    const flag = match[1];
+    const rest = match[2].trim();
+    const preset = FLAG_TO_PRESET[flag];
+    if (preset !== undefined) {
+        return { task: rest, policy_preset: preset, warnings };
+    }
+    warnings.push(`unknown-flag: ${flag} — treated as no-op (task starts after flag)`);
+    return { task: rest, warnings };
+}
+//# sourceMappingURL=parse-task-args.js.map

package/dist/src/lib/parse-task-args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-task-args.js","sourceRoot":"","sources":["../../../src/lib/parse-task-args.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,sEAAsE;AACtE,kEAAkE;AAClE,iEAAiE;AACjE,kEAAkE;AAMlE,qEAAqE;AACrE,wEAAwE;AACxE,sEAAsE;AACtE,qEAAqE;AACrE,mBAAmB;AACnB,MAAM,CAAC,MAAM,cAAc,GAA2B;IACpD,cAAc,EAAE,iBAAiB;IACjC,QAAQ,EAAE,iBAAiB;IAC3B,eAAe,EAAE,kBAAkB;IACnC,gBAAgB,EAAE,mBAAmB;IACrC,qBAAqB,EAAE,mBAAmB;CAC3C,CAAC;AAEF,oEAAoE;AACpE,qEAAqE;AACrE,MAAM,YAAY,GAAG,4BAA4B,CAAC;AAElD,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;IAExD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAEvD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;IAChC,MAAM,IAAI,GAAI,KAAK,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACzD,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,iBAAiB,IAAI,8CAA8C,CAAC,CAAC;IACnF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC"}

package/dist/src/lib/persist-progress.d.ts

@@ -0,0 +1,2 @@
+import type { Transaction } from "@loomfsm/kernel";
+export declare function persistDriverStepIndex(tx: Transaction, stepIndex: number): Promise<void>;

package/dist/src/lib/persist-progress.js

@@ -0,0 +1,20 @@
+// Durably record the FSM driver's resume point after a tick.
+//
+// `runFSM` advances `step_index` only in memory as it walks past the
+// positional step-stages within a single tick; the value persisted on
+// disk moves by exactly one per delivery (the drain-advance inside
+// `deliverContinue`). When two spawn/gate stages are adjacent in a flow
+// those two agree, so the resume point is correct without help. But a
+// flow that interleaves positional steps between spawns — read a diff,
+// derive review flags, snapshot state — would, on the next delivery,
+// only advance the persisted index by one and re-enter the just-emitted
+// spawn, re-issuing it once per intervening step.
+//
+// Persisting the tick's paused index (the stage that produced the
+// returned directive) closes that gap so every spawn is issued exactly
+// once. It is a no-op when the paused index already equals the stored
+// one, so flows without interleaved steps are unaffected.
+export async function persistDriverStepIndex(tx, stepIndex) {
+    await tx.exec("UPDATE driver_state SET step_index = ? WHERE id = 1", [stepIndex]);
+}
+//# sourceMappingURL=persist-progress.js.map

package/dist/src/lib/persist-progress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persist-progress.js","sourceRoot":"","sources":["../../../src/lib/persist-progress.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,mEAAmE;AACnE,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,qEAAqE;AACrE,wEAAwE;AACxE,kDAAkD;AAClD,EAAE;AACF,kEAAkE;AAClE,uEAAuE;AACvE,sEAAsE;AACtE,0DAA0D;AAI1D,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAe,EACf,SAAiB;IAEjB,MAAM,EAAE,CAAC,IAAI,CAAC,qDAAqD,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;AACpF,CAAC"}

package/dist/src/server.d.ts

@@ -0,0 +1,25 @@
+import type { Registry } from "@loomfsm/kernel";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { type MetaInputWithProject } from "./tools/meta.js";
+import type { BackupInput, BackupResponse, ContinueTaskRequestInput, ContinueTaskResponse, ExtensionsListInput, ExtensionsListResponse, IssueCrossOwnerMarkerInput, IssueCrossOwnerMarkerResponse, PipelineMetaResponse, PipelineStateView, RecoverTaskInput, RecoverTaskResponse, RestoreInput, RestoreResponse, RunTaskInput, RunTaskResponse, StateGetInput, ToolHandler } from "./types.js";
+export interface ServerDeps {
+    resolveRegistry?: (projectDir: string) => Promise<Registry> | Registry;
+    allowlistPath?: string;
+}
+export interface ToolRegistry {
+    pipeline_meta: ToolHandler<MetaInputWithProject, PipelineMetaResponse>;
+    pipeline_state_get: ToolHandler<StateGetInput, PipelineStateView>;
+    pipeline_extensions_list: ToolHandler<ExtensionsListInput, ExtensionsListResponse>;
+    pipeline_run_task: ToolHandler<RunTaskInput, RunTaskResponse>;
+    pipeline_continue_task: ToolHandler<ContinueTaskRequestInput, ContinueTaskResponse>;
+    pipeline_recover: ToolHandler<RecoverTaskInput, RecoverTaskResponse>;
+    pipeline_issue_cross_owner_marker: ToolHandler<IssueCrossOwnerMarkerInput, IssueCrossOwnerMarkerResponse>;
+    pipeline_backup: ToolHandler<BackupInput, BackupResponse>;
+    pipeline_restore: ToolHandler<RestoreInput, RestoreResponse>;
+}
+export interface CreateServerHandle {
+    server: Server;
+    tools: ToolRegistry;
+}
+export declare function createServer(deps?: ServerDeps): CreateServerHandle;
+export declare function runStdioServer(deps?: ServerDeps): Promise<void>;

