@lotagate/cli 0.1.24 → 0.1.26

package/dist/infrastructure/agent-sdk/model-tool-name-mapper.d.ts

@@ -0,0 +1,13 @@
+import type { ChatCompletionChunk, ChatCompletionRequest, ChatCompletionResponse, ToolDefinition } from '@lotagate/sdk';
+export interface ModelToolNameMap {
+    toProviderName(name: string): string;
+    toInternalName(name: string): string;
+}
+/**
+ * Creates a stable, provider-safe alias map while keeping the CLI's canonical
+ * names available to executors, policies, and UI events.
+ */
+export declare function createModelToolNameMap(tools: readonly ToolDefinition[] | undefined): ModelToolNameMap;
+export declare function mapRequestToolNames<T extends ChatCompletionRequest>(request: T, nameMap: ModelToolNameMap): T;
+export declare function mapResponseToolNames(response: ChatCompletionResponse, nameMap: ModelToolNameMap): ChatCompletionResponse;
+export declare function mapChunkToolNames(chunk: ChatCompletionChunk, nameMap: ModelToolNameMap): ChatCompletionChunk;

package/dist/infrastructure/agent-sdk/model-tool-name-mapper.js

@@ -0,0 +1 @@
+import{PROVIDER_TOOL_NAME_MAX_LENGTH as l,PROVIDER_TOOL_NAME_PATTERN as s}from"./sdk-constants.js";function g(n){const t=new Map,e=new Map;for(const o of[...new Set((n??[]).flatMap(c))]){const i=u(o),a=e.get(i);if(a!==void 0&&a!==o)throw new Error(`Tool names "${a}" and "${o}" normalize to the same provider name "${i}".`);t.set(o,i),e.set(i,o)}return{toProviderName:o=>t.get(o)??u(o),toInternalName:o=>e.get(o)??o}}function _(n,t){const e={...n,messages:n.messages.map(o=>!("tool_calls"in o)||o.tool_calls===void 0?o:{...o,tool_calls:o.tool_calls.map(i=>r(i,t.toProviderName))}),...n.tools===void 0?{}:{tools:n.tools.map(o=>d(o,t.toProviderName))}};return n.tool_choice!==void 0&&(e.tool_choice=f(n.tool_choice,t.toProviderName)),n.toolChoice!==void 0&&(e.toolChoice=f(n.toolChoice,t.toProviderName)),n.toolConfig!==void 0&&(e.toolConfig=f(n.toolConfig,t.toProviderName)),e}function N(n,t){return{...n,choices:n.choices.map(e=>({...e,message:e.message.tool_calls===void 0?e.message:{...e.message,tool_calls:e.message.tool_calls.map(o=>r(o,t.toInternalName))}}))}}function C(n,t){return{...n,choices:n.choices.map(e=>({...e,delta:e.delta.tool_calls===void 0?e.delta:{...e.delta,tool_calls:e.delta.tool_calls.map(o=>r(o,t.toInternalName))}}))}}function u(n){const t=n.replace(/[^A-Za-z0-9_-]+/gu,"_");if(t.length<=l&&s.test(t))return t;const e=m(n).slice(0,8);return`${t.slice(0,l-e.length-1)}_${e}`}function m(n){let t=2166136261;for(const e of n)t^=e.codePointAt(0)??0,t=Math.imul(t,16777619);return(t>>>0).toString(16).padStart(8,"0")}function d(n,t){return"function"in n&&n.function!==void 0?{...n,function:{...n.function,name:t(n.function.name)}}:"functionDeclarations"in n?{...n,functionDeclarations:n.functionDeclarations.map(e=>({...e,name:t(e.name)}))}:"name"in n?{...n,name:t(n.name)}:n}function r(n,t){return{...n,function:{...n.function,name:t(n.function.name)}}}function f(n,t){return typeof n=="string"?n:"function"in n&&n.function!==void 0?{...n,function:{...n.function,name:t(n.function.name)}}:"name"in n&&typeof n.name=="string"?{...n,name:t(n.name)}:"functionCallingConfig"in n&&n.functionCallingConfig.allowedFunctionNames!==void 0?{...n,functionCallingConfig:{...n.functionCallingConfig,allowedFunctionNames:n.functionCallingConfig.allowedFunctionNames.map(t)}}:n}function c(n){return"function"in n&&n.function!==void 0?[n.function.name]:"name"in n&&typeof n.name=="string"?[n.name]:"functionDeclarations"in n?n.functionDeclarations.map(t=>t.name):[]}export{g as createModelToolNameMap,C as mapChunkToolNames,_ as mapRequestToolNames,N as mapResponseToolNames};

package/dist/infrastructure/agent-sdk/sdk-constants.d.ts

@@ -0,0 +1,2 @@
+export declare const PROVIDER_TOOL_NAME_PATTERN: RegExp;
+export declare const PROVIDER_TOOL_NAME_MAX_LENGTH = 64;

package/dist/infrastructure/agent-sdk/sdk-constants.js

@@ -0,0 +1 @@
+const _=/^[A-Za-z0-9_-]+$/u,E=64;export{E as PROVIDER_TOOL_NAME_MAX_LENGTH,_ as PROVIDER_TOOL_NAME_PATTERN};

package/dist/infrastructure/agent-sdk/tool-calling-completion-client.d.ts

@@ -0,0 +1,4 @@
+import type { LotaGate } from '@lotagate/sdk';
+import type { ModelCompletionClient } from '../../ports/model-completion-client.js';
+/** Reuses the agent model boundary for non-streaming host-owned completions. */
+export declare function createToolCallingCompletionClient(client: LotaGate): ModelCompletionClient;

package/dist/infrastructure/agent-sdk/tool-calling-completion-client.js

@@ -0,0 +1 @@
+import{createToolCallingModelClient as l}from"./tool-calling-model-client.js";function i(e){const n=l(e);return{chat:{completions:{create:async(o,r)=>{const t=await n.chat.completions.create({...o,stream:!1},r);if(a(t))throw new Error("The completion adapter returned a streaming response unexpectedly.");return t}}}}}function a(e){return typeof e=="object"&&e!==null&&Symbol.asyncIterator in e}export{i as createToolCallingCompletionClient};

package/dist/infrastructure/agent-sdk/tool-calling-model-client.d.ts

@@ -0,0 +1,11 @@
+import { type LotaGate } from '@lotagate/sdk';
+import type { LotaGateAgentOptions } from '@lotagate/agent-sdk';
+import type { ModelCallObserver } from '../../ports/model-diagnostics.js';
+type AgentModelClient = LotaGateAgentOptions['modelClient'];
+/**
+ * Adapts the published SDK client to the Agent SDK model port and makes the
+ * intended tool-calling mode explicit for gateways that do not infer it from
+ * the presence of `tools` alone.
+ */
+export declare function createToolCallingModelClient(client: LotaGate, diagnostics?: ModelCallObserver): AgentModelClient;
+export {};

