@lotagate/cli 0.1.23 → 0.1.25

package/dist/application/protocol/desktop-agent-request-parser.js

@@ -0,0 +1 @@
+import{parseDesktopExecutionPolicy as y}from"./desktop-execution-policy.js";import{RESOURCE_LIMITS as s}from"../../domain/runtime/resource-limits.js";function L(e){if(!i(e)||e.version!==1||!u(e.id)||!i(e.params)||typeof e.method!="string")throw o("Invalid Desktop protocol request.");const t=e.id,n=e.method,r=e.params;if(n==="initialize"||n==="session.list"||n==="model.list"||n==="auth.status"||n==="command.list"||n==="shutdown")return{version:1,id:t,method:n,params:r};if(n==="session.create")return{version:1,id:t,method:n,params:{...d(r,"model"),...d(r,"name")}};if(n==="session.resume")return{version:1,id:t,method:n,params:{sessionId:a(r,"sessionId")}};if(n==="extension.listPublicPlugins")return{version:1,id:t,method:n,params:{root:l(r,"root")}};if(n==="extension.resolvePublicPluginSource")return{version:1,id:t,method:n,params:{root:l(r,"root"),name:m(r,"name","public plugin")}};if(n==="extension.readPublicPluginContribution")return{version:1,id:t,method:n,params:{root:l(r,"root"),pluginName:m(r,"pluginName","plugin"),kind:v(r),sourceName:m(r,"sourceName","extension")}};if(n==="extension.readDetail")return{version:1,id:t,method:n,params:B(r)};if(n==="extension.readPluginIcon")return{version:1,id:t,method:n,params:{name:m(r,"name","plugin"),scope:x(r,"scope")}};if(n==="title.generate")return{version:1,id:t,method:n,params:{prompt:I(r),...d(r,"model")}};if(n==="attachment.begin")return{version:1,id:t,method:n,params:{attachmentId:a(r,"attachmentId"),name:q(r),mimeType:A(r),sizeBytes:z(r)}};if(n==="attachment.chunk")return{version:1,id:t,method:n,params:{attachmentId:a(r,"attachmentId"),index:P(r),dataBase64:j(r)}};if(n==="attachment.complete")return{version:1,id:t,method:n,params:{attachmentId:a(r,"attachmentId")}};if(n==="turn.start")return{version:1,id:t,method:n,params:{sessionId:a(r,"sessionId"),prompt:I(r),...d(r,"model"),...d(r,"reasoningEffort"),...d(r,"runId"),...d(r,"taskId"),...S(r),...$(r),execution:N(r)}};if(n==="turn.cancel")return{version:1,id:t,method:n,params:{turnId:a(r,"turnId")}};if(n==="approval.respond")return{version:1,id:t,method:n,params:{approvalId:a(r,"approvalId"),approved:g(r,"approved")}};if(n==="trust.respond")return{version:1,id:t,method:n,params:{trustRequestId:a(r,"trustRequestId"),trusted:g(r,"trusted")}};if(n==="command.execute")return{version:1,id:t,method:n,params:w(r)};if(n==="command.cancel")return{version:1,id:t,method:n,params:{commandId:a(r,"commandId")}};throw o("Unsupported Desktop protocol method.")}function R(e){return!i(e)||e.version!==1||e.type!=="host.response"||e.tool!=="browser"||!u(e.requestId)||typeof e.ok!="boolean"?!1:e.error===void 0||i(e.error)}function C(e){return!i(e)||e.version!==1||e.type!=="host.response"||!["filesystem","shell","git","artifact"].includes(String(e.tool))||!u(e.requestId)||typeof e.ok!="boolean"?!1:e.error===void 0||i(e.error)}function K(e){return!i(e)||e.version!==1||e.type!=="host.response"||e.tool!=="computer"||!u(e.requestId)||typeof e.ok!="boolean"?!1:e.error===void 0||i(e.error)}function M(e){return!i(e)||e.version!==1||e.type!=="host.response"||e.tool!=="document"||!u(e.requestId)||typeof e.ok!="boolean"?!1:e.error===void 0||i(e.error)}function w(e){const t=a(e,"actionId"),n=e.positionals;if(!Array.isArray(n)||n.some(c=>typeof c!="string"||Buffer.byteLength(c,"utf8")>s.jsonlPromptBytes))throw o("Invalid command positionals.");const r=e.options;if(!i(r)||Object.entries(r).some(([c,p])=>!u(c)||typeof p!="string"&&typeof p!="boolean"||typeof p=="string"&&Buffer.byteLength(p,"utf8")>s.jsonlPromptBytes))throw o("Invalid command options.");const f=e.secrets;if(f===void 0)return{actionId:t,positionals:n,options:r};if(t!=="auth.login.direct"||!i(f)||Object.keys(f).some(c=>c!=="apiKey")||typeof f.apiKey!="string"||f.apiKey.length===0||Buffer.byteLength(f.apiKey,"utf8")>s.jsonlPromptBytes)throw o("Invalid command secrets.");return{actionId:t,positionals:n,options:r,secrets:{apiKey:f.apiKey}}}function a(e,t){const n=e[t];if(!u(n))throw o(`Invalid ${t}.`);return n}function l(e,t){const n=e[t];if(typeof n!="string"||n.trim().length===0||n.includes("\0")||Buffer.byteLength(n,"utf8")>s.jsonlPathBytes)throw o(`Invalid ${t}.`);return n}function m(e,t,n){const r=e[t];if(typeof r!="string"||!/^[a-z0-9][a-z0-9-]{0,63}$/u.test(r))throw o(`Invalid ${n} name.`);return r}function b(e,t){const n=e[t];if(typeof n!="string"||n.length===0||n.length>256||n.includes("\0")||!/^[a-z0-9][a-z0-9:_-]*$/u.test(n))throw o("Invalid extension name.");return n}function v(e){const t=e.kind;if(t!=="skill"&&t!=="mcp"&&t!=="hook")throw o("Invalid extension kind.");return t}function x(e,t){const n=e[t];if(n!=="user"&&n!=="project")throw o(`Invalid ${t}.`);return n}function B(e){const t=e.kind;if(t!=="hook"&&t!=="skill"&&t!=="plugin"&&t!=="mcp")throw o("Invalid extension kind.");const n=e.scope;if(n!==void 0&&n!=="user"&&n!=="project"&&n!=="plugin"&&n!=="builtin")throw o("Invalid extension scope.");const r=b(e,"name");return{kind:t,name:r,...n===void 0?{}:{scope:n},...h(e,"pluginName"),...k(e,"pluginScope"),...h(e,"sourceName")}}function h(e,t){const n=e[t];if(n===void 0)return{};if(typeof n!="string"||!/^[a-z0-9][a-z0-9-]{0,63}$/u.test(n))throw o(`Invalid ${t}.`);return{[t]:n}}function k(e,t){const n=e[t];if(n===void 0)return{};if(n!=="user"&&n!=="project")throw o(`Invalid ${t}.`);return{[t]:n}}function I(e){const t=e.prompt;if(typeof t!="string"||t.trim().length===0||Buffer.byteLength(t,"utf8")>s.jsonlPromptBytes)throw o("Invalid prompt.");return t}function g(e,t){if(typeof e[t]!="boolean")throw o(`Invalid ${t}.`);return e[t]}function d(e,t){const n=e[t];if(n===void 0)return{};if(typeof n!="string"||n.length===0||Buffer.byteLength(n,"utf8")>s.jsonlIdBytes)throw o(`Invalid ${t}.`);return{[t]:n}}function q(e){const t=e.name;if(typeof t!="string"||t.length===0||t.length>200||t.includes("\0"))throw o("Invalid attachment name.");return t}function A(e){const t=e.mimeType;if(typeof t!="string"||!/^[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]*\/[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]*$/u.test(t)||Buffer.byteLength(t,"utf8")>s.jsonlIdBytes)throw o("Invalid attachment MIME type.");return t}function z(e){const t=e.sizeBytes;if(typeof t!="number"||!Number.isSafeInteger(t)||t<=0||t>s.maxAttachmentBytes)throw o("Invalid attachment size.");return t}function P(e){const t=e.index;if(typeof t!="number"||!Number.isSafeInteger(t)||t<0)throw o("Invalid attachment chunk index.");return t}function j(e){const t=e.dataBase64;if(typeof t!="string"||t.length===0||Buffer.byteLength(t,"utf8")>Math.ceil(s.desktopAttachmentChunkBytes/3)*4+4)throw o("Invalid attachment chunk.");return t}function S(e){const t=e.attachmentIds;if(t===void 0)return{};if(!Array.isArray(t)||t.length>s.pendingAttachments||t.some(n=>!u(n))||new Set(t).size!==t.length)throw o("Invalid attachment ids.");return{attachmentIds:t}}function $(e){const t=e.skills;if(t===void 0)return{};if(!Array.isArray(t)||t.length>32||t.some(n=>!u(n))||new Set(t).size!==t.length)throw o("Invalid skills.");return{skills:t}}function N(e){return y(e.execution)}function u(e){return typeof e=="string"&&e.length>0&&Buffer.byteLength(e,"utf8")<=s.jsonlIdBytes}function i(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function o(e){return new Error(e)}export{R as isBrowserHostResponse,K as isComputerHostResponse,C as isDesktopHostResponse,M as isDocumentHostResponse,L as parseDesktopRequest};

package/dist/application/protocol/desktop-approval-broker.d.ts

@@ -0,0 +1,16 @@
+import type { ToolApprovalRequest } from '@lotagate/agent-sdk';
+import type { DesktopExecutionPolicy } from './desktop-execution-policy.js';
+/** Owns Desktop approval/trust waiters and their AbortSignal lifecycle. */
+export declare class DesktopApprovalBroker {
+    private readonly writeEvent;
+    private readonly approvals;
+    private readonly trusts;
+    constructor(writeEvent: (event: string, data: Record<string, unknown>) => Promise<void>);
+    waitForApproval(request: ToolApprovalRequest, sessionId: string, turnId: string, signal: AbortSignal, executionBoundary: DesktopExecutionPolicy['isolation'], fallbackReason?: string): Promise<boolean>;
+    waitForTrust(trustRequestId: string, signal: AbortSignal): Promise<boolean>;
+    respondApproval(approvalId: string, approved: boolean): boolean;
+    respondTrust(trustRequestId: string, trusted: boolean): boolean;
+    close(): void;
+    private wait;
+    private respond;
+}