package/dist/src/server.js

@@ -0,0 +1,257 @@
+// Stdio MCP server factory. Wires the three read-only tool handlers
+// into the SDK's request-dispatch surface and surfaces them as a
+// direct-callable map so tests skip the JSON-RPC framing and exercise
+// the handler bodies in-process.
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { createBackupTool } from "./tools/backup.js";
+import { createContinueTaskTool } from "./tools/continue-task.js";
+import { createExtensionsListTool } from "./tools/extensions-list.js";
+import { createIssueCrossOwnerMarkerTool } from "./tools/issue-marker.js";
+import { createMetaTool } from "./tools/meta.js";
+import { createRecoverTool } from "./tools/recover.js";
+import { createRestoreTool } from "./tools/restore.js";
+import { createRunTaskTool } from "./tools/run-task.js";
+import { createStateGetTool } from "./tools/state-get.js";
+const SERVER_NAME = "@loomfsm/mcp-server";
+const SERVER_VERSION = "0.0.0";
+// Tool descriptors surfaced on `tools/list`. Schemas stay coarse for
+// these read-only handlers; richer per-property typing belongs with
+// the mutating-tool surface whose required-field matrices justify a
+// shared schema package.
+const TOOL_DESCRIPTORS = [
+    {
+        name: "pipeline_meta",
+        description: "Returns protocol / plugin / kernel versions, transport surface, " +
+            "installed providers and bundles, and the flag vocabulary the " +
+            "server-side parser currently honors.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                project_dir: { type: "string" },
+                client_identifier_unverified: { type: "string" },
+                client_capabilities: { type: "object" },
+            },
+            required: ["project_dir"],
+        },
+    },
+    {
+        name: "pipeline_state_get",
+        description: "Inspects pipeline state. Four output formats: a compact summary " +
+            "(default), the full PipelineState aggregate, per-table JSONL, " +
+            "or a stable-width ASCII rendering.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                project_dir: { type: "string" },
+                format: { type: "string", enum: ["summary", "json", "jsonl", "pretty-table"] },
+                table: { type: "string" },
+                since: { type: "string" },
+                limit: { type: "number" },
+            },
+            required: ["project_dir"],
+        },
+    },
+    {
+        name: "pipeline_extensions_list",
+        description: "Lists installed extensions (bundles, providers, mcp-clients) " +
+            "from the project registry. Filters by kind / status; " +
+            "include_manifest pulls the full manifest snapshot into each entry.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                project_dir: { type: "string" },
+                kind: { type: "string", enum: ["bundle", "provider", "mcp-client"] },
+                status: { type: "string", enum: ["enabled", "disabled", "failed"] },
+                include_manifest: { type: "boolean" },
+            },
+            required: ["project_dir"],
+        },
+    },
+    {
+        name: "pipeline_run_task",
+        description: "Initializes a new task and returns the first directive shaped as a " +
+            "wire response (spawn-agent | spawn-agents-parallel | ask-user | " +
+            "complete | error). client_idempotency_uuid is required; a replay " +
+            "with the same value returns the cached creation response.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                project_dir: { type: "string" },
+                task: { type: "string" },
+                client_idempotency_uuid: { type: "string" },
+                policy_preset: { type: "string" },
+                gate_policies: { type: "object" },
+                complexity_hint: { type: "string", enum: ["simple", "medium", "complex"] },
+                tests_mode_hint: { type: "string", enum: ["tdd", "regression-only"] },
+                stack: { type: "object" },
+                owner_id: { type: "string" },
+                client_identifier_unverified: { type: "string" },
+            },
+            required: ["project_dir", "task", "client_idempotency_uuid"],
+        },
+    },
+    {
+        name: "pipeline_continue_task",
+        description: "Delivers an agent result, a fanout batch, or a user answer and " +
+            "returns the next directive shaped as a wire response. Idempotent " +
+            "by agent_run_id / gate_event_id — a duplicate delivery returns the " +
+            "cached next-step response.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                project_dir: { type: "string" },
+                driver_state_id: { type: "string" },
+                input: { type: "object" },
+                client_identifier_unverified: { type: "string" },
+            },
+            required: ["project_dir", "driver_state_id", "input"],
+        },
+    },
+    {
+        name: "pipeline_recover",
+        description: "Recovers a stuck task. Five choices: abandon | force-close | retry | " +
+            "retry-failed | cancel-pending. recovery_id is server-issued — omit it " +
+            "on the first call (the kernel mints one and returns it), pass it back " +
+            "to replay the cached response, or omit it to issue a new recovery " +
+            "action. agent_run_ids is required for retry-failed.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                project_dir: { type: "string" },
+                driver_state_id: { type: "string" },
