@lotagate/cli 0.1.23 → 0.1.25

package/dist/infrastructure/extensions/skill-tool-executor.js

@@ -0,0 +1,2 @@
+const a=[u("skill.list","List enabled skills available to the agent.",{type:"object",properties:{},additionalProperties:!1}),u("skill.load","Load instructions for one enabled skill by name when its description matches the task.",{type:"object",properties:{name:{type:"string",description:"Enabled skill name."}},required:["name"],additionalProperties:!1})];function f(){return a}class p{scopes;skills;constructor(e,n){this.scopes=n,this.skills=e.filter(s=>s.enabled&&s.modelInvocable)}listTools(){return f()}getToolInfo(e){return a.some(n=>d(n)===e)?{toolName:e,source:"custom",executorId:"skill-catalog",metadata:{category:"skill",risk:"read"}}:void 0}async execute(e,n,s){if(e==="skill.list")return c(JSON.stringify(this.skills.map(i=>({name:i.skillKey??i.name,description:i.description}))));if(e!=="skill.load")return o(`Unknown skill tool: ${e}`);const r=n.name;if(typeof r!="string")return o("skill.load requires a skill name.");const l=this.skills.find(i=>(i.skillKey??i.name)===r);return l===void 0?o(`Skill is unavailable: ${r}`):(this.scopes.activate(s.runId,l),c(k(l.body,s.maxResultBytes)))}}function u(t,e,n){return{type:"function",function:{name:t,description:e,parameters:n}}}function d(t){return"function"in t?t.function.name:void 0}function c(t){return{content:t,isError:!1}}function o(t){return{content:t,isError:!0}}function k(t,e){const n=Buffer.from(t,"utf8");return n.byteLength<=e?t:`${n.subarray(0,e).toString("utf8")}
+[truncated]`}export{p as SkillToolExecutor,f as skillToolDefinitions};

package/dist/infrastructure/filesystem/atomic-file-store.d.ts

@@ -0,0 +1,17 @@
+import fs from 'node:fs/promises';
+/** Writes a file through a same-directory temporary file and rename. */
+export declare function atomicWriteFile(filePath: string, data: string | Uint8Array, mode?: number): Promise<void>;
+/** Replaces a directory under an advisory lock with rollback if the commit fails. */
+export declare function replaceDirectoryWithRollback(temporary: string, destination: string): Promise<void>;
+/** Creates an advisory lock and removes it again when lock metadata cannot be persisted. */
+export declare function acquireAdvisoryFileLock(lockPath: string): Promise<fs.FileHandle>;
+/** Handles Windows reporting an existing, exclusively opened lock as EPERM/EACCES. */
+export declare function isAdvisoryLockContention(error: unknown, lockPath: string): Promise<boolean>;
+/** Closes an advisory lock handle and removes its lock file even when close fails. */
+export declare function releaseAdvisoryFileLock(handle: fs.FileHandle, lockPath: string): Promise<void>;
+/** Serializes mutations across CLI processes using an advisory lock file. */
+export declare function withFileLock<T>(filePath: string, operation: () => Promise<T>, options?: {
+    timeoutMs?: number;
+    staleMs?: number;
+    userMessage?: string;
+}): Promise<T>;

package/dist/infrastructure/filesystem/atomic-file-store.js

@@ -0,0 +1 @@
+import l from"node:crypto";import i from"node:fs/promises";import f from"node:path";import{CliError as p}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as d}from"../../domain/errors/error-codes.js";import{isAlreadyExists as E,isFileNotFound as w}from"./fs-errors.js";const h=5e3,g=900*1e3,v=25;async function $(r,e,t=384){await i.mkdir(f.dirname(r),{recursive:!0});const a=`${r}.tmp-${process.pid}-${l.randomUUID()}`;try{await i.writeFile(a,e,{mode:t}),await i.rename(a,r)}finally{await i.rm(a,{force:!0})}}async function T(r,e){const t=`${e}.backup-${process.pid}-${l.randomUUID()}`;let a=!1,o=!1;try{try{await i.rename(e,t),a=!0}catch(n){if(!w(n))throw n}try{await i.rename(r,e)}catch(n){if(a)try{await i.rename(t,e)}catch(c){throw o=!0,new AggregateError([n,c],`Installation and recovery failed. Previous contents are preserved at ${t}.`)}throw n}}finally{o||await i.rm(t,{recursive:!0,force:!0})}}async function C(r){const e=await i.open(r,"wx",384);try{return await e.writeFile(JSON.stringify({pid:process.pid,createdAt:new Date().toISOString()})),e}catch(t){throw await y(e,r),t}}async function L(r,e){if(E(r))return!0;if(!_(r))return!1;try{return await i.stat(e),!0}catch{return!1}}async function y(r,e){try{await r.close()}finally{await i.rm(e,{force:!0})}}async function I(r,e,t={}){const a=`${r}.lock`,o=t.timeoutMs??h,n=t.staleMs??g;await i.mkdir(f.dirname(r),{recursive:!0});const c=Date.now()+o;let s;for(;s===void 0;)try{s=await C(a)}catch(u){if(!await L(u,a))throw u;if(await k(a,n))continue;if(Date.now()>=c)throw new p(d.CONFIG_LOCKED,`Configuration file is locked: ${r}`,{category:"config",userMessage:t.userMessage??"A configuration update is already in progress. Try again shortly.",retryable:!0});await new Promise(m=>setTimeout(m,v))}try{return await e()}finally{await y(s,a)}}function _(r){return typeof r=="object"&&r!==null&&"code"in r&&(r.code==="EPERM"||r.code==="EACCES")}async function k(r,e){let t;try{t=await i.stat(r)}catch(o){return w(o)}if(Date.now()-t.mtimeMs<e)return!1;let a;try{const o=JSON.parse(await i.readFile(r,"utf8"));a=typeof o.pid=="number"?o.pid:void 0}catch{}return a!==void 0&&A(a)?!1:(await i.rm(r,{force:!0}),!0)}function A(r){if(r===process.pid)return!0;try{return process.kill(r,0),!0}catch{return!1}}export{C as acquireAdvisoryFileLock,$ as atomicWriteFile,L as isAdvisoryLockContention,y as releaseAdvisoryFileLock,T as replaceDirectoryWithRollback,I as withFileLock};

package/dist/infrastructure/filesystem/bounded-file-reader.d.ts

@@ -0,0 +1,6 @@
+export interface BoundedFileRead {
+    bytes: Buffer;
+    truncated: boolean;
+}
+/** Reads at most maxBytes and never loads an entire untrusted file into memory. */
+export declare function readFileBounded(filePath: string, maxBytes: number): Promise<BoundedFileRead>;

package/dist/infrastructure/filesystem/bounded-file-reader.js

@@ -0,0 +1 @@
+import i from"node:fs/promises";async function y(l,f){const t=Math.max(0,Math.floor(f)),r=await i.open(l,"r");try{const o=[];let a=0;const s=t+1;for(;a<s;){const e=Buffer.alloc(Math.min(65536,s-a)),{bytesRead:n}=await r.read(e,0,e.byteLength,null);if(n===0)break;o.push(e.subarray(0,n)),a+=n}const c=Buffer.concat(o);return{bytes:c.subarray(0,t),truncated:c.byteLength>t}}finally{await r.close()}}export{y as readFileBounded};

package/dist/infrastructure/filesystem/bounded-json-reader.d.ts

@@ -0,0 +1 @@
+export declare function readJsonFileBounded(filePath: string, maxBytes: number): Promise<unknown>;

package/dist/infrastructure/filesystem/bounded-json-reader.js

@@ -0,0 +1 @@
+import{readFileBounded as o}from"./bounded-file-reader.js";async function d(e,t){const r=await o(e,t);if(r.truncated)throw new Error(`File exceeds the maximum supported size: ${e}`);return JSON.parse(r.bytes.toString("utf8"))}export{d as readJsonFileBounded};

package/dist/infrastructure/filesystem/fs-errors.d.ts

@@ -0,0 +1,2 @@
+export declare function isFileNotFound(error: unknown): boolean;
+export declare function isAlreadyExists(error: unknown): boolean;

package/dist/infrastructure/filesystem/fs-errors.js

@@ -0,0 +1 @@
+function n(t){return typeof t=="object"&&t!==null&&"code"in t&&t.code==="ENOENT"}function c(t){return typeof t=="object"&&t!==null&&"code"in t&&t.code==="EEXIST"}export{c as isAlreadyExists,n as isFileNotFound};

package/dist/infrastructure/filesystem/gateway-media-input-reader.d.ts

@@ -0,0 +1,12 @@
+export interface GatewayImageEditInput {
+    readonly images: readonly Uint8Array[];
+    readonly mask: Uint8Array | undefined;
+}
+export interface GatewayAudioInput {
+    readonly bytes: Uint8Array;
+    readonly filename: string;
+    readonly sourceName: string;
+}
+/** Reads local upload inputs sequentially and enforces the gateway's published limits. */
+export declare function readGatewayImageEditInput(imageValue: string, maskValue: string | undefined, cwd: string): Promise<GatewayImageEditInput>;
+export declare function readGatewayAudioInput(source: string, cwd: string): Promise<GatewayAudioInput>;

package/dist/infrastructure/filesystem/gateway-media-input-reader.js

@@ -0,0 +1 @@
+import p from"node:path";import{GATEWAY_MEDIA_LIMITS as n,validateImageEditInputCount as l,validateImageEditTotalSize as u,validateUploadSize as m}from"../../domain/media/gateway-media-contract.js";import{CliError as E}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as I}from"../../domain/errors/error-codes.js";import{normalizeImage as b}from"../clipboard/image-normalizer.js";import{readFileBounded as g}from"./bounded-file-reader.js";import{resolveExternalPath as y}from"./path-resolver.js";async function v(r,o,e){const t=r.split(",").map(a=>a.trim()).filter(Boolean);l(t);const s=[];let d=0;for(const a of t){const f=await c(a,e,n.imageEditFileBytes,"Image",["image/png","image/jpeg","image/webp"]);d+=f.byteLength,u(d),s.push(f)}const i=o===void 0?void 0:await c(o,e,n.imageEditMaskBytes,"Mask",["image/png"]);return i!==void 0&&u(d+i.byteLength),{images:s,mask:i}}async function M(r,o){const e=await y(r,{cwd:o}),t=await g(e,n.audioUploadBytes);return t.truncated&&m(n.audioUploadBytes+1,n.audioUploadBytes,"Audio file"),m(t.bytes.byteLength,n.audioUploadBytes,"Audio file"),{bytes:t.bytes,filename:p.basename(e),sourceName:p.parse(p.basename(e)).name}}async function c(r,o,e,t,s){const d=await y(r,{cwd:o}),i=await g(d,e);i.truncated&&m(e+1,e,t);const a=b(i.bytes,void 0,e);if(!s.includes(a.mimeType))throw new E(I.ATTACHMENT_FORMAT_UNSUPPORTED,`${t} format is not accepted by the gateway.`,{category:"media",userMessage:`${t} must use one of: ${s.join(", ")}.`});return m(a.bytes.byteLength,e,t),a.bytes}export{M as readGatewayAudioInput,v as readGatewayImageEditInput};