package/dist/application/protocol/desktop-approval-broker.js

@@ -0,0 +1 @@
+import{randomUUID as n}from"node:crypto";import{actionDisplayName as p,actionKind as l}from"../orchestration/cli-turn-events.js";import{describeApproval as v}from"./desktop-protocol-helpers.js";class m{writeEvent;approvals=new Map;trusts=new Map;constructor(t){this.writeEvent=t}async waitForApproval(t,r,e,o,a,s){const i=n();return await this.writeEvent("approval.requested",{approvalId:i,turnId:e,sessionId:r,toolName:t.toolName,displayName:p(t.toolName),kind:l(t.toolName,t.toolInfo?.source),detail:v(t),executionBoundary:a,...s===void 0?{}:{fallbackReason:s}}),this.wait(this.approvals,i,o)}waitForTrust(t,r){return this.wait(this.trusts,t,r)}respondApproval(t,r){return this.respond(this.approvals,t,r)}respondTrust(t,r){return this.respond(this.trusts,t,r)}close(){for(const t of[...this.approvals.values(),...this.trusts.values()])t.resolve(!1);this.approvals.clear(),this.trusts.clear()}wait(t,r,e){return new Promise(o=>{const a=()=>s(!1),s=i=>{t.delete(r),e.removeEventListener("abort",a),o(i)};if(e.aborted){s(!1);return}e.addEventListener("abort",a,{once:!0}),t.set(r,{resolve:s,signal:e,onAbort:a})})}respond(t,r,e){const o=t.get(r);return o===void 0?!1:(o.resolve(e),!0)}}export{m as DesktopApprovalBroker};

package/dist/application/protocol/desktop-attachment-store.d.ts

@@ -0,0 +1,16 @@
+import type { AttachmentPayload } from '../../domain/session/attachment.js';
+export declare class DesktopAttachmentStore {
+    private readonly pending;
+    private readonly completed;
+    begin(input: {
+        id: string;
+        name: string;
+        mimeType: string;
+        sizeBytes: number;
+    }): void;
+    appendChunk(id: string, index: number, encoded: string): void;
+    complete(id: string): void;
+    take(ids: readonly string[]): AttachmentPayload[];
+    clear(): void;
+    private totalReservedBytes;
+}

package/dist/application/protocol/desktop-attachment-store.js

@@ -0,0 +1 @@
+import{CLI_ERROR_CODES as s}from"../../domain/errors/error-codes.js";import{CliError as c}from"../../domain/errors/cli-error.js";import{createImageAttachment as d,normalizeImage as r}from"../../infrastructure/clipboard/image-normalizer.js";import{RESOURCE_LIMITS as m}from"../../domain/runtime/resource-limits.js";class u{pending=new Map;completed=new Map;begin(e){if(!p(e.id)||!A(e.name)||!T(e.mimeType))throw i(s.ATTACHMENT_INVALID_IMAGE,"Invalid desktop attachment metadata.","The attachment metadata is invalid.");if(!Number.isSafeInteger(e.sizeBytes)||e.sizeBytes<=0||e.sizeBytes>m.maxAttachmentBytes)throw i(s.ATTACHMENT_TOO_LARGE,"Desktop attachment size is outside the allowed range.","The attachment exceeds the maximum allowed size.",!0);if(this.pending.has(e.id)||this.completed.has(e.id))throw i(s.ATTACHMENT_INVALID_IMAGE,"Desktop attachment id is already in use.","This attachment has already been uploaded.");if(this.totalReservedBytes()+e.sizeBytes>m.pendingAttachmentTotalBytes||this.pending.size+this.completed.size>=m.pendingAttachments)throw i(s.ATTACHMENT_TOO_LARGE,"Desktop attachment limits exceeded.","Too many or too-large attachments are pending.",!0);this.pending.set(e.id,{id:e.id,name:e.name,mimeType:e.mimeType,sizeBytes:e.sizeBytes,nextIndex:0,receivedBytes:0,chunks:[]})}appendChunk(e,t,o){const n=this.pending.get(e);if(n===void 0)throw i(s.ATTACHMENT_INVALID_IMAGE,"Desktop attachment upload was not started.","The attachment upload is not active.");if(!Number.isSafeInteger(t)||t!==n.nextIndex)throw i(s.ATTACHMENT_INVALID_IMAGE,"Desktop attachment chunk order is invalid.","The attachment upload is out of order.");const h=l(o);if(h.byteLength===0||h.byteLength>m.desktopAttachmentChunkBytes||n.receivedBytes+h.byteLength>n.sizeBytes)throw i(s.ATTACHMENT_TOO_LARGE,"Desktop attachment chunk exceeds its declared size.","The attachment upload is invalid or too large.",!0);n.chunks.push(h),n.receivedBytes+=h.byteLength,n.nextIndex+=1}complete(e){const t=this.pending.get(e);if(t===void 0)throw i(s.ATTACHMENT_INVALID_IMAGE,"Desktop attachment upload was not started.","The attachment upload is not active.");if(t.receivedBytes!==t.sizeBytes)throw i(s.ATTACHMENT_INVALID_IMAGE,"Desktop attachment upload is incomplete.","The attachment upload did not finish.");const o=Buffer.concat(t.chunks);if(t.mimeType.startsWith("image/")){const n=r(o,t.mimeType),h=d(n,"file",t.id);this.completed.set(e,{attachment:{...h,name:t.name},bytes:n.bytes})}else this.completed.set(e,{attachment:{id:t.id,name:t.name,mimeType:t.mimeType,sizeBytes:o.byteLength,source:"file"},bytes:o});this.pending.delete(e)}take(e){if(new Set(e).size!==e.length)throw i(s.ATTACHMENT_INVALID_IMAGE,"Desktop attachment ids must be unique.","An attachment was referenced more than once.");const t=e.map(o=>{const n=this.completed.get(o);if(n===void 0)throw i(s.ATTACHMENT_INVALID_IMAGE,"Desktop attachment is not complete.","Complete the attachment upload before sending the prompt.");return n});return e.forEach(o=>this.completed.delete(o)),t}clear(){this.pending.clear(),this.completed.clear()}totalReservedBytes(){let e=0;for(const t of this.pending.values())e+=t.sizeBytes;for(const t of this.completed.values())e+=t.bytes.byteLength;return e}}function l(a){if(!/^[A-Za-z0-9+/]*={0,2}$/u.test(a)||a.length===0||a.length%4!==0)throw i(s.ATTACHMENT_INVALID_IMAGE,"Desktop attachment chunk is not valid Base64.","The attachment upload is invalid.");return Buffer.from(a,"base64")}function p(a){return/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u.test(a)}function A(a){return a.length>0&&a.length<=200&&!a.includes("\0")}function T(a){return a.length<=m.jsonlIdBytes&&/^[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]*\/[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]*$/u.test(a)}function i(a,e,t,o=!1){return new c(a,e,{category:"attachment",userMessage:t,retryable:o})}export{u as DesktopAttachmentStore};

package/dist/application/protocol/desktop-command-catalog.d.ts

@@ -0,0 +1,2 @@
+import type { DesktopCommandListResult } from './desktop-command-contract.js';
+export declare function getDesktopCommandCatalog(): DesktopCommandListResult;

package/dist/application/protocol/desktop-command-catalog.js

@@ -0,0 +1 @@
+import{COMMAND_REGISTRY as r}from"../commands/command-runtime.js";import{isDesktopCommandExposed as t}from"./desktop-command-contract.js";function n(){return{commands:r.list("direct").filter(t).map(e)}}function e(m){return{id:m.id,path:m.path,summary:m.summary,...m.arguments===void 0?{}:{arguments:m.arguments},...m.options===void 0?{}:{options:m.options}}}export{n as getDesktopCommandCatalog};

package/dist/application/protocol/desktop-command-contract.d.ts

@@ -0,0 +1,26 @@
+import type { CommandActionSpec, CommandArgumentSpec, CommandOptionSpec } from '../commands/command-contract.js';
+export interface DesktopCommandDescriptor {
+    readonly id: string;
+    readonly path: readonly string[];
+    readonly summary: string;
+    readonly arguments?: readonly CommandArgumentSpec[];
+    readonly options?: readonly CommandOptionSpec[];
+}
+export interface DesktopCommandListResult {
+    readonly commands: readonly DesktopCommandDescriptor[];
+}
+export interface DesktopCommandInvocation {
+    readonly actionId: string;
+    readonly positionals: readonly string[];
+    readonly options: Readonly<Record<string, string | boolean>>;
+    /** Secrets are transported out-of-band from regular command options. */
+    readonly secrets?: Readonly<{
+        apiKey?: string;
+    }>;
+}
+export interface DesktopCommandExecutionResult {
+    readonly accepted: true;
+    readonly commandId: string;
+    readonly actionId: string;
+}
+export declare function isDesktopCommandExposed(action: CommandActionSpec): boolean;

package/dist/application/protocol/desktop-command-contract.js

@@ -0,0 +1 @@
+function s(e){return e.surfaces.includes("direct")&&e.desktop?.exposed!==!1}export{s as isDesktopCommandExposed};

package/dist/application/protocol/desktop-command-executor.d.ts

@@ -0,0 +1,17 @@
+import type { CliRuntime } from '../../bootstrap/runtime-factory.js';
+import type { DesktopCommandInvocation } from './desktop-command-contract.js';
+import { type DesktopCommandOutputSink } from './desktop-command-output.js';
+export interface DesktopCommandExecutorOptions {
+    readonly runtime: CliRuntime;
+    readonly cwd: string;
+    readonly invocation: DesktopCommandInvocation;
+    readonly signal: AbortSignal;
+    readonly output: DesktopCommandOutputSink;
+    readonly activity?: DesktopCommandActivitySink;
+    readonly onActivityError?: (error: unknown) => void;
+}
+export interface DesktopCommandActivitySink {
+    started(key: string, label: string): Promise<void>;
+    completed(key: string, isError: boolean): Promise<void>;
+}
+export declare function executeDesktopCommand(options: DesktopCommandExecutorOptions): Promise<number>;