+                choice: {
+                    type: "string",
+                    enum: ["abandon", "force-close", "retry", "retry-failed", "cancel-pending"],
+                },
+                agent_run_ids: { type: "array", items: { type: "string" } },
+                recovery_id: { type: "string" },
+                owner_id: { type: "string" },
+                marker: { type: "object" },
+                client_identifier_unverified: { type: "string" },
+            },
+            required: ["project_dir", "driver_state_id", "choice"],
+        },
+    },
+    {
+        name: "pipeline_issue_cross_owner_marker",
+        description: "Mints a single-use, TTL-bounded cross-owner bypass marker for a " +
+            "task whose owner differs from the caller. Possessing the bypass-HMAC " +
+            "key (env var or user-global key file) is the authorization to mint; " +
+            "returns the signed marker fields to pass to pipeline_recover.marker. " +
+            "Refuses with BYPASS_KEY_MISSING when no key is configured.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                project_dir: { type: "string" },
+                driver_state_id: { type: "string" },
+                ttl_ms: { type: "number" },
+                client_identifier_unverified: { type: "string" },
+            },
+            required: ["project_dir", "driver_state_id", "ttl_ms"],
+        },
+    },
+    {
+        name: "pipeline_backup",
+        description: "Writes a consistent textual SQL snapshot of the project state to " +
+            "`to` (a relative path resolves against project_dir). Returns " +
+            "bytes_written, the threaded timestamp, and the resolved backup_path.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                project_dir: { type: "string" },
+                to: { type: "string" },
+                client_identifier_unverified: { type: "string" },
+            },
+            required: ["project_dir", "to"],
+        },
+    },
+    {
+        name: "pipeline_restore",
+        description: "Restores project state from a backup. A .sql dump is parsed through a " +
+            "statement allowlist (out-of-allowlist statements surface " +
+            "RESTORE_REJECTED); a binary .db is an operator-explicit file swap. " +
+            "Refuses without confirm:true.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                project_dir: { type: "string" },
+                from: { type: "string" },
+                format: { type: "string", enum: ["sql", "binary"] },
+                confirm: { type: "boolean" },
+                client_identifier_unverified: { type: "string" },
+            },
+            required: ["project_dir", "from", "format"],
+        },
+    },
+];
+export function createServer(deps = {}) {
+    const tools = {
+        pipeline_meta: createMetaTool(),
+        pipeline_state_get: createStateGetTool(),
+        pipeline_extensions_list: createExtensionsListTool(),
+        pipeline_run_task: createRunTaskTool(deps),
+        pipeline_continue_task: createContinueTaskTool(deps),
+        pipeline_recover: createRecoverTool(deps),
+        pipeline_issue_cross_owner_marker: createIssueCrossOwnerMarkerTool(deps),
+        pipeline_backup: createBackupTool(deps),
+        pipeline_restore: createRestoreTool(deps),
+    };
+    const server = new Server({ name: SERVER_NAME, version: SERVER_VERSION }, { capabilities: { tools: {} } });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools: TOOL_DESCRIPTORS,
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (request) => {
+        const name = request.params.name;
+        const args = (request.params.arguments ?? {});
+        const result = await dispatch(tools, name, args);
+        return {
+            content: [{ type: "text", text: JSON.stringify(result) }],
+        };
+    });
+    return { server, tools };
+}
+async function dispatch(tools, name, args) {
+    if (name === "pipeline_meta") {
+        return await tools.pipeline_meta(args);
+    }
+    if (name === "pipeline_state_get") {
+        return await tools.pipeline_state_get(args);
+    }
+    if (name === "pipeline_extensions_list") {
+        return await tools.pipeline_extensions_list(args);
+    }
+    if (name === "pipeline_run_task") {
+        return await tools.pipeline_run_task(args);
+    }
+    if (name === "pipeline_continue_task") {
+        return await tools.pipeline_continue_task(args);
+    }
+    if (name === "pipeline_recover") {
+        return await tools.pipeline_recover(args);
+    }
+    if (name === "pipeline_issue_cross_owner_marker") {
+        return await tools.pipeline_issue_cross_owner_marker(args);
+    }
+    if (name === "pipeline_backup") {
+        return await tools.pipeline_backup(args);
+    }
+    if (name === "pipeline_restore") {
+        return await tools.pipeline_restore(args);
+    }
+    throw new Error(`unknown tool: ${name}`);
+}
+// Stdio entry. The module never connects automatically — the binary
+// entrypoint is the only caller, and it forwards the production
+// dependencies (registry resolver + allowlist path). Called with no
+// argument the read-only surface still works and the active-task tools
+// answer with a structured REGISTRY_UNAVAILABLE envelope. Tests
+// construct `createServer(deps)` and exercise the `tools` map directly,
+// never reaching this function.
+export async function runStdioServer(deps = {}) {
+    const handle = createServer(deps);
+    const transport = new StdioServerTransport();
+    await handle.server.connect(transport);
+}
+//# sourceMappingURL=server.js.map

