@lotagate/cli 0.1.23 → 0.1.25

package/dist/presentation/tui/tui-context-service.js

@@ -0,0 +1,2 @@
+import C from"node:path";import{resolveModelContextWindow as M}from"../../application/model/model-context-window.js";import{buildToolCatalogFromDefinitions as W}from"../../application/agent/tool-catalog.js";import{filesystemToolDefinitions as k}from"../../infrastructure/filesystem/local-filesystem-tool-executor.js";import{shellToolDefinitions as b}from"../../infrastructure/shell/shell-tool-executor.js";import{skillToolDefinitions as S}from"../../infrastructure/extensions/skill-tool-executor.js";import{subagentToolDefinitions as j}from"../../application/orchestration/subagent-tool-executor.js";import{FileMcpConfigStore as w}from"../../infrastructure/extensions/file-mcp-config-store.js";import{mergeMcpConfigsWithOverride as D}from"../../domain/extensions/mcp-config.js";import{SkillManager as A}from"../../infrastructure/extensions/skill-manager.js";import{estimateTextTokens as x}from"../../infrastructure/tokens/tiktoken-token-estimator.js";import{retainLatestCompaction as P}from"../../application/agent/agent-session-store.js";import{buildAgentHistory as F}from"../../application/agent/agent-history.js";import{createAgentGuidance as I}from"../../application/agent/interactive-agent-guidance.js";class X{runtime;cwd;contextWindow;contextWindowModel;constructor(t,o){this.runtime=t,this.cwd=o}async buildForProject(t){const o=await this.runtime.projectTrust.inspect(this.cwd),n=await this.runtime.projectTrust.isTrusted(o),l=n&&t.skillRootScopes!==void 0?await new A(C.join(this.runtime.paths.globalConfigDir,"skills-state.json")).listScoped(t.skillRootScopes):[];return this.build({...t,trusted:n,skills:l})}async build(t){const o=await this.resolveContextWindow(t.model,t.profileName),[n,l]=await Promise.all([t.sessionId===void 0?Promise.resolve({transcript:[],events:[]}):this.runtime.sessionStore.readHistory(t.sessionId),Promise.all([w.forScope(this.cwd,this.runtime.paths.globalConfigDir,"user").list(),w.forScope(this.cwd,this.runtime.paths.globalConfigDir,"project").list()]).then(([e,v])=>D(e,v,t.pluginMcpConfig??{}))]),i=P(F(n.transcript,n.events)),y=(t.trusted?W([...k(),...b(),...S(),...j()]):void 0)?.names??[],r=t.model??"o200k_base",c=t.sessionId===void 0?void 0:await t.agentSessionStore?.get(t.sessionId),a=c?.messages?.[0]?.role==="system"?c.messages.slice(1):c?.messages,d=a===void 0||a.length===0?i:a.map($),f=m(d.filter(e=>e.type==="user"),r),u=m(d.filter(e=>e.type==="assistant"),r),p=m(d.filter(e=>e.type!=="user"&&e.type!=="assistant"),r),h=f+u+p,T=I(t.trusted?"interactive-trusted":"interactive-untrusted"),g=x({model:r,text:T});return{model:t.model,...o===void 0?{}:{contextWindow:o},usedTokens:h+g,systemPromptTokens:g,conversationTokens:h,inputTokens:f,outputTokens:u,otherTokens:p,transcriptEntries:i.length,userMessages:i.filter(e=>e.type==="user").length,assistantMessages:i.filter(e=>e.type==="assistant").length,toolCalls:n.events.filter(e=>e.type==="tool.called").length,compactions:n.events.filter(e=>e.type==="context.compacted").length,pendingAttachments:t.pendingAttachments,toolNames:y,mcpServers:Object.values(l).filter(e=>e.enabled).length,memoryFiles:0}}async getModelContextWindow(t,o){return this.resolveContextWindow(t,o)}async resolveContextWindow(t,o){if(t===null||t.trim().length===0){this.contextWindow=void 0,this.contextWindowModel=void 0;return}const n=`${o??""}\0${t}`;return this.contextWindowModel===n?this.contextWindow:(this.contextWindowModel=n,this.contextWindow=void 0,this.contextWindow=await M(this.runtime,t,o),this.contextWindow)}}function $(s){return{type:s.role,content:E(s.content)}}function E(s){return typeof s=="string"?s:Array.isArray(s)?s.map(t=>typeof t=="object"&&t!==null&&"text"in t&&typeof t.text=="string"?t.text:"").join(""):""}function m(s,t){return x({model:t,text:s.map(o=>`${o.type}: ${o.content}`).join(`
+`)})}export{X as TuiContextService};

package/dist/presentation/tui/tui-extension-loader.d.ts

@@ -0,0 +1,21 @@
+import type { CliRuntime } from '../../bootstrap/runtime-factory.js';
+import type { CliMcpConfig } from '../../domain/extensions/mcp-config.js';
+import type { HookDefinition } from '../../domain/extensions/hook-manifest.js';
+import { HookRuntime } from '../../infrastructure/extensions/hook-runtime.js';
+import { type SkillRootScope } from '../../infrastructure/extensions/skill-roots.js';
+import type { TuiToolApprovalCoordinator } from './tui-tool-approval.js';
+export interface TuiExtensionState {
+    readonly hookRuntime: HookRuntime;
+    readonly hooks: readonly HookDefinition[];
+    readonly skillRootScopes: readonly SkillRootScope[];
+    readonly enabledPluginNames: readonly string[];
+    readonly pluginMcpConfig: CliMcpConfig;
+}
+export declare function loadTuiExtensions(options: {
+    readonly runtime: CliRuntime;
+    readonly cwd: string;
+    readonly trusted: boolean;
+    readonly approvalMode: 'ask' | 'auto' | 'deny';
+    readonly workspaceRoot: string;
+    readonly approvals: TuiToolApprovalCoordinator;
+}): Promise<TuiExtensionState>;