package/dist/infrastructure/filesystem/local-filesystem-tool-executor.d.ts

@@ -0,0 +1,22 @@
+import type { ToolDefinition } from '@lotagate/sdk';
+import type { ToolExecutionContext, ToolExecutor, ToolInfo, ToolResult } from '@lotagate/agent-sdk';
+import { type FileChangeDiff } from '../../domain/filesystem/file-change-diff.js';
+import type { ToolActivityObserver } from '../../ports/tool-activity.js';
+/** Exposes the same filesystem capability definitions to runtime and context accounting. */
+export declare function filesystemToolDefinitions(): readonly ToolDefinition[];
+export declare class LocalFilesystemToolExecutor implements ToolExecutor {
+    private readonly options;
+    constructor(options?: {
+        onWrite?: (change: FileChangeDiff) => void | Promise<void>;
+        onActivity?: ToolActivityObserver;
+        writeScope?: readonly string[];
+    });
+    listTools(): readonly ToolDefinition[];
+    getToolInfo(toolName: string): ToolInfo | undefined;
+    execute(toolName: string, input: Record<string, unknown>, context: ToolExecutionContext): Promise<ToolResult>;
+    private read;
+    private list;
+    private write;
+    private exists;
+}
+export declare function isWithinWriteScope(filePath: string, context: ToolExecutionContext, scopes: readonly string[]): Promise<boolean>;

package/dist/infrastructure/filesystem/local-filesystem-tool-executor.js

@@ -0,0 +1,3 @@
+import d from"node:fs/promises";import o from"node:path";import{createFileChangeDiff as g}from"../../domain/filesystem/file-change-diff.js";import{assertWorkspaceWriteTarget as h,resolveWorkspacePath as u}from"./path-resolver.js";import{readFileBounded as y}from"./bounded-file-reader.js";import{isFileNotFound as m}from"./fs-errors.js";import{atomicWriteFile as k}from"./atomic-file-store.js";import{formatFilesystemActivityName as F}from"../../application/agent/tool-display.js";const w=[p("filesystem.read","Read a UTF-8 text file inside the trusted workspace for inspection. Never reproduce detailed file contents in the final response unless the user explicitly requests them.",{path:{type:"string",description:"Workspace-relative file path."}},["path"]),p("filesystem.list","List entries inside a trusted workspace directory.",{path:{type:"string",description:"Optional workspace-relative directory path. Defaults to the workspace root."}},[]),p("filesystem.write","Write UTF-8 text to a file inside the trusted workspace.",{path:{type:"string",description:"Workspace-relative file path."},content:{type:"string",description:"UTF-8 file content."}},["path","content"]),p("filesystem.exists","Check whether a workspace-relative path exists.",{path:{type:"string",description:"Workspace-relative path."}},["path"])],b=64*1024,v=400,S=240;function T(){return w}class U{options;constructor(t={}){this.options=t}listTools(){return T()}getToolInfo(t){return w.some(e=>L(e)===t)?{toolName:t,source:"filesystem",executorId:"local-filesystem",metadata:{risk:t==="filesystem.write"?"write":"read"}}:void 0}async execute(t,e,r){const s=this.options.onActivity?.start({key:`${r.runId}:${t}`,toolName:t,source:"filesystem",label:x(t,e.path)});let a;try{switch(t){case"filesystem.read":a=await this.read(e,r);break;case"filesystem.list":a=await this.list(e,r);break;case"filesystem.write":a=await this.write(e,r);break;case"filesystem.exists":a=await this.exists(e,r);break;default:a=l(`Unknown filesystem tool: ${t}`);break}}catch(n){a=l(n instanceof Error?n.message:String(n))}return s?.complete(a.isError===!0,a.metadata),a}async read(t,e){const r=await u(t.path,e),s=await y(r,e.maxResultBytes);return c(`${s.bytes.toString("utf8")}${s.truncated?`
+[truncated]`:""}`)}async list(t,e){const r=await u(t.path===void 0||typeof t.path=="string"&&t.path.trim().length===0?".":t.path,e),s=[],a=Math.max(1,Math.floor(e.maxResultBytes/64)),n=await d.opendir(r);try{for(let f=await n.read();f!==null&&(s.push({name:f.name,kind:f.isDirectory()?"directory":"file"}),!(s.length>=a));f=await n.read());}finally{await n.close()}return c(W(Buffer.from(JSON.stringify(s)),e.maxResultBytes))}async write(t,e){if(typeof t.content!="string")return l("filesystem.write requires string content.");const r=await u(t.path,e,!0);if(this.options.writeScope!==void 0&&!await E(r,e,this.options.writeScope))return l("filesystem.write path is outside the delegated worker write scope.");const s=Buffer.from(t.content,"utf8");if(s.byteLength>e.maxResultBytes)return l("filesystem.write content exceeds the configured limit.");const a=await I(r);await d.mkdir(o.dirname(r),{recursive:!0}),await h(r,e),await k(r,s),await h(r,e);const n=g(String(t.path),a.content,t.content,{maxInputLines:v,maxLines:S,truncated:a.truncated});try{await this.options.onWrite?.(n)}catch{}return{...c(`Wrote ${s.byteLength} bytes.`),metadata:{fileChange:{path:n.path,additions:n.additions,deletions:n.deletions}}}}async exists(t,e){try{return await u(t.path,e),c("true")}catch(r){if(m(r))return c("false");throw r}}}async function E(i,t,e){const r=await d.realpath(o.resolve(t.workspaceRoot??t.cwd??process.cwd())),s=o.relative(r,o.resolve(i));return s.startsWith("..")||o.isAbsolute(s)?!1:e.some(a=>{const n=o.normalize(a).replace(/[\\/]$/u,"");return n==="."?!0:s===n||s.startsWith(`${n}${o.sep}`)})}async function I(i){try{const t=await y(i,b);return{content:t.bytes.toString("utf8"),truncated:t.truncated}}catch(t){return m(t)?{content:"",truncated:!1}:{content:"",truncated:!0}}}function p(i,t,e,r){return{type:"function",function:{name:i,description:t,parameters:{type:"object",properties:e,required:r,additionalProperties:!1}}}}function L(i){return"function"in i?i.function.name:void 0}function c(i){return{content:i,isError:!1}}function l(i){return{content:i,isError:!0}}function W(i,t){return i.byteLength<=t?i.toString("utf8"):`${i.subarray(0,t).toString("utf8")}
+[truncated]`}function x(i,t){return F(i,t)}export{U as LocalFilesystemToolExecutor,T as filesystemToolDefinitions,E as isWithinWriteScope};

package/dist/infrastructure/filesystem/path-resolver.d.ts

@@ -0,0 +1,20 @@
+export declare function resolveWorkspacePath(input: unknown, context: {
+    cwd?: string;
+    workspaceRoot?: string;
+}, allowMissing?: boolean): Promise<string>;
+/** Resolves an explicitly supplied local path without applying workspace containment. */
+export declare function resolveExternalPath(input: unknown, context: {
+    cwd?: string;
+}, allowMissing?: boolean): Promise<string>;
+/** Resolves an output path while refusing a final symlink target. */
+export declare function resolveExternalOutputPath(input: unknown, context: {
+    cwd?: string;
+}): Promise<string>;
+/** Revalidates a write target immediately at the filesystem mutation boundary. */
+export declare function assertWorkspaceWriteTarget(filePath: string, context: {
+    cwd?: string;
+    workspaceRoot?: string;
+}): Promise<void>;
+/** Revalidates an explicitly selected external output without following the final path component. */
+export declare function assertExternalWriteTarget(filePath: string): Promise<void>;
+export declare function assertInside(root: string, candidate: string): void;

package/dist/infrastructure/filesystem/path-resolver.js

@@ -0,0 +1 @@
+import n from"node:fs/promises";import s from"node:path";import{CliError as h}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as w}from"../../domain/errors/error-codes.js";import{isFileNotFound as l}from"./fs-errors.js";async function A(t,e,o=!1){if(typeof t!="string"||t.trim().length===0)throw new h(w.TOOL_ARGUMENT_INVALID,"A relative workspace path is required.",{category:"tool",userMessage:"The filesystem tool requires a non-empty path."});const a=await n.realpath(s.resolve(e.workspaceRoot??e.cwd??process.cwd())),r=await n.realpath(s.resolve(e.cwd??a));p(a,r);const i=s.resolve(r,t);try{const c=await n.realpath(i);return p(a,c),c}catch(c){if(!o||!l(c))throw c;return y(i,a)}}async function m(t,e,o=!1){const a=d(t,e.cwd);try{return await n.realpath(a)}catch(r){if(!o||!l(r))throw r;return u(a)}}async function M(t,e){const o=d(t,e.cwd),a=await m(s.dirname(o),e,!0),r=s.join(a,s.basename(o));return await f(r),r}async function y(t,e){return u(t,e)}async function u(t,e){const o=[];let a=t;for(;;)try{const r=await n.realpath(a);return e!==void 0&&p(e,r),s.join(r,...o)}catch(r){if(!l(r))throw r;const i=s.dirname(a);if(i===a)throw r;o.unshift(s.basename(a)),a=i}}function d(t,e=process.cwd()){if(typeof t!="string"||t.trim().length===0)throw new h(w.INVALID_ARGUMENT,"A non-empty local path is required.",{category:"path",userMessage:"A non-empty local path is required."});return s.resolve(e,t)}async function f(t){try{if((await n.lstat(t)).isSymbolicLink())throw new h(w.INVALID_ARGUMENT,"Output paths cannot be symbolic links.",{category:"path",userMessage:"The output path cannot be a symbolic link."})}catch(e){if(!l(e))throw e}}async function T(t,e){const o=await n.realpath(s.resolve(e.workspaceRoot??e.cwd??process.cwd())),a=await n.realpath(s.dirname(t));p(o,a);try{const r=await n.realpath(t);p(o,r)}catch(r){if(!l(r))throw r}}async function I(t){await n.realpath(s.dirname(t)),await f(t)}function p(t,e){const o=s.relative(t,e);if(o===".."||o.startsWith(`..${s.sep}`)||s.isAbsolute(o))throw new h(w.PROJECT_SYMLINK_ESCAPE,"Path escapes the trusted workspace.",{category:"project",userMessage:"Tool access was denied because the path is outside the trusted workspace."})}export{I as assertExternalWriteTarget,p as assertInside,T as assertWorkspaceWriteTarget,M as resolveExternalOutputPath,m as resolveExternalPath,A as resolveWorkspacePath};