package/dist/src/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,iEAAiE;AACjE,sEAAsE;AACtE,iCAAiC;AAGjC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAA6B,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAiC1D,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAC1C,MAAM,cAAc,GAAG,OAAO,CAAC;AAsB/B,qEAAqE;AACrE,oEAAoE;AACpE,oEAAoE;AACpE,yBAAyB;AACzB,MAAM,gBAAgB,GAAG;IACvB;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,kEAAkE;YAClE,+DAA+D;YAC/D,sCAAsC;QACxC,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,4BAA4B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAChD,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACxC;YACD,QAAQ,EAAE,CAAC,aAAa,CAAC;SAC1B;KACF;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,kEAAkE;YAClE,gEAAgE;YAChE,oCAAoC;QACtC,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE;gBAC9E,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC1B;YACD,QAAQ,EAAE,CAAC,aAAa,CAAC;SAC1B;KACF;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EACT,+DAA+D;YAC/D,uDAAuD;YACvD,oEAAoE;QACtE,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE;gBACpE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACnE,gBAAgB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;aACtC;YACD,QAAQ,EAAE,CAAC,aAAa,CAAC;SAC1B;KACF;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,qEAAqE;YACrE,kEAAkE;YAClE,mEAAmE;YACnE,2DAA2D;QAC7D,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,uBAAuB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3C,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE;gBAC1E,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,iBAAiB,CAAC,EAAE;gBACrE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,4BAA4B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACjD;YACD,QAAQ,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,yBAAyB,CAAC;SAC7D;KACF;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,iEAAiE;YACjE,mEAAmE;YACnE,qEAAqE;YACrE,4BAA4B;QAC9B,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACnC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,4BAA4B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACjD;YACD,QAAQ,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,OAAO,CAAC;SACtD;KACF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,oEAAoE;YACpE,qDAAqD;QACvD,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACnC,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,gBAAgB,CAAC;iBAC5E;gBACD,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBAC3D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,4BAA4B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACjD;YACD,QAAQ,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,QAAQ,CAAC;SACvD;KACF;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,WAAW,EACT,kEAAkE;YAClE,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,4DAA4D;QAC9D,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACnC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,4BAA4B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACjD;YACD,QAAQ,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,QAAQ,CAAC;SACvD;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,mEAAmE;YACnE,+DAA+D;YAC/D,sEAAsE;QACxE,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACtB,4BAA4B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACjD;YACD,QAAQ,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC;SAChC;KACF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,wEAAwE;YACxE,2DAA2D;YAC3D,qEAAqE;YACrE,+BAA+B;QACjC,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE;gBACnD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC5B,4BAA4B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACjD;YACD,QAAQ,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC;SAC5C;KACF;CACF,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,OAAmB,EAAE;IAChD,MAAM,KAAK,GAAiB;QAC1B,aAAa,EAAE,cAAc,EAAE;QAC/B,kBAAkB,EAAE,kBAAkB,EAAE;QACxC,wBAAwB,EAAE,wBAAwB,EAAE;QACpD,iBAAiB,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAC1C,sBAAsB,EAAE,sBAAsB,CAAC,IAAI,CAAC;QACpD,gBAAgB,EAAE,iBAAiB,CAAC,IAAI,CAAC;QACzC,iCAAiC,EAAE,+BAA+B,CAAC,IAAI,CAAC;QACxE,eAAe,EAAE,gBAAgB,CAAC,IAAI,CAAC;QACvC,gBAAgB,EAAE,iBAAiB,CAAC,IAAI,CAAC;KAC1C,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAC9C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,gBAAgB;KACxB,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAA4B,CAAC;QAEzE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,KAAmB,EACnB,IAAY,EACZ,IAA6B;IAE7B,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,OAAO,MAAM,KAAK,CAAC,aAAa,CAAC,IAAuC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,OAAO,MAAM,KAAK,CAAC,kBAAkB,CAAC,IAAgC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,KAAK,0BAA0B,EAAE,CAAC;QACxC,OAAO,MAAM,KAAK,CAAC,wBAAwB,CAAC,IAAsC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,OAAO,MAAM,KAAK,CAAC,iBAAiB,CAAC,IAA+B,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;QACtC,OAAO,MAAM,KAAK,CAAC,sBAAsB,CAAC,IAA2C,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAChC,OAAO,MAAM,KAAK,CAAC,gBAAgB,CAAC,IAAmC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,KAAK,mCAAmC,EAAE,CAAC;QACjD,OAAO,MAAM,KAAK,CAAC,iCAAiC,CAClD,IAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO,MAAM,KAAK,CAAC,eAAe,CAAC,IAA8B,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAChC,OAAO,MAAM,KAAK,CAAC,gBAAgB,CAAC,IAA+B,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,oEAAoE;AACpE,gEAAgE;AAChE,oEAAoE;AACpE,uEAAuE;AACvE,gEAAgE;AAChE,wEAAwE;AACxE,gCAAgC;AAChC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAmB,EAAE;IACxD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACzC,CAAC"}