package/dist/presentation/tui/tui-extension-loader.js

@@ -0,0 +1 @@
+import{PluginContributionRegistry as g}from"../../application/extensions/plugin-contribution-registry.js";import{HookRuntime as f}from"../../infrastructure/extensions/hook-runtime.js";import{resolveSkillRootScopes as p}from"../../infrastructure/extensions/skill-roots.js";import{ShellToolExecutor as d}from"../../infrastructure/shell/shell-tool-executor.js";import{ToolPolicy as k}from"@lotagate/agent-sdk";async function R(c){const{runtime:o,cwd:e,trusted:l,approvalMode:u,workspaceRoot:s,approvals:m}=c,t=new f(new d({platform:o.platform}),{trustedProject:l,enabled:!0,toolPolicy:new k(m.create(u,l,s).policy())});let n=p(e,o.paths.globalConfigDir);if(!l)return{hookRuntime:t,hooks:[],skillRootScopes:n,enabledPluginNames:[],pluginMcpConfig:{}};const i=await new g(o.paths.globalConfigDir).resolve(e,!0);n=p(e,o.paths.globalConfigDir,i.skillRoots);const a=[...await t.loadProject(s)];for(const r of i.plugins)a.push(...await t.load(r));return{hookRuntime:t,hooks:a,skillRootScopes:n,enabledPluginNames:i.plugins.map(r=>r.name),pluginMcpConfig:i.mcpConfig}}export{R as loadTuiExtensions};

package/dist/presentation/tui/tui-file-suggestions.d.ts

@@ -0,0 +1,3 @@
+import type { WorkspaceEntry } from '../../application/workspace/workspace-file-index.js';
+import type { TuiChoice } from './ink/tui-bridge.js';
+export declare function workspaceFileSuggestions(entries: readonly WorkspaceEntry[]): readonly TuiChoice[];

package/dist/presentation/tui/tui-file-suggestions.js

@@ -0,0 +1 @@
+function o(i){return i.map(e=>({value:`@${e.path}`,label:`@${e.path}`,description:e.kind==="directory"?"Workspace folder":"Workspace file",kind:e.kind}))}export{o as workspaceFileSuggestions};

package/dist/presentation/tui/tui-goal-controller.d.ts

@@ -0,0 +1,14 @@
+import type { CliRuntime } from '../../bootstrap/runtime-factory.js';
+import type { CreateGoalInput } from '../../domain/orchestration/goal.js';
+import { type GoalTurnCallbacks } from '../../application/orchestration/goal-runner.js';
+export interface TuiGoalControllerOptions {
+    runtime: CliRuntime;
+    cwd: string;
+    sessionId: string | undefined;
+    model: string | null;
+    profile: string | null;
+    runPrompt: (prompt: string, callbacks?: GoalTurnCallbacks) => Promise<string>;
+    write: (message: string) => void;
+}
+export declare function runTuiGoal(options: TuiGoalControllerOptions, objective: string, limits?: Omit<CreateGoalInput, 'objective'>): Promise<void>;
+export declare function resumeTuiGoal(options: TuiGoalControllerOptions): Promise<void>;

package/dist/presentation/tui/tui-goal-controller.js

@@ -0,0 +1 @@
+import{AuthenticationService as g}from"../../application/auth/authentication-service.js";import{loadExecutionConfig as I}from"../../application/config/execution-config.js";import{createLotaGateClient as N}from"../../infrastructure/sdk/lotagate-client-factory.js";import{RESOURCE_LIMITS as u}from"../../domain/runtime/resource-limits.js";import{runGoalLoop as S}from"../../application/orchestration/goal-runner.js";import{formatCommandHint as o,MODEL_SELECT_HINT as v,TRUST_GRANT_HINT as x}from"../../application/commands/command-hints.js";async function D(e,r,t={}){await c(e,r,!0,t)}async function _(e){if(e.sessionId===void 0){e.write("No active session.");return}const r=await e.runtime.goalStore.get(e.sessionId);if(r===void 0){e.write("No active goal.");return}await c(e,r.objective,!1)}async function c(e,r,t,l={}){if(e.sessionId===void 0){e.write("No active session.");return}const m=await e.runtime.projectTrust.inspect(e.cwd);if(!await e.runtime.projectTrust.isTrusted(m)){e.write(`Project is not trusted. ${o(x,"tui")}`);return}const i=await I(e.runtime,e.cwd),a=e.model??i.config.model;if(a===null){e.write(`No model is selected. ${o(v,"tui")}`);return}const s=e.profile??i.config.profile??g.defaultProfileName(),n=await e.runtime.auth.requireCredential(s),f=t?await e.runtime.goalStore.replace(e.sessionId,{objective:r,maxTurns:u.goalDefaultMaxTurns,maxDurationMs:u.goalDefaultMaxDurationMs,...l}):await G(e.sessionId,e.runtime),d=N(n.profile,n.apiKey);await S({runtime:e.runtime,sessionId:e.sessionId,objective:f.objective,model:a,client:d,runTurn:(w,T)=>e.runPrompt(w,T),onMessage:e.write})}async function G(e,r){return r.goalStore.resume(e)}export{_ as resumeTuiGoal,D as runTuiGoal};

package/dist/presentation/tui/tui-initial-model.d.ts

@@ -0,0 +1,3 @@
+import type { CliRuntime } from '../../bootstrap/runtime-factory.js';
+import type { CliConfig } from '../../domain/config/config-schema.js';
+export declare function resolveInitialModel(runtime: CliRuntime, config: CliConfig): Promise<string | null>;