package/dist/infrastructure/filesystem/workspace-media-artifact-store.d.ts

@@ -0,0 +1,13 @@
+import type { MediaArtifactRequest, StoredMediaArtifact } from '../../domain/media/media-contract.js';
+import type { Logger } from '../../ports/logger.js';
+/** Persists generated media below the workspace by default or in an explicitly supplied local directory. */
+export declare class WorkspaceMediaArtifactStore {
+    private readonly cwd;
+    private readonly logger?;
+    constructor(cwd: string, logger?: Logger | undefined);
+    writeMany(request: MediaArtifactRequest, artifacts: readonly Uint8Array[]): Promise<readonly StoredMediaArtifact[]>;
+    private resolveDirectory;
+    private resolveTarget;
+    private resolveOutputPath;
+    private context;
+}

package/dist/infrastructure/filesystem/workspace-media-artifact-store.js

@@ -0,0 +1 @@
+import h from"node:fs/promises";import a from"node:path";import{CliError as T}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as v}from"../../domain/errors/error-codes.js";import{atomicWriteFile as x}from"./atomic-file-store.js";import{assertExternalWriteTarget as E,assertWorkspaceWriteTarget as D,resolveExternalOutputPath as $,resolveExternalPath as A,resolveWorkspacePath as m}from"./path-resolver.js";const P=1e4,k={image:a.join("tmp","images"),speech:a.join("tmp","speechs"),transcription:a.join("tmp","transcribes"),translation:a.join("tmp","translates"),video:a.join("tmp","videos")};class L{cwd;logger;constructor(t,r){this.cwd=t,this.logger=r}async writeMany(t,r){if(r.length===0)throw l("The provider returned no media artifacts.");if(t.out!==void 0&&r.length!==1)throw l("--out can only be used when exactly one artifact is returned. Use --out-dir instead.");const o=await this.resolveDirectory(t),i=t.outDir!==void 0,n=[];for(const[s,d]of r.entries()){const w=await this.resolveTarget(t,o,s,r.length),p=t.out===void 0,c=p?await _(w,this.context(),i):w;let f=p;try{await h.mkdir(a.dirname(c),{recursive:!0}),await u(c,this.context(),i),f||(f=await O(c,t.force,this.context(),i)),await x(c,d),await u(c,this.context(),i)}catch(y){throw f&&await b(c,this.context(),i),y}n.push({path:c,bytes:d.byteLength})}return this.logger?.info("Media artifacts stored.",{kind:t.kind,artifactCount:n.length,artifactBytes:n.reduce((s,d)=>s+d.bytes,0)}),n}async resolveDirectory(t){const r=t.outDir??k[t.kind];return t.outDir===void 0?m(r,this.context(),!0):A(r,{cwd:this.cwd},!0)}async resolveTarget(t,r,o,i){if(t.out!==void 0){R(t.out);const d=i>1?`-${o+1}`:"";return this.resolveOutputPath(a.join(r,`${t.out}${d}.${t.extension}`),t.outDir!==void 0)}const n=i>1?`-${o+1}`:"",s=a.join(r,`${j(t.source)}${n}.${t.extension}`);return this.resolveOutputPath(s,t.outDir!==void 0)}resolveOutputPath(t,r){return r?$(t,{cwd:this.cwd}):m(t,this.context(),!0)}context(){return{cwd:this.cwd,workspaceRoot:this.cwd}}}async function u(e,t,r){r?await E(e):await D(e,t)}async function O(e,t,r,o){if(t)return!1;try{return await h.mkdir(a.dirname(e),{recursive:!0}),await u(e,r,o),await(await h.open(e,"wx",384)).close(),await u(e,r,o),!0}catch(i){throw g(i)?l(`Refusing to overwrite an existing file: ${e}. Use --force with --out to replace it.`):i}}async function _(e,t,r){const o=a.parse(e);for(let i=0;i<P;i+=1){const n=i===0?e:a.join(o.dir,`${o.name}-${i+1}${o.ext}`);try{return await h.mkdir(o.dir,{recursive:!0}),await u(n,t,r),await(await h.open(n,"wx",384)).close(),await u(n,t,r),n}catch(s){if(!g(s))throw s}}throw l(`Unable to allocate a unique output path near: ${e}.`)}async function b(e,t,r){try{await u(e,t,r),await h.rm(e,{force:!0})}catch{}}function j(e){const t=e.normalize("NFKD").replace(/[^a-zA-Z0-9]+/gu,"-").replace(/^-+|-+$/gu,"").toLowerCase().slice(0,72);return t.length===0?"media":t}function R(e){const t=[...e].some(r=>{const o=r.codePointAt(0)??0;return o<32||o===127});if(e.length===0||e==="."||e===".."||e.includes("/")||e.includes("\\")||t)throw l("--out must be a filename without path separators or control characters.")}function g(e){return typeof e=="object"&&e!==null&&"code"in e&&e.code==="EEXIST"}function l(e){return new T(v.INVALID_ARGUMENT,e,{category:"media",userMessage:e})}export{L as WorkspaceMediaArtifactStore};

package/dist/infrastructure/logging/daily-rotating-file-writer.d.ts

@@ -0,0 +1,26 @@
+export interface DailyRotatingFileWriterOptions {
+    retentionDays: number;
+    now?: () => number;
+}
+export declare class DailyRotatingFileWriter {
+    private readonly directory;
+    private readonly options;
+    private readonly now;
+    private queue;
+    private queueBytes;
+    private dropped;
+    private drainPromise;
+    private closed;
+    private lastPrunedDate;
+    private lastError;
+    constructor(directory: string, options: DailyRotatingFileWriterOptions);
+    get health(): Readonly<{
+        dropped: number;
+        lastError?: Error;
+    }>;
+    write(line: string): void;
+    flush(): Promise<void>;
+    close(): Promise<void>;
+    private drain;
+    private prune;
+}

package/dist/infrastructure/logging/daily-rotating-file-writer.js

@@ -0,0 +1,2 @@
+import a from"node:fs";import d from"node:fs/promises";import u from"node:path";import{RESOURCE_LIMITS as l}from"../../domain/runtime/resource-limits.js";class y{directory;options;now;queue=[];queueBytes=0;dropped=0;drainPromise=Promise.resolve();closed=!1;lastPrunedDate;lastError;constructor(t,i){this.directory=t,this.options=i,this.now=i.now??Date.now,a.mkdirSync(t,{recursive:!0,mode:448}),this.lastPrunedDate=o(this.now()),this.prune()||(this.lastPrunedDate="")}get health(){return{dropped:this.dropped,...this.lastError===void 0?{}:{lastError:this.lastError}}}write(t){if(this.closed)return;const i=o(this.now());i!==this.lastPrunedDate&&this.prune()&&(this.lastPrunedDate=i);const r=Buffer.byteLength(t,"utf8");if(this.queue.length>=l.logQueueEntries||this.queueBytes+r>l.logQueueBytes){this.dropped+=1;return}this.queue.push({filePath:u.join(this.directory,`lotagate-${o(this.now())}.jsonl`),line:t}),this.queueBytes+=r,this.drainPromise=this.drainPromise.then(()=>this.drain()).catch(e=>{this.lastError=e instanceof Error?e:new Error(String(e))})}async flush(){await this.drainPromise,this.queue.length>0&&(this.drainPromise=this.drainPromise.then(()=>this.drain()).catch(t=>{this.lastError=t instanceof Error?t:new Error(String(t))}),await this.drainPromise)}async close(){this.closed=!0,await this.flush()}async drain(){if(this.queue.length===0)return;const t=this.queue.splice(0,this.queue.length);this.queueBytes=0;const i=this.dropped;i>0&&t.push({filePath:u.join(this.directory,`lotagate-${o(this.now())}.jsonl`),line:`${JSON.stringify({timestamp:new Date(this.now()).toISOString(),level:"warn",message:"Log entries dropped because the file writer queue was full.",dropped:i})}
+`});const r=new Map;for(const e of t)r.set(e.filePath,[...r.get(e.filePath)??[],e.line]);try{for(const[e,s]of r)await d.appendFile(e,s.join(""),{encoding:"utf8",mode:384});this.dropped=0,this.lastError=void 0}catch(e){const s=[...t.filter(n=>!n.line.includes("Log entries dropped because the file writer queue was full.")),...this.queue];throw this.queue=s,this.queueBytes=s.reduce((n,c)=>n+Buffer.byteLength(c.line,"utf8"),0),this.lastError=e instanceof Error?e:new Error(String(e)),e}}prune(){const t=this.now()-this.options.retentionDays*24*60*60*1e3;let i=!0;try{for(const r of a.readdirSync(this.directory,{withFileTypes:!0})){if(!r.isFile())continue;const e=/^lotagate-(\d{4}-\d{2}-\d{2})\.jsonl$/u.exec(r.name);if(e===null||e[1]===void 0)continue;const s=Date.parse(`${e[1]}T00:00:00.000Z`);if(Number.isFinite(s)&&s<t)try{a.rmSync(u.join(this.directory,r.name),{force:!0})}catch(n){i=!1,this.lastError=n instanceof Error?n:new Error(String(n))}}}catch(r){i=!1,this.lastError=r instanceof Error?r:new Error(String(r))}return i}}function o(h){return new Date(h).toISOString().slice(0,10)}export{y as DailyRotatingFileWriter};

package/dist/infrastructure/logging/log-redactor.d.ts

@@ -0,0 +1,2 @@
+export declare function redactLogDetails(details: Record<string, unknown> | undefined): Record<string, unknown> | undefined;
+export declare function redactLogText(value: string): string;