package/dist/src/tools/backup.d.ts

@@ -0,0 +1,5 @@
+import type { BackupInput, BackupResponse, ToolHandler } from "../types.js";
+export interface BackupDeps {
+    allowlistPath?: string;
+}
+export declare function createBackupTool(deps?: BackupDeps): ToolHandler<BackupInput, BackupResponse>;

package/dist/src/tools/backup.js

@@ -0,0 +1,69 @@
+// pipeline_backup — consistent textual SQL snapshot of the kernel-owned
+// tables.
+//
+// Composition: project-dir allowlist → path-traversal guard (a relative
+// `to` resolves against project_dir; an escaping path is refused) →
+// dump inside one withStateTransaction (BEGIN holds a consistent view) →
+// write the file → return { bytes_written, ts, backup_path }.
+//
+// `ts` is the threaded NowToken passed to the transaction, NOT a fresh
+// clock read, so the reported timestamp matches the snapshot boundary.
+import { writeFileSync } from "node:fs";
+import { realpath } from "node:fs/promises";
+import { resolve, sep } from "node:path";
+import { assertProjectDirAllowed, captureNow, dumpStateSql, KernelError, withStateTransaction, } from "@loomfsm/kernel";
+export function createBackupTool(deps = {}) {
+    return async (input) => {
+        const now = captureNow();
+        // 1. Project-dir allowlist.
+        try {
+            await assertProjectDirAllowed(input.project_dir, deps.allowlistPath !== undefined ? { allowlistPath: deps.allowlistPath } : undefined);
+        }
+        catch (err) {
+            return refusal(err, now);
+        }
+        // 2. Path-traversal guard — the destination must stay within the
+        //    project directory so a backup cannot be written to an arbitrary
+        //    host location through a `..`-laden or absolute escape.
+        let backupPath;
+        try {
+            backupPath = await resolveBackupPath(input.project_dir, input.to);
+        }
+        catch (err) {
+            return refusal(err, now);
+        }
+        // 3. Consistent dump inside one transaction view.
+        const sql = await withStateTransaction(input.project_dir, now, (tx) => dumpStateSql(tx));
+        // 4. Write + report.
+        writeFileSync(backupPath, sql, "utf8");
+        return {
+            bytes_written: Buffer.byteLength(sql, "utf8"),
+            ts: now,
+            backup_path: backupPath,
+        };
+    };
+}
+async function resolveBackupPath(projectDir, to) {
+    const canonicalDir = await realpath(resolve(projectDir));
+    const resolved = resolve(canonicalDir, to);
+    if (resolved !== canonicalDir && !resolved.startsWith(canonicalDir + sep)) {
+        throw new KernelError({
+            code: "BACKUP_PATH_REJECTED",
+            message: `backup destination '${to}' escapes the project directory`,
+            detail: { to, project_dir: projectDir },
+        });
+    }
+    return resolved;
+}
+function refusal(err, ts) {
+    if (err instanceof KernelError) {
+        return {
+            bytes_written: null,
+            ts,
+            backup_path: null,
+            error: { code: err.code, message: err.message },
+        };
+    }
+    throw err;
+}
+//# sourceMappingURL=backup.js.map