package/dist/infrastructure/agent-sdk/tool-calling-model-client.js

@@ -0,0 +1 @@
+import"@lotagate/sdk";import{AssistantDeltaNormalizer as q}from"../../domain/runtime/assistant-delta-normalizer.js";import{createModelToolNameMap as nn,mapChunkToolNames as tn,mapRequestToolNames as U,mapResponseToolNames as N}from"./model-tool-name-mapper.js";import{isRetryableModelResponseError as en,isRetryableToolResultFollowUpError as on,MODEL_RESPONSE_MAX_RETRIES as rn,retryModelStream as sn}from"../../application/model/model-response-retry.js";import{mapUsage as S,textLength as k}from"./model-response-metrics.js";const W=rn;function En(n,t={}){return{chat:{completions:{create:((e,i)=>{const r=nn(e.tools),a=e.tools!==void 0&&e.tools.length>0?1:void 0;if(e.stream===!0){const l=U(v({...e,stream:!0}),r),f=fn(e)?cn(n,l,i,a):sn({create:async()=>await n.chat.completions.create(l,i),isObservable:dn,...i?.signal===void 0?{}:{signal:i.signal}});return ln(n,l,e.tools,i,f,e.model,t,r,a)}const s=U(v({...e,stream:!1}),r);return an(n.chat.completions.create(s,i),e.model,t,r,a)})}}}}async function an(n,t,o,e,i){const r=O(N(b(await n),e),i),a=r.choices[0]?.message;return o.onComplete?.({model:t,stream:!1,contentLength:k(a?.content),toolCallCount:a?.tool_calls?.length??0,toolNames:(a?.tool_calls??[]).map(s=>s.function.name),...r.usage===void 0?{}:{usage:S(r.usage)},...r.choices[0]?.finish_reason===void 0?{}:{finishReason:r.choices[0].finish_reason}}),r}async function*ln(n,t,o,e,i,r,a,s,l){let f=0,c;const d=new Set,h=new Set,_=new mn(o);let z=!1,w,x,R=!1;const Z=new q;try{for await(const C of i){const g=tn(hn(C,Z),s),p=_.consume(g).chunk,y=p.choices[0];p.usage!==void 0&&(w=S(p.usage));const I=k(y?.delta.content);if(f+=I,c=y?.finish_reason??c,I>0&&(z=!0),y?.finish_reason==="tool_calls"&&!R){const J=_.flush(p);if(!z&&D(J)){const M=N(b(await T(n,t,e,l)),s);M.usage!==void 0&&(w=S(M.usage)),G(M,h,d),c=M.choices[0]?.finish_reason??c,yield E(M);return}const L=P(J,l);K(L,h,d),R=!0,yield p,yield L}else yield p;x=p}if(!R&&x!==void 0&&_.hasCalls()){const C=_.flush(x);if(!z&&D(C)){const m=N(b(await T(n,t,e,l)),s);m.usage!==void 0&&(w=S(m.usage)),G(m,h,d),c=m.choices[0]?.finish_reason??c,yield E(m);return}const g=P(C,l);K(g,h,d),R=!0,yield g}}catch(C){if(!z&&!R&&Y(C)&&e?.signal?.aborted!==!0){const g=N(b(await T(n,t,e,l)),s);g.usage!==void 0&&(w=S(g.usage));const m=g.choices[0]?.message,p=k(m?.content);f+=p;for(const y of m?.tool_calls??[])y.id.length>0&&h.add(y.id),y.function.name.length>0&&d.add(y.function.name);c=g.choices[0]?.finish_reason??c,yield E(g);return}throw C}finally{a.onComplete?.({model:r,stream:!0,contentLength:f,toolCallCount:h.size||d.size,toolNames:[...d],...c===void 0?{}:{finishReason:c},...w===void 0?{}:{usage:w}})}}async function T(n,t,o,e,i=!1){const r=v({...t,stream:!1});for(let a=0;;a+=1)try{const s=b(await n.chat.completions.create(r,o));if(a<W&&D(s))continue;return O(s,e)}catch(s){const l=i?on(s):Y(s);if(a>=W||!l||o?.signal?.aborted===!0)throw s}}async function*cn(n,t,o,e){yield E(await T(n,t,o,e,!0))}function v(n){return n.tools===void 0||n.tools.length===0||un(n)?n:{...n,tool_choice:"auto"}}function un(n){return n.tool_choice!==void 0||n.toolChoice!==void 0||n.toolConfig!==void 0}function fn(n){const t=n.messages.at(-1);return t!==void 0&&"role"in t&&t.role==="tool"}function dn(n){return n.choices.some(t=>{const o=t.delta.content,e=t.delta.tool_calls,i=t.delta;return typeof o=="string"&&o.length>0||Array.isArray(o)&&o.length>0||Array.isArray(e)&&e.length>0||typeof i.reasoning_content=="string"&&i.reasoning_content.length>0||u(i.function_call)})}function O(n,t){return t===void 0?n:{...n,choices:n.choices.map(o=>{const e=o.message.tool_calls;return e===void 0||e.length<=t?o:{...o,message:{...o.message,tool_calls:e.slice(0,t)}}})}}function P(n,t){return t===void 0?n:{...n,choices:n.choices.map(o=>{const e=o.delta.tool_calls;return e===void 0||e.length<=t?o:{...o,delta:{...o.delta,tool_calls:e.slice(0,t)}}})}}function E(n){const t=b(n),o=t.choices[0],e=o?.message,i=gn(e);return{id:t.id,object:"chat.completion.chunk",created:t.created,model:t.model,choices:[{index:o?.index??0,delta:{role:"assistant",content:j(e?.content),...i===void 0?{}:{reasoning_content:i},...e?.tool_calls===void 0?{}:{tool_calls:e.tool_calls.map((r,a)=>({...r,index:a}))}},...o?.finish_reason===void 0?{}:{finish_reason:o.finish_reason}}],...t.usage===void 0?{}:{usage:t.usage}}}function gn(n){if(!u(n))return;const t=n.reasoning_content;return typeof t=="string"&&t.length>0?t:void 0}function hn(n,t){return{...n,choices:n.choices.map(o=>{const e=o.delta.content,r=Array.isArray(e)?t.normalize(j(e)):typeof e=="string"?t.normalize(e):e,a=o.delta,s=[...Array.isArray(e)?H(e):[],...Q(a.function_call,0)];return r===e&&s.length===0?o:{...o,delta:{...o.delta,...r===e?{}:{content:r},...s.length===0?{}:{tool_calls:[...o.delta.tool_calls??[],...s]}}}})}}class mn{knownNames;calls=new Map;order=[];keysByPosition=new Map;constructor(t){this.knownNames=new Set((t??[]).flatMap(o=>bn(o)))}consume(t){let o=!1;const e=t.choices.map(i=>{const r=i.delta.tool_calls;if(r===void 0||r.length===0)return i;o=!0,r.forEach((s,l)=>{u(s)&&this.append(s,l)});const a={...i.delta};return delete a.tool_calls,{...i,delta:a}});return{chunk:{...t,choices:e},hadToolCalls:o}}hasCalls(){return this.order.length>0}flush(t){const o=this.order.map((a,s)=>{const l=this.calls.get(a);return{id:l.id||`tool-call-${s}`,type:l.type,function:{name:l.name,arguments:l.arguments},...l.providerMetadata===void 0?{}:{provider_metadata:l.providerMetadata}}}),e=new Set,i=o.filter(a=>{const s=`${a.function.name}\0${a.function.arguments}`;return e.has(s)?!1:(e.add(s),!0)}),r=t.choices.map((a,s)=>s===0?{...a,delta:{...a.delta,tool_calls:i}}:a);return{...t,choices:r}}append(t,o){const e=F(t),i=_n(t),r=B(t),a=X(t),s=A(t),l=pn(t,o),f=this.keysByPosition.get(l)??yn(e,l);this.keysByPosition.set(l,f);const c=this.calls.get(f),d=Cn(c?.name??"",r,this.knownNames),h=An(c?.arguments??"",a);if(c===void 0){this.calls.set(f,{id:e,type:i,name:d,arguments:h,...s===void 0?{}:{providerMetadata:s}}),this.order.push(f);return}const _=c.providerMetadata??s;this.calls.set(f,{id:c.id.length===0&&e.length>0?e:c.id,type:i||c.type,name:c.name+d,arguments:h,..._===void 0?{}:{providerMetadata:_}})}}function A(n){if(!u(n))return;const t=n.provider_metadata??n.providerMetadata;if(u(t))return t;const o=n.thoughtSignature??n.thought_signature;return typeof o=="string"&&o.length>0?{google:{thought_signature:o}}:void 0}function pn(n,t){const o=n.index;return typeof o=="number"&&Number.isInteger(o)?o:t}function yn(n,t){return n.length>0?`id:${n}`:`index:${t}`}function F(n){const t=n;return u(t)&&typeof t.id=="string"?t.id:""}function _n(n){const t=n;return u(t)&&typeof t.type=="string"&&t.type.length>0?t.type:"function"}function B(n){const t=n;return u(t)&&u(t.function)&&typeof t.function.name=="string"?t.function.name:""}function X(n){const t=n;return u(t)&&u(t.function)&&typeof t.function.arguments=="string"?t.function.arguments:""}function Cn(n,t,o){return t.length===0||t===n?"":o!==void 0&&o.has(t)&&t.startsWith(n)||t.startsWith(n)&&n.length>0?t.slice(n.length):t}function An(n,t){if(t.length===0)return n;if(n.length===0||t===n)return n.length===0?t:n;if(t.startsWith(n))return t;const o=wn(n,t);return o!==void 0?o:n+t}function D(n){const t=n.choices[0];return((t!==void 0&&"message"in t?t.message.tool_calls:t?.delta.tool_calls)??[]).some(e=>$(X(e))===void 0)}function wn(n,t){if(n.length===0||t.length===0)return;const o=$(n),e=$(t);if(!(o===void 0||e===void 0))return JSON.stringify({...o,...e})}function $(n){try{const t=JSON.parse(n);return u(t)?t:void 0}catch{return}}function K(n,t,o){for(const e of n.choices[0]?.delta.tool_calls??[]){const i=F(e),r=B(e);i.length>0&&t.add(i),r.length>0&&o.add(r)}}function G(n,t,o){for(const e of n.choices[0]?.message?.tool_calls??[]){const i=F(e),r=B(e);i.length>0&&t.add(i),r.length>0&&o.add(r)}}function bn(n){return"function"in n&&typeof n.function.name=="string"?[n.function.name]:"name"in n&&typeof n.name=="string"?[n.name]:"functionDeclarations"in n?n.functionDeclarations.flatMap(t=>typeof t.name=="string"?[t.name]:[]):[]}function b(n){return{...n,choices:n.choices.map(t=>({...t,message:Rn(t.message)}))}}function Rn(n){const t=n,o=[...Array.isArray(n.content)?H(n.content):[],...Q(t.function_call,0)],e=Array.isArray(n.content)?j(n.content):typeof n.content=="string"?n.content:void 0,i=e??null,r=Array.isArray(n.content)||typeof n.content=="string"&&e!==n.content;return!r&&o.length===0?n:{...n,...r?{content:i}:{},...o.length===0?{}:{tool_calls:[...n.tool_calls??[],...o]}}}function H(n){const t=[];for(const[o,e]of n.entries())if(!(typeof e!="object"||e===null)){if("functionCall"in e&&u(e.functionCall)&&typeof e.functionCall.name=="string"){const i=e.functionCall.args;t.push({id:typeof e.functionCall.id=="string"&&e.functionCall.id.length>0?e.functionCall.id:`provider-call-${o}`,type:"function",function:{name:e.functionCall.name,arguments:V(i)},...A(e)===void 0?{}:{provider_metadata:A(e)}});continue}if("tool_use"in e&&u(e.tool_use)&&typeof e.tool_use.name=="string"){const i=e.tool_use.input;t.push({id:typeof e.tool_use.id=="string"&&e.tool_use.id.length>0?e.tool_use.id:`provider-call-${o}`,type:"function",function:{name:e.tool_use.name,arguments:JSON.stringify(i??{})},...A(e)===void 0?{}:{provider_metadata:A(e)}})}}return t}function Q(n,t){if(!u(n)||typeof n.name!="string")return[];const o=n.arguments;return[{id:typeof n.id=="string"&&n.id.length>0?n.id:`provider-call-${t}`,type:"function",function:{name:n.name,arguments:V(o)},...A(n)===void 0?{}:{provider_metadata:A(n)}}]}function V(n){if(n===void 0)return"";if(typeof n=="string")return n;try{return JSON.stringify(n)}catch{return""}}function u(n){return typeof n=="object"&&n!==null&&!Array.isArray(n)}function Y(n){return en(n)}function j(n){return typeof n=="string"?n:Array.isArray(n)?n.reduce((t,o)=>{if(typeof o!="object"||o===null||!("text"in o))return t;const e=o.text;return t+(typeof e=="string"?e:"")},""):""}export{En as createToolCallingModelClient};

package/dist/infrastructure/cache/cache-policy.d.ts

@@ -0,0 +1,9 @@
+export interface CachePolicy {
+    enabled: boolean;
+    modelCatalogTtlMs: number;
+    maxEntryBytes: number;
+    maxTotalBytes: number;
+    maxMemoryEntries: number;
+    maxMemoryBytes: number;
+}
+export declare function resolveCachePolicy(env?: Readonly<Record<string, string | undefined>>): CachePolicy;

package/dist/infrastructure/cache/cache-policy.js

@@ -0,0 +1 @@
+function _(e=process.env){return{enabled:t(e.LOTAGATE_CACHE_ENABLED,!0),modelCatalogTtlMs:r(e.LOTAGATE_MODEL_CACHE_TTL_SECONDS,300,1,86400)*1e3,maxEntryBytes:r(e.LOTAGATE_CACHE_MAX_ENTRY_BYTES,5*1024*1024,1024,50*1024*1024),maxTotalBytes:r(e.LOTAGATE_CACHE_MAX_BYTES,50*1024*1024,1*1024*1024,500*1024*1024),maxMemoryEntries:r(e.LOTAGATE_CACHE_MAX_MEMORY_ENTRIES,64,1,1e4),maxMemoryBytes:r(e.LOTAGATE_CACHE_MAX_MEMORY_BYTES,8*1024*1024,1*1024*1024,500*1024*1024)}}function t(e,E){return e===void 0?E:e.trim().toLowerCase()==="true"?!0:e.trim().toLowerCase()==="false"?!1:E}import{readBoundedEnvironmentInteger as r}from"../config/environment-values.js";export{_ as resolveCachePolicy};

package/dist/infrastructure/cache/file-cache-store.d.ts

@@ -0,0 +1,25 @@
+import type { CacheStore, CacheWriteOptions } from '../../ports/cache-store.js';
+import type { CachePolicy } from './cache-policy.js';
+export declare class FileCacheStore implements CacheStore {
+    private readonly root;
+    private readonly policy;
+    private readonly now;
+    private prunePromise;
+    private readonly memoryCache;
+    private memoryBytes;
+    private lastPruneAt;
+    constructor(root: string, policy: CachePolicy, now?: () => number);
+    get<T>(namespace: string, key: string): Promise<T | undefined>;
+    set<T>(namespace: string, key: string, value: T, options: CacheWriteOptions): Promise<void>;
+    delete(namespace: string, key: string): Promise<void>;
+    clear(namespace?: string): Promise<void>;
+    prune(): Promise<void>;
+    private schedulePrune;
+    private namespacePath;
+    private filePath;
+    private setMemoryEntry;
+    private removeMemoryEntry;
+    private touchMemoryEntry;
+    private clearMemory;
+    private pruneMemory;
+}