package/dist/infrastructure/logging/log-redactor.js

@@ -0,0 +1 @@
+const s=/(api.?key|authorization|credential|password|private.?key|secret|token)/iu;function i(r){if(r!==void 0)return t(r)}function t(r){return Object.fromEntries(Object.entries(r).map(([e,o])=>[e,s.test(e)?"[REDACTED]":c(o)]))}function c(r){return typeof r=="string"?n(r):Array.isArray(r)?r.map(e=>e!==null&&typeof e=="object"?t(e):typeof e=="string"?n(e):e):r!==null&&typeof r=="object"?t(r):r}function a(r){return n(r)}function n(r){return r.replace(/Bearer\s+[^\s]+/giu,"Bearer [REDACTED]").replace(/sk-[A-Za-z0-9_-]{8,}/gu,"[REDACTED]").replace(/((?:api[_-]?key|password|secret|token|authorization)\s*[:=]\s*)[^\s,]+/giu,"$1[REDACTED]").replace(/([?&][^=&#\s]*(?:key|token|secret|password|auth)[^=&#\s]*=)[^&#\s]+/giu,"$1[REDACTED]")}export{i as redactLogDetails,a as redactLogText};

package/dist/infrastructure/logging/logging-policy.d.ts

@@ -0,0 +1,6 @@
+import type { LogLevel } from '../../ports/logger.js';
+export interface LoggingPolicy {
+    level: LogLevel;
+    retentionDays: number;
+}
+export declare function resolveLoggingPolicy(env?: Readonly<Record<string, string | undefined>>): LoggingPolicy;

package/dist/infrastructure/logging/logging-policy.js

@@ -0,0 +1 @@
+import{readBoundedEnvironmentInteger as o}from"../config/environment-values.js";function L(r=process.env){const e=r.LOTAGATE_LOG_LEVEL?.trim().toLowerCase();return{level:e==="error"||e==="warn"||e==="debug"||e==="trace"?e:"info",retentionDays:o(r.LOTAGATE_LOG_RETENTION_DAYS,14,1,365)}}export{L as resolveLoggingPolicy};

package/dist/infrastructure/logging/structured-logger.d.ts

@@ -0,0 +1,24 @@
+import type { Logger, LogLevel } from '../../ports/logger.js';
+import type { Writable } from 'node:stream';
+import type { DailyRotatingFileWriter } from './daily-rotating-file-writer.js';
+export interface StructuredLoggerOptions {
+    level?: LogLevel;
+    consoleLevel?: LogLevel;
+    json?: boolean;
+    output?: Writable;
+    file?: DailyRotatingFileWriter;
+}
+export declare class StructuredLogger implements Logger {
+    private readonly minimumPriority;
+    private readonly consoleMinimumPriority;
+    private readonly output;
+    private readonly json;
+    private readonly file;
+    constructor(options?: StructuredLoggerOptions);
+    error(message: string, details?: Record<string, unknown>): void;
+    warn(message: string, details?: Record<string, unknown>): void;
+    info(message: string, details?: Record<string, unknown>): void;
+    debug(message: string, details?: Record<string, unknown>): void;
+    trace(message: string, details?: Record<string, unknown>): void;
+    private write;
+}

package/dist/infrastructure/logging/structured-logger.js

@@ -0,0 +1,4 @@
+import{redactLogDetails as u,redactLogText as c}from"./log-redactor.js";const r={error:0,warn:1,info:2,debug:3,trace:4};class f{minimumPriority;consoleMinimumPriority;output;json;file;constructor(i={}){this.minimumPriority=r[i.level??"info"],this.consoleMinimumPriority=r[i.consoleLevel??i.level??"info"],this.output=i.output??process.stderr,this.json=i.json??!1,this.file=i.file}error(i,t){this.write("error",i,t)}warn(i,t){this.write("warn",i,t)}info(i,t){this.write("info",i,t)}debug(i,t){this.write("debug",i,t)}trace(i,t){this.write("trace",i,t)}write(i,t,o){if(r[i]>this.minimumPriority)return;const n=u(o),e=c(t),s={timestamp:new Date().toISOString(),level:i,message:e,...n??{}};r[i]<=this.consoleMinimumPriority&&this.output.write(this.json?`${JSON.stringify(s)}
+`:`[${i}] ${e}
+`);try{this.file?.write(`${JSON.stringify(s)}
+`)}catch{}}}export{f as StructuredLogger};

package/dist/infrastructure/memory/file-memory-store.d.ts

@@ -0,0 +1,37 @@
+import type { MemoryBundle, MemoryDraft, MemoryRecord } from '../../domain/memory/memory.js';
+import { type MemorySearchHit, type MemorySearchQuery, type MemorySemanticHit } from '../../domain/memory/memory-search.js';
+import type { MemoryListOptions, MemoryStore } from '../../ports/memory-store.js';
+import type { PlatformPaths } from '../platform/platform-paths.js';
+import type { Logger } from '../../ports/logger.js';
+/** Local project memory. Journal writes are authoritative; index reads are the fast path. */
+export declare class FileMemoryStore implements MemoryStore {
+    private readonly paths;
+    private readonly logger?;
+    constructor(paths: PlatformPaths, logger?: Logger | undefined);
+    list(cwd: string, options?: MemoryListOptions): Promise<readonly MemoryRecord[]>;
+    search(cwd: string, query: MemorySearchQuery): Promise<readonly MemorySearchHit[]>;
+    ensureSemanticIndex(cwd: string, model: string, embed: (texts: readonly string[], signal?: AbortSignal) => Promise<readonly number[][]>, signal?: AbortSignal): Promise<void>;
+    semanticSearch(cwd: string, model: string, vector: readonly number[], maximum: number): Promise<readonly MemorySemanticHit[]>;
+    get(cwd: string, id: string): Promise<MemoryRecord | undefined>;
+    consolidate(cwd: string, draft: MemoryDraft): Promise<{
+        record: MemoryRecord;
+        action: 'insert' | 'merge' | 'supersede' | 'ignore';
+    }>;
+    forget(cwd: string, id: string): Promise<boolean>;
+    clear(cwd: string): Promise<number>;
+    markRetrieved(cwd: string, ids: readonly string[]): Promise<void>;
+    export(cwd: string): Promise<MemoryBundle>;
+    import(cwd: string, bundle: MemoryBundle): Promise<{
+        imported: number;
+        skipped: number;
+    }>;
+    private resolvePaths;
+    private readRecords;
+    private readSearchIndex;
+    private readIndex;
+    private readJournal;
+    private append;
+    private replaceJournal;
+    private writeIndex;
+    private pruneSemanticIndex;
+}