package/dist/src/tools/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../../src/tools/backup.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,UAAU;AACV,EAAE;AACF,wEAAwE;AACxE,oEAAoE;AACpE,yEAAyE;AACzE,8DAA8D;AAC9D,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AAEvE,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EACL,uBAAuB,EACvB,UAAU,EACV,YAAY,EACZ,WAAW,EACX,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AAQzB,MAAM,UAAU,gBAAgB,CAC9B,OAAmB,EAAE;IAErB,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QAEzB,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,uBAAuB,CAC3B,KAAK,CAAC,WAAW,EACjB,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CACrF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QAED,iEAAiE;QACjE,qEAAqE;QACrE,4DAA4D;QAC5D,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QAED,kDAAkD;QAClD,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CACpE,YAAY,CAAC,EAAE,CAAC,CACjB,CAAC;QAEF,qBAAqB;QACrB,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO;YACL,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;YAC7C,EAAE,EAAE,GAAG;YACP,WAAW,EAAE,UAAU;SACxB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,UAAkB,EAAE,EAAU;IAC7D,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,YAAY,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,WAAW,CAAC;YACpB,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,uBAAuB,EAAE,iCAAiC;YACnE,MAAM,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,OAAO,CAAC,GAAY,EAAE,EAAU;IACvC,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC/B,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,EAAE;YACF,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;SAChD,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,CAAC;AACZ,CAAC"}

package/dist/src/tools/continue-task.d.ts

@@ -0,0 +1,7 @@
+import { type Registry } from "@loomfsm/kernel";
+import type { ContinueTaskRequestInput, ContinueTaskResponse, ToolHandler } from "../types.js";
+export interface ContinueTaskDeps {
+    resolveRegistry?: (projectDir: string) => Promise<Registry> | Registry;
+    allowlistPath?: string;
+}
+export declare function createContinueTaskTool(deps?: ContinueTaskDeps): ToolHandler<ContinueTaskRequestInput, ContinueTaskResponse>;