package/dist/infrastructure/cache/file-cache-store.js

@@ -0,0 +1,2 @@
+import p from"node:crypto";import w from"node:fs";import h from"node:fs/promises";import y from"node:path";import{atomicWriteFile as M,withFileLock as E}from"../filesystem/atomic-file-store.js";import{isFileNotFound as u}from"../filesystem/fs-errors.js";import{readJsonFileBounded as l}from"../filesystem/bounded-json-reader.js";const P=600*1e3;class F{root;policy;now;prunePromise;memoryCache=new Map;memoryBytes=0;lastPruneAt=0;constructor(e,t,r=Date.now){this.root=e,this.policy=t,this.now=r;try{w.mkdirSync(e,{recursive:!0,mode:448})}catch{}}async get(e,t){if(!this.policy.enabled)return;const r=`${e}\0${t}`,i=this.memoryCache.get(r);if(i!==void 0){if(i.expiresAtMs>this.now())return this.touchMemoryEntry(r,i),i.value;this.removeMemoryEntry(r)}const o=this.filePath(e,t);try{const s=await l(o,this.policy.maxEntryBytes);if(s.schemaVersion!==1||s.namespace!==e||s.keyHash!==m(e,t)||typeof s.expiresAt!="string")return;const a=Date.parse(s.expiresAt);if(a<=this.now()){await this.delete(e,t);return}return this.setMemoryEntry(r,a,s.value),s.value}catch(s){u(s)||await this.delete(e,t).catch(()=>{});return}}async set(e,t,r,i){if(!this.policy.enabled||i.ttlMs<=0)return;const o=this.now()+i.ttlMs,s=`${e}\0${t}`,a={schemaVersion:1,namespace:e,keyHash:m(e,t),createdAt:new Date(this.now()).toISOString(),expiresAt:new Date(o).toISOString(),value:r},c=`${JSON.stringify(a)}
+`;if(Buffer.byteLength(c,"utf8")>this.policy.maxEntryBytes)return;const f=this.filePath(e,t);await E(f,()=>M(f,c)),this.setMemoryEntry(s,o,r),this.schedulePrune()}async delete(e,t){this.removeMemoryEntry(`${e}\0${t}`),await h.rm(this.filePath(e,t),{force:!0})}async clear(e){if(e===void 0)this.clearMemory();else{const t=`${e}\0`;for(const r of[...this.memoryCache.keys()])r.startsWith(t)&&this.removeMemoryEntry(r)}await h.rm(e===void 0?this.root:this.namespacePath(e),{recursive:!0,force:!0})}async prune(){if(!this.policy.enabled)return;this.pruneMemory();const e=await d(this.root),t=[];for(const i of e)try{const o=await h.stat(i),s=await l(i,this.policy.maxEntryBytes);if(s.schemaVersion!==1||typeof s.expiresAt!="string"||Date.parse(s.expiresAt)<=this.now()){await h.rm(i,{force:!0});continue}t.push({filePath:i,size:o.size,modifiedAt:o.mtimeMs})}catch{await h.rm(i,{force:!0})}let r=t.reduce((i,o)=>i+o.size,0);for(const i of t.sort((o,s)=>o.modifiedAt-s.modifiedAt)){if(r<=this.policy.maxTotalBytes)break;await h.rm(i.filePath,{force:!0}),r-=i.size}this.pruneMemory()}schedulePrune(){this.prunePromise===void 0&&(this.now()-this.lastPruneAt<P||(this.lastPruneAt=this.now(),this.prunePromise=this.prune().catch(()=>{}).finally(()=>{this.prunePromise=void 0})))}namespacePath(e){return y.join(this.root,x(e))}filePath(e,t){return y.join(this.namespacePath(e),`${m(e,t)}.json`)}setMemoryEntry(e,t,r){const i=A(r);this.removeMemoryEntry(e),!(i>this.policy.maxMemoryBytes)&&(this.memoryCache.set(e,{expiresAtMs:t,value:r,sizeBytes:i}),this.memoryBytes+=i,this.pruneMemory())}removeMemoryEntry(e){const t=this.memoryCache.get(e);t!==void 0&&(this.memoryCache.delete(e),this.memoryBytes-=t.sizeBytes)}touchMemoryEntry(e,t){this.memoryCache.delete(e),this.memoryCache.set(e,t)}clearMemory(){this.memoryCache.clear(),this.memoryBytes=0}pruneMemory(){const e=this.now();for(const[t,r]of[...this.memoryCache])r.expiresAtMs<=e&&this.removeMemoryEntry(t);for(;this.memoryCache.size>this.policy.maxMemoryEntries||this.memoryBytes>this.policy.maxMemoryBytes;){const t=this.memoryCache.keys().next().value;if(typeof t!="string")break;this.removeMemoryEntry(t)}}}function m(n,e){return p.createHash("sha256").update(`${n}\0${e}`).digest("hex")}function x(n){return Buffer.from(n,"utf8").toString("base64url")}function A(n){try{const e=JSON.stringify(n);return Buffer.byteLength(e??"","utf8")}catch{return Number.MAX_SAFE_INTEGER}}async function d(n){try{const e=await h.readdir(n,{withFileTypes:!0}),t=[];for(const r of e){const i=y.join(n,r.name);r.isDirectory()?t.push(...await d(i)):r.isFile()&&r.name.endsWith(".json")&&t.push(i)}return t}catch(e){if(u(e))return[];throw e}}export{F as FileCacheStore};

package/dist/infrastructure/clipboard/clipboard-adapter-factory.d.ts

@@ -0,0 +1,11 @@
+import type { ClipboardAdapter, ClipboardImage } from '../../ports/clipboard-adapter.js';
+import { type HostPlatformContext } from '../platform/host-platform.js';
+export declare function createClipboardAdapter(platform?: HostPlatformContext): ClipboardAdapter;
+export declare class ProcessClipboardAdapter implements ClipboardAdapter {
+    private readonly command;
+    private readonly args;
+    private readonly mimeType;
+    private readonly platform;
+    constructor(command: string, args: readonly string[], mimeType: string, platform?: HostPlatformContext);
+    readImage(): Promise<ClipboardImage | undefined>;
+}

package/dist/infrastructure/clipboard/clipboard-adapter-factory.js

@@ -0,0 +1 @@
+import{CliError as f}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as b}from"../../domain/errors/error-codes.js";import{WindowsClipboardAdapter as h}from"./windows-clipboard-adapter.js";import{detectHostPlatform as c}from"../platform/host-platform.js";import{spawnPlatformProcess as w}from"../platform/host-process.js";import{CLIPBOARD_POLICY as d,clipboardUnavailableError as m,isClipboardUnavailableError as C}from"./clipboard-policy.js";function O(r=c()){return r.id==="windows"?new h(r):r.id==="macos"?new u([new p("pbpaste",["-Prefer","png"],"image/png",r)]):r.id==="linux"||r.id==="bsd"?new u([new p("wl-paste",["--no-newline","--type","image/png"],"image/png",r),new p("xclip",["-selection","clipboard","-target","image/png","-out"],"image/png",r)]):new y}class p{command;args;mimeType;platform;constructor(t,i,e,o=c()){this.command=t,this.args=i,this.mimeType=e,this.platform=o}async readImage(){return new Promise((t,i)=>{const e=w(this.command,this.args,this.platform,{stdio:["ignore","pipe","pipe"]}),o=[];let l=0,n=!1;const s=a=>{n||(n=!0,clearTimeout(g),a())},g=setTimeout(()=>{e.kill(),s(()=>i(m(`Clipboard image read timed out after ${d.timeoutMs}ms.`)))},d.timeoutMs);e.stdout?.on("data",a=>{if(!n){if(l+=a.byteLength,l>d.maxImageBytes){e.kill(),s(()=>i(new f(b.ATTACHMENT_TOO_LARGE,"Clipboard image is too large.",{category:"attachment",userMessage:"Clipboard image exceeds the maximum allowed size."})));return}o.push(a)}}),e.once("error",()=>s(()=>t(void 0))),e.once("close",a=>{s(()=>{a!==0||o.length===0?t(void 0):t({bytes:Buffer.concat(o),mimeType:this.mimeType})})})})}}class u{adapters;constructor(t){this.adapters=t}async readImage(){let t;for(const i of this.adapters)try{const e=await i.readImage();if(e!==void 0)return e}catch(e){if(!C(e))throw e;t=e}throw t??m("No supported clipboard image provider was found.")}}class y{async readImage(){throw m("Clipboard image support is unavailable on this platform.")}}export{p as ProcessClipboardAdapter,O as createClipboardAdapter};

package/dist/infrastructure/clipboard/clipboard-constants.d.ts

@@ -0,0 +1 @@
+export declare const IMAGE_MIME_SIGNATURES: Map<string, string>;

package/dist/infrastructure/clipboard/clipboard-constants.js

@@ -0,0 +1 @@
+const a=new Map([["89504e470d0a1a0a","image/png"],["ffd8ff","image/jpeg"],["47494638","image/gif"],["424d","image/bmp"]]);export{a as IMAGE_MIME_SIGNATURES};

package/dist/infrastructure/clipboard/clipboard-policy.d.ts

@@ -0,0 +1,8 @@
+import { CliError } from '../../domain/errors/cli-error.js';
+export declare const CLIPBOARD_POLICY: {
+    readonly maxImageBytes: number;
+    readonly maxTextBytes: number;
+    readonly timeoutMs: 15000;
+};
+export declare function clipboardUnavailableError(message: string, cause?: unknown): CliError;
+export declare function isClipboardUnavailableError(error: unknown): error is CliError;

package/dist/infrastructure/clipboard/clipboard-policy.js

@@ -0,0 +1 @@
+import{CliError as o}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as a}from"../../domain/errors/error-codes.js";import{RESOURCE_LIMITS as e}from"../../domain/runtime/resource-limits.js";const A={maxImageBytes:e.maxAttachmentBytes,maxTextBytes:e.clipboardTextBytes,timeoutMs:e.clipboardTimeoutMs};function c(t,r){return new o(a.ATTACHMENT_CLIPBOARD_UNAVAILABLE,t,{category:"attachment",userMessage:"Unable to read from the clipboard. Copy the content again and retry.",retryable:!0,...r===void 0?{}:{cause:r}})}function l(t){return t instanceof o&&t.code===a.ATTACHMENT_CLIPBOARD_UNAVAILABLE}export{A as CLIPBOARD_POLICY,c as clipboardUnavailableError,l as isClipboardUnavailableError};

package/dist/infrastructure/clipboard/clipboard-text-adapter-factory.d.ts

@@ -0,0 +1,10 @@
+import type { ClipboardTextAdapter } from '../../ports/clipboard-text-adapter.js';
+import { type HostPlatformContext } from '../platform/host-platform.js';
+export declare function createClipboardTextAdapter(platform?: HostPlatformContext): ClipboardTextAdapter;
+export declare class ProcessClipboardTextAdapter implements ClipboardTextAdapter {
+    private readonly command;
+    private readonly args;
+    private readonly platform;
+    constructor(command: string, args: readonly string[], platform?: HostPlatformContext);
+    readText(): Promise<string | undefined>;
+}