package/dist/infrastructure/memory/file-memory-store.js

@@ -0,0 +1,11 @@
+import V from"node:crypto";import j from"node:fs/promises";import S from"node:path";import{effectiveMemoryRecord as M,MEMORY_SCHEMA_VERSION as m,memoryRecordFromDraft as L,normalizeMemoryBundle as D,normalizeMemoryRecord as B}from"../../domain/memory/memory.js";import{buildMemorySearchIndex as z,isMemoryRetrievable as K,searchMemoryIndex as _}from"../../domain/memory/memory-search.js";import{memoryKindDefinition as U,MEMORY_KINDS as T}from"../../domain/memory/memory-kinds.js";import{RESOURCE_LIMITS as h}from"../../domain/runtime/resource-limits.js";import{atomicWriteFile as E,withFileLock as y}from"../filesystem/atomic-file-store.js";import{readJsonFileBounded as k}from"../filesystem/bounded-json-reader.js";import{isFileNotFound as O}from"../filesystem/fs-errors.js";import{createProjectKey as W}from"../sessions/project-session-paths.js";class pe{paths;logger;constructor(e,t){this.paths=e,this.logger=t}async list(e,t={}){return(await this.readRecords(this.resolvePaths(e))).map(i=>M(i)).filter(i=>t.kind===void 0||i.kind===t.kind).filter(i=>t.state===void 0||i.state===t.state).sort((i,n)=>n.updatedAt.localeCompare(i.updatedAt)||i.id.localeCompare(n.id))}async search(e,t){const r=this.resolvePaths(e),i=await this.readRecords(r),n=Object.fromEntries(i.map(a=>[a.id,M(a)])),o=await this.readSearchIndex(r,i);return _(n,o,t)}async ensureSemanticIndex(e,t,r,i){const n=this.resolvePaths(e),o=await this.readRecords(n),a=await J(n.semanticIndexFile),p=a?.model===t?a.entries:{},c=o.filter(d=>p[d.id]?.contentHash!==f(d));if(c.length===0)return;const l=await r(c.map(d=>`${d.statement}
+${d.rationale??""}
+${d.topics.join(" ")}`),i);if(l.length!==c.length)throw new Error("Embedding provider returned an unexpected number of vectors.");await y(n.journalFile,async()=>{const d=await this.readRecords(n,!0),g=await J(n.semanticIndexFile),v=g?.model===t?{...g.entries}:{};for(const[u,x]of c.entries()){const R=d.find(H=>H.id===x.id),F=l[u];R===void 0||F===void 0||f(R)!==f(x)||(P(F),v[x.id]={contentHash:f(x),vector:[...F]})}const A={schemaVersion:m,model:t,entries:v,updatedAt:I()},b=`${JSON.stringify(A)}
+`;if(Buffer.byteLength(b,"utf8")>h.memoryIndexBytes)throw new Error("Memory semantic index exceeds the supported size limit.");await E(n.semanticIndexFile,b)},w())}async semanticSearch(e,t,r,i){if(i<=0)return[];P(r);const n=this.resolvePaths(e);return y(n.journalFile,async()=>{const o=await this.readRecords(n,!0),a=await J(n.semanticIndexFile);if(a?.model!==t)return[];const p=new Map(o.map(c=>[c.id,M(c)]));return Object.keys(a.entries).flatMap(c=>{const l=a.entries[c];if(l===void 0)return[];const d=p.get(c);return d===void 0||!K(d)?[]:[{record:d,similarity:G(r,l.vector),rank:0}]}).sort((c,l)=>l.similarity-c.similarity||c.record.id.localeCompare(l.record.id)).slice(0,i).map((c,l)=>({...c,rank:l+1}))},w())}async get(e,t){const r=this.resolvePaths(e);return(await this.readRecords(r)).map(n=>M(n)).find(n=>n.id===t)}async consolidate(e,t){const r=this.resolvePaths(e);return y(r.journalFile,async()=>{const i=I(),n=L(V.randomUUID(),t,i),o=await this.readRecords(r,!0),a=o.find(u=>f(u)===f(n));if(a!==void 0){const u={...a,...n.rationale===void 0&&a.rationale===void 0?{}:{rationale:n.rationale??a.rationale},topics:[...new Set([...a.topics,...n.topics])].sort(),evidenceRefs:[...new Set([...a.evidenceRefs,...n.evidenceRefs])],updatedAt:i};if(!(JSON.stringify(u)!==JSON.stringify(a)))return{record:a,action:"ignore"};const R=o.map(F=>F.id===a.id?u:F);return await this.append(r,[{schemaVersion:m,type:"upsert",record:u}]),await this.writeIndex(r,R),{record:u,action:"merge"}}const p=new Set(n.supersedes),c=o.filter(u=>u.state==="active"&&p.has(u.id)),l=o.find(u=>u.state==="active"&&u.kind===n.kind&&ee(n.kind)&&te(u,n));if(l!==void 0&&c.length===0)return{record:l,action:"ignore"};const d=n,g=c.map(u=>u.id),v=o.map(u=>g.includes(u.id)?{...u,state:"superseded",updatedAt:i}:u),A=[...v,d],b=[...v.filter((u,x)=>u!==o[x]).map(u=>({schemaVersion:m,type:"upsert",record:u})),{schemaVersion:m,type:"upsert",record:d}];if(A.length>h.memoryRecords)throw new Error("Memory capacity reached. Forget or clear memories before adding more.");return await this.append(r,b),await this.writeIndex(r,A),{record:d,action:g.length>0?"supersede":"insert"}},w())}async forget(e,t){const r=this.resolvePaths(e);return y(r.journalFile,async()=>{const i=await this.readRecords(r,!0),n=i.filter(o=>o.id!==t);return n.length===i.length?!1:(await this.replaceJournal(r,n),await this.writeIndex(r,n),await this.pruneSemanticIndex(r,n),!0)},w())}async clear(e){const t=this.resolvePaths(e);return y(t.journalFile,async()=>{const r=await this.readRecords(t,!0);return r.length===0?0:(await this.replaceJournal(t,[]),await this.writeIndex(t,[]),await this.pruneSemanticIndex(t,[]),r.length)},w())}async markRetrieved(e,t){if(t.length===0)return;const r=this.resolvePaths(e);await y(r.journalFile,async()=>{const i=new Set(t),n=I(),o=await this.readRecords(r,!0),a=o.map(c=>i.has(c.id)?{...c,retrievalCount:c.retrievalCount+1,lastRetrievedAt:n,updatedAt:n}:c),p=a.filter((c,l)=>c!==o[l]).map(c=>({schemaVersion:m,type:"upsert",record:c}));p.length!==0&&(await this.append(r,p),await this.writeIndex(r,a))},w())}async export(e){return{schemaVersion:m,exportedAt:I(),records:await this.list(e)}}async import(e,t){const r=D(t),i=this.resolvePaths(e);return y(i.journalFile,async()=>{const n=await this.readRecords(i,!0),o=new Set(n.map(d=>d.id)),a=new Set(n.map(f)),p=r.records.filter(d=>!o.has(d.id)&&!a.has(f(d)));if(n.length+p.length>h.memoryRecords)throw new Error("Import exceeds the local memory capacity.");const c=I(),l=p.map(d=>({...d,source:"imported",state:"active",updatedAt:c}));if(l.length>0){const d=[...n,...l];await this.append(i,l.map(g=>({schemaVersion:m,type:"upsert",record:g}))),await this.writeIndex(i,d)}return{imported:l.length,skipped:r.records.length-l.length}},w())}resolvePaths(e){const t=S.join(this.paths.projectsDir,W(e,this.paths.platform),"memory");return{directory:t,journalFile:S.join(t,"journal.jsonl"),indexFile:S.join(t,"index.json"),semanticIndexFile:S.join(t,"semantic-index.json")}}async readRecords(e,t=!1){if(!t)return y(e.journalFile,()=>this.readRecords(e,!0),w());const r=await C(e.journalFile),i=await this.readIndex(e.indexFile);if(i?.journalFingerprint===r)return i.records;const n=Q(await this.readJournal(e.journalFile));return await this.writeIndex(e,n),this.logger?.info("memory.index.rebuilt",{projectKey:Z(e.directory),count:n.length}),n}async readSearchIndex(e,t){const r=await this.readIndex(e.indexFile);return r!==void 0&&r.records.length===t.length&&r.records.every((n,o)=>n.id===t[o]?.id&&n.updatedAt===t[o]?.updatedAt)?r.search:z(t)}async readIndex(e){try{const t=await k(e,h.memoryIndexBytes);return q(t)}catch(t){return O(t),void 0}}async readJournal(e){let t;try{if((await j.stat(e)).size>h.memoryJournalBytes)throw new Error("Memory journal exceeds the supported size limit. Export and clear memory before continuing.");t=await j.readFile(e,"utf8")}catch(r){if(O(r))return[];throw r}try{return N(t)}catch(r){if(!t.endsWith(`
+`))return await new Promise(i=>setImmediate(i)),N(await j.readFile(e,"utf8"));throw r}}async append(e,t){if(t.length===0)return;await j.mkdir(e.directory,{recursive:!0});const r=t.map(n=>JSON.stringify(n)).join(`
+`).concat(`
+`);if(await X(e.journalFile)+Buffer.byteLength(r,"utf8")>h.memoryJournalBytes)throw new Error("Memory journal exceeds the supported size limit. Export and clear memory before continuing.");await j.appendFile(e.journalFile,r,{encoding:"utf8",mode:384})}async replaceJournal(e,t){const r=t.map(n=>({schemaVersion:m,type:"upsert",record:n})),i=r.length===0?"":`${r.map(n=>JSON.stringify(n)).join(`
+`)}
+`;if(Buffer.byteLength(i,"utf8")>h.memoryJournalBytes)throw new Error("Memory journal exceeds the supported size limit.");await E(e.journalFile,i)}async writeIndex(e,t,r=z(t)){const i={schemaVersion:m,journalFingerprint:await C(e.journalFile),records:t,search:r,...$(t),updatedAt:I()},n=`${JSON.stringify(i,null,2)}
+`;if(Buffer.byteLength(n,"utf8")>h.memoryIndexBytes)throw new Error("Memory index exceeds the supported size limit.");await E(e.indexFile,n)}async pruneSemanticIndex(e,t){const r=await J(e.semanticIndexFile);if(r===void 0)return;const i=new Map(t.map(o=>[o.id,o])),n=Object.fromEntries(Object.entries(r.entries).filter(([o,a])=>i.get(o)!==void 0&&f(i.get(o))===a.contentHash));await E(e.semanticIndexFile,`${JSON.stringify({...r,entries:n,updatedAt:I()})}
+`)}}function N(s){return s.split(/\r?\n/u).filter(Boolean).map(e=>Y(JSON.parse(e)))}function Y(s){if(typeof s!="object"||s===null||Array.isArray(s))throw new Error("Invalid memory journal entry.");const e=s;if(e.schemaVersion!==m||e.type!=="upsert")throw new Error("Unsupported memory journal entry.");return{schemaVersion:m,type:"upsert",record:B(e.record)}}function q(s){if(typeof s!="object"||s===null||Array.isArray(s))return;const e=s;if(!(e.schemaVersion!==m||typeof e.journalFingerprint!="string"||typeof e.updatedAt!="string"||!Array.isArray(e.records)))try{const t=e.records.map(i=>B(i)),r=z(t);return{schemaVersion:m,journalFingerprint:e.journalFingerprint,records:t,search:r,...$(t),updatedAt:e.updatedAt}}catch{return}}async function J(s){try{const e=await k(s,h.memoryIndexBytes);if(typeof e!="object"||e===null||Array.isArray(e))return;const t=e;if(t.schemaVersion!==m||typeof t.model!="string"||typeof t.updatedAt!="string"||typeof t.entries!="object"||t.entries===null||Array.isArray(t.entries))return;const r={};for(const[i,n]of Object.entries(t.entries)){if(typeof n!="object"||n===null||Array.isArray(n))return;const o=n;if(typeof o.contentHash!="string"||!Array.isArray(o.vector)||o.vector.some(a=>typeof a!="number"||!Number.isFinite(a)))return;r[i]={contentHash:o.contentHash,vector:o.vector}}return{schemaVersion:m,model:t.model,entries:r,updatedAt:t.updatedAt}}catch{return}}function P(s){if(s.length===0||s.length>4096||s.some(e=>!Number.isFinite(e)))throw new Error("Embedding vector is invalid.")}function G(s,e){if(s.length!==e.length)return-1;let t=0,r=0,i=0;for(let n=0;n<s.length;n+=1)t+=s[n]*e[n],r+=s[n]**2,i+=e[n]**2;return r===0||i===0?0:t/Math.sqrt(r*i)}function Q(s){const e=new Map;for(const t of s)e.set(t.record.id,t.record);return[...e.values()]}function $(s){const e=Object.fromEntries(T.map(r=>[r,s.filter(i=>i.kind===r).map(i=>i.id)])),t=Object.fromEntries(["active","superseded","expired"].map(r=>[r,s.filter(i=>i.state===r).map(i=>i.id)]));return{activeIds:s.filter(r=>r.state==="active").map(r=>r.id),kindIds:e,stateIds:t}}async function X(s){try{return(await j.stat(s)).size}catch(e){if(O(e))return 0;throw e}}async function C(s){try{const e=await j.stat(s);return`${e.size}:${e.mtimeMs}`}catch(e){if(O(e))return"missing";throw e}}function f(s){return V.createHash("sha256").update(`${s.kind}\0${s.statement.trim().toLocaleLowerCase()}\0${s.topics.join("\0")}`,"utf8").digest("hex")}function Z(s){return V.createHash("sha256").update(s,"utf8").digest("hex").slice(0,16)}function ee(s){return U(s).consolidationPolicy==="retain-on-conflict"}function te(s,e){if(s.topics.length===0||e.topics.length===0)return!1;const t=new Set(s.topics);return e.topics.some(r=>t.has(r))}function w(){return{userMessage:"Memory is being updated by another LotaGate process. Try again shortly."}}function I(){return new Date().toISOString()}export{pe as FileMemoryStore};

