@lotagate/cli 0.1.24 → 0.1.26

package/dist/infrastructure/observability/tool-execution-logger.d.ts

@@ -0,0 +1,11 @@
+import type { ToolExecutionContext, ToolResult } from '@lotagate/agent-sdk';
+import type { Logger } from '../../ports/logger.js';
+interface ToolExecutionLogOptions {
+    toolName: string;
+    source: string;
+    context: ToolExecutionContext;
+    details?: Record<string, unknown>;
+}
+/** Adds consistent lifecycle logs without recording tool payloads or result content. */
+export declare function withToolExecutionLogging<T extends ToolResult>(logger: Logger | undefined, options: ToolExecutionLogOptions, action: () => Promise<T>): Promise<T>;
+export {};

package/dist/infrastructure/observability/tool-execution-logger.js

@@ -0,0 +1 @@
+async function u(t,e,s){const r=Date.now(),n={toolName:e.toolName,source:e.source,sessionId:e.context.sessionId,runId:e.context.runId,iteration:e.context.iteration,...e.details??{}};t?.info("tool.execution.started",n);try{const o=await s(),i={...n,durationMs:Date.now()-r,outcome:o.isError?"error":"success",...c(o)};return o.isError?t?.warn("tool.execution.failed",i):t?.info("tool.execution.completed",i),o}catch(o){const i=a(o);throw t?.error("tool.execution.failed",{...n,durationMs:Date.now()-r,outcome:"exception",error:o instanceof Error?o.message:String(o),...i===void 0?{}:{errorCode:i}}),o}}function c(t){const e=t.metadata;if(e===void 0)return{};const s={};for(const r of["errorCode","exitCode","timedOut"]){const n=e[r];(typeof n=="string"||typeof n=="number"||typeof n=="boolean")&&(s[r]=n)}return s}function a(t){if(t===null||typeof t!="object"||!("code"in t))return;const e=t.code;return typeof e=="string"&&e.length>0?e:void 0}export{u as withToolExecutionLogging};

package/dist/infrastructure/platform/host-platform.d.ts

@@ -0,0 +1,16 @@
+export type HostPlatformId = 'windows' | 'linux' | 'macos' | 'bsd' | 'unsupported';
+export type HostNodePlatform = typeof process.platform;
+export interface HostPlatformContext {
+    readonly id: HostPlatformId;
+    readonly nodePlatform: HostNodePlatform;
+    readonly isWindows: boolean;
+    readonly supportsProcessGroups: boolean;
+    readonly env: Readonly<Record<string, string | undefined>>;
+}
+export interface HostPlatformInput {
+    nodePlatform?: HostNodePlatform;
+    env?: Readonly<Record<string, string | undefined>>;
+}
+export declare function detectHostPlatform(input?: HostPlatformInput): HostPlatformContext;
+/** Describes the POSIX userspace contract used by Desktop's isolated guest boundary. */
+export declare function createIsolatedGuestPlatform(): HostPlatformContext;

package/dist/infrastructure/platform/host-platform.js

@@ -0,0 +1 @@
+function s(n={}){const e=n.nodePlatform??process.platform,r=t(e),o=r==="windows";return{id:r,nodePlatform:e,isWindows:o,supportsProcessGroups:!o,env:n.env??process.env}}function i(){return s({nodePlatform:"linux",env:{}})}function t(n){return n==="win32"||n==="cygwin"?"windows":n==="linux"||n==="android"?"linux":n==="darwin"?"macos":n==="freebsd"||n==="openbsd"||n==="netbsd"?"bsd":"unsupported"}export{i as createIsolatedGuestPlatform,s as detectHostPlatform};