package/dist/application/protocol/desktop-command-executor.js

@@ -0,0 +1 @@
+import{executeApplicationCommand as r}from"../commands/application-command-executor.js";import{COMMAND_REGISTRY as a}from"../commands/command-runtime.js";import{parseCommandInvocationForAction as m}from"../commands/command-parser.js";import{CliError as s}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as d}from"../../domain/errors/error-codes.js";import{isDesktopCommandExposed as p}from"./desktop-command-contract.js";import{DesktopCommandOutput as u}from"./desktop-command-output.js";async function b(t){const i=l(t.invocation),o=new u(t.output),e={runtime:t.runtime,cwd:t.cwd,output:o,...t.invocation.secrets===void 0?{}:{secrets:t.invocation.secrets},writableOutput:o.writable,signal:t.signal,...t.activity===void 0?{}:{activity:f(t.activity,t.onActivityError)}};try{const n=await r(i,e);return await o.flush(),n}finally{await o.flush(),o.writable.destroy()}}function l(t){const i=a.get(t.actionId);if(i===void 0||!p(i))throw new s(d.INVALID_ARGUMENT,`Command action '${t.actionId}' is not available through the Desktop protocol.`,{category:"command",userMessage:`The command '${t.actionId}' is not available in the Desktop application.`});const o=new Map(Object.entries(t.options));return m(t.actionId,t.positionals,o,"direct",a)}function f(t,i){return{start(o,e){return c(t.started(o,e),i),{complete:n=>c(t.completed(o,n),i)}}}}function c(t,i){Promise.resolve(t).catch(o=>i?.(o))}export{b as executeDesktopCommand};

package/dist/application/protocol/desktop-command-output.d.ts

@@ -0,0 +1,15 @@
+import { Writable } from 'node:stream';
+import type { CommandOutput } from '../commands/command-output.js';
+export interface DesktopCommandOutputSink {
+    write(content: string, structured?: object): Promise<void>;
+}
+/** Adapts existing command output to ordered JSONL command.output events. */
+export declare class DesktopCommandOutput implements CommandOutput {
+    private readonly _sink;
+    private _pending;
+    readonly writable: Writable;
+    constructor(_sink: DesktopCommandOutputSink);
+    write(value: string): void;
+    writeStructured<T extends object>(value: T, fallbackText?: string): void;
+    flush(): Promise<void>;
+}

package/dist/application/protocol/desktop-command-output.js

@@ -0,0 +1 @@
+import{Writable as e}from"node:stream";class h{_sink;_pending=Promise.resolve();writable=new e({write:(i,t,n)=>{this.write(String(i)),n()}});constructor(i){this._sink=i}write(i){this._pending=this._pending.then(()=>this._sink.write(i))}writeStructured(i,t){this._pending=this._pending.then(()=>this._sink.write(t??"",i))}async flush(){await this._pending}}export{h as DesktopCommandOutput};

package/dist/application/protocol/desktop-execution-policy.d.ts

@@ -0,0 +1,17 @@
+export type DesktopPermissionPolicy = 'ask' | 'allowlist' | 'review' | 'autonomous';
+export type DesktopBrowserAccess = 'disabled' | 'read-only' | 'interactive' | 'autonomous';
+export interface DesktopExecutionPolicy {
+    readonly permissionPolicy: DesktopPermissionPolicy;
+    readonly allowedTools?: readonly string[];
+    readonly browserAccess: DesktopBrowserAccess;
+    readonly isolation: 'sandbox' | 'host';
+    readonly hostFallback: 'ask' | 'deny' | 'allow';
+    readonly timeoutMs: number;
+    readonly retryAttempt?: number;
+}
+/**
+ * Parses the required Desktop-only execution context at the CLI boundary.
+ * Standalone CLI commands use a separate protocol and never provide this
+ * object. Unknown fields are ignored so the new contract can grow additively.
+ */
+export declare function parseDesktopExecutionPolicy(value: unknown): DesktopExecutionPolicy;

package/dist/application/protocol/desktop-execution-policy.js

@@ -0,0 +1 @@
+import{RESOURCE_LIMITS as f}from"../../domain/runtime/resource-limits.js";function y(o){if(!w(o))throw new Error("Invalid Desktop execution policy.");const r=e(o.permissionPolicy,["ask","allowlist","review","autonomous"],"permissionPolicy"),t=e(o.browserAccess,["disabled","read-only","interactive","autonomous"],"browserAccess"),n=e(o.isolation,["sandbox","host"],"isolation"),d=e(o.hostFallback,["ask","deny","allow"],"hostFallback"),s=o.allowedTools===void 0?void 0:p(o.allowedTools),l=c(o.timeoutMs,1e4,7200*1e3,"timeoutMs"),i=o.retryAttempt===void 0?void 0:c(o.retryAttempt,0,3,"retryAttempt");return{permissionPolicy:r,...s===void 0?{}:{allowedTools:s},browserAccess:t,isolation:n,hostFallback:d,timeoutMs:l,...i===void 0?{}:{retryAttempt:i}}}function p(o){if(!Array.isArray(o)||o.length>128)throw new Error("Invalid Desktop allowedTools.");const r=o.map(t=>{if(typeof t!="string"||t.trim().length===0||Buffer.byteLength(t,"utf8")>f.jsonlIdBytes)throw new Error("Invalid Desktop allowedTools entry.");return t.trim()});if(new Set(r).size!==r.length)throw new Error("Desktop allowedTools must not contain duplicates.");return r}function e(o,r,t){if(typeof o!="string"||!r.includes(o))throw new Error(`Invalid Desktop ${t}.`);return o}function c(o,r,t,n){if(typeof o!="number"||!Number.isSafeInteger(o)||o<r||o>t)throw new Error(`Invalid Desktop ${n}.`);return o}function w(o){return typeof o=="object"&&o!==null&&!Array.isArray(o)}export{y as parseDesktopExecutionPolicy};

package/dist/application/protocol/desktop-extension-request-handler.d.ts

@@ -0,0 +1,14 @@
+import type { DesktopExtensionService } from './desktop-extension-service.js';
+import type { DesktopRequest } from './desktop-agent-request-parser.js';
+type ExtensionRequest = Extract<DesktopRequest, {
+    method: 'extension.listPublicPlugins' | 'extension.resolvePublicPluginSource' | 'extension.readPublicPluginContribution' | 'extension.readDetail' | 'extension.readPluginIcon';
+}>;
+/** Keeps CLI-owned extension request dispatch separate from the agent turn lifecycle. */
+export declare class DesktopExtensionRequestHandler {
+    private readonly service;
+    private readonly respond;
+    private readonly cwd;
+    constructor(service: DesktopExtensionService, respond: (request: DesktopRequest, result: unknown) => Promise<void>, cwd: string);
+    handle(request: ExtensionRequest): Promise<void>;
+}
+export {};

package/dist/application/protocol/desktop-extension-request-handler.js

@@ -0,0 +1 @@
+class e{service;respond;cwd;constructor(i,a,s){this.service=i,this.respond=a,this.cwd=s}async handle(i){switch(i.method){case"extension.listPublicPlugins":return this.respond(i,await this.service.listPublicPlugins(i.params.root));case"extension.resolvePublicPluginSource":return this.respond(i,{path:await this.service.resolvePublicPluginSource(i.params.root,i.params.name)});case"extension.readPublicPluginContribution":return this.respond(i,await this.service.readPublicPluginContribution(i.params.root,i.params.pluginName,i.params.kind,i.params.sourceName));case"extension.readDetail":return this.respond(i,await this.service.readDetail(this.cwd,i.params));case"extension.readPluginIcon":return this.respond(i,await this.service.readPluginIcon(this.cwd,i.params.name,i.params.scope))}}}export{e as DesktopExtensionRequestHandler};

package/dist/application/protocol/desktop-extension-service.d.ts

@@ -0,0 +1,44 @@
+type Detail = {
+    content: string;
+    format: 'json' | 'markdown' | 'text';
+    editable: boolean;
+    fileName?: string;
+};
+type PublicContribution = {
+    kind: 'skill' | 'mcp' | 'hook' | 'agent';
+    sourceName: string;
+    description: string;
+};
+type PublicPlugin = {
+    directory: string;
+    name: string;
+    displayName?: string;
+    version: string;
+    description: string;
+    author?: string;
+    license?: string;
+    homepage?: string;
+    privacyPolicy?: string;
+    termsOfService?: string;
+    icon?: string;
+    contributions: readonly PublicContribution[];
+};
+/** CLI-owned extension reads exposed only through the Desktop JSONL protocol. */
+export declare class DesktopExtensionService {
+    listPublicPlugins(root: string): Promise<readonly PublicPlugin[]>;
+    resolvePublicPluginSource(root: string, name: string): Promise<string>;
+    readPublicPluginContribution(root: string, pluginName: string, kind: 'skill' | 'mcp' | 'hook', sourceName: string): Promise<Detail>;
+    readDetail(cwd: string, input: {
+        kind: 'hook' | 'skill' | 'plugin' | 'mcp';
+        name: string;
+        scope?: 'user' | 'project' | 'plugin' | 'builtin';
+        pluginName?: string;
+        pluginScope?: 'user' | 'project';
+        sourceName?: string;
+    }): Promise<Detail>;
+    readPluginIcon(cwd: string, name: string, scope: 'user' | 'project'): Promise<{
+        mimeType: 'image/svg+xml';
+        data: string;
+    } | undefined>;
+}
+export {};