package/dist/infrastructure/clipboard/clipboard-text-adapter-factory.js

@@ -0,0 +1 @@
+import{CliError as f}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as x}from"../../domain/errors/error-codes.js";import{WindowsClipboardTextAdapter as b}from"./windows-clipboard-text-adapter.js";import{detectHostPlatform as u}from"../platform/host-platform.js";import{spawnPlatformProcess as h}from"../platform/host-process.js";import{CLIPBOARD_POLICY as d,clipboardUnavailableError as l,isClipboardUnavailableError as w}from"./clipboard-policy.js";function L(e=u()){return e.id==="windows"?new b(e):e.id==="macos"?new p("pbpaste",[],e):e.id==="linux"||e.id==="bsd"?new C([new p("wl-paste",["--no-newline"],e),new p("xclip",["-selection","clipboard","-out"],e)]):new T}class p{command;args;platform;constructor(r,o,t=u()){this.command=r,this.args=o,this.platform=t}async readText(){return new Promise((r,o)=>{const t=h(this.command,this.args,this.platform,{stdio:["ignore","pipe","pipe"]}),s=[];let c=0,n=!1;const a=i=>{n||(n=!0,clearTimeout(m),i())},m=setTimeout(()=>{t.kill(),a(()=>o(l(`Clipboard text read timed out after ${d.timeoutMs}ms.`)))},d.timeoutMs);t.stdout?.on("data",i=>{if(!n){if(c+=i.byteLength,c>d.maxTextBytes){t.kill(),a(()=>o(new f(x.ATTACHMENT_TOO_LARGE,"Clipboard text is too large.",{category:"attachment",userMessage:"Clipboard text exceeds the maximum allowed size."})));return}s.push(i)}}),t.once("error",()=>a(()=>r(void 0))),t.once("close",i=>a(()=>{i!==0||s.length===0?r(void 0):r(Buffer.concat(s).toString("utf8"))}))})}}class C{adapters;constructor(r){this.adapters=r}async readText(){let r;for(const o of this.adapters)try{const t=await o.readText();if(t!==void 0)return t}catch(t){if(!w(t))throw t;r=t}throw r??l("No supported clipboard text provider was found.")}}class T{async readText(){throw l("Clipboard text support is unavailable on this platform.")}}export{p as ProcessClipboardTextAdapter,L as createClipboardTextAdapter};

package/dist/infrastructure/clipboard/image-normalizer.d.ts

@@ -0,0 +1,12 @@
+import type { Attachment, AttachmentPayload, AttachmentSource } from '../../domain/session/attachment.js';
+import type { TextFileContentPart, TextImageContentPart, TextMessage } from '@lotagate/sdk';
+export declare const DEFAULT_MAX_IMAGE_BYTES: number;
+export interface NormalizedImage {
+    bytes: Buffer;
+    mimeType: string;
+}
+export declare function normalizeImage(bytes: Uint8Array, declaredMimeType?: string, maxBytes?: number): NormalizedImage;
+export declare function createImageAttachment(image: NormalizedImage, source: AttachmentSource, id: string, storagePath?: string): Attachment;
+export declare function toImageContentPart(payload: AttachmentPayload): TextImageContentPart;
+export declare function toAttachmentContentPart(payload: AttachmentPayload): TextImageContentPart | TextFileContentPart;
+export declare function buildUserMessage(prompt: string, attachments?: readonly AttachmentPayload[]): TextMessage;

package/dist/infrastructure/clipboard/image-normalizer.js

@@ -0,0 +1 @@
+import{CliError as a}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as o}from"../../domain/errors/error-codes.js";import{RESOURCE_LIMITS as m}from"../../domain/runtime/resource-limits.js";import{IMAGE_MIME_SIGNATURES as s}from"./clipboard-constants.js";const c=m.maxAttachmentBytes,f=s;function E(t,e,n=c){if(t.byteLength===0||t.byteLength>n)throw new a(o.ATTACHMENT_TOO_LARGE,"Image size is outside the allowed range.",{category:"attachment",userMessage:`Image size must be between 1 byte and ${n} bytes.`});const r=h(t),i=r??e;if(i===void 0||!i.startsWith("image/"))throw new a(o.ATTACHMENT_FORMAT_UNSUPPORTED,"Clipboard content is not a supported image.",{category:"attachment",userMessage:"The clipboard does not contain a supported image format."});if(r!==void 0&&e!==void 0&&e!==r)throw new a(o.ATTACHMENT_INVALID_IMAGE,"Declared image type does not match its bytes.",{category:"attachment",userMessage:"The image format does not match its actual content."});return{bytes:Buffer.from(t),mimeType:i}}function _(t,e,n,r){const i=n.trim();if(i.length===0)throw new a(o.ATTACHMENT_INVALID_IMAGE,"Attachment id is required.",{category:"attachment"});return{id:i,name:i,mimeType:t.mimeType,sizeBytes:t.bytes.byteLength,source:e,...r===void 0?{}:{storagePath:r}}}function u(t){const e=Buffer.from(t.bytes).toString("base64");return{type:"image_url",image_url:{url:`data:${t.attachment.mimeType};base64,${e}`,detail:"auto"}}}function g(t){if(t.attachment.mimeType.startsWith("image/"))return u(t);const e=Buffer.from(t.bytes).toString("base64");return{type:"input_file",file_data:`data:${t.attachment.mimeType};base64,${e}`,filename:t.attachment.name,media_type:t.attachment.mimeType}}function I(t,e=[]){return e.length===0?{role:"user",content:t}:{role:"user",content:[{type:"text",text:t},...e.map(g)]}}function h(t){const e=[...t.slice(0,8)].map(n=>n.toString(16).padStart(2,"0")).join("");for(const[n,r]of f)if(e.startsWith(n))return r;if(t.length>=12&&Buffer.from(t.slice(0,12)).toString("ascii",0,4)==="RIFF"&&Buffer.from(t.slice(8,12)).toString("ascii")==="WEBP")return"image/webp"}export{c as DEFAULT_MAX_IMAGE_BYTES,I as buildUserMessage,_ as createImageAttachment,E as normalizeImage,g as toAttachmentContentPart,u as toImageContentPart};

package/dist/infrastructure/clipboard/windows-clipboard-adapter.d.ts

@@ -0,0 +1,7 @@
+import type { ClipboardAdapter, ClipboardImage } from '../../ports/clipboard-adapter.js';
+import { type HostPlatformContext } from '../platform/host-platform.js';
+export declare class WindowsClipboardAdapter implements ClipboardAdapter {
+    private readonly platform;
+    constructor(platform?: HostPlatformContext);
+    readImage(): Promise<ClipboardImage | undefined>;
+}

package/dist/infrastructure/clipboard/windows-clipboard-adapter.js

@@ -0,0 +1 @@
+import g from"node:crypto";import u from"node:fs/promises";import h from"node:os";import w from"node:path";import{CliError as l}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as T}from"../../domain/errors/error-codes.js";import{DEFAULT_MAX_IMAGE_BYTES as P}from"./image-normalizer.js";import{readFileBounded as A}from"../filesystem/bounded-file-reader.js";import{detectHostPlatform as b}from"../platform/host-platform.js";import{spawnPlatformProcess as C}from"../platform/host-process.js";import{CLIPBOARD_POLICY as c,clipboardUnavailableError as m}from"./clipboard-policy.js";class B{platform;constructor(o=b()){this.platform=o}async readImage(){if(!this.platform.isWindows)throw m("Windows clipboard image adapter cannot run on this platform.");const o=w.join(h.tmpdir(),`lotagate-clipboard-${process.pid}-${g.randomUUID()}.png`);try{await E(o,this.platform);const r=await A(o,P);if(r.truncated)throw new l(T.ATTACHMENT_TOO_LARGE,"Clipboard image exceeds the configured size limit.",{category:"attachment",userMessage:"The clipboard image is too large to attach."});return{bytes:r.bytes,mimeType:"image/png"}}catch(r){throw r instanceof l?r:m("Unable to read an image from the clipboard.",r)}finally{await u.rm(o,{force:!0})}}}function E(n,o){const r="$ErrorActionPreference='Stop'; $image=Get-Clipboard -Format Image; if ($null -eq $image) { exit 3 }; $image.Save($env:LOTAGATE_CLIPBOARD_OUTPUT, [System.Drawing.Imaging.ImageFormat]::Png)";return new Promise((f,i)=>{const e=C("powershell.exe",["-NoProfile","-NonInteractive","-Command",r],o,{env:{...process.env,LOTAGATE_CLIPBOARD_OUTPUT:n},stdio:["ignore","ignore","pipe"]}),s=[];let p=!1;const a=t=>{p||(p=!0,clearTimeout(d),t())},d=setTimeout(()=>{e.kill(),a(()=>i(m(`Clipboard image read timed out after ${c.timeoutMs}ms.`)))},c.timeoutMs);e.stderr?.on("data",t=>s.push(t)),e.once("error",t=>a(()=>i(t))),e.once("close",t=>a(()=>t===0?f():i(new Error(Buffer.concat(s).toString("utf8").trim()||`PowerShell exited with code ${String(t)}.`))))})}export{B as WindowsClipboardAdapter};

package/dist/infrastructure/clipboard/windows-clipboard-text-adapter.d.ts

@@ -0,0 +1,7 @@
+import type { ClipboardTextAdapter } from '../../ports/clipboard-text-adapter.js';
+import { type HostPlatformContext } from '../platform/host-platform.js';
+export declare class WindowsClipboardTextAdapter implements ClipboardTextAdapter {
+    private readonly platform;
+    constructor(platform?: HostPlatformContext);
+    readText(): Promise<string | undefined>;
+}

package/dist/infrastructure/clipboard/windows-clipboard-text-adapter.js

@@ -0,0 +1 @@
+import{CliError as p}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as h}from"../../domain/errors/error-codes.js";import{detectHostPlatform as x}from"../platform/host-platform.js";import{spawnPlatformProcess as w}from"../platform/host-process.js";import{CLIPBOARD_POLICY as a,clipboardUnavailableError as s}from"./clipboard-policy.js";class O{platform;constructor(e=x()){this.platform=e}async readText(){if(!this.platform.isWindows)throw s("Windows clipboard text adapter cannot run on this platform.");try{return await C(this.platform)}catch(e){throw e instanceof p?e:s("Unable to read text from the clipboard.",e)}}}function C(l){const e="$ErrorActionPreference='Stop'; [Console]::OutputEncoding = [System.Text.Encoding]::UTF8; $text=Get-Clipboard -Raw; if ($null -eq $text) { exit 3 }; [Console]::Out.Write($text)";return new Promise((f,o)=>{const r=w("powershell.exe",["-NoProfile","-NonInteractive","-Command",e],l,{stdio:["ignore","pipe","pipe"]}),m=[];let c=0,n=!1;const i=t=>{n||(n=!0,clearTimeout(u),t())},u=setTimeout(()=>{r.kill(),i(()=>o(s(`Clipboard text read timed out after ${a.timeoutMs}ms.`)))},a.timeoutMs);r.stdout?.on("data",t=>{if(!n){if(c+=t.byteLength,c>a.maxTextBytes){r.kill(),i(()=>o(new p(h.ATTACHMENT_TOO_LARGE,"Clipboard text is too large.",{category:"attachment",userMessage:"Clipboard text exceeds the maximum allowed size."})));return}m.push(t)}});const d=[];r.stderr?.on("data",t=>d.push(t)),r.once("error",t=>i(()=>o(t))),r.once("close",t=>i(()=>{t===3?f(void 0):t!==0?o(new Error(Buffer.concat(d).toString("utf8").trim()||`PowerShell exited with code ${String(t)}.`)):f(Buffer.concat(m).toString("utf8"))}))})}export{O as WindowsClipboardTextAdapter};

package/dist/infrastructure/config/config-loader.d.ts

@@ -0,0 +1,19 @@
+import { type CliConfig, type ConfigurableKey } from '../../domain/config/config-schema.js';
+import type { Logger } from '../../ports/logger.js';
+import { type PlatformPaths } from '../platform/platform-paths.js';
+export interface ConfigLoadResult {
+    config: CliConfig;
+    sources: readonly string[];
+}
+export declare class ConfigLoader {
+    private readonly logger;
+    private readonly paths;
+    constructor(logger: Logger, paths?: PlatformPaths);
+    get platformPaths(): PlatformPaths;
+    load(cwd: string, options?: {
+        includeProject?: boolean;
+    }): Promise<ConfigLoadResult>;
+    setGlobal(key: ConfigurableKey, value: unknown): Promise<void>;
+    private readOptional;
+    private readDocumentOptional;
+}