package/dist/infrastructure/platform/host-process.d.ts

@@ -0,0 +1,31 @@
+import { type ChildProcess, type SpawnOptions } from 'node:child_process';
+import type { HostPlatformContext } from './host-platform.js';
+export { terminatePlatformProcess } from './process-termination.js';
+export interface PreparedPlatformCommand {
+    command: string;
+    args: readonly string[];
+    windowsVerbatimArguments: boolean;
+}
+/** Normalizes the structured shell contract for a complete PowerShell script. */
+export declare function normalizePowerShellScriptInput(input: Record<string, unknown>, platform: HostPlatformContext, options?: {
+    readonly allowNonWindows?: boolean;
+}): Record<string, unknown>;
+export declare function preparePowerShellScript(command: string, script: string): PreparedPlatformCommand;
+export declare function isPowerShellExecutable(command: string): boolean;
+export interface PlatformExecOptions {
+    cwd?: string;
+    env?: NonNullable<SpawnOptions['env']>;
+    maxBufferBytes?: number;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    rejectOnNonZero?: boolean;
+}
+export interface PlatformExecResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number | null;
+}
+export declare function spawnPlatformProcess(command: string, args: readonly string[], platform: HostPlatformContext, options?: SpawnOptions): ChildProcess;
+export declare function execPlatformCommand(command: string, args: readonly string[], platform: HostPlatformContext, options?: PlatformExecOptions): Promise<PlatformExecResult>;
+export declare function createSafeChildEnvironment(platform: HostPlatformContext): NonNullable<SpawnOptions['env']>;
+export declare function preparePlatformCommand(command: string, args: readonly string[], platform: HostPlatformContext): PreparedPlatformCommand;

package/dist/infrastructure/platform/host-process.js

@@ -0,0 +1 @@
+import $ from"node:path";import{spawn as B}from"node:child_process";import{RESOURCE_LIMITS as A}from"../../domain/runtime/resource-limits.js";import{terminatePlatformProcess as T}from"./process-termination.js";import{terminatePlatformProcess as Y}from"./process-termination.js";import{DEFAULT_EXEC_BUFFER_BYTES as v,WINDOWS_CMD_SHIM as y,WINDOWS_DIRECT_EXECUTABLE as W,WINDOWS_META_CHARS as P}from"./platform-constants.js";function F(e,r,t={}){const n=e.script;if(n===void 0)return e;if(typeof n!="string"||n.trim().length===0)throw new Error("shell.exec script must be a non-empty string.");if(Buffer.byteLength(n,"utf8")>A.sessionTextBytes)throw new Error("shell.exec script exceeds the configured limit.");if(!r.isWindows&&t.allowNonWindows!==!0)throw new Error("shell.exec PowerShell scripts are unavailable in the isolated guest sandbox; use the supported host command with structured args.");const o=e.command;if(typeof o!="string"||!I(o))throw new Error("shell.exec script requires powershell.exe or pwsh.exe as the command.");const c=e.args;if(c!==void 0&&(!Array.isArray(c)||c.length>0||c.some(u=>typeof u!="string")))throw new Error("shell.exec script cannot be combined with args.");const d=_(o,n),i={...e};return delete i.script,{...i,command:d.command,args:[...d.args]}}function _(e,r){return{command:e,args:["-NoProfile","-NonInteractive","-Command",r],windowsVerbatimArguments:!1}}function I(e){const r=e.replace(/^.*[\\/]/u,"").toLowerCase();return r==="powershell"||r==="powershell.exe"||r==="pwsh"||r==="pwsh.exe"}function O(e,r,t,n={}){const o=M(e,r,t);return B(o.command,[...o.args],{...n,shell:!1,windowsHide:!0,...o.windowsVerbatimArguments?{windowsVerbatimArguments:!0}:{}})}function X(e,r,t,n={}){if(n.signal?.aborted)return Promise.reject(new Error("Process cancelled."));const o=n.maxBufferBytes??v,c=n.timeoutMs??A.internalProcessTimeoutMs;return new Promise((d,i)=>{const u=O(e,r,t,{...n.cwd===void 0?{}:{cwd:n.cwd},env:n.env??L(t),detached:t.supportsProcessGroups,stdio:["ignore","pipe","pipe"]}),x=[],p=[];let w=0,a=!1,l=!1,b=!1,S=!1,h;const m=()=>{h!==void 0&&clearTimeout(h),n.signal?.removeEventListener("abort",g)},g=()=>{S=!0,E(new Error("Process cancelled."))},E=s=>{l||a||(l=!0,T(u,t).then(()=>{a||(a=!0,m(),i(s))},f=>{a||(a=!0,m(),i(new AggregateError([s,f],`${s.message} Termination could not be confirmed.`)))}))},C=(s,f)=>{if(!(a||l)){if(w+=f.byteLength,w>o){E(new Error("Process output exceeded the configured limit."));return}s.push(f)}};u.stdout?.on("data",s=>C(x,s)),u.stderr?.on("data",s=>C(p,s)),u.once("error",s=>{a||l||(a=!0,m(),i(s))}),u.once("close",s=>{a||(a=!0,m(),S?i(new Error("Process cancelled.")):b?i(new Error(`Process timed out after ${c}ms.`)):w>o?i(new Error("Process output exceeded the configured limit.")):s===0||n.rejectOnNonZero===!1?d({stdout:Buffer.concat(x).toString("utf8"),stderr:Buffer.concat(p).toString("utf8"),exitCode:s}):i(new Error(Buffer.concat(p).toString("utf8").trim()||`Process exited with code ${String(s)}.`)))}),h=setTimeout(()=>{b=!0,E(new Error(`Process timed out after ${c}ms.`))},c),n.signal?.aborted===!0?g():n.signal?.addEventListener("abort",g,{once:!0})})}function L(e){const r=Object.fromEntries(Object.entries(e.env).filter(t=>t[1]!==void 0));if(e.isWindows){const t=r.Path??r.PATH;t!==void 0&&(delete r.Path,delete r.PATH,r.Path=t)}return r}function M(e,r,t){if(!t.isWindows||W.test(e))return{command:e,args:r,windowsVerbatimArguments:!1};const n=$.win32.normalize(e),o=y.test(n),c=N(n),d=r.map(i=>D(i,o));return{command:t.env.ComSpec??t.env.COMSPEC??"cmd.exe",args:["/d","/s","/c",`"${[c,...d].join(" ")}"`],windowsVerbatimArguments:!0}}function N(e){return e.replace(P,"^$1")}function D(e,r){let t=e.replace(/(?=(\\+?)?)\1"/gu,'$1$1\\"').replace(/(?=(\\+?)?)\1$/gu,"$1$1");return t=`"${t}"`.replace(P,"^$1"),r?t.replace(P,"^$1"):t}export{L as createSafeChildEnvironment,X as execPlatformCommand,I as isPowerShellExecutable,F as normalizePowerShellScriptInput,M as preparePlatformCommand,_ as preparePowerShellScript,O as spawnPlatformProcess,Y as terminatePlatformProcess};