package/dist/application/protocol/desktop-extension-service.js

@@ -0,0 +1,3 @@
+import{fileURLToPath as I}from"node:url";import d from"node:fs/promises";import n from"node:path";import{PLUGIN_LAYOUT as c}from"../../domain/extensions/plugin-manifest.js";import{PluginDiscovery as j}from"../../infrastructure/extensions/plugin-discovery.js";import{PluginAgentDiscovery as F}from"../../infrastructure/extensions/plugin-agent-discovery.js";import{SkillDiscovery as T}from"../../infrastructure/extensions/skill-discovery.js";import{discoverHooks as A}from"../../infrastructure/extensions/hook-runtime.js";import{loadPluginMcpConfig as R}from"../extensions/plugin-contribution-registry.js";import{readFileBounded as v}from"../../infrastructure/filesystem/bounded-file-reader.js";import{readJsonFileBounded as O}from"../../infrastructure/filesystem/bounded-json-reader.js";import{RESOURCE_LIMITS as x}from"../../domain/runtime/resource-limits.js";import{resolvePlatformPaths as M,resolveProjectConfigPaths as D}from"../../infrastructure/platform/platform-paths.js";const _=2*1024*1024,B=256*1024;class ot{async listPublicPlugins(o){const t=await d.realpath(o),r=await new j().discover([t]);return Promise.all(r.map(async i=>{const s=await P(i.directory),a=await new T().discover([n.join(i.directory,c.skillsDirectory)]),u=await R([i]),p=await A(n.join(i.directory,c.hooksDirectory)),C=await new F().discover(n.join(i.directory,c.agentsDirectory)),$=[...a.map(l=>({kind:"skill",sourceName:l.name,description:l.description})),...u.contributions.map(l=>({kind:"mcp",sourceName:l.sourceName,description:z(u.config[l.qualifiedName]?.config)})),...p.map(l=>({kind:"hook",sourceName:l.id,description:`${l.event} hook`})),...C.map(l=>({kind:"agent",sourceName:l.name,description:l.description}))].sort((l,k)=>l.kind.localeCompare(k.kind)||l.sourceName.localeCompare(k.sourceName));return{directory:n.basename(i.directory),name:i.name,...i.displayName===void 0?{}:{displayName:i.displayName},version:i.version,description:i.description??"No description provided.",...i.author===void 0?{}:{author:i.author},...i.license===void 0?{}:{license:i.license},homepage:i.homepage??"https://lotagate.com/",privacyPolicy:"https://lotagate.com/privacy",termsOfService:"https://lotagate.com/terms",...s===void 0?{}:{icon:`data:${s.mimeType};base64,${s.data}`},contributions:$}}))}async resolvePublicPluginSource(o,t){m(t,"public plugin");const r=await d.realpath(o),i=n.resolve(r,t);w(r,i);const s=await d.lstat(i);if(!s.isDirectory()||s.isSymbolicLink())throw new Error(`Public plugin source is invalid: ${t}.`);const a=await d.realpath(i);w(r,a);const u=await d.lstat(n.join(a,c.markerDirectory,c.manifestFile));if(!u.isFile()||u.isSymbolicLink())throw new Error(`Public plugin manifest is missing: ${t}.`);return a}async readPublicPluginContribution(o,t,r,i){const s=await this.resolvePublicPluginSource(o,t);m(i,r);const a=r==="skill"?{path:n.join(s,c.skillsDirectory,i,"SKILL.md"),format:"markdown"}:r==="hook"?{path:n.join(s,c.hooksDirectory,`${i}.json`),format:"json"}:{path:n.join(s,c.mcpDirectory,`${i}.json`),format:"json"};return await E(s,a.path),{content:r==="mcp"?await S(a.path,i,!0):await f(a.path),format:a.format,editable:!1,...r==="mcp"?{}:{fileName:n.basename(a.path)}}}async readDetail(o,t){if(t.scope==="builtin"&&t.kind==="skill"){m(t.name,"skill");const p=n.join(U(),t.name,"SKILL.md");return await J(p)?{content:await f(p),format:"markdown",editable:!1,fileName:"SKILL.md"}:y()}const r=await d.realpath(o),i=t.scope==="plugin"?t.pluginName===void 0?void 0:await g(r,t.pluginName,t.pluginScope):t.kind==="plugin"&&t.scope!=="builtin"?await g(r,t.name,t.scope==="user"?"user":"project"):void 0;if(t.kind==="plugin"&&t.scope!=="plugin"&&t.scope!=="builtin")return i===void 0?y():N(n.join(i,c.markerDirectory,c.manifestFile),"json",!0);if(t.scope!=="plugin"||i===void 0||t.pluginName===void 0)return y();if(t.kind==="plugin")return N(n.join(i,c.markerDirectory,c.manifestFile),"json",!1);const s=t.sourceName??t.name.split(":").slice(1).join(":");m(s,t.kind);const a=t.kind==="skill"?{path:n.join(i,c.skillsDirectory,s,"SKILL.md"),format:"markdown"}:t.kind==="hook"?{path:n.join(i,c.hooksDirectory,`${s}.json`),format:"json"}:{path:n.join(i,c.mcpDirectory,`${s}.json`),format:"json"};return await E(i,a.path),{content:t.kind==="mcp"?await S(a.path,s,!0):await f(a.path),format:a.format,editable:!1,...t.kind==="mcp"?{}:{fileName:n.basename(a.path)}}}async readPluginIcon(o,t,r){const i=await g(await d.realpath(o),t,r);return i===void 0?void 0:P(i)}}async function g(e,o,t){m(o,"plugin");const r=M(),i=t==="project"?[D(e).pluginsDir]:t==="user"?[r.pluginsDir]:[D(e).pluginsDir,r.pluginsDir];return(await new j().discover(i)).find(a=>a.name===o)?.directory}async function N(e,o,t){return{content:await f(e),format:o,editable:t,fileName:n.basename(e)}}async function f(e){const o=await v(e,_);if(o.truncated)throw new Error("The extension detail is too large to display.");return o.bytes.toString("utf8")}async function S(e,o,t){const r=await O(e,x.mcpConfigBytes);if(!b(r))throw new Error("Extension configuration must be a JSON object.");if(t)return`${JSON.stringify(h(r),null,2)}
+`;if(!b(r[o]))throw new Error(`MCP server ${o} was not found in its configuration file.`);return`${JSON.stringify(h(r[o]),null,2)}
+`}async function P(e){const o=n.join(e,"icon.svg");try{const t=await v(o,B);if(t.truncated)return;const r=t.bytes.toString("utf8");return!/^\s*<svg(?:\s|>)/iu.test(r)||/<script\b|\bon[a-z]+\s*=|javascript:/iu.test(r)?void 0:{mimeType:"image/svg+xml",data:t.bytes.toString("base64")}}catch(t){if(L(t))return;throw t}}async function E(e,o){w(e,n.resolve(e,n.relative(e,o)));const t=await d.lstat(o);if(!t.isFile()||t.isSymbolicLink())throw new Error("Extension contribution is invalid.");w(e,await d.realpath(o))}function y(){return{content:"This item is provided by the CLI and has no editable project file.",format:"text",editable:!1}}function U(){return n.resolve(n.dirname(I(import.meta.url)),"../../../skills")}function m(e,o){if(!/^[a-z0-9][a-z0-9-]{0,63}$/u.test(e))throw new Error(`Invalid ${o} name.`)}function w(e,o){const t=n.relative(e,o);if(t.length===0||t.startsWith("..")||n.isAbsolute(t))throw new Error("Extension path is outside its owning directory.")}function z(e){return e?.type==="stdio"||e?.type==="http"||e?.type==="sse"?`${e.type} MCP server`:"MCP server contribution"}function h(e,o){return typeof e=="string"&&o!==void 0&&/(token|secret|password|api[-_]?key|authorization)/iu.test(o)?"[REDACTED]":Array.isArray(e)?e.map(t=>h(t)):b(e)?Object.fromEntries(Object.entries(e).map(([t,r])=>[t,h(r,t)])):e}function b(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function L(e){return typeof e=="object"&&e!==null&&"code"in e&&e.code==="ENOENT"}async function J(e){try{return(await d.lstat(e)).isFile()}catch(o){if(L(o))return!1;throw o}}export{ot as DesktopExtensionService};

package/dist/application/protocol/desktop-host-tool-executor.d.ts

@@ -0,0 +1,63 @@
+import type { ToolDefinition } from '@lotagate/sdk';
+import type { ToolExecutionContext, ToolExecutor, ToolInfo, ToolResult } from '@lotagate/agent-sdk';
+import type { ToolActivityObserver } from '../../ports/tool-activity.js';
+import type { ToolApprovalRequest } from '@lotagate/agent-sdk';
+import type { FileChangeDiff } from '../../domain/filesystem/file-change-diff.js';
+export type DesktopHostExecutionTool = 'filesystem' | 'shell' | 'git' | 'artifact';
+export interface DesktopHostExecutionRequest {
+    version: 1;
+    type: 'host.request';
+    requestId: string;
+    tool: DesktopHostExecutionTool;
+    sessionId: string;
+    runId: string;
+    action: string;
+    params: Record<string, unknown>;
+    executionBoundary: 'sandbox' | 'host';
+    hostFallback: 'ask' | 'deny' | 'allow';
+    projectRoot?: string;
+    executionCwd?: string;
+    executionWorkspaceId?: string;
+}
+export interface DesktopHostExecutionResponse {
+    version: 1;
+    type: 'host.response';
+    requestId: string;
+    tool: DesktopHostExecutionTool;
+    ok: boolean;
+    result?: unknown;
+    error?: {
+        code: string;
+        category: string;
+        message: string;
+        retryable: boolean;
+    };
+    executionBoundary?: 'sandbox' | 'host';
+    fallbackReason?: string;
+    fileChange?: FileChangeDiff;
+}
+export type DesktopHostInvoker = (request: DesktopHostExecutionRequest, signal?: AbortSignal) => Promise<DesktopHostExecutionResponse>;
+/**
+ * Routes Desktop-only host operations through the versioned host protocol.
+ * Standalone CLI callers never provide this executor and continue to use the
+ * local filesystem and shell executors.
+ */
+export declare class DesktopHostToolExecutor implements ToolExecutor {
+    private readonly options;
+    private readonly definitions;
+    constructor(options: {
+        request: DesktopHostInvoker;
+        executionBoundary: 'sandbox' | 'host';
+        hostFallback: 'ask' | 'deny' | 'allow';
+        projectRoot?: string;
+        executionCwd?: string;
+        executionWorkspaceId?: string;
+        onWrite?: (change: FileChangeDiff) => void | Promise<void>;
+        onFallbackApproval?: (request: ToolApprovalRequest, reason: string) => boolean | Promise<boolean>;
+        onActivity?: ToolActivityObserver;
+    });
+    listTools(): readonly ToolDefinition[];
+    getToolInfo(toolName: string): ToolInfo | undefined;
+    execute(toolName: string, input: Record<string, unknown>, context: ToolExecutionContext): Promise<ToolResult>;
+    private request;
+}