package/dist/presentation/tui/tui-initial-model.js

@@ -0,0 +1 @@
+import{AuthenticationService as i}from"../../application/auth/authentication-service.js";import{CachedModelCatalog as n,modelCatalogCacheKey as c}from"../../application/model/cached-model-catalog.js";import{ModelCatalogAdapter as d}from"../../infrastructure/sdk/model-catalog-adapter.js";import{createLotaGateClient as s}from"../../infrastructure/sdk/lotagate-client-factory.js";import{selectInitialModel as m}from"../../application/model/initial-model-selection.js";async function w(l,t){if(t.model!==null&&t.model.trim().length>0)return t.model;const r=t.profile??i.defaultProfileName();let o;try{o=await l.credentialStore.get(r)}catch(e){return l.logger.warn("Unable to load credentials while selecting the initial model.",{reason:e instanceof Error?e.message:String(e)}),null}if(o===void 0)return null;try{const e=new n(new d(s(o.profile,o.apiKey)),l.cache,c(o.profile.name,o.profile.baseUrl),l.cachePolicy.modelCatalogTtlMs);return await m(t.model,{list:()=>e.listModels()},a=>l.configLoader.setGlobal("model",a))}catch(e){return l.logger.warn("Unable to select the first model from the catalog.",{reason:e instanceof Error?e.message:String(e)}),null}}export{w as resolveInitialModel};

package/dist/presentation/tui/tui-lifecycle-actions.d.ts

@@ -0,0 +1,13 @@
+import type { HookDefinition, HookEvent } from '../../domain/extensions/hook-manifest.js';
+import type { HookRuntime } from '../../infrastructure/extensions/hook-runtime.js';
+import type { InkTuiBridge } from './ink/tui-bridge.js';
+export interface TuiInterruptState {
+    lastInterruptAt: number;
+    exitArmedUntil: number;
+    printResumeCommandOnExit: boolean;
+}
+export declare function handleTuiInterrupt(state: TuiInterruptState, activeAbortController: AbortController | undefined, renderer: InkTuiBridge): TuiInterruptState;
+export declare function cancelTuiResponse(activeAbortController: AbortController | undefined, renderer: InkTuiBridge): void;
+export declare function runTuiHookEvent(hookRuntime: HookRuntime | undefined, hooks: readonly HookDefinition[], event: HookEvent, cwd: string, sessionId: string): Promise<void>;
+export declare function isAbortError(error: unknown): boolean;
+export declare function throwIfAborted(signal: AbortSignal): void;

package/dist/presentation/tui/tui-lifecycle-actions.js

@@ -0,0 +1 @@
+function u(t,e,r){const n=Date.now();return n-t.lastInterruptAt<75?t:e!==void 0&&!e.signal.aborted?(e.abort(),r.cancelled(),r.notice("Interrupted. Press Ctrl+C again within 2 seconds to exit."),{...t,lastInterruptAt:n,exitArmedUntil:n+2e3}):n<=t.exitArmedUntil?(r.requestExit(),{...t,lastInterruptAt:n,printResumeCommandOnExit:!0}):(r.notice("Press Ctrl+C again within 2 seconds to exit."),{...t,lastInterruptAt:n,exitArmedUntil:n+2e3})}function a(t,e){t!==void 0&&(t.abort(),e.cancelled(),e.notice("Stopping response\u2026"))}async function s(t,e,r,n,o){t===void 0||e.length===0||await t.runEvent(e,r,{sessionId:o,runId:`hook-${Date.now()}`,iteration:0,cwd:n,workspaceRoot:n,maxResultBytes:256*1024})}function i(t){return t instanceof Error?t.name==="AbortError"||t.message.toLowerCase().includes("aborted")?!0:t.cause!==void 0&&i(t.cause):!1}function f(t){if(!t.aborted)return;if(t.reason instanceof Error&&t.reason.name==="AbortError")throw t.reason;const e=new Error(t.reason instanceof Error&&t.reason.message.length>0?t.reason.message:"The operation was aborted.");throw e.name="AbortError",e}export{a as cancelTuiResponse,u as handleTuiInterrupt,i as isAbortError,s as runTuiHookEvent,f as throwIfAborted};

package/dist/presentation/tui/tui-manual-compaction.d.ts

@@ -0,0 +1,18 @@
+import type { CliRuntime } from '../../bootstrap/runtime-factory.js';
+import type { SessionMetadata } from '../../domain/session/session.js';
+import type { CliAgentSessionStore } from '../../application/agent/agent-session-store.js';
+import type { TuiContextService } from './tui-context-service.js';
+import type { InkTuiBridge } from './ink/tui-bridge.js';
+export interface TuiManualCompactionOptions {
+    runtime: CliRuntime;
+    cwd: string;
+    session: SessionMetadata | undefined;
+    activeModel: string | null;
+    activeProfile: string | null;
+    activeResponse: boolean;
+    renderer: InkTuiBridge;
+    contextService: TuiContextService;
+    agentSessionStore: CliAgentSessionStore;
+    refreshContextUsage: () => Promise<void>;
+}
+export declare function compactManualTuiSession(options: TuiManualCompactionOptions): Promise<void>;