package/dist/infrastructure/platform/platform-constants.d.ts

@@ -0,0 +1,4 @@
+export declare const DEFAULT_EXEC_BUFFER_BYTES: number;
+export declare const WINDOWS_META_CHARS: RegExp;
+export declare const WINDOWS_DIRECT_EXECUTABLE: RegExp;
+export declare const WINDOWS_CMD_SHIM: RegExp;

package/dist/infrastructure/platform/platform-constants.js

@@ -0,0 +1 @@
+const o=2097152,E=/([()\][%!^"`<>&|;, *?])/gu,_=/\.(?:com|exe)$/iu,e=/node_modules[\\/]\.bin[\\/][^\\/]+\.cmd$/iu;export{o as DEFAULT_EXEC_BUFFER_BYTES,e as WINDOWS_CMD_SHIM,_ as WINDOWS_DIRECT_EXECUTABLE,E as WINDOWS_META_CHARS};

package/dist/infrastructure/platform/platform-paths.d.ts

@@ -0,0 +1,25 @@
+import { type HostPlatformContext } from './host-platform.js';
+export interface PlatformPaths {
+    platform: HostPlatformContext;
+    home: string;
+    globalConfigDir: string;
+    globalConfigFile: string;
+    credentialsFile: string;
+    credentialKeyFile: string;
+    projectsDir: string;
+    cacheDir: string;
+    logsDir: string;
+    skillsDir: string;
+    pluginsDir: string;
+    mcpConfigFile: string;
+}
+export declare function resolvePlatformPaths(env?: Readonly<Record<string, string | undefined>>, platform?: HostPlatformContext): PlatformPaths;
+export declare function resolveProjectConfigPaths(cwd: string): {
+    directory: string;
+    settings: string;
+    localSettings: string;
+    skillsDir: string;
+    pluginsDir: string;
+    hooksDir: string;
+    mcpConfigFile: string;
+};