package/dist/infrastructure/config/config-loader.js

@@ -0,0 +1,2 @@
+import{CliError as n}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as s}from"../../domain/errors/error-codes.js";import{DEFAULT_CONFIG as g,mergeConfig as h}from"../../domain/config/config-schema.js";import{resolvePlatformPaths as m,resolveProjectConfigPaths as c}from"../platform/platform-paths.js";import{atomicWriteFile as p,withFileLock as d}from"../filesystem/atomic-file-store.js";import{isFileNotFound as u}from"../filesystem/fs-errors.js";import{readJsonFileBounded as O}from"../filesystem/bounded-json-reader.js";import{RESOURCE_LIMITS as F}from"../../domain/runtime/resource-limits.js";import{validateSettingsDocument as l}from"../../domain/settings/settings-document.js";class L{logger;paths;constructor(o,t=m()){this.logger=o,this.paths=t}get platformPaths(){return this.paths}async load(o,t={}){const i=[],e=[],f=t.includeProject===!1?[this.paths.globalConfigFile]:[this.paths.globalConfigFile,c(o).settings,c(o).localSettings];for(const a of f){const r=await this.readOptional(a);r!==void 0&&(i.push(r),e.push(a))}return{config:h(g,...i),sources:e}}async setGlobal(o,t){await d(this.paths.globalConfigFile,async()=>{const i=await this.readDocumentOptional(this.paths.globalConfigFile),e={...i?.config??{},...i?.permissions===void 0?{}:{permissions:i.permissions},[o]:t,schemaVersion:1};l(e),await p(this.paths.globalConfigFile,`${JSON.stringify(e,null,2)}
+`)}),this.logger.info("Global configuration updated.",{key:o})}async readOptional(o){return(await this.readDocumentOptional(o))?.config}async readDocumentOptional(o){try{try{return l(await O(o,F.configFileBytes))}catch(t){if(u(t))return;throw t instanceof n?t:new n(s.CONFIG_INVALID_JSON,`Invalid JSON in ${o}.`,{category:"config",userMessage:`Unable to parse JSON in ${o}.`,cause:t})}}catch(t){throw t instanceof n?t:new n(s.CONFIG_NOT_FOUND,`Unable to read config ${o}.`,{category:"config",userMessage:`Unable to read configuration file ${o}.`,cause:t})}}}export{L as ConfigLoader};

package/dist/infrastructure/config/environment-values.d.ts

@@ -0,0 +1,2 @@
+/** Reads an integer environment value without allowing invalid settings to disable a safe default. */
+export declare function readBoundedEnvironmentInteger(value: string | undefined, fallback: number, minimum: number, maximum: number): number;

package/dist/infrastructure/config/environment-values.js

@@ -0,0 +1 @@
+function u(n,r,t,d){if(n===void 0)return r;const e=Number(n);return Number.isSafeInteger(e)&&e>=t&&e<=d?e:r}export{u as readBoundedEnvironmentInteger};

package/dist/infrastructure/credentials/composite-credential-store.d.ts

@@ -0,0 +1,11 @@
+import type { AuthProfile, StoredCredential } from '../../domain/auth/auth-profile.js';
+import type { CredentialStore } from '../../ports/credential-store.js';
+export declare class CompositeCredentialStore implements CredentialStore {
+    private readonly stores;
+    private readonly writableStore;
+    constructor(stores: readonly CredentialStore[], writableStore: CredentialStore);
+    list(): Promise<readonly AuthProfile[]>;
+    get(profileName: string): Promise<StoredCredential | undefined>;
+    set(credential: StoredCredential): Promise<void>;
+    delete(profileName: string): Promise<boolean>;
+}

package/dist/infrastructure/credentials/composite-credential-store.js

@@ -0,0 +1 @@
+class r{stores;writableStore;constructor(t,e){this.stores=t,this.writableStore=e}async list(){const t=new Map;for(const e of this.stores)for(const s of await e.list())t.set(s.name,s);return[...t.values()].sort((e,s)=>e.name.localeCompare(s.name))}async get(t){for(const e of this.stores){const s=await e.get(t);if(s!==void 0)return s}}async set(t){await this.writableStore.set(t)}async delete(t){let e=!1;for(const s of this.stores)e=await s.delete(t)||e;return e}}export{r as CompositeCredentialStore};

package/dist/infrastructure/credentials/encrypted-file-credential-store.d.ts

@@ -0,0 +1,17 @@
+import { type AuthProfile, type StoredCredential } from '../../domain/auth/auth-profile.js';
+import type { CredentialStore } from '../../ports/credential-store.js';
+import type { PlatformPaths } from '../platform/platform-paths.js';
+export declare class EncryptedFileCredentialStore implements CredentialStore {
+    private readonly paths;
+    private readonly secret;
+    constructor(paths: PlatformPaths, secret?: string | undefined);
+    list(): Promise<readonly AuthProfile[]>;
+    get(profileName: string): Promise<StoredCredential | undefined>;
+    set(credential: StoredCredential): Promise<void>;
+    delete(profileName: string): Promise<boolean>;
+    private readPayload;
+    private writePayload;
+    private readFile;
+    private deriveKey;
+    private resolveSecret;
+}

package/dist/infrastructure/credentials/encrypted-file-credential-store.js

@@ -0,0 +1,3 @@
+import o from"node:crypto";import n from"node:fs/promises";import g from"node:path";import{CliError as s}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as l}from"../../domain/errors/error-codes.js";import{validateApiKey as w,validateBaseUrl as E,validateProfileName as d}from"../../domain/auth/auth-profile.js";import{withFileLock as f}from"../filesystem/atomic-file-store.js";import{isAlreadyExists as m,isFileNotFound as y}from"../filesystem/fs-errors.js";class R{paths;secret;constructor(e,t=process.env.LOTAGATE_CREDENTIAL_SECRET){this.paths=e,this.secret=t}async list(){return(await this.readPayload()).credentials.map(({profile:t})=>t)}async get(e){const t=d(e);return(await this.readPayload()).credentials.find(a=>a.profile.name===t)}async set(e){const t={profile:{...e.profile,name:d(e.profile.name),baseUrl:E(e.profile.baseUrl),credentialRef:`file:${d(e.profile.name)}`},apiKey:w(e.apiKey)};await f(this.paths.credentialsFile,async()=>{const a=(await this.readPayload()).credentials.filter(({profile:i})=>i.name!==t.profile.name);a.push(t),await this.writePayload({version:1,credentials:a})})}async delete(e){const t=d(e);return f(this.paths.credentialsFile,async()=>{const r=await this.readPayload(),a=r.credentials.filter(({profile:i})=>i.name!==t);return a.length===r.credentials.length?!1:(await this.writePayload({version:1,credentials:a}),!0)})}async readPayload(){const e=await this.readFile();if(e===void 0)return{version:1,credentials:[]};const t=await this.deriveKey(e.salt);try{const r=o.createDecipheriv("aes-256-gcm",t,Buffer.from(e.iv,"base64"));r.setAuthTag(Buffer.from(e.authTag,"base64"));const a=Buffer.concat([r.update(Buffer.from(e.ciphertext,"base64")),r.final()]).toString("utf8"),i=JSON.parse(a);if(!T(i))throw new Error("Invalid credential payload.");return i}catch(r){throw new s(l.AUTH_CREDENTIAL_STORE_UNAVAILABLE,"Credential file cannot be decrypted.",{category:"auth",userMessage:"Unable to decrypt the credential store. Check LOTAGATE_CREDENTIAL_SECRET.",cause:r})}}async writePayload(e){const t=o.randomBytes(16),r=o.randomBytes(12),a=await this.deriveKey(t.toString("base64")),i=o.createCipheriv("aes-256-gcm",a,r),u=Buffer.concat([i.update(JSON.stringify(e),"utf8"),i.final()]),p={version:1,salt:t.toString("base64"),iv:r.toString("base64"),authTag:i.getAuthTag().toString("base64"),ciphertext:u.toString("base64")};await n.mkdir(this.paths.globalConfigDir,{recursive:!0});const h=g.join(this.paths.globalConfigDir,`.credentials.${process.pid}.${o.randomUUID()}.tmp`);try{await n.writeFile(h,`${JSON.stringify(p,null,2)}
+`,{encoding:"utf8",mode:384}),await n.rename(h,this.paths.credentialsFile)}finally{await n.rm(h,{force:!0})}}async readFile(){try{return A(await n.readFile(this.paths.credentialsFile,"utf8"))}catch(e){if(y(e))return;throw e instanceof s?e:new s(l.AUTH_CREDENTIAL_STORE_UNAVAILABLE,"Credential file cannot be read.",{category:"auth",userMessage:"Unable to read the credential store.",cause:e})}}async deriveKey(e){return o.scryptSync(await this.resolveSecret(),e,32)}async resolveSecret(){if(this.secret!==void 0&&this.secret.length>=16)return this.secret;await n.mkdir(this.paths.globalConfigDir,{recursive:!0});try{const t=(await n.readFile(this.paths.credentialKeyFile,"utf8")).trim();if(t.length>=16)return t;throw new Error("Credential key file is invalid.")}catch(t){if(!y(t))throw new s(l.AUTH_CREDENTIAL_STORE_UNAVAILABLE,"Credential key cannot be read.",{category:"auth",userMessage:"Unable to read the local credential key.",cause:t})}const e=o.randomBytes(32).toString("base64url");try{return await n.writeFile(this.paths.credentialKeyFile,`${e}
+`,{encoding:"utf8",mode:384,flag:"wx"}),e}catch(t){if(!m(t))throw new s(l.AUTH_CREDENTIAL_STORE_UNAVAILABLE,"Credential key cannot be created.",{category:"auth",userMessage:"Unable to initialize secure local credential storage.",cause:t});try{const r=(await n.readFile(this.paths.credentialKeyFile,"utf8")).trim();if(r.length>=16)return r}catch(r){throw new s(l.AUTH_CREDENTIAL_STORE_UNAVAILABLE,"Credential key cannot be read after initialization.",{category:"auth",userMessage:"Unable to initialize secure local credential storage.",cause:r})}throw new s(l.AUTH_CREDENTIAL_STORE_UNAVAILABLE,"Credential key file is invalid.",{category:"auth",userMessage:"Unable to initialize secure local credential storage."})}}}function A(c){try{const e=JSON.parse(c);if(typeof e!="object"||e===null)throw new Error("Expected object.");const t=e;if(t.version!==1||typeof t.salt!="string"||typeof t.iv!="string"||typeof t.authTag!="string"||typeof t.ciphertext!="string")throw new Error("Invalid encrypted credential file.");return{version:1,salt:t.salt,iv:t.iv,authTag:t.authTag,ciphertext:t.ciphertext}}catch(e){throw e instanceof s?e:new s(l.AUTH_CREDENTIAL_STORE_UNAVAILABLE,"Credential file is invalid.",{category:"auth",userMessage:"Credential store is corrupted or has an invalid format.",cause:e})}}function T(c){if(typeof c!="object"||c===null)return!1;const e=c;return e.version===1&&Array.isArray(e.credentials)}export{R as EncryptedFileCredentialStore};

package/dist/infrastructure/credentials/environment-credential-store.d.ts

@@ -0,0 +1,11 @@
+import { type AuthProfile, type StoredCredential } from '../../domain/auth/auth-profile.js';
+import type { CredentialStore } from '../../ports/credential-store.js';
+export declare class EnvironmentCredentialStore implements CredentialStore {
+    private readonly env;
+    constructor(env?: Readonly<Record<string, string | undefined>>);
+    list(): Promise<readonly AuthProfile[]>;
+    get(profileName: string): Promise<StoredCredential | undefined>;
+    set(): Promise<void>;
+    delete(): Promise<boolean>;
+    private read;
+}