package/dist/infrastructure/network/safe-media-downloader.d.ts

@@ -0,0 +1,23 @@
+import https from 'node:https';
+export interface DownloadedMedia {
+    readonly bytes: Uint8Array;
+    readonly contentType: string | undefined;
+}
+export interface PublicMediaAddress {
+    readonly address: string;
+    readonly family: 4 | 6;
+}
+export interface PublicMediaDownloaderDependencies {
+    resolveAddresses?: (hostname: string) => Promise<readonly PublicMediaAddress[]>;
+    request?: typeof https.request;
+}
+interface DownloadOptions {
+    readonly maxBytes: number;
+    readonly timeoutMs: number;
+    readonly signal?: AbortSignal | undefined;
+}
+/** Downloads a generated artifact only through a verified public HTTPS address. */
+export declare function downloadPublicMedia(rawUrl: string | undefined, options: DownloadOptions): Promise<DownloadedMedia>;
+/** Creates an isolated downloader for CLI infrastructure tests and alternate Node transports. */
+export declare function createPublicMediaDownloader(dependencies?: PublicMediaDownloaderDependencies): (rawUrl: string | undefined, options: DownloadOptions) => Promise<DownloadedMedia>;
+export {};

package/dist/infrastructure/network/safe-media-downloader.js

@@ -0,0 +1 @@
+import{lookup as v}from"node:dns/promises";import E from"node:https";import{isIP as L}from"node:net";import{CliError as h}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as b}from"../../domain/errors/error-codes.js";async function H(e,t){return I()(e,t)}function I(e={}){const t=e.resolveAddresses??P,r=e.request??E.request;return async(o,n)=>{const s=g(o);return D(n,async d=>{const l=await R(s.hostname,t,d,n.signal),i=await A(s,l,r,d,n.signal);if(i.statusCode===void 0||i.statusCode<200||i.statusCode>=300)throw i.destroy(),f(`Image download failed with HTTP ${i.statusCode??"unknown"}.`);const a=i.headers["content-length"],c=Array.isArray(a)?a[0]:a;if(c!==void 0&&(!/^\d+$/u.test(c)||Number(c)>n.maxBytes))throw i.destroy(),f("Downloaded image exceeds the supported output limit.");return{bytes:await C(i,n.maxBytes,d,n.signal),contentType:$(i.headers["content-type"])}})}}function g(e){if(e===void 0)throw f("The provider returned an image without Base64 data or a download URL.");let t;try{t=new URL(e)}catch{throw f("The provider returned an invalid image download URL.")}if(t.protocol!=="https:"||t.username||t.password||t.port!==""&&t.port!=="443")throw f("Image download URLs must use public HTTPS on port 443.");return t}async function R(e,t,r,o){if(e.toLowerCase()==="localhost")throw f("Image download URL must not target localhost.");const n=await U(t(e),r,o);if(n.length===0||n.some(s=>!B(s.address)))throw f("Image download URL must resolve only to public network addresses.");return n}async function P(e){return(await v(e,{all:!0,verbatim:!0})).map(r=>({address:r.address,family:r.family===6?6:4}))}async function A(e,t,r,o,n){let s;for(const l of t)try{return await T(e,l,r,o,n)}catch(i){if(o.aborted)throw m(n);s=i}const d=s instanceof Error&&s.message.length>0?`: ${s.message}`:"";throw f(`Image download failed${d}`)}function T(e,t,r,o,n){return new Promise((s,d)=>{let l=!1,i;const a=u=>{l||(l=!0,o.removeEventListener("abort",c),u())},c=()=>{const u=m(n);i?.destroy(u),a(()=>d(u))};try{i=r({protocol:"https:",hostname:e.hostname,port:443,path:`${e.pathname}${e.search}`,method:"GET",servername:e.hostname,lookup:(u,p,w)=>{p.all===!0?w(null,[{address:t.address,family:t.family}]):w(null,t.address,t.family)}},u=>a(()=>s(u))),i.once("error",u=>a(()=>d(u))),o.aborted?c():o.addEventListener("abort",c,{once:!0}),i.end()}catch(u){a(()=>d(u))}})}async function C(e,t,r,o){const n=[];let s=0;const d=()=>{e.destroy()};r.aborted?d():r.addEventListener("abort",d,{once:!0});try{for await(const a of e){if(r.aborted)throw m(o);const c=Buffer.isBuffer(a)?a:Buffer.from(a);if(s+=c.byteLength,s>t)throw e.destroy(),f("Downloaded image exceeds the supported output limit.");n.push(c)}}catch(a){throw r.aborted?m(o):a instanceof h?a:f(a instanceof Error?`Image download failed: ${a.message}`:"Image download failed.")}finally{r.removeEventListener("abort",d)}if(r.aborted)throw m(o);const l=new Uint8Array(s);let i=0;for(const a of n)l.set(a,i),i+=a.byteLength;return l}async function D(e,t){const r=new AbortController,o=setTimeout(()=>r.abort(new Error("Image download timed out.")),e.timeoutMs),n=()=>r.abort(e.signal?.reason);e.signal?.aborted?n():e.signal?.addEventListener("abort",n,{once:!0});try{return await t(r.signal)}finally{clearTimeout(o),e.signal?.removeEventListener("abort",n)}}async function U(e,t,r){if(t.aborted)throw m(r);return new Promise((o,n)=>{const s=()=>{t.removeEventListener("abort",s),n(m(r))};t.addEventListener("abort",s,{once:!0}),e.then(d=>{t.removeEventListener("abort",s),o(d)},d=>{t.removeEventListener("abort",s),n(d)})})}function $(e){return(Array.isArray(e)?e[0]:e)?.split(";",1)[0]?.trim()||void 0}function B(e){const t=L(e);return t===4?y(e):t===6?k(e):!1}function y(e){const t=e.split(".").map(Number),[r,o]=t;return!(r===void 0||o===void 0||r===0||r===10||r===127||r>=224||r===100&&o>=64&&o<=127||r===169&&o===254||r===172&&o>=16&&o<=31||r===192&&o===168||r===198&&(o===18||o===19))}function k(e){const t=e.toLowerCase();if(t==="::"||t==="::1"||t.startsWith("fe80:")||t.startsWith("fc")||t.startsWith("fd"))return!1;const r=t.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/u);return r===null||y(r[1])}function m(e){return e?.aborted?q(e.reason):f("Image download timed out.")}function q(e){return new h(b.INTERRUPTED,"Media command interrupted.",{category:"media",userMessage:"Media command interrupted.",retryable:!0,cause:e})}function f(e){return new h(b.INVALID_ARGUMENT,e,{category:"media",userMessage:e})}export{I as createPublicMediaDownloader,H as downloadPublicMedia};

package/dist/infrastructure/platform/host-platform.d.ts

@@ -0,0 +1,14 @@
+export type HostPlatformId = 'windows' | 'linux' | 'macos' | 'bsd' | 'unsupported';
+export type HostNodePlatform = typeof process.platform;
+export interface HostPlatformContext {
+    readonly id: HostPlatformId;
+    readonly nodePlatform: HostNodePlatform;
+    readonly isWindows: boolean;
+    readonly supportsProcessGroups: boolean;
+    readonly env: Readonly<Record<string, string | undefined>>;
+}
+export interface HostPlatformInput {
+    nodePlatform?: HostNodePlatform;
+    env?: Readonly<Record<string, string | undefined>>;
+}
+export declare function detectHostPlatform(input?: HostPlatformInput): HostPlatformContext;

package/dist/infrastructure/platform/host-platform.js

@@ -0,0 +1 @@
+function i(n={}){const e=n.nodePlatform??process.platform,s=o(e),r=s==="windows";return{id:s,nodePlatform:e,isWindows:r,supportsProcessGroups:!r,env:n.env??process.env}}function o(n){return n==="win32"||n==="cygwin"?"windows":n==="linux"||n==="android"?"linux":n==="darwin"?"macos":n==="freebsd"||n==="openbsd"||n==="netbsd"?"bsd":"unsupported"}export{i as detectHostPlatform};

package/dist/infrastructure/platform/host-process.d.ts

@@ -0,0 +1,29 @@
+import { type ChildProcess, type SpawnOptions } from 'node:child_process';
+import type { HostPlatformContext } from './host-platform.js';
+export { terminatePlatformProcess } from './process-termination.js';
+export interface PreparedPlatformCommand {
+    command: string;
+    args: readonly string[];
+    windowsVerbatimArguments: boolean;
+}
+/** Normalizes the structured shell contract for a complete PowerShell script. */
+export declare function normalizePowerShellScriptInput(input: Record<string, unknown>, platform: HostPlatformContext): Record<string, unknown>;
+export declare function preparePowerShellScript(command: string, script: string): PreparedPlatformCommand;
+export declare function isPowerShellExecutable(command: string): boolean;
+export interface PlatformExecOptions {
+    cwd?: string;
+    env?: NonNullable<SpawnOptions['env']>;
+    maxBufferBytes?: number;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    rejectOnNonZero?: boolean;
+}
+export interface PlatformExecResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number | null;
+}
+export declare function spawnPlatformProcess(command: string, args: readonly string[], platform: HostPlatformContext, options?: SpawnOptions): ChildProcess;
+export declare function execPlatformCommand(command: string, args: readonly string[], platform: HostPlatformContext, options?: PlatformExecOptions): Promise<PlatformExecResult>;
+export declare function createSafeChildEnvironment(platform: HostPlatformContext): NonNullable<SpawnOptions['env']>;
+export declare function preparePlatformCommand(command: string, args: readonly string[], platform: HostPlatformContext): PreparedPlatformCommand;