package/dist/infrastructure/platform/platform-paths.js

@@ -0,0 +1 @@
+import e from"node:os";import o from"node:path";import{detectHostPlatform as r}from"./host-platform.js";function g(s=process.env,n=r({env:s})){const t=s.LOTAGATE_HOME?.trim()||e.homedir(),i=o.join(t,".lotagate");return{platform:n,home:t,globalConfigDir:i,globalConfigFile:o.join(i,"settings.json"),credentialsFile:o.join(i,"credentials.enc.json"),credentialKeyFile:o.join(i,"credentials.key"),projectsDir:o.join(i,"projects"),cacheDir:o.join(i,"cache"),logsDir:o.join(i,"logs"),skillsDir:o.join(i,"skills"),pluginsDir:o.join(i,"plugins"),mcpConfigFile:o.join(i,"mcp.json")}}function a(s){const n=o.join(s,".lotagate");return{directory:n,settings:o.join(n,"settings.json"),localSettings:o.join(n,"settings.local.json"),skillsDir:o.join(n,"skills"),pluginsDir:o.join(n,"plugins"),hooksDir:o.join(n,"hooks"),mcpConfigFile:o.join(n,"mcp.json")}}export{g as resolvePlatformPaths,a as resolveProjectConfigPaths};

package/dist/infrastructure/platform/process-identity.d.ts

@@ -0,0 +1,8 @@
+/** Returns a stable-enough epoch timestamp for the current Node process. */
+export declare function currentProcessStartTimeMs(): number;
+/**
+ * Reads another process' creation time where the host exposes a safe native
+ * query. Unknown platforms deliberately return undefined so lock recovery can
+ * fail closed and retain a lock when liveness cannot be verified.
+ */
+export declare function readProcessStartTimeMs(pid: number): Promise<number | undefined>;

package/dist/infrastructure/platform/process-identity.js

@@ -0,0 +1 @@
+import{execFile as i}from"node:child_process";import{promisify as n}from"node:util";const s=n(i);function c(){return Math.floor(Date.now()-process.uptime()*1e3)}async function f(e){if(!(!Number.isSafeInteger(e)||e<1)){if(e===process.pid)return c();if(process.platform==="win32")try{const t=`$process = Get-Process -Id ${e} -ErrorAction Stop; ([DateTimeOffset]$process.StartTime.ToUniversalTime()).ToUnixTimeMilliseconds()`,o=await s("powershell.exe",["-NoLogo","-NoProfile","-NonInteractive","-Command",t],{windowsHide:!0,timeout:1e3,maxBuffer:4*1024}),r=Number(o.stdout.trim());return Number.isFinite(r)?r:void 0}catch{return}}}export{c as currentProcessStartTimeMs,f as readProcessStartTimeMs};

package/dist/infrastructure/platform/process-termination.d.ts

@@ -0,0 +1,4 @@
+import { type ChildProcess } from 'node:child_process';
+import type { HostPlatformContext } from './host-platform.js';
+/** Requests termination, escalates, and observes close within a bounded deadline. */
+export declare function terminatePlatformProcess(child: ChildProcess, platform: HostPlatformContext): Promise<void>;

package/dist/infrastructure/platform/process-termination.js

@@ -0,0 +1 @@
+import{spawn as T}from"node:child_process";import{RESOURCE_LIMITS as p}from"../../domain/runtime/resource-limits.js";const d=new WeakMap;function k(e,s){const u=d.get(e);if(u!==void 0)return u;if(e.pid===void 0||e.exitCode!==null||e.signalCode!==null)return Promise.resolve();const a=new Promise((f,l)=>{let t,r;const i=()=>{if(clearTimeout(g),t!==void 0&&clearTimeout(t),e.removeListener("close",c),e.removeListener("error",m),r!==void 0&&r.exitCode===null&&r.signalCode===null)try{r.kill()}catch{}},c=()=>{i(),f()},m=n=>{i(),l(n)},o=n=>{if(s.supportsProcessGroups)try{process.kill(-e.pid,n?"SIGKILL":"SIGTERM");return}catch{}try{e.kill(n?"SIGKILL":"SIGTERM")}catch{}},g=setTimeout(()=>{o(!0),i(),l(new Error(`Process ${String(e.pid)} did not close after forced termination.`))},p.processTerminationTimeoutMs);e.once("close",c),e.once("error",m),s.isWindows?(r=T("taskkill",["/pid",String(e.pid),"/t","/f"],{windowsHide:!0,stdio:"ignore"}),r.once("error",()=>o(!0)),r.once("exit",n=>{n!==0&&o(!0)})):(o(!1),t=setTimeout(()=>o(!0),p.processTerminationGraceMs))});return d.set(e,a),a}export{k as terminatePlatformProcess};