package/dist/application/protocol/desktop-host-tool-executor.js

@@ -0,0 +1,2 @@
+import{randomUUID as f}from"node:crypto";import{isReadOnlyShellRequest as p}from"../security/tool-risk-classifier.js";import{resolveWorkspacePath as h}from"../../infrastructure/filesystem/path-resolver.js";import{readOnlyArguments as m,resolveReadOnlyExecutable as y}from"../../infrastructure/platform/read-only-executable.js";import{filesystemToolDefinitions as g}from"../../infrastructure/filesystem/local-filesystem-tool-executor.js";import{shellToolDefinitions as x}from"../../infrastructure/shell/shell-tool-executor.js";import{formatFilesystemActivityName as b,formatShellCommandForDisplay as C}from"../agent/tool-display.js";import{normalizePowerShellScriptInput as E}from"../../infrastructure/platform/host-process.js";import{detectHostPlatform as k}from"../../infrastructure/platform/host-platform.js";class q{options;definitions=[...g(),...x()];constructor(t){this.options=t}listTools(){return this.definitions}getToolInfo(t){if(this.definitions.some(o=>c(o)===t))return{toolName:t,source:t==="shell.exec"?"shell":"filesystem",executorId:"desktop-host-execution",metadata:{boundary:this.options.executionBoundary}}}async execute(t,o,n){if(!this.definitions.some(e=>c(e)===t))return{content:`Unknown Desktop host tool: ${t}`,isError:!0};const i=t==="shell.exec"?"shell":"filesystem";let r;try{r=t==="shell.exec"?E(o,k()):o}catch(e){return{content:e instanceof Error?e.message:"Invalid shell.exec PowerShell script.",isError:!0}}if(t==="shell.exec"&&await p(r.command,r.args,n,h,r.cwd)){const e=r.command,a=await y(e,n.workspaceRoot??n.cwd??process.cwd());if(a===void 0)return{content:"Read-only executable is no longer available.",isError:!0};r={...r,command:a,args:m(e,r.args)}}const l=t==="shell.exec"&&typeof r.command=="string"?C(r.command,Array.isArray(r.args)?r.args.filter(e=>typeof e=="string"):[]):b(t,r.path),u=this.options.onActivity?.start({key:`${n.runId}:${t}`,toolName:t,source:i,label:l});try{let e=await this.options.request(this.request(i,t,r,n),n.signal);if(!e.ok&&e.error?.code==="SANDBOX_FALLBACK_REQUIRED"&&this.options.hostFallback==="ask"){const d=this.getToolInfo(t);(await this.options.onFallbackApproval?.({toolName:t,input:r,context:n,...d===void 0?{}:{toolInfo:d}},e.error.message)??!1)&&(e=await this.options.request({...this.request(i,t,r,n),executionBoundary:"host",hostFallback:"deny"},n.signal))}if(!e.ok)return u?.complete(!0),{content:e.error?.message??"Desktop rejected the execution request.",isError:!0,metadata:{code:e.error?.code??"HOST_EXECUTION_ERROR",boundary:e.executionBoundary??this.options.executionBoundary,retryable:e.error?.retryable??!1}};const a=O(i,e.result);if(a!==void 0){const d={code:a.code,boundary:e.executionBoundary??this.options.executionBoundary,retryable:a.retryable,...a.exitCode===void 0?{}:{exitCode:a.exitCode}};return u?.complete(!0,d),{content:a.message,isError:!0,metadata:d}}return u?.complete(!1,e.fileChange===void 0?void 0:{fileChange:{path:e.fileChange.path,additions:e.fileChange.additions,deletions:e.fileChange.deletions}}),e.fileChange!==void 0&&await this.options.onWrite?.(e.fileChange),{content:I(e.result,n.maxResultBytes),isError:!1,metadata:{boundary:e.executionBoundary??this.options.executionBoundary,...e.fallbackReason===void 0?{}:{fallbackReason:e.fallbackReason}}}}catch(e){return u?.complete(!0),{content:e instanceof Error?e.message:"Desktop execution failed.",isError:!0,metadata:{boundary:this.options.executionBoundary}}}}request(t,o,n,i){return{version:1,type:"host.request",requestId:f(),tool:t,sessionId:i.sessionId,runId:i.runId,action:o,params:n,executionBoundary:this.options.executionBoundary,hostFallback:this.options.hostFallback,...this.options.projectRoot===void 0?{}:{projectRoot:this.options.projectRoot},...this.options.executionCwd===void 0?{}:{executionCwd:this.options.executionCwd},...this.options.executionWorkspaceId===void 0?{}:{executionWorkspaceId:this.options.executionWorkspaceId}}}}function c(s){return"function"in s?s.function.name:void 0}function I(s,t){const o=typeof s=="string"?s:JSON.stringify(s??null);return Buffer.byteLength(o,"utf8")<=t?o:`${o.slice(0,Math.max(0,t-12))}
+[truncated]`}function O(s,t){if(s!=="shell"||typeof t!="object"||t===null||Array.isArray(t))return;const o=t,n=typeof o.stderr=="string"?o.stderr.trim():"",i=typeof o.stdout=="string"?o.stdout.trim():"";if(o.cancelled===!0)return{code:"HOST_EXECUTION_CANCELLED",message:n||"Desktop host execution was cancelled.",retryable:!1};if(o.timedOut===!0)return{code:"HOST_EXECUTION_TIMEOUT",message:n||"Desktop host execution timed out.",retryable:!0};if(o.error===!0)return{code:"HOST_EXECUTION_PROCESS_ERROR",message:n||"Desktop host process failed to start or communicate.",retryable:!0};if(Object.hasOwn(o,"exitCode")&&o.exitCode!==0){const r=typeof o.exitCode=="number"?o.exitCode:null;return{code:"HOST_COMMAND_FAILED",message:n||i||`Desktop host command exited with code ${String(r)}.`,retryable:!1,exitCode:r}}}export{q as DesktopHostToolExecutor};

package/dist/application/protocol/desktop-intent-event-writer.d.ts

@@ -0,0 +1,20 @@
+import type { IntentLifecycleEvent } from '../intent/intent-run-controller.js';
+export interface DesktopIntentEventWriterOptions {
+    readonly writeEvent: (event: string, data: Record<string, unknown>) => Promise<void>;
+    readonly log: (message: string, details: Record<string, unknown>) => void;
+}
+/** Projects host-owned intent state into the stable Desktop event contract. */
+export declare class DesktopIntentEventWriter {
+    private readonly options;
+    private readonly progress;
+    constructor(options: DesktopIntentEventWriterOptions);
+    clear(turnId: string): void;
+    write(event: IntentLifecycleEvent, sessionId: string, turnId: string): Promise<void>;
+    private writeCompiled;
+    private writeEvidence;
+    private writeVerificationRequired;
+    private writeBlocked;
+    private nextVersion;
+    private setActiveStep;
+    private evidenceStep;
+}

package/dist/application/protocol/desktop-intent-event-writer.js

@@ -0,0 +1 @@
+class o{options;progress=new Map;constructor(i){this.options=i}clear(i){this.progress.delete(i)}async write(i,t,e){if(this.options.log("Intent lifecycle updated.",{lifecycle:i.type,intentId:i.contract.id,sessionId:t,turnId:e,...i.type==="intent.evidence"?{evidenceKind:i.evidence.kind,evidenceStatus:i.evidence.status}:{},...i.type==="intent.verification.required"||i.type==="intent.blocked"?{missingCount:i.missing.length}:{}}),i.type==="intent.compiled")return this.writeCompiled(i,t,e);if(i.type==="intent.evidence")return this.writeEvidence(i,t,e);if(i.type==="intent.verification.required")return this.writeVerificationRequired(i,t,e);if(i.type==="intent.blocked")return this.writeBlocked(i,t,e);await this.options.writeEvent("intent.completed",{turnId:e,sessionId:t,intentId:i.contract.id});for(const n of i.contract.steps)await this.options.writeEvent("work.task.completed",{turnId:e,sessionId:t,planId:i.contract.id,version:this.nextVersion(e),stepId:n.id});await this.options.writeEvent("work.plan.completed",{turnId:e,sessionId:t,planId:i.contract.id,version:this.nextVersion(e)}),this.clear(e)}async writeCompiled(i,t,e){const n=i.contract.steps[0]?.id;n!==void 0&&(this.progress.set(e,{version:1,activeStepId:n}),await this.options.writeEvent("intent.compiled",{turnId:e,sessionId:t,contract:i.contract}),await this.options.writeEvent("work.plan.created",{turnId:e,sessionId:t,planId:i.contract.id,version:1,goal:i.contract.objective,language:"und",totalSteps:i.contract.steps.length,steps:i.contract.steps.map((c,r)=>({index:r,id:c.id,title:c.title,description:c.title,dependencies:[],scope:[],acceptanceCriteria:c.acceptanceCriteria,verificationHints:c.requiresVerification?["Host-observed verification required"]:[],evidenceIds:[],status:r===0?"active":"queued"}))}))}async writeEvidence(i,t,e){const n=this.evidenceStep(e,i.contract,i.evidence.kind);await this.options.writeEvent("intent.evidence.recorded",{turnId:e,sessionId:t,intentId:i.contract.id,evidence:i.evidence}),await this.options.writeEvent("work.evidence.recorded",{turnId:e,sessionId:t,planId:i.contract.id,version:this.nextVersion(e),evidence:{id:i.evidence.id,stepId:n,kind:i.evidence.kind==="tool"?"runtime":i.evidence.kind,summary:i.evidence.summary,status:i.evidence.status,...i.evidence.command===void 0?{}:{command:i.evidence.command},...i.evidence.paths===void 0?{}:{paths:i.evidence.paths},...i.evidence.exitCode===void 0?{}:{exitCode:i.evidence.exitCode},createdAt:i.evidence.timestamp}})}async writeVerificationRequired(i,t,e){await this.options.writeEvent("intent.verification.required",{turnId:e,sessionId:t,intentId:i.contract.id,missing:i.missing});const n=i.contract.steps.find(c=>c.requiresVerification);n!==void 0&&(this.setActiveStep(e,n.id),await this.options.writeEvent("work.task.started",{turnId:e,sessionId:t,planId:i.contract.id,version:this.nextVersion(e),stepId:n.id}))}async writeBlocked(i,t,e){await this.options.writeEvent("intent.blocked",{turnId:e,sessionId:t,intentId:i.contract.id,missing:i.missing}),await this.options.writeEvent("work.plan.blocked",{turnId:e,sessionId:t,planId:i.contract.id,version:this.nextVersion(e),reason:i.missing.join(", ")}),this.clear(e)}nextVersion(i){const t=this.progress.get(i);return t===void 0?1:(t.version+=1,t.version)}setActiveStep(i,t){const e=this.progress.get(i);e!==void 0&&(e.activeStepId=t)}evidenceStep(i,t,e){return e==="test"||e==="typecheck"||e==="lint"||e==="build"||e==="runtime"?t.steps.find(n=>n.requiresVerification)?.id??t.steps.at(-1)?.id??t.steps[0].id:this.progress.get(i)?.activeStepId??t.steps[0].id}}export{o as DesktopIntentEventWriter};