package/dist/infrastructure/credentials/environment-credential-store.js

@@ -0,0 +1 @@
+import{DEFAULT_CONFIG as a}from"../../domain/config/config-schema.js";import{validateApiKey as i,validateBaseUrl as s,validateProfileName as r}from"../../domain/auth/auth-profile.js";class c{env;constructor(e=process.env){this.env=e}async list(){const e=this.read();return e===void 0?[]:[e.profile]}async get(e){const n=this.read();return n?.profile.name===r(e)?n:void 0}async set(){throw new Error("Environment credentials are read-only.")}async delete(){return!1}read(){const e=this.env.LOTAGATE_API_KEY;if(e===void 0||e.trim().length===0)return;const n=r(this.env.LOTAGATE_PROFILE??"default"),t=new Date().toISOString();return{apiKey:i(e),profile:{name:n,baseUrl:s(this.env.LOTAGATE_BASE_URL??a.baseUrl),credentialRef:"env:LOTAGATE_API_KEY",createdAt:t,updatedAt:t}}}}export{c as EnvironmentCredentialStore};

package/dist/infrastructure/credentials/secret-input.d.ts

@@ -0,0 +1,7 @@
+import type { Readable, Writable } from 'node:stream';
+interface RawInput extends Readable {
+    isTTY?: boolean;
+    setRawMode?: (mode: boolean) => void;
+}
+export declare function readSecret(prompt: string, input?: RawInput, output?: Writable): Promise<string>;
+export {};

package/dist/infrastructure/credentials/secret-input.js

@@ -0,0 +1,3 @@
+async function l(o,e=process.stdin,r=process.stderr){if(e.isTTY!==!0||e.setRawMode===void 0)return w(e);const s=e.setRawMode;return new Promise((c,u)=>{let n="";const f=i=>{const d=i.toString("utf8");for(const t of d){if(t===""){a(),u(new Error("Input interrupted."));return}if(t==="\r"||t===`
+`){a(),r.write(`
+`),c(n);return}if(t==="\b"||t==="\x7F"){n=n.slice(0,-1);continue}n+=t}},a=()=>{s(!1),e.pause(),e.off("data",f)};r.write(o),s(!0),e.resume(),e.on("data",f)})}async function w(o){const e=[];for await(const r of o)e.push(Buffer.isBuffer(r)?r:Buffer.from(String(r)));return Buffer.concat(e).toString("utf8").trim()}export{l as readSecret};

package/dist/infrastructure/extensions/composite-mcp-config-store.d.ts

@@ -0,0 +1,9 @@
+import type { CliMcpConfig } from '../../domain/extensions/mcp-config.js';
+export interface McpConfigReader {
+    list(): Promise<CliMcpConfig>;
+}
+export declare class CompositeMcpConfigStore implements McpConfigReader {
+    private readonly stores;
+    constructor(stores: readonly McpConfigReader[]);
+    list(): Promise<CliMcpConfig>;
+}

package/dist/infrastructure/extensions/composite-mcp-config-store.js

@@ -0,0 +1 @@
+import{mergeMcpConfigsWithOverride as t}from"../../domain/extensions/mcp-config.js";class e{stores;constructor(s){this.stores=s}async list(){return t(...await Promise.all(this.stores.map(s=>s.list())))}}export{e as CompositeMcpConfigStore};

package/dist/infrastructure/extensions/extension-directory-reader.d.ts

@@ -0,0 +1,2 @@
+/** Lists direct extension directories while keeping missing optional roots harmless. */
+export declare function listExtensionDirectories(root: string): Promise<readonly string[]>;

package/dist/infrastructure/extensions/extension-directory-reader.js

@@ -0,0 +1 @@
+import e from"node:fs/promises";import o from"node:path";import{isFileNotFound as n}from"../filesystem/fs-errors.js";async function c(i){try{return(await e.readdir(i,{withFileTypes:!0})).filter(t=>t.isDirectory()).map(t=>o.join(i,t.name))}catch(r){if(n(r))return[];throw r}}export{c as listExtensionDirectories};

package/dist/infrastructure/extensions/extension-integrity.d.ts

@@ -0,0 +1,7 @@
+export interface ExtensionIntegrityOptions {
+    sha256?: string;
+    signature?: string;
+    publicKeyPem?: string;
+}
+/** Verifies the caller's authenticity constraints before installing any extension. */
+export declare function verifyExtensionIntegrity(integrity: string, options: ExtensionIntegrityOptions, invalid: (message: string) => Error): void;

package/dist/infrastructure/extensions/extension-integrity.js

@@ -0,0 +1 @@
+import f from"node:crypto";function n(u,e,r){if(e.sha256!==void 0&&e.sha256.trim().toLowerCase().replace(/^sha256[:-]/u,"")!==u)throw r("Extension checksum does not match --sha256.");if(!(e.signature===void 0&&e.publicKeyPem===void 0)){if(e.signature===void 0||e.publicKeyPem===void 0)throw r("Signature verification requires both --signature and --public-key.");if(!f.verify(null,Buffer.from(u,"utf8"),e.publicKeyPem,Buffer.from(e.signature,"base64")))throw r("Extension signature verification failed.")}}export{n as verifyExtensionIntegrity};

package/dist/infrastructure/extensions/extension-source-resolver.d.ts

@@ -0,0 +1,6 @@
+import { type HostPlatformContext } from '../platform/host-platform.js';
+export interface ResolvedExtensionSource {
+    directory: string;
+    cleanup(): Promise<void>;
+}
+export declare function resolveExtensionSource(source: string, platform?: HostPlatformContext, signal?: AbortSignal): Promise<ResolvedExtensionSource>;

package/dist/infrastructure/extensions/extension-source-resolver.js

@@ -0,0 +1 @@
+import n from"node:fs/promises";import p from"node:os";import a from"node:path";import{fileURLToPath as w}from"node:url";import{CliError as l}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as g}from"../../domain/errors/error-codes.js";import{isFileNotFound as f}from"../filesystem/fs-errors.js";import{detectHostPlatform as S}from"../platform/host-platform.js";import{execPlatformCommand as d}from"../platform/host-process.js";import{RESOURCE_LIMITS as m}from"../../domain/runtime/resource-limits.js";async function G(t,r=S(),o){const e=await v(t);if(e!==void 0)return{directory:e,cleanup:async()=>{}};if(j(t))return x(t,r,o);if(z(t))return k(t,r,o);throw c("Source must be a local directory, HTTPS Git repository, or npm package.")}async function v(t){const r=t.startsWith("file://")?w(t):a.resolve(t);try{if(!(await n.stat(r)).isDirectory())throw c("Extension source must be a directory.");return r}catch(o){if(o instanceof l||!f(o))throw o;return}}async function x(t,r,o){const e=await n.mkdtemp(a.join(p.tmpdir(),"lotagate-extension-git-")),i=a.join(e,"source");try{return await d("git",["clone","--depth","1",t,i],r,{maxBufferBytes:m.internalProcessOutputBytes,timeoutMs:m.internalProcessTimeoutMs,...o===void 0?{}:{signal:o}}),await n.rm(a.join(i,".git"),{recursive:!0,force:!0}),{directory:i,cleanup:()=>n.rm(e,{recursive:!0,force:!0})}}catch(s){throw await n.rm(e,{recursive:!0,force:!0}),c(`Unable to clone Git source: ${s instanceof Error?s.message:String(s)}`)}}async function k(t,r,o){const e=await n.mkdtemp(a.join(p.tmpdir(),"lotagate-extension-npm-"));try{await d("npm",["install","--ignore-scripts","--no-package-lock","--no-save","--prefix",e,t],r,{maxBufferBytes:m.internalProcessOutputBytes,timeoutMs:m.internalProcessTimeoutMs,...o===void 0?{}:{signal:o}});const i=await E(a.join(e,"node_modules"));if(i===void 0)throw c("npm package does not contain a LotaGate plugin or skill.");return{directory:i,cleanup:()=>n.rm(e,{recursive:!0,force:!0})}}catch(i){throw await n.rm(e,{recursive:!0,force:!0}),i instanceof l?i:c(`Unable to install npm source: ${i instanceof Error?i.message:String(i)}`)}}async function E(t){let r;try{r=await n.readdir(t,{withFileTypes:!0})}catch(e){if(f(e))return;throw e}const o=[];for(const e of r){if(!e.isDirectory()||e.name.startsWith("."))continue;const i=a.join(t,e.name);if(await h(i)&&o.push(i),e.name.startsWith("@")){let s;try{s=await n.readdir(i,{withFileTypes:!0})}catch{s=[]}for(const y of s.filter(u=>u.isDirectory())){const u=a.join(i,y.name);await h(u)&&o.push(u)}}}if(o.length>1)throw c("npm package contains multiple extension roots.");return o[0]}async function h(t){try{return await n.stat(a.join(t,".lotagate-plugin","plugin.json")),!0}catch(r){if(!f(r))throw r}try{return await n.stat(a.join(t,"SKILL.md")),!0}catch(r){if(!f(r))throw r;return!1}}function j(t){return/^https:\/\//u.test(t)&&(t.endsWith(".git")||/^https:\/\/github\.com\/[^/]+\/[^/]+\/?$/u.test(t))}function z(t){return/^@?[a-z0-9][a-z0-9._/-]*(?:@[a-z0-9][a-z0-9._-]*)?$/iu.test(t)&&!t.includes("/")||/^@[a-z0-9][a-z0-9-]*\/[a-z0-9][a-z0-9._-]*(?:@[a-z0-9][a-z0-9._-]*)?$/iu.test(t)}function c(t){return new l(g.PLUGIN_MANIFEST_INVALID,t,{category:"extension",userMessage:`Unable to resolve extension source: ${t}`})}export{G as resolveExtensionSource};

package/dist/infrastructure/extensions/extensions-constants.d.ts

@@ -0,0 +1,6 @@
+export declare const DEFAULT_MCP_CONNECT_TIMEOUT_MS = 30000;
+export declare const DEFAULT_MCP_DISCONNECT_TIMEOUT_MS = 5000;
+export declare const MAX_PLUGIN_FILES = 5000;
+export declare const MAX_PLUGIN_FILE_BYTES: number;
+export declare const MAX_PLUGIN_TOTAL_BYTES: number;
+export declare const MAX_PLUGIN_DEPTH = 32;

package/dist/infrastructure/extensions/extensions-constants.js

@@ -0,0 +1 @@
+const _=3e4,T=5e3,o=5e3,t=10485760,E=52428800,M=32;export{_ as DEFAULT_MCP_CONNECT_TIMEOUT_MS,T as DEFAULT_MCP_DISCONNECT_TIMEOUT_MS,M as MAX_PLUGIN_DEPTH,o as MAX_PLUGIN_FILES,t as MAX_PLUGIN_FILE_BYTES,E as MAX_PLUGIN_TOTAL_BYTES};