package/dist/infrastructure/platform/read-only-executable.d.ts

@@ -0,0 +1,4 @@
+import type { HostPlatformContext } from './host-platform.js';
+/** Resolves user-installed host binaries from PATH, never from the workspace. */
+export declare function resolveReadOnlyExecutable(command: string, root: string, platform?: HostPlatformContext): Promise<string | undefined>;
+export declare function readOnlyArguments(command: string, args: readonly string[]): string[];

package/dist/infrastructure/platform/read-only-executable.js

@@ -0,0 +1 @@
+import l from"node:fs/promises";import{constants as p}from"node:fs";import t from"node:path";async function b(n,e,i){if(/[\\/:]/u.test(n)||/\.(?:cmd|bat|ps1)$/iu.test(n))return;if(i?.isWindows===!1)return n;let o;try{o=await l.realpath(e)}catch{return}const r=process.platform==="win32"&&!/\.(?:exe|com)$/iu.test(n)?[".exe",".com"]:[""];for(const s of(process.env.PATH??process.env.Path??"").split(t.delimiter))if(t.isAbsolute(s))for(const u of r){const d=t.join(s,`${n}${u}`),c=t.relative(o,d);if(!(c===""||!c.startsWith(`..${t.sep}`)&&c!==".."&&!t.isAbsolute(c)))try{const a=await l.realpath(d),f=t.relative(o,a);if(f===""||!f.startsWith(`..${t.sep}`)&&f!==".."&&!t.isAbsolute(f)||!(await l.stat(a)).isFile())continue;return await l.access(a,process.platform==="win32"?p.F_OK:p.X_OK),a}catch{}}}function w(n,e){if(n.toLowerCase().replace(/\.exe$/u,"")!=="git")return[...e];const i=e.findIndex(u=>!u.startsWith("-")),o=i<0?void 0:e[i],r=["--no-pager","--no-optional-locks","-c","core.fsmonitor=false"],s=["diff","log","show"].includes(o??"")?["--no-ext-diff","--no-textconv"]:[];return i<0||s.length===0?[...r,...e]:[...r,...e.slice(0,i+1),...s,...e.slice(i+1)]}export{w as readOnlyArguments,b as resolveReadOnlyExecutable};

package/dist/infrastructure/project/file-project-trust-store.d.ts

@@ -0,0 +1,12 @@
+import type { ProjectTrustStore, TrustedProject } from '../../ports/project-trust-store.js';
+import type { PlatformPaths } from '../platform/platform-paths.js';
+export declare class FileProjectTrustStore implements ProjectTrustStore {
+    private readonly filePath;
+    constructor(paths: PlatformPaths);
+    list(): Promise<readonly TrustedProject[]>;
+    get(fingerprint: string): Promise<TrustedProject | undefined>;
+    grant(project: TrustedProject): Promise<void>;
+    revoke(fingerprint: string): Promise<boolean>;
+    private read;
+    private write;
+}

package/dist/infrastructure/project/file-project-trust-store.js

@@ -0,0 +1,2 @@
+import a from"node:fs/promises";import n from"node:path";import{isFileNotFound as c}from"../filesystem/fs-errors.js";import{atomicWriteFile as f,withFileLock as o}from"../filesystem/atomic-file-store.js";import{readJsonFileBounded as l}from"../filesystem/bounded-json-reader.js";import{RESOURCE_LIMITS as h}from"../../domain/runtime/resource-limits.js";class g{filePath;constructor(t){this.filePath=n.join(t.globalConfigDir,"trusted-projects.json")}async list(){return(await this.read()).projects}async get(t){return(await this.read()).projects.find(r=>r.fingerprint===t)}async grant(t){await o(this.filePath,async()=>{const i=(await this.read()).projects.filter(s=>s.fingerprint!==t.fingerprint);i.push(t),await this.write({version:1,projects:i})})}async revoke(t){return o(this.filePath,async()=>{const r=await this.read(),i=r.projects.filter(s=>s.fingerprint!==t);return i.length===r.projects.length?!1:(await this.write({version:1,projects:i}),!0)})}async read(){try{const t=await l(this.filePath,h.configFileBytes);if(!p(t))throw new Error("Invalid trust file.");return t}catch(t){if(c(t))return{version:1,projects:[]};throw t}}async write(t){await a.mkdir(n.dirname(this.filePath),{recursive:!0}),await f(this.filePath,`${JSON.stringify(t,null,2)}
+`)}}function p(e){if(typeof e!="object"||e===null)return!1;const t=e;return t.version===1&&Array.isArray(t.projects)}export{g as FileProjectTrustStore};