package/dist/application/protocol/desktop-mcp-events.d.ts

@@ -0,0 +1,10 @@
+import type { AgentEvent } from '@lotagate/agent-sdk';
+import type { McpRuntimeEvent } from '../../infrastructure/extensions/mcp-runtime.js';
+type DesktopMcpEvent = Extract<AgentEvent, {
+    type: 'mcp.server.status' | 'mcp.tool.catalog.updated';
+}> | McpRuntimeEvent;
+export declare function desktopMcpEvent(event: DesktopMcpEvent, sessionId: string, turnId: string): {
+    name: string;
+    data: Record<string, unknown>;
+};
+export {};

package/dist/application/protocol/desktop-mcp-events.js

@@ -0,0 +1 @@
+function t(r,o,a){if(r.type==="mcp.tool.catalog.updated")return{name:"mcp.tool.catalog.updated",data:{sessionId:o,turnId:a,serverId:r.serverId,toolCount:"toolCount"in r?r.toolCount:r.tools.length,...r.error===void 0?{}:{error:u(r.error),retryable:!0}}};const s=r.summary.status==="closed"?"disconnected":r.summary.status==="created"?"connecting":r.summary.status;return{name:`mcp.server.${s}`,data:{sessionId:o,turnId:a,serverId:r.summary.serverId,status:s,...!("latencyMs"in r.summary)||r.summary.latencyMs===void 0?{}:{latencyMs:r.summary.latencyMs},...r.summary.protocolEra===void 0?{}:{protocolEra:r.summary.protocolEra},...r.summary.protocolVersion===void 0?{}:{protocolVersion:r.summary.protocolVersion},...r.summary.error===void 0?{}:{error:u(r.summary.error),retryable:!0}}}}function u(r){return r.message.replace(/(api[-_ ]?key|authorization|bearer|token|password)\s*[:=]\s*[^\s,;]+/giu,"$1=[REDACTED]").slice(0,1024)}export{t as desktopMcpEvent};

package/dist/application/protocol/desktop-orchestration-events.d.ts

@@ -0,0 +1,2 @@
+import type { SubagentLifecycleEvent } from '../../ports/subagent-lifecycle.js';
+export declare function subagentDesktopPayload(event: SubagentLifecycleEvent, turnId?: string): Record<string, unknown>;

package/dist/application/protocol/desktop-orchestration-events.js

@@ -0,0 +1,2 @@
+function u(d,s){return{...s===void 0?{}:{turnId:s},sessionId:d.sessionId,id:d.id,displayName:d.displayName,task:o(d.task,16384),mode:d.mode,model:d.model,status:d.status,background:d.background,timestamp:d.timestamp,...d.durationMs===void 0?{}:{durationMs:d.durationMs},...d.summary===void 0?{}:{summary:o(d.summary,24576)},...d.lastAction===void 0?{}:{lastAction:d.lastAction},...d.handoff===void 0?{}:{handoff:d.handoff}}}function o(d,s){const a=Buffer.from(d,"utf8");return a.byteLength<=s?d:`${a.subarray(0,s).toString("utf8")}
+[truncated]`}export{u as subagentDesktopPayload};

package/dist/application/protocol/desktop-protocol-helpers.d.ts

@@ -0,0 +1,13 @@
+import type { ToolApprovalRequest } from '@lotagate/agent-sdk';
+import type { SessionMetadata } from '../../domain/session/session.js';
+import type { CliApprovalMode } from '../security/tool-approval-service.js';
+import type { DesktopExecutionPolicy } from './desktop-execution-policy.js';
+export declare function desktopApprovalMode(policy: DesktopExecutionPolicy['permissionPolicy']): CliApprovalMode;
+export declare function toDesktopError(error: unknown): {
+    code: string;
+    category: string;
+    message: string;
+    retryable: boolean;
+};
+export declare function sessionResult(session: SessionMetadata): Record<string, unknown>;
+export declare function describeApproval(request: ToolApprovalRequest): Record<string, unknown>;

package/dist/application/protocol/desktop-protocol-helpers.js

@@ -0,0 +1 @@
+import{asCliError as n}from"../../domain/errors/cli-error.js";import{formatShellCommandForDisplay as s,formatToolActivityName as i}from"../agent/tool-display.js";function p(e){return e==="allowlist"?"auto":e==="review"?"review":e==="autonomous"?"autonomous":"ask"}function l(e){if(typeof e=="object"&&e!==null){const r=e;if(typeof r.code=="string"&&typeof r.category=="string"&&typeof r.userMessage=="string"&&typeof r.retryable=="boolean")return{code:r.code,category:r.category,message:r.userMessage,retryable:r.retryable}}const t=n(e);return{code:t.code,category:t.category,message:t.userMessage,retryable:t.retryable}}function u(e){return{session:e}}function f(e){if(e.toolName==="filesystem.write")return{summary:`Write workspace file: ${o(e.input.path)}`,path:o(e.input.path)};if(e.toolName==="shell.exec"){const t=typeof e.input.command=="string"?e.input.command:"",r=Array.isArray(e.input.args)?e.input.args.filter(a=>typeof a=="string"):[];return{summary:`Run command: ${s(t,r,240)}`,command:t,args:r}}return{summary:`This ${i(e.toolName)} operation may change workspace or external state.`}}function o(e){return String(e??"").replace(/Bearer\s+[^\s]+/giu,"Bearer [REDACTED]").replace(/sk-[A-Za-z0-9_-]{8,}/gu,"[REDACTED]").slice(0,240)}export{f as describeApproval,p as desktopApprovalMode,u as sessionResult,l as toDesktopError};

package/dist/application/protocol/document-host-tool-definitions.d.ts

@@ -0,0 +1,4 @@
+import type { ToolDefinition } from '@lotagate/sdk';
+export declare const DOCUMENT_FORMATS: readonly ["pdf", "pptx", "excel", "docs"];
+export type DocumentFormat = typeof DOCUMENT_FORMATS[number];
+export declare const DOCUMENT_TOOL_DEFINITIONS: readonly ToolDefinition[];