package/dist/presentation/tui/tui-manual-compaction.js

@@ -0,0 +1 @@
+import{AuthenticationService as m}from"../../application/auth/authentication-service.js";import{loadExecutionConfig as l}from"../../application/config/execution-config.js";import{createLotaGateClient as s}from"../../infrastructure/sdk/lotagate-client-factory.js";import{CliError as d}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as f}from"../../domain/errors/error-codes.js";import{MODEL_SELECT_HINT as u}from"../../application/commands/command-hints.js";import{compactTuiSession as g}from"./tui-context-compaction.js";async function N(e){if(e.activeResponse)throw new Error("Stop the active response before compacting the session.");if(e.session===void 0){e.renderer.notice("No active session.");return}const i=await l(e.runtime,e.cwd),t=e.session.model??e.activeModel??i.config.model;if(t===null)throw new d(f.MODEL_NOT_FOUND,"No model is selected.",{category:"model",userMessage:"No model is selected.",hint:u});const a=e.session.profile??e.activeProfile??i.config.profile??m.defaultProfileName(),o=await e.runtime.auth.requireCredential(a),n=await e.contextService.getModelContextWindow(t,a);e.renderer.activity("Compacting context manually\u2026",0);try{const c=await g(e.runtime,e.agentSessionStore,e.session.id,s(o.profile,o.apiKey),t,n,r=>e.runtime.logger.warn("Context summarization failed; using fallback summary.",{reason:r instanceof Error?r.message:String(r)}));e.renderer.transcriptNotice(c?"Context compacted manually.":"No conversation to compact."),await e.refreshContextUsage()}finally{e.renderer.clearActivity()}}export{N as compactManualTuiSession};

package/dist/presentation/tui/tui-media-model-selection.d.ts

@@ -0,0 +1,12 @@
+import type { CommandInvocation } from '../../application/commands/command-contract.js';
+import type { TuiChoice } from './ink/tui-bridge.js';
+import type { loadModelCatalog } from '../../application/model/model-catalog-service.js';
+export type MediaModelCategory = 'image' | 'speech' | 'transcription' | 'translation' | 'video';
+type ModelCatalog = Awaited<ReturnType<typeof loadModelCatalog>>;
+export interface TuiMediaModelSelectionDependencies {
+    readonly loadModels: () => Promise<ModelCatalog>;
+    readonly selectModel: (title: string, choices: readonly TuiChoice[]) => Promise<string | undefined>;
+}
+/** Adds a request-only media model selection without changing persisted configuration. */
+export declare function prepareTuiMediaInvocation(invocation: CommandInvocation, dependencies: TuiMediaModelSelectionDependencies): Promise<CommandInvocation | undefined>;
+export {};

package/dist/presentation/tui/tui-media-model-selection.js

@@ -0,0 +1 @@
+import{CliError as s}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as n}from"../../domain/errors/error-codes.js";const c={"image.generate":"image","image.edit":"image","audio.speech":"speech","audio.transcribe":"transcription","audio.translate":"translation","video.generate":"video"};async function u(o,i){const e=c[o.action.id];if(e===void 0||o.options.has("model"))return o;const t=(await i.loadModels()).data.filter(a=>a.model_category===e);if(t.length===0)throw new s(n.MODEL_NOT_FOUND,`No ${e} models are available.`,{category:"model",userMessage:`No ${e} models are available for this command.`,details:{category:e}});const d=await i.selectModel(`Select ${e} model`,t.map(a=>({value:a.id,label:a.id})));if(d===void 0)return;const l=t.find(a=>a.id===d);if(l===void 0)throw new s(n.MODEL_NOT_FOUND,"The selected media model is no longer available.",{category:"model",userMessage:"The selected media model is no longer available. Refresh the model list and try again."});const r=new Map(o.options);return r.set("model",l.id),{...o,options:r}}export{u as prepareTuiMediaInvocation};

package/dist/presentation/tui/tui-prompt-dispatcher.d.ts

@@ -0,0 +1,16 @@
+import type { Logger } from '../../ports/logger.js';
+import type { AttachmentPayload } from '../../domain/session/attachment.js';
+import type { PendingAttachmentStore } from '../../application/chat/pending-attachment-store.js';
+import type { InkTuiBridge } from './ink/tui-bridge.js';
+import type { TuiCommandContext } from './tui-command-context.js';
+import type { TuiCommandHost } from './tui-command-executor.js';
+export interface TuiPromptDispatcherOptions {
+    renderer: InkTuiBridge;
+    logger: Logger;
+    commandHost: TuiCommandHost;
+    pendingAttachments: PendingAttachmentStore;
+    commandContext: () => TuiCommandContext;
+    sendPrompt: (input: string, attachments: readonly AttachmentPayload[]) => Promise<unknown>;
+    resetActiveAbortController: () => void;
+}
+export declare function dispatchTuiPrompt(input: string, options: TuiPromptDispatcherOptions): Promise<boolean>;

package/dist/presentation/tui/tui-prompt-dispatcher.js

@@ -0,0 +1 @@
+import{asCliError as o}from"../../domain/errors/cli-error.js";import{parseCommandInvocation as c,tokenizeCommandInput as n}from"../../application/commands/command-parser.js";import{COMMAND_REGISTRY as d}from"../../application/commands/command-runtime.js";import{formatCliErrorMessage as m}from"../../application/commands/command-hints.js";import{executeTuiCommand as i}from"./tui-command-executor.js";async function C(t,r){if(t.trimStart().startsWith("/"))return l(t,r);r.logger.info("Interactive prompt started.",{promptLength:t.length,attachmentCount:r.pendingAttachments.size});try{await r.sendPrompt(t,r.pendingAttachments.list()),r.logger.info("Interactive prompt completed.",{promptLength:t.length})}catch(a){r.resetActiveAbortController(),r.renderer.failed();const e=o(a);r.logger.error("Prompt execution failed.",{code:e.code,category:e.category,...e.details??{}}),r.renderer.error(m(e,"tui"))}return!1}async function l(t,r){r.renderer.command(t);try{const a=c(n(t.trimStart().slice(1)),"tui",d);r.logger.info("Slash command started.",{command:a.action.id});const e=await i(a,r.commandHost,r.commandContext());return r.logger.info("Slash command completed.",{command:a.action.id,exit:e}),e}catch(a){const e=o(a);return r.logger.error("Slash command failed.",{code:e.code,category:e.category}),r.renderer.error(m(e,"tui")),!1}}export{C as dispatchTuiPrompt};