package/dist/infrastructure/sdk/chat-completion-adapter.d.ts

@@ -0,0 +1,8 @@
+import { type LotaGate } from '@lotagate/sdk';
+import type { ChatModelPort, ChatModelRequest, ChatModelEvent } from '../../ports/chat-model.js';
+export declare class SdkChatCompletionAdapter implements ChatModelPort {
+    private readonly client;
+    constructor(client: LotaGate);
+    stream(request: ChatModelRequest): AsyncIterable<ChatModelEvent>;
+    private fallbackToBufferedCompletion;
+}

package/dist/infrastructure/sdk/chat-completion-adapter.js

@@ -0,0 +1 @@
+import{SdkErrorCode as m}from"@lotagate/sdk";import{CliError as l}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as c}from"../../domain/errors/error-codes.js";import{buildUserMessage as p}from"../clipboard/image-normalizer.js";import{retryModelStream as y}from"../../application/model/model-response-retry.js";class w{client;constructor(e){this.client=e}async*stream(e){const n=[p(e.prompt,e.attachments)],i=e.signal===void 0?void 0:{signal:e.signal};let o=!1;try{yield{type:"activity",state:"connecting"};const a=y({create:async()=>await this.client.chat.completions.create({model:e.model,messages:n,...e.reasoningEffort===void 0?{}:{reasoning_effort:e.reasoningEffort},stream:!0},i),isObservable:r=>typeof r.choices[0]?.delta.content=="string"&&r.choices[0].delta.content.length>0,...e.signal===void 0?{}:{signal:e.signal}});yield{type:"activity",state:"thinking"};for await(const r of a){r.usage!==void 0&&(yield{type:"usage",usage:f(r.usage)});const s=r.choices[0]?.delta.content;typeof s=="string"&&s.length>0&&(o=!0,yield{type:"activity",state:"writing"},yield{type:"delta",content:s})}yield{type:"activity",state:"completed"},yield{type:"completed"}}catch(a){if(e.signal?.aborted===!0)throw e.signal.reason??d();if(!o&&g(a)){yield*this.fallbackToBufferedCompletion(e,n,i);return}throw new l(c.MODEL_STREAM_FAILED,"Chat completion stream failed.",{category:"model",userMessage:"Unable to read the model stream. The gateway may have returned an invalid SSE payload. Check the model, authentication and base URL.",retryable:!0,cause:a})}}async*fallbackToBufferedCompletion(e,n,i){try{const o=await this.client.chat.completions.create({model:e.model,messages:[...n],...e.reasoningEffort===void 0?{}:{reasoning_effort:e.reasoningEffort},stream:!1},i);o.usage!==void 0&&(yield{type:"usage",usage:f(o.usage)});const a=h(o.choices[0]?.message.content);a.length>0&&(yield{type:"activity",state:"writing"},yield{type:"delta",content:a}),yield{type:"activity",state:"completed"},yield{type:"completed"}}catch(o){throw e.signal?.aborted===!0?e.signal.reason??d():new l(c.MODEL_STREAM_FAILED,"Chat completion fallback failed.",{category:"model",userMessage:"Unable to read the model response. Check the model, authentication and base URL.",retryable:!0,cause:o})}}}function d(){const t=new Error("The operation was aborted.");return t.name="AbortError",t}function f(t){return{...typeof t.prompt_tokens=="number"?{promptTokens:t.prompt_tokens}:{},...typeof t.completion_tokens=="number"?{completionTokens:t.completion_tokens}:{},...typeof t.total_tokens=="number"?{totalTokens:t.total_tokens}:{}}}function g(t){return typeof t=="object"&&t!==null&&"errorCode"in t&&t.errorCode===m.ResponseParseError}function h(t){return typeof t=="string"?t:Array.isArray(t)?t.map(e=>{if(typeof e!="object"||e===null||!("text"in e))return"";const n=e.text;return typeof n=="string"?n:""}).join(""):""}export{w as SdkChatCompletionAdapter};