package/dist/infrastructure/platform/host-process.js

@@ -0,0 +1 @@
+import T from"node:path";import{spawn as b}from"node:child_process";import{RESOURCE_LIMITS as L}from"../../domain/runtime/resource-limits.js";import{terminatePlatformProcess as M}from"./process-termination.js";import{terminatePlatformProcess as z}from"./process-termination.js";const _=2*1024*1024,h=/([()\][%!^"`<>&|;, *?])/gu,$=/\.(?:com|exe)$/iu,v=/node_modules[\\/]\.bin[\\/][^\\/]+\.cmd$/iu;function F(e,n){const r=e.script;if(r===void 0)return e;if(typeof r!="string"||r.trim().length===0)throw new Error("shell.exec script must be a non-empty string.");if(Buffer.byteLength(r,"utf8")>L.sessionTextBytes)throw new Error("shell.exec script exceeds the configured limit.");const t=e.command;if(typeof t!="string"||!I(t))throw new Error("shell.exec script requires powershell.exe or pwsh.exe as the command.");const o=e.args;if(o!==void 0&&(!Array.isArray(o)||o.length>0||o.some(i=>typeof i!="string")))throw new Error("shell.exec script cannot be combined with args.");const a=y(t,r),u={...e};return delete u.script,{...u,command:a.command,args:[...a.args]}}function y(e,n){return{command:e,args:["-NoProfile","-NonInteractive","-Command",n],windowsVerbatimArguments:!1}}function I(e){const n=e.replace(/^.*[\\/]/u,"").toLowerCase();return n==="powershell"||n==="powershell.exe"||n==="pwsh"||n==="pwsh.exe"}function D(e,n,r,t={}){const o=O(e,n,r);return b(o.command,[...o.args],{...t,shell:!1,windowsHide:!0,...o.windowsVerbatimArguments?{windowsVerbatimArguments:!0}:{}})}function G(e,n,r,t={}){if(t.signal?.aborted)return Promise.reject(new Error("Process cancelled."));const o=t.maxBufferBytes??_,a=t.timeoutMs??L.internalProcessTimeoutMs;return new Promise((u,i)=>{const d=D(e,n,r,{...t.cwd===void 0?{}:{cwd:t.cwd},env:t.env??B(r),detached:r.supportsProcessGroups,stdio:["ignore","pipe","pipe"]}),A=[],p=[];let w=0,c=!1,l=!1,x=!1,S=!1,g;const m=()=>{g!==void 0&&clearTimeout(g),t.signal?.removeEventListener("abort",P)},P=()=>{S=!0,E(new Error("Process cancelled."))},E=s=>{l||c||(l=!0,M(d,r).then(()=>{c||(c=!0,m(),i(s))},f=>{c||(c=!0,m(),i(new AggregateError([s,f],`${s.message} Termination could not be confirmed.`)))}))},C=(s,f)=>{if(!(c||l)){if(w+=f.byteLength,w>o){E(new Error("Process output exceeded the configured limit."));return}s.push(f)}};d.stdout?.on("data",s=>C(A,s)),d.stderr?.on("data",s=>C(p,s)),d.once("error",s=>{c||l||(c=!0,m(),i(s))}),d.once("close",s=>{c||(c=!0,m(),S?i(new Error("Process cancelled.")):x?i(new Error(`Process timed out after ${a}ms.`)):w>o?i(new Error("Process output exceeded the configured limit.")):s===0||t.rejectOnNonZero===!1?u({stdout:Buffer.concat(A).toString("utf8"),stderr:Buffer.concat(p).toString("utf8"),exitCode:s}):i(new Error(Buffer.concat(p).toString("utf8").trim()||`Process exited with code ${String(s)}.`)))}),g=setTimeout(()=>{x=!0,E(new Error(`Process timed out after ${a}ms.`))},a),t.signal?.aborted===!0?P():t.signal?.addEventListener("abort",P,{once:!0})})}function B(e){const n=e.isWindows?["PATHEXT","SystemRoot","ComSpec","COMSPEC","TEMP","TMP","HOME","USERPROFILE","APPDATA","LOCALAPPDATA","LANG","LC_ALL"]:["PATH","HOME","TMPDIR","TEMP","LANG","LC_ALL","XDG_RUNTIME_DIR","WAYLAND_DISPLAY","DISPLAY"],r={};if(e.isWindows){const t=e.env.Path??e.env.PATH;t!==void 0&&(r.Path=t)}for(const t of n){const o=e.env[t];o!==void 0&&(r[t]=o)}return r}function O(e,n,r){if(!r.isWindows||$.test(e))return{command:e,args:n,windowsVerbatimArguments:!1};const t=T.win32.normalize(e),o=v.test(t),a=W(t),u=n.map(i=>R(i,o));return{command:r.env.ComSpec??r.env.COMSPEC??"cmd.exe",args:["/d","/s","/c",`"${[a,...u].join(" ")}"`],windowsVerbatimArguments:!0}}function W(e){return e.replace(h,"^$1")}function R(e,n){let r=e.replace(/(?=(\\+?)?)\1"/gu,'$1$1\\"').replace(/(?=(\\+?)?)\1$/gu,"$1$1");return r=`"${r}"`.replace(h,"^$1"),n?r.replace(h,"^$1"):r}export{B as createSafeChildEnvironment,G as execPlatformCommand,I as isPowerShellExecutable,F as normalizePowerShellScriptInput,O as preparePlatformCommand,y as preparePowerShellScript,D as spawnPlatformProcess,z as terminatePlatformProcess};

package/dist/infrastructure/platform/platform-paths.d.ts

@@ -0,0 +1,25 @@
+import { type HostPlatformContext } from './host-platform.js';
+export interface PlatformPaths {
+    platform: HostPlatformContext;
+    home: string;
+    globalConfigDir: string;
+    globalConfigFile: string;
+    credentialsFile: string;
+    credentialKeyFile: string;
+    projectsDir: string;
+    cacheDir: string;
+    logsDir: string;
+    skillsDir: string;
+    pluginsDir: string;
+    mcpConfigFile: string;
+}
+export declare function resolvePlatformPaths(env?: Readonly<Record<string, string | undefined>>, platform?: HostPlatformContext): PlatformPaths;
+export declare function resolveProjectConfigPaths(cwd: string): {
+    directory: string;
+    settings: string;
+    localSettings: string;
+    skillsDir: string;
+    pluginsDir: string;
+    hooksDir: string;
+    mcpConfigFile: string;
+};

package/dist/infrastructure/platform/platform-paths.js

@@ -0,0 +1 @@
+import e from"node:os";import o from"node:path";import{detectHostPlatform as r}from"./host-platform.js";function g(s=process.env,n=r({env:s})){const t=s.LOTAGATE_HOME?.trim()||e.homedir(),i=o.join(t,".lotagate");return{platform:n,home:t,globalConfigDir:i,globalConfigFile:o.join(i,"settings.json"),credentialsFile:o.join(i,"credentials.enc.json"),credentialKeyFile:o.join(i,"credentials.key"),projectsDir:o.join(i,"projects"),cacheDir:o.join(i,"cache"),logsDir:o.join(i,"logs"),skillsDir:o.join(i,"skills"),pluginsDir:o.join(i,"plugins"),mcpConfigFile:o.join(i,"mcp.json")}}function a(s){const n=o.join(s,".lotagate");return{directory:n,settings:o.join(n,"settings.json"),localSettings:o.join(n,"settings.local.json"),skillsDir:o.join(n,"skills"),pluginsDir:o.join(n,"plugins"),hooksDir:o.join(n,"hooks"),mcpConfigFile:o.join(n,"mcp.json")}}export{g as resolvePlatformPaths,a as resolveProjectConfigPaths};

package/dist/infrastructure/platform/process-termination.d.ts

@@ -0,0 +1,4 @@
+import { type ChildProcess } from 'node:child_process';
+import type { HostPlatformContext } from './host-platform.js';
+/** Requests termination, escalates, and observes close within a bounded deadline. */
+export declare function terminatePlatformProcess(child: ChildProcess, platform: HostPlatformContext): Promise<void>;

package/dist/infrastructure/platform/process-termination.js

@@ -0,0 +1 @@
+import{spawn as T}from"node:child_process";import{RESOURCE_LIMITS as p}from"../../domain/runtime/resource-limits.js";const d=new WeakMap;function k(e,s){const u=d.get(e);if(u!==void 0)return u;if(e.pid===void 0||e.exitCode!==null||e.signalCode!==null)return Promise.resolve();const a=new Promise((f,l)=>{let t,r;const i=()=>{if(clearTimeout(g),t!==void 0&&clearTimeout(t),e.removeListener("close",c),e.removeListener("error",m),r!==void 0&&r.exitCode===null&&r.signalCode===null)try{r.kill()}catch{}},c=()=>{i(),f()},m=n=>{i(),l(n)},o=n=>{if(s.supportsProcessGroups)try{process.kill(-e.pid,n?"SIGKILL":"SIGTERM");return}catch{}try{e.kill(n?"SIGKILL":"SIGTERM")}catch{}},g=setTimeout(()=>{o(!0),i(),l(new Error(`Process ${String(e.pid)} did not close after forced termination.`))},p.processTerminationTimeoutMs);e.once("close",c),e.once("error",m),s.isWindows?(r=T("taskkill",["/pid",String(e.pid),"/t","/f"],{windowsHide:!0,stdio:"ignore"}),r.once("error",()=>o(!0)),r.once("exit",n=>{n!==0&&o(!0)})):(o(!1),t=setTimeout(()=>o(!0),p.processTerminationGraceMs))});return d.set(e,a),a}export{k as terminatePlatformProcess};

package/dist/infrastructure/platform/read-only-executable.d.ts

@@ -0,0 +1,3 @@
+/** Resolves user-installed host binaries from PATH, never from the workspace. */
+export declare function resolveReadOnlyExecutable(command: string, root: string): Promise<string | undefined>;
+export declare function readOnlyArguments(command: string, args: readonly string[]): string[];

package/dist/infrastructure/platform/read-only-executable.js

@@ -0,0 +1 @@
+import f from"node:fs/promises";import{constants as p}from"node:fs";import t from"node:path";async function m(o,e){if(/[\\/:]/u.test(o)||/\.(?:cmd|bat|ps1)$/iu.test(o))return;let n;try{n=await f.realpath(e)}catch{return}const s=process.platform==="win32"&&!/\.(?:exe|com)$/iu.test(o)?[".exe",".com"]:[""];for(const i of(process.env.PATH??process.env.Path??"").split(t.delimiter))if(t.isAbsolute(i))for(const l of s){const u=t.join(i,`${o}${l}`),r=t.relative(n,u);if(!(r===""||!r.startsWith(`..${t.sep}`)&&r!==".."&&!t.isAbsolute(r)))try{const c=await f.realpath(u),a=t.relative(n,c);if(a===""||!a.startsWith(`..${t.sep}`)&&a!==".."&&!t.isAbsolute(a)||!(await f.stat(c)).isFile())continue;return await f.access(c,process.platform==="win32"?p.F_OK:p.X_OK),c}catch{}}}function v(o,e){if(o.toLowerCase().replace(/\.exe$/u,"")!=="git")return[...e];const n=e.find(l=>!l.startsWith("-")),s=["--no-pager","--no-optional-locks","-c","core.fsmonitor=false",...["diff","log","show"].includes(n??"")?["--no-ext-diff","--no-textconv"]:[]],i=e.indexOf("--");return i<0?[...s,...e]:[...s,...e.slice(0,i),...e.slice(i)]}export{v as readOnlyArguments,m as resolveReadOnlyExecutable};