package/dist/presentation/tui/tui-skill-controller.d.ts

@@ -0,0 +1,11 @@
+import type { SkillManifest } from '../../domain/extensions/skill-manifest.js';
+import type { ExtensionScope } from '../../domain/extensions/extension-scope.js';
+import type { TuiCommandContext } from './tui-command-context.js';
+import { type ScopedSkill } from '../../infrastructure/extensions/skill-manager.js';
+import type { SkillRootScope } from '../../infrastructure/extensions/skill-roots.js';
+export interface TuiSkillControllerOptions {
+    globalConfigDir: string;
+    skillRootScopes: readonly SkillRootScope[];
+    runPrompt: (prompt: string, skill?: SkillManifest) => Promise<string>;
+}
+export declare function runTuiSkill(options: TuiSkillControllerOptions, name: string, args: readonly string[], context: TuiCommandContext, scope?: ExtensionScope, availableSkills?: readonly ScopedSkill[]): Promise<void>;

package/dist/presentation/tui/tui-skill-controller.js

@@ -0,0 +1,3 @@
+import u from"node:path";import{SkillManager as c}from"../../infrastructure/extensions/skill-manager.js";async function S(l,n,t,r,o,a){const e=(a??await new c(u.join(l.globalConfigDir,"skills-state.json")).listScoped(l.skillRootScopes,{includeShadowed:!0})).find(i=>(i.skillKey===n||i.name===n)&&(o===void 0||i.scope===o));if(e===void 0||!e.enabled||!e.userInvocable){r.write(`Skill unavailable: ${n}`);return}const s=t.join(" ").trim(),d=s.length===0?e.body:`${e.body}
+
+Requested scope: ${s}`;await l.runPrompt(d,e)}export{S as runTuiSkill};

package/dist/presentation/tui/tui-tool-approval.d.ts

@@ -0,0 +1,22 @@
+import type { CliRuntime } from '../../bootstrap/runtime-factory.js';
+import type { ToolApprovalRequest } from '@lotagate/agent-sdk';
+import { ToolApprovalService, type CliApprovalMode, type ToolApprovalDecision } from '../../application/security/tool-approval-service.js';
+import type { SkillScopeStore } from '../../application/extensions/skill-scope-store.js';
+import type { WorkspacePermissionPolicy } from '../../domain/workspace/workspace-settings.js';
+import type { InkTuiBridge } from './ink/tui-bridge.js';
+export interface TuiToolApprovalHost {
+    readonly renderer: InkTuiBridge;
+    readonly runtime: CliRuntime;
+    getSessionId(): string | undefined;
+    getActiveSignal(): AbortSignal | undefined;
+}
+/** Owns the TUI adapter around the application-layer approval service. */
+export declare class TuiToolApprovalCoordinator {
+    private readonly host;
+    constructor(host: TuiToolApprovalHost);
+    ask(request: ToolApprovalRequest): Promise<boolean>;
+    create(mode: CliApprovalMode, trustedProject: boolean, workspaceRoot: string, skillScopes?: SkillScopeStore, workspacePermissions?: WorkspacePermissionPolicy): ToolApprovalService;
+    remember(workspaceRoot: string, request: ToolApprovalRequest): Promise<void>;
+    audit(decision: ToolApprovalDecision): Promise<void>;
+    rememberFailure(error: unknown): void;
+}

package/dist/presentation/tui/tui-tool-approval.js

@@ -0,0 +1 @@
+import{ToolApprovalService as m}from"../../application/security/tool-approval-service.js";import{permissionRuleForRequest as p}from"../../application/security/workspace-permission-policy.js";import{formatShellCommandForDisplay as u,formatToolActivityName as h}from"../../application/agent/tool-display.js";class N{host;constructor(e){this.host=e}async ask(e){this.host.renderer.status("Waiting for approval");try{return await this.host.renderer.confirmTool(e.toolName,c(e))}finally{const o=this.host.getActiveSignal();o!==void 0&&!o.aborted&&this.host.renderer.status("Thinking")}}create(e,o,a,n,i){return new m({mode:e,trustedProject:o,...n===void 0?{}:{skillScopes:n},...i===void 0?{}:{workspacePermissions:i},prompt:r=>this.ask(r),...o?{rememberApproval:r=>this.remember(a,r)}:{},...o?{onRememberApprovalFailure:(r,l)=>this.rememberFailure(l)}:{},audit:r=>this.audit(r)})}async remember(e,o){await this.host.runtime.workspaceSettings.rememberAllow(e,p(o.toolName,o.input))}async audit(e){this.host.runtime.logger.info("Tool authorization decision.",{toolName:e.toolName,decision:e.decision,reason:e.reason,...e.source===void 0?{}:{source:e.source},...e.skillName===void 0?{}:{skillName:e.skillName}});const o=this.host.getSessionId();o!==void 0&&await this.host.runtime.sessionStore.appendEvent({type:"tool.approval",timestamp:new Date().toISOString(),sessionId:o,data:{toolName:e.toolName,...e.source===void 0?{}:{source:e.source},...e.skillName===void 0?{}:{skillName:e.skillName},decision:e.decision,reason:e.reason}})}rememberFailure(e){this.host.runtime.logger.warn("Unable to persist tool approval.",{reason:e instanceof Error?e.message:String(e)}),this.host.renderer.notice("Approval accepted for this action, but could not be remembered.")}}function c(t){if(t.toolName==="filesystem.write")return`Write workspace file: ${f(t.input.path)}`;if(t.toolName==="shell.exec"){const e=typeof t.input.command=="string"?t.input.command:"",o=Array.isArray(t.input.args)?t.input.args.filter(a=>typeof a=="string"):[];return s(`Run command: ${u(e,o,240)}`)}return`This ${h(t.toolName)} operation may change workspace or external state.`}function f(t){const e=typeof t=="string"?t:String(t??"");return s(e.replace(/Bearer\s+[^\s]+/giu,"Bearer [REDACTED]").replace(/sk-[A-Za-z0-9_-]{8,}/gu,"[REDACTED]"))}function s(t){return t.length<=240?t:`${t.slice(0,237)}...`}export{N as TuiToolApprovalCoordinator};