package/dist/infrastructure/extensions/file-mcp-config-store.d.ts

@@ -0,0 +1,15 @@
+import { type CliMcpConfig, type CliMcpServerConfig } from '../../domain/extensions/mcp-config.js';
+import type { ExtensionScope } from '../../domain/extensions/extension-scope.js';
+export declare class FileMcpConfigStore {
+    private readonly filePath;
+    constructor(location: string, scope?: ExtensionScope);
+    static forScope(cwd: string, globalConfigDir: string, scope: ExtensionScope): FileMcpConfigStore;
+    get path(): string;
+    list(): Promise<CliMcpConfig>;
+    get(name: string): Promise<import("../../domain/extensions/mcp-config.js").CliMcpServerEntry | undefined>;
+    add(name: string, config: CliMcpServerConfig): Promise<void>;
+    remove(name: string): Promise<boolean>;
+    setEnabled(name: string, enabled: boolean): Promise<void>;
+    private readRaw;
+    private write;
+}

package/dist/infrastructure/extensions/file-mcp-config-store.js

@@ -0,0 +1,2 @@
+import a from"node:path";import{validateMcpConfig as c,validateMcpName as n}from"../../domain/extensions/mcp-config.js";import{CliError as h}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as f}from"../../domain/errors/error-codes.js";import{atomicWriteFile as m,withFileLock as s}from"../filesystem/atomic-file-store.js";import{isFileNotFound as u}from"../filesystem/fs-errors.js";import{readJsonFileBounded as d}from"../filesystem/bounded-json-reader.js";import{RESOURCE_LIMITS as w}from"../../domain/runtime/resource-limits.js";class l{filePath;constructor(t,e="project"){this.filePath=e==="user"?a.join(a.resolve(t),"mcp.json"):a.join(a.resolve(t),".lotagate","mcp.json")}static forScope(t,e,r){return new l(r==="user"?e:t,r)}get path(){return this.filePath}async list(){return c(await this.readRaw())}async get(t){return(await this.list())[n(t)]}async add(t,e){const r=n(t);await s(this.filePath,async()=>{const i=await this.list();i[r]={enabled:!0,config:e},await this.write(i)})}async remove(t){const e=n(t);return s(this.filePath,async()=>{const r=await this.list();return r[e]===void 0?!1:(delete r[e],await this.write(r),!0)})}async setEnabled(t,e){const r=n(t);await s(this.filePath,async()=>{const i=await this.list(),o=i[r];if(o===void 0)throw new h(f.MCP_SERVER_NOT_FOUND,`MCP server not found: ${r}`,{category:"mcp",userMessage:`MCP server not found: ${r}.`});i[r]={...o,enabled:e},await this.write(i)})}async readRaw(){try{return await d(this.filePath,w.mcpConfigBytes)}catch(t){if(u(t))return{};throw t}}async write(t){const e=c(t);await m(this.filePath,`${JSON.stringify(e,null,2)}
+`)}}export{l as FileMcpConfigStore};

package/dist/infrastructure/extensions/hook-runtime.d.ts

@@ -0,0 +1,18 @@
+import type { ToolExecutionContext, ToolExecutor, ToolPolicy } from '@lotagate/agent-sdk';
+import { type HookDefinition, type HookEvent } from '../../domain/extensions/hook-manifest.js';
+import { type PluginManifest } from '../../domain/extensions/plugin-manifest.js';
+export interface HookRuntimePolicy {
+    trustedProject: boolean;
+    enabled: boolean;
+    toolPolicy: ToolPolicy;
+}
+export declare class HookRuntime {
+    private readonly executor;
+    private readonly policy;
+    constructor(executor: ToolExecutor, policy: HookRuntimePolicy);
+    load(plugin: PluginManifest): Promise<readonly HookDefinition[]>;
+    loadProject(cwd: string): Promise<readonly HookDefinition[]>;
+    run(hook: HookDefinition, context: ToolExecutionContext): Promise<boolean>;
+    runEvent(hooks: readonly HookDefinition[], event: HookEvent, context: ToolExecutionContext): Promise<number>;
+}
+export declare function discoverHooks(root: string): Promise<readonly HookDefinition[]>;

package/dist/infrastructure/extensions/hook-runtime.js

@@ -0,0 +1 @@
+import l from"node:fs/promises";import i from"node:path";import{ToolExecutionError as m}from"@lotagate/agent-sdk";import{parseHookDefinition as u}from"../../domain/extensions/hook-manifest.js";import{PLUGIN_LAYOUT as f}from"../../domain/extensions/plugin-manifest.js";import{isFileNotFound as d}from"../filesystem/fs-errors.js";import{readJsonFileBounded as p}from"../filesystem/bounded-json-reader.js";import{RESOURCE_LIMITS as h}from"../../domain/runtime/resource-limits.js";class v{executor;policy;constructor(o,t){this.executor=o,this.policy=t}async load(o){const t=i.resolve(o.directory,f.hooksDirectory);return(await c(t)).map(e=>({...e,id:`${o.name}:${e.id}`,scope:"plugin",pluginName:o.name,sourceName:e.id}))}async loadProject(o){return(await c(i.join(i.resolve(o),".lotagate","hooks"))).map(t=>({...t,scope:"project",sourceName:t.id}))}async run(o,t){if(!this.policy.enabled||!this.policy.trustedProject)return!1;const e={command:o.command,args:[...o.args],cwd:".",timeoutMs:o.timeoutMs},r=this.executor.getToolInfo?.("shell.exec");try{await this.policy.toolPolicy.assertAllowed({toolName:"shell.exec",input:e,context:t,...r===void 0?{}:{toolInfo:r}})}catch(a){if(a instanceof m)return!1;throw a}if((await this.executor.execute("shell.exec",e,t)).isError)throw new Error(`Hook failed: ${o.id}`);return!0}async runEvent(o,t,e){let r=0;for(const n of o)n.event===t&&await this.run(n,e)&&(r+=1);return r}}async function c(s){let o;try{o=(await l.readdir(s,{withFileTypes:!0})).filter(e=>e.isFile()&&e.name.endsWith(".json")).map(e=>i.join(s,e.name))}catch(e){if(d(e))return[];throw e}const t=[];for(const e of o.sort())t.push(u(await p(e,h.configFileBytes),s,i.basename(e,".json")));return t}export{v as HookRuntime,c as discoverHooks};

package/dist/infrastructure/extensions/mcp-runtime.d.ts

@@ -0,0 +1,58 @@
+import { McpToolExecutor, type McpConnectionSummary, type McpServerConfigMap } from '@lotagate/agent-sdk';
+import type { CliMcpConfig } from '../../domain/extensions/mcp-config.js';
+import type { McpConfigReader } from './composite-mcp-config-store.js';
+import type { Logger } from '../../ports/logger.js';
+export interface McpRuntimePolicy {
+    readonly connectTimeoutMs: number;
+    readonly disconnectTimeoutMs?: number;
+    readonly idleTtlMs: number;
+    readonly startupConcurrency?: number;
+    readonly probeTimeoutMs?: number;
+    readonly probeMaxRetries?: number;
+    readonly reconnectMaxAttempts?: number;
+    readonly healthCheckIntervalMs?: number;
+    readonly healthCheckTimeoutMs?: number;
+}
+export type McpRuntimeEvent = {
+    type: 'mcp.server.status';
+    summary: McpConnectionSummary & {
+        latencyMs?: number;
+    };
+} | {
+    type: 'mcp.tool.catalog.updated';
+    serverId: string;
+    toolCount: number;
+    error?: Error;
+};
+export type McpRuntimeEventListener = (event: McpRuntimeEvent) => void | Promise<void>;
+export interface McpRuntimeLease {
+    readonly executor: McpToolExecutor;
+    release(): void;
+}
+export declare function resolveMcpRuntimePolicy(env?: Readonly<Record<string, string | undefined>>): McpRuntimePolicy;
+export declare class McpRuntime {
+    private readonly storeFactory;
+    private readonly policy;
+    private readonly logger?;
+    private readonly now;
+    private readonly environment;
+    private readonly runtimes;
+    private readonly retiring;
+    private readonly keyLocks;
+    private closed;
+    constructor(storeFactory?: (cwd: string) => McpConfigReader, policy?: McpRuntimePolicy, logger?: Logger | undefined, now?: () => number, environment?: Readonly<Record<string, string | undefined>>);
+    ensure(cwd: string, config: CliMcpConfig, trusted: boolean, options?: {
+        onEvent?: McpRuntimeEventListener;
+        reconnect?: boolean;
+    }): Promise<McpRuntimeLease>;
+    connectConfigured(cwd: string, trusted: boolean): Promise<readonly McpConnectionSummary[]>;
+    invalidate(cwd: string): Promise<void>;
+    close(): Promise<void>;
+    private ensureUnlocked;
+    private invalidateUnlocked;
+    private waitForRetiring;
+    private withKeyLock;
+    private scheduleIdleInvalidation;
+    private connectAndDiscover;
+}
+export declare function toAgentMcpConfig(config: CliMcpConfig, environment?: Readonly<Record<string, string | undefined>>): McpServerConfigMap;