package/dist/application/protocol/document-host-tool-definitions.js

@@ -0,0 +1 @@
+const k=["pdf","pptx","excel","docs"],t={path:n("Workspace-relative or absolute document path."),handleId:n("Document handle returned by the open tool."),outputPath:n("Optional workspace-relative output path.")},m=[a("pdf.open","Open a PDF document and return a governed document handle.",{path:t.path},["path"]),a("pdf.create","Create a new PDF document at the requested path.",{path:t.path,title:n("Optional document title.")},["path"]),a("pdf.inspect","Inspect PDF metadata and page count.",{handleId:t.handleId},["handleId"]),a("pdf.validate","Validate the PDF signature and readable structure.",{path:t.path},["path"]),a("pdf.readText","Extract bounded text from selected PDF pages.",{handleId:t.handleId,pages:o("Optional zero-based page numbers.")},["handleId"]),a("pdf.render","Render selected PDF pages to image artifacts.",{handleId:t.handleId,pages:o("Optional zero-based page numbers."),outputPath:t.outputPath},["handleId"]),a("pdf.extractTables","Extract table-like text from selected PDF pages.",{handleId:t.handleId,pages:o("Optional zero-based page numbers.")},["handleId"]),a("pdf.recognizeText","Recognize text from selected PDF pages with bounded line metadata.",{handleId:t.handleId,pages:o("Optional zero-based page numbers."),language:n("Optional BCP-47 OCR language tag.")},["handleId"]),a("pdf.search","Search PDF text and return bounded page matches.",{handleId:t.handleId,query:n("Text to find."),pages:o("Optional zero-based page numbers."),maxResults:d("Maximum matches to return.")},["handleId","query"]),a("pdf.extractImages","Extract embedded PDF images to a workspace directory.",{handleId:t.handleId,outputPath:t.outputPath,pages:o("Optional zero-based page numbers.")},["handleId","outputPath"]),a("pdf.manageBookmarks","Read or update PDF outline bookmarks.",{handleId:t.handleId,operation:l(["list","add","update","delete"],"Bookmark operation."),bookmark:i("Bookmark definition for add, update, or delete.")},["handleId","operation"]),a("pdf.extractLinks","Extract links from selected PDF pages.",{handleId:t.handleId,pages:o("Optional zero-based page numbers.")},["handleId"]),a("pdf.extractAnnotations","Extract annotations from a PDF.",{handleId:t.handleId,pages:o("Optional zero-based page numbers.")},["handleId"]),a("pdf.manageAttachments","List, extract, attach, or remove PDF file attachments.",{handleId:t.handleId,operation:l(["list","extract","attach","delete"],"Attachment operation."),outputPath:t.outputPath,sourcePath:t.path,name:n("Attachment name.")},["handleId","operation"]),a("pdf.flattenForms","Flatten PDF form fields into page content.",{handleId:t.handleId,outputPath:t.outputPath},["handleId"]),a("pdf.optimize","Optimize a PDF into a separate output artifact.",{handleId:t.handleId,outputPath:t.outputPath,options:i("Optimization options.")},["handleId","outputPath"]),a("pdf.addPageNumbers","Add page numbers to a PDF into a separate output artifact.",{handleId:t.handleId,outputPath:t.outputPath,options:i("Page number placement and formatting options.")},["handleId","outputPath"]),a("pdf.insertPages","Insert pages from another PDF before a page index.",{handleId:t.handleId,sourcePath:t.path,beforePage:d("Zero-based insertion page.")},["handleId","sourcePath","beforePage"]),a("pdf.deletePages","Delete selected pages from a PDF.",{handleId:t.handleId,pages:o("Zero-based page numbers.")},["handleId","pages"]),a("pdf.reorderPages","Reorder all PDF pages using a zero-based permutation.",{handleId:t.handleId,order:o("Complete zero-based page permutation.")},["handleId","order"]),a("pdf.rotatePages","Rotate selected PDF pages.",{handleId:t.handleId,pages:o("Zero-based page numbers."),degrees:l(["90","180","270"],"Clockwise rotation.")},["handleId","pages","degrees"]),a("pdf.merge","Merge PDFs into a new output document.",{paths:h("Input PDF paths."),outputPath:t.outputPath},["paths","outputPath"]),a("pdf.split","Split selected PDF pages into a new output document.",{handleId:t.handleId,pages:o("Zero-based page numbers."),outputPath:t.outputPath},["handleId","pages","outputPath"]),a("pdf.addText","Add positioned text to a PDF page.",{handleId:t.handleId,page:d("Zero-based page number."),text:n("Text to add."),x:d("Horizontal PDF coordinate."),y:d("Vertical PDF coordinate.")},["handleId","page","text","x","y"]),a("pdf.addImage","Add an image to a PDF page.",{handleId:t.handleId,page:d("Zero-based page number."),imagePath:t.path,x:d("Horizontal PDF coordinate."),y:d("Vertical PDF coordinate."),width:d("Image width."),height:d("Image height.")},["handleId","page","imagePath","x","y","width","height"]),a("pdf.annotate","Add a PDF annotation.",{handleId:t.handleId,page:d("Zero-based page number."),text:n("Annotation text."),x:d("Horizontal PDF coordinate."),y:d("Vertical PDF coordinate.")},["handleId","page","text","x","y"]),a("pdf.readForm","Read PDF form fields.",{handleId:t.handleId},["handleId"]),a("pdf.fillForm","Fill PDF form fields.",{handleId:t.handleId,values:i("Field names and values.")},["handleId","values"]),a("pdf.redact","Redact selected rectangular areas in a PDF.",{handleId:t.handleId,areas:x("Page and rectangle definitions.")},["handleId","areas"]),a("pdf.save","Save changes to an opened PDF document.",{handleId:t.handleId,outputPath:t.outputPath},["handleId"]),a("pdf.close","Close an opened PDF document handle.",{handleId:t.handleId},["handleId"])],g=u("pptx","slide",[["duplicateSlide","Duplicate a presentation slide."],["importSlides","Import slides from another presentation."],["arrangeElements","Align, distribute, group, or reorder slide elements."],["findReplace","Find and replace text across presentation slides."],["extractText","Extract bounded text from selected presentation slides."],["manageMedia","List, insert, update, or delete presentation media."],["manageHyperlinks","List, set, or clear presentation hyperlinks."],["manageTransitions","Inspect or update slide transitions."],["manageLayouts","List or apply presentation slide layouts."],["readSlide","Read slide text and element metadata."],["addSlide","Add a slide."],["deleteSlide","Delete a slide."],["reorderSlides","Reorder slides."],["updateSlide","Update slide metadata."],["addElement","Add a slide element."],["updateElement","Update a slide element."],["deleteElement","Delete a slide element."],["setTheme","Set the presentation theme."],["setNotes","Set speaker notes."],["render","Render slides to image artifacts."],["exportPdf","Export the presentation as PDF."]]),I=u("excel","range",[["find","Find text or values in a workbook."],["manageNamedRange","Create, inspect, update, or delete a workbook named range."],["setDataValidation","Set or clear data validation on a worksheet range."],["managePivotTable","Create, refresh, inspect, or delete a pivot table."],["readFormulas","Read formulas and calculated values from a worksheet range."],["manageConditionalFormatting","List, set, or clear conditional formatting rules."],["manageSheetView","Inspect or update worksheet view settings."],["manageComments","List, add, update, or delete cell comments."],["manageProtection","Inspect, protect, or unprotect workbook or worksheet protection."],["readRange","Read a worksheet range."],["writeRange","Write values to a worksheet range."],["clearRange","Clear a worksheet range."],["addSheet","Add a worksheet."],["updateSheet","Rename or update a worksheet."],["deleteSheet","Delete a worksheet."],["editRows","Insert or delete worksheet rows."],["editColumns","Insert or delete worksheet columns."],["formatRange","Format a worksheet range."],["manageTable","Create or update a table."],["manageChart","Create or update a chart."],["sortRange","Sort a worksheet range."],["filterRange","Apply or clear a worksheet filter."],["recalculate","Recalculate workbook formulas."],["render","Render a worksheet to an image artifact."],["importCsv","Import CSV data into a worksheet."],["exportCsv","Export a worksheet as CSV."],["exportPdf","Export a workbook or worksheet as PDF."]]),f=u("docs","content",[["manageTable","Create, inspect, update, or delete a document table."],["manageImage","Insert, inspect, update, or delete a document image."],["fillTemplate","Fill tagged document content controls from structured values."],["updateFields","Update document fields."],["inspectStructure","Read document paragraphs, headings, tables, and sections."],["manageBookmarks","List, add, update, or delete document bookmarks."],["manageHyperlinks","List, add, update, or delete document hyperlinks."],["manageLists","Inspect or apply document list formatting."],["manageFootnotes","List, add, or delete document footnotes."],["readContent","Read document content and structure."],["insertContent","Insert content at a document position."],["updateContent","Update a document range."],["deleteContent","Delete a document range."],["findReplace","Find and replace document text."],["setStyles","Apply document styles."],["setSection","Update section settings."],["setHeaderFooter","Update a header or footer."],["manageComments","Create or update document comments."],["manageRevisions","Inspect or manage document revisions."],["render","Render document pages to image artifacts."],["exportPdf","Export the document as PDF."]]),F=[...m,...g,...I,...f];function u(e,s,p){return[a(`${e}.open`,`Open a ${e.toUpperCase()} document and return a governed document handle.`,{path:t.path},["path"]),a(`${e}.create`,`Create a new ${e.toUpperCase()} document at the requested path.`,{path:t.path,title:n("Optional document title.")},["path"]),a(`${e}.inspect`,`Inspect ${e.toUpperCase()} metadata.`,{handleId:t.handleId},["handleId"]),a(`${e}.validate`,`Validate ${e.toUpperCase()} structure.`,{path:t.path},["path"]),...p.map(([r,c])=>a(`${e}.${r}`,c,P(e,r,s),b(r))),a(`${e}.save`,`Save changes to an opened ${e.toUpperCase()} document.`,{handleId:t.handleId,outputPath:t.outputPath},["handleId"]),a(`${e}.close`,`Close an opened ${e.toUpperCase()} document handle.`,{handleId:t.handleId},["handleId"])]}function P(e,s,p){const r={handleId:t.handleId,outputPath:t.outputPath,sourcePath:t.path,sheet:n("Worksheet name."),sheetName:n("New worksheet name."),slide:d("Zero-based slide number."),pages:o("Optional zero-based item indexes."),range:n(`Target ${p} reference.`),start:d("Document character start."),end:d("Document character end."),find:n("Text to find."),replace:n("Replacement text."),content:n("Text or serialized content."),text:n("Text value."),values:i("Structured values."),options:i("Format-specific options."),operation:n("Format-specific operation."),name:n("Named item identifier."),formula:n("Formula or source expression."),formula1:n("Primary validation formula."),formula2:n("Secondary validation formula."),index:d("Zero-based item index."),position:d("Zero-based destination position."),elementIds:h("Element identifiers."),alignment:l(["left","center","right","top","middle","bottom"],"Alignment operation."),distribution:l(["horizontal","vertical"],"Distribution direction."),imagePath:t.path,mediaPath:t.path,width:d("Width in document units."),height:d("Height in document units."),altText:n("Alternative text."),tableName:n("Table or pivot table name."),sourceRange:n("Source worksheet range."),query:n("Search query."),maxResults:d("Maximum result count."),rowStart:d("Zero-based first row."),rowCount:d("Maximum rows."),columnStart:d("Zero-based first column."),columnCount:d("Maximum columns."),bookmark:i("Bookmark definition."),property:n("Property name."),expected:n("Expected value."),level:d("List or outline level."),target:n("Bookmark, hyperlink, or list target."),address:n("Hyperlink destination."),password:n("Protection password when required."),kind:n("Protection target kind."),style:n("Document style name."),listType:l(["bullet","number"],"List type."),effect:d("PowerPoint transition effect code.")};return e==="pptx"&&(r.elementId=n("Slide element identifier.")),r}function b(e){return e==="readSlide"?["handleId","slide"]:e==="readRange"||e==="writeRange"||e==="clearRange"||e==="formatRange"?["handleId","range"]:e==="duplicateSlide"?["handleId","slide"]:e==="importSlides"?["handleId","sourcePath"]:e==="arrangeElements"?["handleId","slide","elementIds","operation"]:e==="findReplace"?["handleId","find","replace"]:e==="find"?["handleId","query"]:e==="setDataValidation"?["handleId","range","operation"]:e==="manageNamedRange"||e==="setDataValidation"||e==="managePivotTable"||e==="manageTable"||e==="manageImage"?["handleId","operation"]:e==="fillTemplate"?["handleId","values"]:e==="updateFields"?["handleId"]:e==="extractText"?["handleId"]:e==="readFormulas"?["handleId","range"]:e==="manageMedia"||e==="manageHyperlinks"||e==="manageTransitions"||e==="manageLayouts"||e==="manageConditionalFormatting"||e==="manageSheetView"||e==="manageComments"||e==="manageProtection"||e==="manageBookmarks"||e==="manageLists"||e==="manageFootnotes"||e==="inspectStructure"?["handleId","operation"]:e==="exportCsv"||e==="exportPdf"||e==="render"?["handleId"]:["handleId"]}function a(e,s,p,r){return{type:"function",function:{name:e,description:s,parameters:{type:"object",properties:p,required:r,additionalProperties:!1}}}}function n(e){return{type:"string",description:e}}function d(e){return{type:"number",description:e}}function l(e,s){return{type:"string",enum:[...e],description:s}}function o(e){return{type:"array",items:{type:"integer"},description:e}}function h(e){return{type:"array",items:{type:"string"},description:e}}function i(e){return{type:"object",additionalProperties:!0,description:e}}function x(e){return{type:"array",items:{type:"object",additionalProperties:!0},description:e}}export{k as DOCUMENT_FORMATS,F as DOCUMENT_TOOL_DEFINITIONS};