package/dist/version.d.ts

@@ -0,0 +1 @@
+export declare const CLI_VERSION = "0.1.25";

package/dist/version.js

@@ -0,0 +1 @@
+const o="0.1.25";export{o as CLI_VERSION};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotagate/cli",
-  "version": "0.1.23",
+  "version": "0.1.25",
   "description": "Enterprise-grade terminal client for LotaGate AI agents.",
   "type": "module",
   "license": "MIT",
@@ -40,6 +40,9 @@
     "LICENSE.md",
     "SECURITY.md"
   ],
+  "exports": {
+    "./package.json": "./package.json"
+  },
   "publishConfig": {
     "access": "public"
   },
@@ -62,20 +65,19 @@
     "prepack": "npm run build"
   },
   "dependencies": {
-    "@lotagate/agent-sdk": "^0.1.5",
-    "@lotagate/cli": "^0.1.6",
-    "@lotagate/sdk": "^0.1.2",
+    "@lotagate/agent-sdk": "^0.1.7",
+    "@lotagate/sdk": "^0.1.3",
     "ink": "^7.1.1",
     "react": "^19.2.4",
     "tiktoken": "^1.0.22"
   },
   "optionalDependencies": {
-    "@lotagate/cli-native-linux-arm64-gnu": "0.1.23",
-    "@lotagate/cli-native-linux-x64-gnu": "0.1.23",
-    "@lotagate/cli-native-macos-arm64": "0.1.23",
-    "@lotagate/cli-native-macos-x64": "0.1.23",
-    "@lotagate/cli-native-windows-arm64": "0.1.23",
-    "@lotagate/cli-native-windows-x64": "0.1.23"
+    "@lotagate/cli-native-linux-arm64-gnu": "0.1.25",
+    "@lotagate/cli-native-linux-x64-gnu": "0.1.25",
+    "@lotagate/cli-native-macos-arm64": "0.1.25",
+    "@lotagate/cli-native-macos-x64": "0.1.25",
+    "@lotagate/cli-native-windows-arm64": "0.1.25",
+    "@lotagate/cli-native-windows-x64": "0.1.25"
   },
   "devDependencies": {
     "@eslint/js": "9.39.5",

package/skills/architecture-review/SKILL.md

@@ -1,22 +1,49 @@
 ---
 name: architecture-review
-description: Trace a feature end to end and assess ownership, boundaries and extensibility.
-user-invocable: true
-model-invocable: true
+description: Trace a feature or subsystem end to end and assess ownership, dependency boundaries, contracts, risks and extensibility before implementation.
 allowed-tools: [filesystem.read, filesystem.list]
 ---
 # Architecture review
 
-Analyze the requested feature using evidence from the repository.
+Assess the requested feature or subsystem using repository evidence before
+implementation. This skill produces an architecture decision, not a rewrite.
 
-1. Identify the entry point, owning module and allowed dependency direction.
-2. Trace the flow through validation, application logic, ports, infrastructure
-   adapters and presentation boundaries.
-3. Reuse existing abstractions before proposing new files or dependencies.
-4. Check for duplicated business rules, leaky infrastructure details and
-   unclear ownership.
-5. Propose the smallest complete design that preserves contracts and supports
-   testing, operations and future extension; do not defer required behavior.
+## Trace the current system
 
-Clearly distinguish confirmed facts from recommendations and runtime
-verification requirements.
+1. Read applicable guidance, package boundaries, entry points, manifests,
+   configuration and tests.
+2. Map the real flow:
+   `entry point -> validation -> authorization/trust -> application/domain ->
+   port -> infrastructure adapter -> persistence/external service -> mapper ->
+   response/rendering`.
+3. Identify the owner of each rule, allowed dependency direction, public
+   contract, runtime schema, lifecycle and failure boundary.
+4. Search for existing components, services, repositories, clients, policies,
+   constants, error types and test helpers before proposing new abstractions.
+5. Note duplicated rules, circular dependencies, leaky infrastructure types,
+   UI-owned authorization, hidden side effects and unclear transaction or
+   resource boundaries.
+
+## Evaluate the requested design
+
+Assess:
+
+- business behavior and contract preservation;
+- authentication, authorization, project trust and tenant/resource ownership;
+- validation, error semantics, observability and operational support;
+- cancellation, timeout, retries, bounded concurrency and cleanup;
+- persistence, cache consistency and migration/rollback needs;
+- test boundaries and realistic failure/empty states;
+- future extension cost without premature generic abstraction.
+
+Compare the smallest complete option with viable alternatives. Recommend a new
+file, dependency or layer only when the existing owner cannot support the
+behavior cleanly. Do not defer required correctness or hide a migration risk.
+
+## Report
+
+Separate confirmed repository facts, inferred risks, recommendations and items
+requiring runtime verification. Include the affected flow, ownership map,
+contract impact, proposed module boundaries, reuse decisions, alternatives,
+trade-offs, change risk and a staged verification plan. Do not modify files
+unless the user explicitly requests implementation.

package/skills/code-review/SKILL.md

@@ -1,20 +1,49 @@
 ---
 name: code-review
-description: Review a change for correctness, security, maintainability and regression risk.
-user-invocable: true
-model-invocable: true
+description: Review an implementation or diff for correctness, security, architecture, maintainability and regression risk with evidence-backed findings.
 allowed-tools: [filesystem.read, filesystem.list]
 ---
 # Code review
 
-Review the requested repository scope as a production code review.
+Review the requested scope as a production change. This is an audit skill:
+do not edit files unless the user explicitly asks to implement a finding.
 