package/dist/infrastructure/project/file-project-trust-store.d.ts

@@ -0,0 +1,12 @@
+import type { ProjectTrustStore, TrustedProject } from '../../ports/project-trust-store.js';
+import type { PlatformPaths } from '../platform/platform-paths.js';
+export declare class FileProjectTrustStore implements ProjectTrustStore {
+    private readonly filePath;
+    constructor(paths: PlatformPaths);
+    list(): Promise<readonly TrustedProject[]>;
+    get(fingerprint: string): Promise<TrustedProject | undefined>;
+    grant(project: TrustedProject): Promise<void>;
+    revoke(fingerprint: string): Promise<boolean>;
+    private read;
+    private write;
+}

package/dist/infrastructure/project/file-project-trust-store.js

@@ -0,0 +1,2 @@
+import a from"node:fs/promises";import n from"node:path";import{isFileNotFound as c}from"../filesystem/fs-errors.js";import{atomicWriteFile as f,withFileLock as o}from"../filesystem/atomic-file-store.js";import{readJsonFileBounded as l}from"../filesystem/bounded-json-reader.js";import{RESOURCE_LIMITS as h}from"../../domain/runtime/resource-limits.js";class g{filePath;constructor(t){this.filePath=n.join(t.globalConfigDir,"trusted-projects.json")}async list(){return(await this.read()).projects}async get(t){return(await this.read()).projects.find(r=>r.fingerprint===t)}async grant(t){await o(this.filePath,async()=>{const i=(await this.read()).projects.filter(s=>s.fingerprint!==t.fingerprint);i.push(t),await this.write({version:1,projects:i})})}async revoke(t){return o(this.filePath,async()=>{const r=await this.read(),i=r.projects.filter(s=>s.fingerprint!==t);return i.length===r.projects.length?!1:(await this.write({version:1,projects:i}),!0)})}async read(){try{const t=await l(this.filePath,h.configFileBytes);if(!p(t))throw new Error("Invalid trust file.");return t}catch(t){if(c(t))return{version:1,projects:[]};throw t}}async write(t){await a.mkdir(n.dirname(this.filePath),{recursive:!0}),await f(this.filePath,`${JSON.stringify(t,null,2)}
+`)}}function p(e){if(typeof e!="object"||e===null)return!1;const t=e;return t.version===1&&Array.isArray(t.projects)}export{g as FileProjectTrustStore};

package/dist/infrastructure/sdk/chat-completion-adapter.d.ts

@@ -0,0 +1,8 @@
+import { type LotaGate } from '@lotagate/sdk';
+import type { ChatModelPort, ChatModelRequest, ChatModelEvent } from '../../ports/chat-model.js';
+export declare class SdkChatCompletionAdapter implements ChatModelPort {
+    private readonly client;
+    constructor(client: LotaGate);
+    stream(request: ChatModelRequest): AsyncIterable<ChatModelEvent>;
+    private fallbackToBufferedCompletion;
+}

package/dist/infrastructure/sdk/chat-completion-adapter.js

@@ -0,0 +1 @@
+import{SdkErrorCode as m}from"@lotagate/sdk";import{CliError as l}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as c}from"../../domain/errors/error-codes.js";import{buildUserMessage as p}from"../clipboard/image-normalizer.js";import{retryModelStream as y}from"../../application/model/model-response-retry.js";class w{client;constructor(e){this.client=e}async*stream(e){const n=[p(e.prompt,e.attachments)],i=e.signal===void 0?void 0:{signal:e.signal};let o=!1;try{yield{type:"activity",state:"connecting"};const a=y({create:async()=>await this.client.chat.completions.create({model:e.model,messages:n,...e.reasoningEffort===void 0?{}:{reasoning_effort:e.reasoningEffort},stream:!0},i),isObservable:r=>typeof r.choices[0]?.delta.content=="string"&&r.choices[0].delta.content.length>0,...e.signal===void 0?{}:{signal:e.signal}});yield{type:"activity",state:"thinking"};for await(const r of a){r.usage!==void 0&&(yield{type:"usage",usage:f(r.usage)});const s=r.choices[0]?.delta.content;typeof s=="string"&&s.length>0&&(o=!0,yield{type:"activity",state:"writing"},yield{type:"delta",content:s})}yield{type:"activity",state:"completed"},yield{type:"completed"}}catch(a){if(e.signal?.aborted===!0)throw e.signal.reason??d();if(!o&&g(a)){yield*this.fallbackToBufferedCompletion(e,n,i);return}throw new l(c.MODEL_STREAM_FAILED,"Chat completion stream failed.",{category:"model",userMessage:"Unable to read the model stream. The gateway may have returned an invalid SSE payload. Check the model, authentication and base URL.",retryable:!0,cause:a})}}async*fallbackToBufferedCompletion(e,n,i){try{const o=await this.client.chat.completions.create({model:e.model,messages:[...n],...e.reasoningEffort===void 0?{}:{reasoning_effort:e.reasoningEffort},stream:!1},i);o.usage!==void 0&&(yield{type:"usage",usage:f(o.usage)});const a=h(o.choices[0]?.message.content);a.length>0&&(yield{type:"activity",state:"writing"},yield{type:"delta",content:a}),yield{type:"activity",state:"completed"},yield{type:"completed"}}catch(o){throw e.signal?.aborted===!0?e.signal.reason??d():new l(c.MODEL_STREAM_FAILED,"Chat completion fallback failed.",{category:"model",userMessage:"Unable to read the model response. Check the model, authentication and base URL.",retryable:!0,cause:o})}}}function d(){const t=new Error("The operation was aborted.");return t.name="AbortError",t}function f(t){return{...typeof t.prompt_tokens=="number"?{promptTokens:t.prompt_tokens}:{},...typeof t.completion_tokens=="number"?{completionTokens:t.completion_tokens}:{},...typeof t.total_tokens=="number"?{totalTokens:t.total_tokens}:{}}}function g(t){return typeof t=="object"&&t!==null&&"errorCode"in t&&t.errorCode===m.ResponseParseError}function h(t){return typeof t=="string"?t:Array.isArray(t)?t.map(e=>{if(typeof e!="object"||e===null||!("text"in e))return"";const n=e.text;return typeof n=="string"?n:""}).join(""):""}export{w as SdkChatCompletionAdapter};

package/dist/infrastructure/sdk/lotagate-client-factory.d.ts

@@ -0,0 +1,3 @@
+import { LotaGate } from '@lotagate/sdk';
+import type { AuthProfile } from '../../domain/auth/auth-profile.js';
+export declare function createLotaGateClient(profile: AuthProfile, apiKey: string): LotaGate;

package/dist/infrastructure/sdk/lotagate-client-factory.js

@@ -0,0 +1 @@
+import{LotaGate as a}from"@lotagate/sdk";function r(t,e){const o={apiKey:e,baseURL:t.baseUrl};return new a(o)}export{r as createLotaGateClient};

package/dist/infrastructure/sdk/model-catalog-adapter.d.ts

@@ -0,0 +1,19 @@
+import type { ModelListResponse, ModelSummary } from '@lotagate/sdk';
+export interface ModelCatalogClient {
+    models: {
+        list(): Promise<ModelListResponse>;
+        retrieve(model: string): Promise<ModelSummary>;
+    };
+}
+export declare class ModelCatalogAdapter {
+    private readonly client;
+    constructor(client: ModelCatalogClient);
+    /** Lists every selectable gateway model while excluding embeddings from interactive selection. */
+    listModels(): Promise<{
+        data: ModelSummary[];
+        object: "list" | string;
+    }>;
+    get(model: string): Promise<ModelSummary>;
+}
+/** Reads the optional gateway metadata without coupling the CLI to SDK internals. */
+export declare function getModelContextWindow(model: ModelSummary): number | undefined;

package/dist/infrastructure/sdk/model-catalog-adapter.js

@@ -0,0 +1 @@
+class r{client;constructor(e){this.client=e}async listModels(){const e=await this.client.models.list();return{...e,data:e.data.filter(t=>t.model_category!=="embedding")}}async get(e){return this.client.models.retrieve(e)}}function i(n){const e=n.context_window;if(typeof e=="number"&&Number.isInteger(e)&&e>0)return e;if(typeof e=="string"&&/^\d+$/u.test(e)){const t=Number(e);return Number.isSafeInteger(t)&&t>0?t:void 0}}export{r as ModelCatalogAdapter,i as getModelContextWindow};

package/dist/infrastructure/sdk/sdk-media-gateway-client.d.ts

@@ -0,0 +1,20 @@
+import type { LotaGate } from '@lotagate/sdk';
+import type { MediaGatewayClient, AudioUploadInput, ImageEditInput, ImageGenerationInput, MediaRequestOptions, SpeechInput } from '../../ports/media-gateway-client.js';
+import type { GeneratedImage, MediaBinary, VideoOperation } from '../../domain/media/media-contract.js';
+/** SDK boundary adapter. Application code only sees CLI-owned media contracts. */
+export declare class SdkMediaGatewayClient implements MediaGatewayClient {
+    private readonly client;
+    constructor(client: LotaGate);
+    generateImage(input: ImageGenerationInput, options?: MediaRequestOptions): Promise<readonly GeneratedImage[]>;
+    editImage(input: ImageEditInput, options?: MediaRequestOptions): Promise<readonly GeneratedImage[]>;
+    createSpeech(input: SpeechInput, options?: MediaRequestOptions): Promise<MediaBinary>;
+    transcribe(input: AudioUploadInput, options?: MediaRequestOptions): Promise<string>;
+    translate(input: AudioUploadInput, options?: MediaRequestOptions): Promise<string>;
+    createVideo(input: {
+        model: string;
+        prompt: string;
+        parameters?: Record<string, unknown>;
+    }, options?: MediaRequestOptions): Promise<VideoOperation>;
+    getVideoOperation(id: string, options?: MediaRequestOptions): Promise<VideoOperation>;
+    downloadVideo(id: string, options?: MediaRequestOptions): Promise<MediaBinary>;
+}