package/dist/src/tools/continue-task.js

@@ -0,0 +1,156 @@
+// pipeline_continue_task — delivery handler for agent results, fanout
+// batches, and user answers.
+//
+// Composition mirrors pipeline_run_task: allowlist gate → variant
+// refusals → ledger cache lookup → deliver inside one withStateTransaction
+// (the op-shaped ledger row + a co-committed audit row land with the
+// state mutation) → run the FSM against the post-delivery state → shape
+// the next directive → materialize the cached response on the ledger
+// row(s).
+//
+// Two variants are refused on this surface:
+//   recovery       → RECOVERY_VIA_CONTINUE_REFUSED (its own primitive).
+//   agents-results with partial:true → PARTIAL_FANOUT_REFUSED.
+//
+// Refusals (allowlist, variant, kernel-coded errors like GATE_EVENT_STALE)
+// become error-shaped wire envelopes; only programmer errors throw.
+import { assertProjectDirAllowed, captureNow, deliverContinue, KernelError, loadState, openDb, readLedgerRow, runFSM, TransactionImpl, withStateTransaction, writeLedgerRow, } from "@loomfsm/kernel";
+import { persistDriverStepIndex } from "../lib/persist-progress.js";
+import { createTransportAdapter } from "../transport-adapter.js";
+export function createContinueTaskTool(deps = {}) {
+    const adapter = createTransportAdapter();
+    return async (input) => {
+        const driverStateId = input.driver_state_id;
+        // 1. Project-dir allowlist.
+        try {
+            await assertProjectDirAllowed(input.project_dir, deps.allowlistPath !== undefined ? { allowlistPath: deps.allowlistPath } : undefined);
+        }
+        catch (err) {
+            return refusal(err, driverStateId);
+        }
+        // 2. Variant refusals handled on this surface.
+        if (input.input.type === "recovery") {
+            return {
+                response: errorResponse(driverStateId, "RECOVERY_VIA_CONTINUE_REFUSED", "recovery is delivered through the recovery primitive, not pipeline_continue_task"),
+            };
+        }
+        if (input.input.type === "agents-results" && input.input.partial === true) {
+            return {
+                response: errorResponse(driverStateId, "PARTIAL_FANOUT_REFUSED", "partial fanout delivery is not accepted on this surface"),
+            };
+        }
+        // 3. Replay — a materialized ledger blob under any of the op keys
+        //    replays the cached next-step envelope verbatim.
+        const keys = ledgerKeysFor(input.input);
+        const cached = await readCachedDelivery(input.project_dir, keys);
+        if (cached !== null)
+            return { response: cached };
+        if (deps.resolveRegistry === undefined) {
+            return {
+                response: errorResponse(driverStateId, "REGISTRY_UNAVAILABLE", "no registry resolver is wired for the active-task path"),
+            };
+        }
+        const registry = await deps.resolveRegistry(input.project_dir);
+        const identifier = typeof input.client_identifier_unverified === "string" &&
+            input.client_identifier_unverified.length > 0
+            ? input.client_identifier_unverified
+            : "unknown";
+        // 4. Deliver + co-committed audit row.
+        try {
+            await withStateTransaction(input.project_dir, captureNow(), async (tx) => {
+                await deliverContinue(tx, {
+                    input: input.input,
+                    driver_state_id: driverStateId,
+                    resolveOutputKind: (agent) => registry.agents.get(agent)?.output_kind,
+                    vocabularies: registry.vocabularies,
+                });
+                const taskId = await readTaskId(tx);
+                await writeAuditRow(tx, "pipeline_continue_task", taskId, driverStateId, {
+                    client_identifier_unverified: identifier,
+                });
+            });
+        }
+        catch (err) {
+            return refusal(err, driverStateId);
+        }
+        // 5. Run the FSM against the post-delivery state and shape it.
+        const loaded = await readState(input.project_dir);
+        const { state: ticked, directive } = await runFSM(loaded, registry);
+        const response = adapter.shape(directive, { driver_state_id: driverStateId });
+        // 6. Persist the tick's paused step index + materialize the cached
+        //    response on every op key (the fanout batch shares one envelope
+        //    across all its agent_run_ids), co-committed.
+        const taskId = loaded.task_id;
+        await withStateTransaction(input.project_dir, captureNow(), async (tx) => {
+            await persistDriverStepIndex(tx, ticked.driver.step_index);
+            for (const key of keys) {
+                await writeLedgerRow(tx, key, {
+                    driver_state_id: driverStateId,
+                    task_id: taskId,
+                    response_blob: JSON.stringify(response),
+                });
+            }
+        });
+        return { response };
+    };
+}
+function ledgerKeysFor(input) {
+    switch (input.type) {
+        case "agent-result":
+            return [`agent-result:${input.agent_run_id}`];
+        case "agents-results":
+            return input.results.map((r) => `agent-result:${r.agent_run_id}`);
+        case "user-answer":
+            return [`user-answer:${input.gate_event_id}`];
+        case "recovery":
+            return [];
+        default: {
+            const _exhaustive = input;
+            return _exhaustive;
+        }
+    }
+}
+async function readState(projectDir) {
+    const db = openDb(projectDir);
+    const tx = new TransactionImpl(db, captureNow());
+    return await loadState(tx);
+}
+async function readCachedDelivery(projectDir, keys) {
+    if (keys.length === 0)
+        return null;
+    const db = openDb(projectDir);
+    const tx = new TransactionImpl(db, captureNow());
+    for (const key of keys) {
+        const row = await readLedgerRow(tx, key);
+        if (row !== null && row.response_blob !== null) {
+            return JSON.parse(row.response_blob);
+        }
+    }
+    return null;
+}
+async function readTaskId(tx) {
+    const row = await tx.queryRow("SELECT task_id FROM pipeline_state WHERE id = 1");
+    if (row === null || row.task_id === null)
+        return null;
+    return String(row.task_id);
+}
+async function writeAuditRow(tx, type, taskId, driverStateId, payload) {
+    await tx.exec("INSERT INTO audit (ts, type, task_id, driver_state_id, payload, verdict, error_class) " +
+        "VALUES (?, ?, ?, ?, ?, 'ok', NULL)", [tx.now, type, taskId, driverStateId, JSON.stringify(payload)]);
+}
+function refusal(err, driverStateId) {
+    if (err instanceof KernelError) {
+        return { response: errorResponse(driverStateId, err.code, err.message) };
+    }
+    throw err;
+}
+function errorResponse(driverStateId, code, message) {
+    return {
+        status: "error",
+        driver_state_id: driverStateId,
+        code,
+        message,
+        recovery_options: [],
+    };
+}
+//# sourceMappingURL=continue-task.js.map