-1. Trace the affected execution flow before forming conclusions.
-2. Inspect the relevant callers, callees, contracts, validation and tests.
-3. Report confirmed defects before style preferences.
-4. For every finding, include severity, confidence, file/location, evidence,
-   impact and a focused remediation.
-5. Check security boundaries, error paths, cancellation, resource cleanup and
-   regression coverage.
+## Review procedure
 
-Do not modify files unless the user explicitly asks for implementation.
+1. Read applicable guidance and inspect the complete diff, not only the changed
+   lines. Identify generated or unrelated changes.
+2. Trace each changed path from entry point through validation, authorization,
+   business logic, persistence/external adapters and user-visible output.
+3. Inspect callers, callees, DTOs/types, runtime schemas, configuration,
+   migrations, error handling, logging, tests and deployment assumptions.
+4. Check correctness and data integrity first, then security, reliability,
+   concurrency, resource cleanup, maintainability and performance.
+5. Exercise the reasoning against empty, malformed, duplicate, concurrent,
+   cancelled, timed-out, unauthorized and partially failed cases.
+6. Prefer confirmed defects over style preferences. Do not infer a bug from a
+   name or estimate performance without measurements.
+
+## Required finding format
+
+For every actionable finding, report:
+
+- stable ID and category;
+- severity: Critical, High, Medium or Low;
+- confidence: Confirmed, High Confidence, Medium Confidence or Needs Verification;
+- file and exact symbol/location;
+- affected flow and trigger condition;
+- problem, repository evidence, root cause and concrete impact;
+- smallest safe recommendation and existing pattern to follow;
+- alternatives/trade-offs, change risk and verification method.
+
+Group symptoms with the same root cause. State explicitly when a behavior is
+correct, when an issue is only a design trade-off, and when runtime/load
+verification is still required. Never expose secrets or reproduce sensitive
+payloads in findings.
+
+## Review conclusion
+
+Summarize coverage and limitations, finding count and severity distribution,
+highest-risk issues, systemic causes, quick wins and unverified items. If the
+user requests implementation afterward, convert only confirmed findings into a
+focused patch and preserve the review evidence.

package/skills/debugging/SKILL.md

@@ -1,20 +1,57 @@
 ---
 name: debugging
-description: Diagnose a reproducible failure from evidence and prepare a minimal safe fix.
-user-invocable: true
-model-invocable: true
+description: Diagnose a reproducible software failure from repository and runtime evidence, then implement a minimal verified fix when requested.
 allowed-tools: [filesystem.read, filesystem.list, shell.exec]
 ---
 # Debugging
 
-Diagnose the reported failure without guessing.
+Find the root cause of the reported failure without guessing or masking the
+symptom. If the user asks for diagnosis only, do not modify source files.
 
-1. Reproduce or isolate the failure with the narrowest safe command.
-2. Trace the input from its boundary to the failing operation.
-3. Compare the runtime behavior with the declared types, validation and
-   configuration.
-4. Identify the root cause, affected cases and regression risk.
-5. Add or update a focused regression test before implementing a fix.
-6. Run the narrow test first, then the relevant project checks.
+## Establish evidence
 
-Do not hide failures, weaken validation or modify unrelated modules.
+1. Read applicable repository guidance and inspect the current diff before
+   changing anything.
+2. Capture the exact trigger, input shape, environment, command, expected
+   result and observed result. Keep credentials and sensitive payloads out of
+   notes and logs.
+3. Reproduce with the narrowest safe test or command. If reproduction is not
+   possible, state `Needs runtime verification` and isolate the closest
+   deterministic boundary instead of inventing behavior.
+4. Search callers and callees, then trace the value through parsing,
+   validation, state transitions, persistence, external adapters and rendering.
+5. Compare implementation behavior with types, schemas, configuration,
+   authorization/trust rules and documented contracts.
+
+## Classify the cause
+
+Separate:
+
+- confirmed root cause;
+- contributing condition;
+- affected and unaffected cases;
+- data-integrity, security, concurrency or resource-lifecycle risk;
+- pre-existing failure or environment limitation.
+
+Check malformed input, empty state, retries, timeout/cancellation, concurrent
+requests, stale UI responses, permission denial, partial writes and cleanup.
+Do not call a style preference a bug and do not claim a security issue without
+tracing user-controlled data to the sensitive sink.
+
+## Fix only when authorized
+
+When implementation is requested:
+
+1. Add a focused regression test that fails for the reported behavior and
+   protects the business invariant.
+2. Apply the smallest fix in the module that owns the behavior. Reuse existing
+   validators, error contracts, state machines and utilities.
+3. Preserve unrelated behavior, public contracts, authorization and
+   observability. Do not weaken validation, broaden permissions or swallow
+   exceptions to make the test pass.
+4. Run the focused test first, then typecheck/lint/build and the relevant
+   integration or regression suite.
+
+Report the trigger, evidence, root cause, fix, tests and any remaining runtime
+verification. Never report a reproduction or test as successful unless it was
+actually run.

package/skills/documentation/SKILL.md

@@ -1,16 +1,50 @@
 ---
 name: documentation
-description: Produce accurate maintainable documentation from verified repository behavior.
-user-invocable: true
-model-invocable: true
+description: Produce and maintain accurate engineering documentation from verified repository behavior, contracts and operational workflows.
 allowed-tools: [filesystem.read, filesystem.list, filesystem.write]
 ---
 # Documentation
 
-Inspect the implementation, configuration and existing documentation before
-writing. Document the supported workflow, prerequisites, configuration,
-security boundaries, failure behavior, examples and verification commands.
+Create documentation that helps its intended reader make the correct decision
+or complete the supported workflow. Documentation is part of the product
+contract: never document an assumption as a feature.
 