package/dist/infrastructure/extensions/mcp-runtime.js

@@ -0,0 +1 @@
+import k from"node:crypto";import T from"node:path";import{AgentSdkError as _,AgentSdkErrorCode as D,DEFAULT_MCP_STARTUP_CONCURRENCY as C,mapWithMcpConcurrency as j,McpClientManager as F,McpToolExecutor as G}from"@lotagate/agent-sdk";import{CliError as A}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as P}from"../../domain/errors/error-codes.js";import{FileMcpConfigStore as $}from"./file-mcp-config-store.js";import{readBoundedEnvironmentInteger as h}from"../config/environment-values.js";import{redactLogText as v}from"../logging/log-redactor.js";import{DEFAULT_MCP_CONNECT_TIMEOUT_MS as H,DEFAULT_MCP_DISCONNECT_TIMEOUT_MS as M}from"./extensions-constants.js";function K(t=process.env){return{connectTimeoutMs:h(t.LOTAGATE_MCP_CONNECT_TIMEOUT_MS,H,500,12e4),disconnectTimeoutMs:h(t.LOTAGATE_MCP_DISCONNECT_TIMEOUT_MS,M,500,12e4),idleTtlMs:h(t.LOTAGATE_MCP_RUNTIME_TTL_SECONDS,300,1,86400)*1e3,startupConcurrency:h(t.LOTAGATE_MCP_STARTUP_CONCURRENCY,C,1,32),probeTimeoutMs:h(t.LOTAGATE_MCP_PROBE_TIMEOUT_MS,5e3,500,12e4),probeMaxRetries:h(t.LOTAGATE_MCP_PROBE_MAX_RETRIES,1,0,5),reconnectMaxAttempts:h(t.LOTAGATE_MCP_RECONNECT_MAX_ATTEMPTS,3,0,10),healthCheckIntervalMs:h(t.LOTAGATE_MCP_HEALTH_CHECK_INTERVAL_SECONDS,30,5,3600)*1e3,healthCheckTimeoutMs:h(t.LOTAGATE_MCP_HEALTH_CHECK_TIMEOUT_MS,5e3,500,12e4)}}class re{storeFactory;policy;logger;now;environment;runtimes=new Map;retiring=new Map;keyLocks=new Map;closed=!1;constructor(e=a=>new $(a),n=K(),o,s=Date.now,r=process.env){this.storeFactory=e,this.policy=n,this.logger=o,this.now=s,this.environment=r}async ensure(e,n,o,s={}){if(!o)throw new A(P.PROJECT_TRUST_REQUIRED,"MCP connections require project trust.",{category:"project",userMessage:"Trust the project before connecting to MCP servers."});const r=T.resolve(e);return this.withKeyLock(r,async()=>this.ensureUnlocked(r,n,s))}async connectConfigured(e,n){if(!n)throw new A(P.PROJECT_TRUST_REQUIRED,"MCP connections require project trust.",{category:"project",userMessage:"Trust the project before connecting to MCP servers."});const o=await this.storeFactory(e).list(),s=S(I(o,this.environment),this.policy,new Set);try{return await this.connectAndDiscover(T.resolve(e),s.manager,s.executor,new Set)}finally{await R(s.manager,this.policy.disconnectTimeoutMs??M,this.logger,T.resolve(e))}}async invalidate(e){const n=T.resolve(e);await this.withKeyLock(n,()=>this.invalidateUnlocked(n))}async close(){this.closed=!0,await Promise.all([...this.keyLocks.values()]);const e=[...this.runtimes.values()];this.runtimes.clear();for(const n of e)p(n);await Promise.allSettled(e.map(n=>R(n.manager,this.policy.disconnectTimeoutMs??M,this.logger,n.cwd)))}async ensureUnlocked(e,n,o){if(this.closed)throw new Error("MCP runtime is closed.");await this.waitForRetiring(e);const s=B(n),r=this.runtimes.get(e);if(r?.failed&&r.fingerprint===s&&r.leases>0)return p(r),r.lastUsedAt=this.now(),r.leases+=1,E(r,o.onEvent),await r.ready,w(r,this.now,o.onEvent,()=>this.scheduleIdleInvalidation(e,r));if(r!==void 0&&!r.failed&&r.fingerprint===s&&(r.leases>0||this.now()-r.lastUsedAt<=this.policy.idleTtlMs)){p(r);const u=r.leases===0;r.lastUsedAt=this.now(),r.leases+=1,E(r,o.onEvent),await r.ready;const d=w(r,this.now,o.onEvent,()=>this.scheduleIdleInvalidation(e,r));return u&&!r.failed&&z(r.manager)?(d.release(),await this.invalidateUnlocked(e),this.ensureUnlocked(e,n,o)):d}r!==void 0&&await this.invalidateUnlocked(e),await this.waitForRetiring(e);const a=new Set;E(a,o.onEvent);const i=S(I(n,this.environment),this.policy,a,o.reconnect??!0),c={cwd:e,fingerprint:s,manager:i.manager,executor:i.executor,ready:this.connectAndDiscover(e,i.manager,i.executor,a),listeners:a,failed:!1,lastUsedAt:this.now(),leases:1,idleTimer:void 0};this.runtimes.set(e,c);const l=await c.ready;return c.failed=l.some(u=>u.status==="failed"),w(c,this.now,o.onEvent,()=>this.scheduleIdleInvalidation(e,c))}async invalidateUnlocked(e){const n=this.runtimes.get(e);if(n===void 0)return;this.runtimes.delete(e),p(n),n.listeners.clear();const o=O(n.manager,this.policy.disconnectTimeoutMs??M,this.logger,e),s=o.settled.finally(()=>{this.retiring.get(e)===s&&this.retiring.delete(e)});this.retiring.set(e,s),await o.withinTimeout,this.logger?.info("MCP runtime invalidated.",{cwd:e})}async waitForRetiring(e){await this.retiring.get(e)}async withKeyLock(e,n){const o=this.keyLocks.get(e);let s;const r=new Promise(i=>{s=i}),a=(o??Promise.resolve()).then(()=>r);this.keyLocks.set(e,a),await o;try{return await n()}finally{s(),this.keyLocks.get(e)===a&&this.keyLocks.delete(e)}}scheduleIdleInvalidation(e,n){p(n),n.idleTimer=setTimeout(()=>{if(n.idleTimer=void 0,!(this.runtimes.get(e)!==n||n.leases>0)){if(this.now()-n.lastUsedAt<this.policy.idleTtlMs){this.scheduleIdleInvalidation(e,n);return}this.invalidate(e)}},this.policy.idleTtlMs),n.idleTimer.unref?.()}async connectAndDiscover(e,n,o,s){const r=performance.now();this.logger?.debug("MCP runtime startup started.",{cwd:e,serverCount:n.configuredServerIds.length,startupConcurrency:this.policy.startupConcurrency??C});const a=await j(n.configuredServerIds,async i=>{const c=performance.now();try{m(s,{type:"mcp.server.status",summary:{serverId:i,status:"connecting"}});const l=await b(n.connect(i),this.policy.connectTimeoutMs,()=>n.disconnect(i),"connection");if(m(s,{type:"mcp.server.status",summary:{...l,latencyMs:f(c)}}),this.logger?.debug("MCP server connected.",{cwd:e,serverId:i,durationMs:f(c),protocolEra:l.protocolEra,protocolVersion:l.protocolVersion}),l.status!=="connected")return l;try{const u=performance.now(),d=await b(n.listTools(i),this.policy.connectTimeoutMs,()=>n.disconnect(i),"tool discovery");o.replaceServerTools(i,d.tools),m(s,{type:"mcp.tool.catalog.updated",serverId:i,toolCount:d.tools.length}),this.logger?.debug("MCP tools discovered.",{cwd:e,serverId:i,toolCount:d.tools.length,durationMs:f(u),totalDurationMs:f(c)})}catch(u){const d=U(u,i);return m(s,{type:"mcp.server.status",summary:{...l,status:"failed",error:d,latencyMs:f(c)}}),m(s,{type:"mcp.tool.catalog.updated",serverId:i,toolCount:0,error:d}),this.logger?.warn("MCP tool discovery failed.",{cwd:e,serverId:i,durationMs:f(c),reason:d.message,...L(u)}),{...l,status:"failed",error:d}}return l}catch(l){const u=U(l,i);return m(s,{type:"mcp.server.status",summary:{serverId:i,status:"failed",error:u,latencyMs:f(c)}}),this.logger?.warn("MCP server connection failed.",{cwd:e,serverId:i,durationMs:f(c),reason:u.message,...L(l)}),{serverId:i,status:"failed",error:u}}},this.policy.startupConcurrency??C);return this.logger?.info("MCP runtime startup completed.",{cwd:e,serverCount:a.length,connectedCount:a.filter(i=>i.status==="connected").length,failedCount:a.filter(i=>i.status==="failed").length,durationMs:f(r)}),a}}function S(t,e,n,o=!0){let s;const r=new F(t,{protocol:{mode:"auto",...e.probeTimeoutMs===void 0?{}:{probeTimeoutMs:e.probeTimeoutMs},...e.probeMaxRetries===void 0?{}:{probeMaxRetries:e.probeMaxRetries}},reconnect:{enabled:o,...e.reconnectMaxAttempts===void 0?{}:{maxAttempts:e.reconnectMaxAttempts},...e.healthCheckIntervalMs===void 0?{}:{healthCheckIntervalMs:e.healthCheckIntervalMs},...e.healthCheckTimeoutMs===void 0?{}:{healthCheckTimeoutMs:e.healthCheckTimeoutMs}},onToolsChanged:a=>{s!==void 0&&(a.tools===null||a.error!==null?s.removeServerTools(a.serverId):s.replaceServerTools(a.serverId,a.tools),m(n,{type:"mcp.tool.catalog.updated",serverId:a.serverId,toolCount:a.tools?.length??0,...a.error===null?{}:{error:a.error}}))},onServerChanged:a=>{a.type==="removed"&&s?.removeServerTools(a.serverId)}});return s=new G(r),{manager:r,executor:s}}function O(t,e,n,o){let s,r=!1;const a=Promise.resolve().then(()=>t.disconnectAll()),i=new Promise(u=>{s=setTimeout(()=>{r=!0,u()},e)}),c=a.then(()=>{},u=>{r||n?.warn("MCP runtime disconnect failed.",{cwd:o,reason:u instanceof Error?u.message:String(u)})});return{withinTimeout:Promise.race([c,i]).finally(()=>{s!==void 0&&clearTimeout(s),r&&n?.warn("MCP runtime disconnect timed out.",{cwd:o,timeoutMs:e})}),settled:c}}async function R(t,e,n,o){await O(t,e,n,o).withinTimeout}function w(t,e,n,o){let s=!1;return{executor:t.executor,release:()=>{s||(s=!0,t.leases=Math.max(0,t.leases-1),t.lastUsedAt=e(),J(t,n),t.leases===0&&o?.())}}}function p(t){t.idleTimer!==void 0&&clearTimeout(t.idleTimer),t.idleTimer=void 0}function E(t,e){if(e!==void 0){if(t instanceof Set){t.add(e);return}t.listeners.add(e)}}function J(t,e){e!==void 0&&t.listeners.delete(e)}function m(t,e){for(const n of t)Promise.resolve(n(e)).catch(()=>{})}function z(t){const e=t.connectionSummaries;return e.length>0&&e.some(n=>n.status!=="connected")}function B(t){return k.createHash("sha256").update(y(t)).digest("hex")}function y(t){return Array.isArray(t)?`[${t.map(y).join(",")}]`:typeof t!="object"||t===null?JSON.stringify(t):`{${Object.keys(t).sort().map(e=>`${JSON.stringify(e)}:${y(t[e])}`).join(",")}}`}async function b(t,e,n,o){let s,r=!1;const a=new Promise((i,c)=>{s=setTimeout(()=>{r||(r=!0,c(new Error(`MCP ${o} timed out after ${e}ms.`)),Promise.resolve(n()).catch(()=>{}))},e)});try{return await Promise.race([t.then(c=>(r=!0,c)),a])}finally{s!==void 0&&clearTimeout(s),t.catch(()=>{})}}function f(t){return Math.max(0,Math.round(performance.now()-t))}function U(t,e){return t instanceof _?t:new _(D.McpConnectionFailed,"MCP server connection failed.",{cause:t,details:{serverId:e}})}function L(t){const e=[],n=[],o=[],s=[];let r=t;for(let a=0;a<4&&r!==void 0&&r!==null;a+=1){if(r instanceof Error){e.push(v(r.message)),n.push(r.name),r=r.cause;continue}if(typeof r!="object")break;const i=r,c=i.message;typeof c=="string"&&e.push(v(c));const l=i.name;typeof l=="string"&&n.push(l);const u=i.code;typeof u=="string"&&o.push(u);for(const d of["status","statusCode","httpStatus"]){const g=i[d];typeof g=="number"&&Number.isInteger(g)&&s.push(g)}r=i.cause}return{...e.length===0?{}:{errorMessages:e},...n.length===0?{}:{errorTypes:n},...o.length===0?{}:{errorCodes:o},...s.length===0?{}:{httpStatuses:s}}}function I(t,e=process.env){const n={};for(const[o,s]of Object.entries(t))s.enabled&&(n[o]=V(s.config,e));return n}function V(t,e){if(t.type==="stdio"){const{env:r,...a}=t;return{...a,...t.args===void 0?{}:{args:[...t.args]},...r===void 0?{}:{env:x(r,e)}}}const{headers:n,auth:o,...s}=t;return{...s,...n===void 0?{}:{headers:x(n,e)},...o?.type==="bearer"?{auth:{type:"bearer",token:N(o.token,e,"MCP bearer token")}}:{}}}function x(t,e){return Object.fromEntries(Object.entries(t).map(([n,o])=>[n,N(o,e,`MCP secret ${n}`)]))}function N(t,e,n){if(typeof t=="string")return t;const o=e[t.name];if(o===void 0||o.length===0)throw new Error(`${n} environment variable is not set.`);return o}export{re as McpRuntime,K as resolveMcpRuntimePolicy,I as toAgentMcpConfig};

package/dist/infrastructure/extensions/plugin-agent-discovery.d.ts

@@ -0,0 +1,4 @@
+import { type PluginAgentDefinition } from '../../domain/extensions/plugin-agent-manifest.js';
+export declare class PluginAgentDiscovery {
+    discover(root: string): Promise<readonly PluginAgentDefinition[]>;
+}