package/dist/src/tools/continue-task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"continue-task.js","sourceRoot":"","sources":["../../../src/tools/continue-task.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,6BAA6B;AAC7B,EAAE;AACF,kEAAkE;AAClE,2EAA2E;AAC3E,qEAAqE;AACrE,wEAAwE;AACxE,qEAAqE;AACrE,UAAU;AACV,EAAE;AACF,4CAA4C;AAC5C,wEAAwE;AACxE,+DAA+D;AAC/D,EAAE;AACF,2EAA2E;AAC3E,oEAAoE;AAEpE,OAAO,EACL,uBAAuB,EACvB,UAAU,EACV,eAAe,EACf,WAAW,EACX,SAAS,EACT,MAAM,EACN,aAAa,EACb,MAAM,EACN,eAAe,EACf,oBAAoB,EACpB,cAAc,GAGf,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAYjE,MAAM,UAAU,sBAAsB,CACpC,OAAyB,EAAE;IAE3B,MAAM,OAAO,GAAG,sBAAsB,EAAE,CAAC;IAEzC,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,aAAa,GAAG,KAAK,CAAC,eAAe,CAAC;QAE5C,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,uBAAuB,CAC3B,KAAK,CAAC,WAAW,EACjB,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CACrF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACrC,CAAC;QAED,+CAA+C;QAC/C,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACpC,OAAO;gBACL,QAAQ,EAAE,aAAa,CACrB,aAAa,EACb,+BAA+B,EAC/B,kFAAkF,CACnF;aACF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC1E,OAAO;gBACL,QAAQ,EAAE,aAAa,CACrB,aAAa,EACb,wBAAwB,EACxB,yDAAyD,CAC1D;aACF,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,qDAAqD;QACrD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACjE,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAEjD,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO;gBACL,QAAQ,EAAE,aAAa,CACrB,aAAa,EACb,sBAAsB,EACtB,wDAAwD,CACzD;aACF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAE/D,MAAM,UAAU,GACd,OAAO,KAAK,CAAC,4BAA4B,KAAK,QAAQ;YACtD,KAAK,CAAC,4BAA4B,CAAC,MAAM,GAAG,CAAC;YAC3C,CAAC,CAAC,KAAK,CAAC,4BAA4B;YACpC,CAAC,CAAC,SAAS,CAAC;QAEhB,uCAAuC;QACvC,IAAI,CAAC;YACH,MAAM,oBAAoB,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;gBACvE,MAAM,eAAe,CAAC,EAAE,EAAE;oBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,eAAe,EAAE,aAAa;oBAC9B,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW;oBACrE,YAAY,EAAE,QAAQ,CAAC,YAAY;iBACpC,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC;gBACpC,MAAM,aAAa,CAAC,EAAE,EAAE,wBAAwB,EAAE,MAAM,EAAE,aAAa,EAAE;oBACvE,4BAA4B,EAAE,UAAU;iBACzC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACrC,CAAC;QAED,+DAA+D;QAC/D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC;QAE9E,mEAAmE;QACnE,oEAAoE;QACpE,kDAAkD;QAClD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,MAAM,oBAAoB,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACvE,MAAM,sBAAsB,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE;oBAC5B,eAAe,EAAE,aAAa;oBAC9B,OAAO,EAAE,MAAM;oBACf,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;iBACxC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAwC;IAC7D,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,cAAc;YACjB,OAAO,CAAC,gBAAgB,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QAChD,KAAK,gBAAgB;YACnB,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QACpE,KAAK,aAAa;YAChB,OAAO,CAAC,eAAe,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;QAChD,KAAK,UAAU;YACb,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,KAAK,CAAC;YACjC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,UAAkB;IACzC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACjD,OAAO,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,UAAkB,EAClB,IAAc;IAEd,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAsB,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EAAe;IACvC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAC3B,iDAAiD,CAClD,CAAC;IACF,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,EAAe,EACf,IAAY,EACZ,MAAqB,EACrB,aAAqB,EACrB,OAAgC;IAEhC,MAAM,EAAE,CAAC,IAAI,CACX,wFAAwF;QACtF,oCAAoC,EACtC,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,GAAY,EAAE,aAAqB;IAClD,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC/B,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,aAAa,CACpB,aAAqB,EACrB,IAAY,EACZ,OAAe;IAEf,OAAO;QACL,MAAM,EAAE,OAAO;QACf,eAAe,EAAE,aAAa;QAC9B,IAAI;QACJ,OAAO;QACP,gBAAgB,EAAE,EAAE;KACrB,CAAC;AACJ,CAAC"}

package/dist/src/tools/extensions-list.d.ts

@@ -0,0 +1,2 @@
+import type { ExtensionsListInput, ExtensionsListResponse, ToolHandler } from "../types.js";
+export declare function createExtensionsListTool(): ToolHandler<ExtensionsListInput, ExtensionsListResponse>;