-Keep documentation aligned with public behavior, avoid secrets and speculative
-claims, preserve the project voice, and update the nearest authoritative file
-rather than creating duplicate guidance.
+## Discover the source of truth
+
+1. Read applicable guidance, the nearest README/design document, package
+   metadata and the complete implementation path.
+2. Verify public commands, routes, IPC/API payloads, configuration keys,
+   defaults, scopes, permissions, error behavior, lifecycle and supported
+   platforms from code, schemas and tests.
+3. Search for existing documentation and update the nearest authoritative
+   source. Do not create duplicate instructions or conflicting quick starts.
+4. Identify the audience and task: user guide, API reference, architecture
+   decision, operations runbook, troubleshooting guide or changelog.
+
+## Write the useful contract
+
+Include only verified and task-relevant information:
+
+- purpose, scope and explicit non-goals;
+- prerequisites, installation and configuration;
+- normal workflow with copyable, safe examples;
+- inputs, outputs, defaults, limits, scopes and permissions;
+- loading, empty, error, timeout, cancellation and recovery behavior;
+- security boundaries, trust requirements and sensitive-data rules;
+- compatibility, platform limitations, migrations and rollback;
+- documented verification commands and expected outcomes.
+
+Use the project voice and stable terminology. Keep titles specific, put the
+most important behavior first, avoid unsupported promises and never include
+credentials, private paths, raw tokens or unbounded sensitive payloads.
+
+## Validate before handoff
+
+Cross-check examples against command catalogs, types and schemas. Run the
+narrowest relevant documentation/example test or validation command when one
+exists. Re-read links, code snippets, paths, version values and negative cases.
+If implementation evidence is incomplete, label the statement `Needs
+Verification` instead of guessing.
+
+Report the authoritative files updated, verified sources, commands run, known
+limitations and any remaining documentation drift risk.

package/skills/feature-implementation/SKILL.md

@@ -1,25 +1,64 @@
 ---
 name: feature-implementation
-description: Implement a requested feature end to end while preserving architecture, contracts and operational safety.
-user-invocable: true
-model-invocable: true
+description: Implement an explicitly requested product or engineering feature end to end while preserving architecture, contracts, security and operational safety.
 allowed-tools: [filesystem.read, filesystem.list, filesystem.exists, filesystem.write, shell.exec]
 ---
 # Feature implementation
 
-Implement only an explicitly requested behavior change.
-
-1. Read repository guidance, the package manifest, relevant configuration and
-   the complete affected flow before editing.
-2. Identify the owning layer, reusable abstractions, public contracts and
-   trust boundaries. Extend an existing abstraction when ownership remains
-   cohesive.
-3. Define the smallest complete design, including validation, errors,
-   cancellation, persistence and user-visible states where applicable.
-4. Edit cohesive files with complete content. Preserve unrelated changes and
-   never write secrets, generated artifacts or unrelated formatting.
-5. Run focused type, lint and behavior checks after the implementation, then
-   run the relevant integrated regression checks.
-6. Report changed files, preserved contracts, evidence, limitations and risks.
-
-Do not defer required behavior or claim completion without verification.
+Deliver the explicitly requested behavior as a complete, reviewable change.
+Do not silently broaden the product scope, redesign an unrelated subsystem, or
+turn a one-off example into a new platform abstraction.
+
+## Before editing
+
+1. Read the applicable `AGENTS.md`, package manifest, README, architecture
+   notes, build configuration, test configuration and environment examples.
+2. Inspect the current working tree and preserve unrelated user changes.
+3. Trace the affected flow end to end:
+   - UI: route -> page -> components -> state/hooks -> API/IPC -> response -> render.
+   - Backend/CLI: command or route -> validation -> application service -> port -> adapter -> persistence/external system -> response.
+4. Identify the owning module, dependency direction, public contracts, runtime
+   schemas, authorization/trust boundary and existing reusable abstractions.
+5. Search for equivalent components, services, validators, mappers, constants,
+   error types and test utilities before creating anything new.
+
+## Design the smallest complete change
+
+Define the behavior before implementation:
+
+- normal, loading, empty, malformed-input and failure states;
+- validation at every trust boundary and stable error semantics;
+- authorization, project trust, scope and approval behavior;
+- cancellation, timeout, retry and resource cleanup where I/O is involved;
+- persistence, cache invalidation, ordering and concurrency behavior;
+- accessibility and user-visible feedback for UI changes;
+- migration, compatibility and rollback implications when a contract changes.
+
+Keep business rules in their owning domain/application layer. Keep controllers,
+IPC handlers and UI components as orchestration boundaries rather than sources
+of truth. Prefer extending a cohesive existing abstraction over duplicating a
+rule or introducing a generic shared helper with unclear ownership.
+
+## Implement incrementally
+
+1. Make the smallest cohesive edit and keep the diff focused.
+2. Preserve existing inputs, outputs, error codes, side effects and ordering
+   unless the request explicitly changes them.
+3. Use runtime validation for external data even when TypeScript types exist.
+4. Bound concurrency, payload size, recursion, retries and memory where the
+   feature can process user-controlled or remote data.
+5. Never log credentials, tokens, raw secrets, unbounded tool input or sensitive
+   file contents. Do not edit generated files or lockfiles without a reason.
+6. Add focused tests for business invariants, failure paths and authorization
+   boundaries before combining broader changes.
+
+## Verify and hand off
+
+Run the narrowest documented typecheck, lint, unit or integration test after
+each safe unit, then run the relevant package build and regression checks. If a
+check fails, report the exact command and distinguish an introduced failure
+from a pre-existing or environment failure; never hide it.
+
+The final report must state what changed, why, files touched, contracts and
+business behavior preserved or intentionally changed, commands and results,
+known limitations, remaining risks and any manual runtime verification needed.