package/dist/application/protocol/document-host-tool-executor.d.ts

@@ -0,0 +1,49 @@
+import type { ToolDefinition } from '@lotagate/sdk';
+import type { ToolExecutionContext, ToolExecutor, ToolInfo, ToolResult } from '@lotagate/agent-sdk';
+import type { ToolActivityObserver } from '../../ports/tool-activity.js';
+import { type DocumentFormat } from './document-host-tool-definitions.js';
+export type DocumentHostTool = 'document';
+export interface DocumentHostRequest {
+    version: 1;
+    type: 'host.request';
+    requestId: string;
+    tool: DocumentHostTool;
+    sessionId: string;
+    runId: string;
+    action: string;
+    params: Record<string, unknown>;
+    executionBoundary: 'host';
+    hostFallback: 'deny';
+    projectRoot?: string;
+    executionCwd?: string;
+    executionWorkspaceId?: string;
+}
+export interface DocumentHostResponse {
+    version: 1;
+    type: 'host.response';
+    requestId: string;
+    tool: DocumentHostTool;
+    ok: boolean;
+    result?: unknown;
+    error?: {
+        code: string;
+        category: string;
+        message: string;
+        retryable: boolean;
+    };
+}
+export type DocumentHostInvoker = (request: DocumentHostRequest, signal?: AbortSignal) => Promise<DocumentHostResponse>;
+export declare function documentToolDefinitions(): readonly ToolDefinition[];
+export declare function documentToolDefinitionsForFormats(formats: readonly DocumentFormat[]): readonly ToolDefinition[];
+export declare class DocumentHostToolExecutor implements ToolExecutor {
+    private readonly options;
+    private readonly definitions;
+    constructor(options: {
+        request: DocumentHostInvoker;
+        formats?: readonly DocumentFormat[];
+        onActivity?: ToolActivityObserver;
+    });
+    listTools(): readonly ToolDefinition[];
+    getToolInfo(toolName: string): ToolInfo | undefined;
+    execute(toolName: string, input: Record<string, unknown>, context: ToolExecutionContext): Promise<ToolResult>;
+}

package/dist/application/protocol/document-host-tool-executor.js

@@ -0,0 +1,2 @@
+import{randomUUID as a}from"node:crypto";import{DOCUMENT_TOOL_DEFINITIONS as i}from"./document-host-tool-definitions.js";function l(){return i}function c(o){const e=new Set(o.map(r=>`${r}.`));return i.filter(r=>[...e].some(t=>u(r)?.startsWith(t)===!0))}class p{options;definitions;constructor(e){this.options=e,this.definitions=e.formats===void 0?i:c(e.formats)}listTools(){return this.definitions}getToolInfo(e){if(!this.definitions.some(t=>u(t)===e))return;const r=/\.(?:open|inspect|validate|readText|readSlide|readRange|readContent|extractTables|recognizeText|search|extractImages|extractLinks|extractAnnotations|readForm|find|readFormulas|inspectStructure|manageRevisions)$/u.test(e);return{toolName:e,source:"custom",executorId:"desktop-document-host",metadata:{risk:r?"read":"unknown"}}}async execute(e,r,t){if(!this.definitions.some(n=>u(n)===e))return{content:`Unknown document tool: ${e}`,isError:!0};const s=this.options.onActivity?.start({key:`${t.runId}:${e}`,toolName:e,source:"custom",label:e.replace(/\./u," ")});try{const n=await this.options.request({version:1,type:"host.request",requestId:a(),tool:"document",sessionId:t.sessionId,runId:t.runId,action:e,params:r,executionBoundary:"host",hostFallback:"deny",...t.workspaceRoot===void 0?{}:{projectRoot:t.workspaceRoot},...t.cwd===void 0?{}:{executionCwd:t.cwd}},t.signal);return n.ok?(s?.complete(!1),{content:d(n.result,t.maxResultBytes),isError:!1,metadata:{document:!0}}):(s?.complete(!0),{content:n.error?.message??"Desktop rejected the document action.",isError:!0,metadata:{code:n.error?.code??"DOCUMENT_HOST_ERROR",retryable:n.error?.retryable??!1}})}catch(n){return s?.complete(!0),{content:n instanceof Error?n.message:"Document host request failed.",isError:!0}}}}function u(o){return"function"in o?o.function.name:void 0}function d(o,e){const r=typeof o=="string"?o:JSON.stringify(o??null);return Buffer.byteLength(r,"utf8")<=e?r:`${r.slice(0,Math.max(0,e-12))}
+[truncated]`}export{p as DocumentHostToolExecutor,l as documentToolDefinitions,c as documentToolDefinitionsForFormats};

package/dist/application/protocol/json-line-writer.d.ts

@@ -0,0 +1,9 @@
+import type { Writable } from 'node:stream';
+/** Serializes protocol messages in order and applies Writable backpressure. */
+export declare class JsonLineWriter<T> {
+    private readonly output;
+    private tail;
+    constructor(output: Writable);
+    write(value: T): Promise<void>;
+    flush(): Promise<void>;
+}

package/dist/application/protocol/json-line-writer.js

@@ -0,0 +1,2 @@
+import{once as r}from"node:events";class o{output;tail=Promise.resolve();constructor(t){this.output=t}write(t){const i=this.tail.then(async()=>{this.output.write(`${JSON.stringify(t)}
+`)||await r(this.output,"drain")});return this.tail=i.catch(()=>{}),i}async flush(){await this.tail}}export{o as JsonLineWriter};

package/dist/application/protocol/jsonl-agent-command.d.ts

@@ -0,0 +1,3 @@
+import type { Readable, Writable } from 'node:stream';
+import type { createCompositionRoot } from '../../bootstrap/composition-root.js';
+export declare function runAgentCommand(positionals: readonly string[], runtime: ReturnType<typeof createCompositionRoot>, cwd: string, stdin: Readable, stdout: Writable): Promise<number>;

package/dist/application/protocol/jsonl-agent-command.js

@@ -0,0 +1,3 @@
+import{AuthenticationService as A}from"../auth/authentication-service.js";import{JsonlProtocolRunner as k}from"./jsonl-protocol.js";import{createLotaGateClient as O}from"../../infrastructure/sdk/lotagate-client-factory.js";import{CliError as C}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as d}from"../../domain/errors/error-codes.js";import{prepareCliAgent as _}from"../agent/cli-agent-execution-service.js";import{AgentRunTracker as x}from"../agent/agent-run-tracker.js";import{loadExecutionConfig as P}from"../config/execution-config.js";import{agentLimitNotice as T,classifyAgentLimit as b}from"../agent/agent-limit.js";import{runDesktopAgentCommand as v}from"./desktop-agent-command.js";async function $(E,t,r,h,w){const N=E[0]??"stdio";if(N==="desktop")return v(t,r,h,w);if(N!=="stdio")throw new C(d.INVALID_ARGUMENT,"Unsupported agent action.",{category:"arguments",userMessage:"Use `lotagate agent stdio` or `lotagate agent desktop`."});const a=await P(t,r);if(a.config.model===null)throw new C(d.MODEL_NOT_FOUND,"No model is selected.",{category:"model",userMessage:"Select a model before running the stdio agent."});const M=a.config.profile??A.defaultProfileName(),y=await t.auth.requireCredential(M);return(await new k(async function*(f,R){const i=f.params.model??a.config.model;t.logger.info("Protocol agent request started.",{model:i,promptLength:f.params.prompt.length});const s=new x,L=o=>{s.observeModel(o),t.logger.debug("Model turn completed.",{model:o.model,stream:o.stream,contentLength:o.contentLength,toolCallCount:o.toolCallCount,toolNames:o.toolNames,finishReason:o.finishReason})},m=await _({runtime:t,projectRoot:r,executionCwd:r,model:i,client:O(y.profile,y.apiKey),profile:"protocol-safe",approvalMode:a.config.approvalMode,onModelComplete:L});let g=!1,n="",l,c;try{const o=await m.buildInput(f.params.prompt);for await(const e of m.run({input:o.input,userInput:o.userInput,...o.workspaceContext===void 0?{}:{workspaceContext:o.workspaceContext},model:i,signal:R}))if(s.observe(e),e.type==="tool.called"&&t.logger.info("Agent tool called.",{toolName:e.toolName}),e.type==="tool.completed"&&t.logger.info("Agent tool completed.",{toolName:e.toolName,isError:e.isError}),e.type==="model.delta"&&e.content.length>0?(g=!0,n+=e.content,yield{type:"delta",content:e.content}):e.type==="session.completed"&&(l=e.content),e.type==="session.failed"){const p=b(e.error);if(p===void 0)throw e.error;c=T(p);break}if(c!==void 0){const e=n.length===0?c:`
+
+${c}`;g=!0,n+=e,l=n,yield{type:"delta",content:e}}const u=l===void 0||l.trim().length===0?n:l;if(u.trim().length===0){const e=s.snapshot();e.toolCalls>0&&s.markStuck();const p=e.toolCalls>0?d.MODEL_EMPTY_FINAL:d.MODEL_PROTOCOL_EMPTY_RESPONSE;throw new C(p,"Agent completed without a final text response.",{category:"model",userMessage:"The model completed without a final text response.",retryable:!0,details:{toolCalls:e.toolCalls,toolCompletions:e.toolCompletions,toolNames:e.toolNames,finishReason:e.lastFinishReason}})}g||(yield{type:"delta",content:u}),yield{type:"completed",content:u},t.logger.info("Protocol agent request completed.",{model:i})}finally{await m.close()}}).run(h,w)).errorCount===0?0:1}export{$ as runAgentCommand};