package/dist/infrastructure/sdk/lotagate-client-factory.d.ts

@@ -0,0 +1,3 @@
+import { LotaGate } from '@lotagate/sdk';
+import type { AuthProfile } from '../../domain/auth/auth-profile.js';
+export declare function createLotaGateClient(profile: AuthProfile, apiKey: string): LotaGate;

package/dist/infrastructure/sdk/lotagate-client-factory.js

@@ -0,0 +1 @@
+import{LotaGate as a}from"@lotagate/sdk";function o(e,t){return new a({apiKey:t,baseURL:e.baseUrl})}export{o as createLotaGateClient};

package/dist/infrastructure/sdk/model-catalog-adapter.d.ts

@@ -0,0 +1,19 @@
+import type { ModelListResponse, ModelSummary } from '@lotagate/sdk';
+export interface ModelCatalogClient {
+    models: {
+        list(): Promise<ModelListResponse>;
+        retrieve(model: string): Promise<ModelSummary>;
+    };
+}
+export declare class ModelCatalogAdapter {
+    private readonly client;
+    constructor(client: ModelCatalogClient);
+    /** Lists every selectable gateway model while excluding embeddings from interactive selection. */
+    listModels(): Promise<{
+        data: ModelSummary[];
+        object: "list" | string;
+    }>;
+    get(model: string): Promise<ModelSummary>;
+}
+/** Reads the optional gateway metadata without coupling the CLI to SDK internals. */
+export declare function getModelContextWindow(model: ModelSummary): number | undefined;

package/dist/infrastructure/sdk/model-catalog-adapter.js

@@ -0,0 +1 @@
+class r{client;constructor(e){this.client=e}async listModels(){const e=await this.client.models.list();return{...e,data:e.data.filter(t=>t.model_category!=="embedding")}}async get(e){return this.client.models.retrieve(e)}}function i(n){const e=n.context_window;if(typeof e=="number"&&Number.isInteger(e)&&e>0)return e;if(typeof e=="string"&&/^\d+$/u.test(e)){const t=Number(e);return Number.isSafeInteger(t)&&t>0?t:void 0}}export{r as ModelCatalogAdapter,i as getModelContextWindow};

package/dist/infrastructure/sdk/sdk-media-gateway-client.d.ts

@@ -0,0 +1,24 @@
+import type { LotaGate } from '@lotagate/sdk';
+import type { AudioSpeechStreamEvent } from '@lotagate/sdk';
+import type { MediaGatewayClient, AudioUploadInput, ImageEditInput, ImageGenerationInput, MediaRequestOptions, SpeechInput } from '../../ports/media-gateway-client.js';
+import type { GeneratedImage, MediaBinary, VideoOperation } from '../../domain/media/media-contract.js';
+/** SDK boundary adapter. Application code only sees CLI-owned media contracts. */
+export declare class SdkMediaGatewayClient implements MediaGatewayClient {
+    private readonly client;
+    constructor(client: LotaGate);
+    generateImage(input: ImageGenerationInput, options?: MediaRequestOptions): Promise<readonly GeneratedImage[]>;
+    editImage(input: ImageEditInput, options?: MediaRequestOptions): Promise<readonly GeneratedImage[]>;
+    createSpeech(input: SpeechInput, options?: MediaRequestOptions): Promise<MediaBinary>;
+    createSpeechStream(input: SpeechInput & {
+        readonly streamFormat: 'sse';
+    }, options?: MediaRequestOptions): AsyncIterable<AudioSpeechStreamEvent>;
+    transcribe(input: AudioUploadInput, options?: MediaRequestOptions): Promise<string>;
+    translate(input: AudioUploadInput, options?: MediaRequestOptions): Promise<string>;
+    createVideo(input: {
+        model: string;
+        prompt: string;
+        parameters?: Record<string, unknown>;
+    }, options?: MediaRequestOptions): Promise<VideoOperation>;
+    getVideoOperation(id: string, options?: MediaRequestOptions): Promise<VideoOperation>;
+    downloadVideo(id: string, options?: MediaRequestOptions): Promise<MediaBinary>;
+}

package/dist/infrastructure/sdk/sdk-media-gateway-client.js

@@ -0,0 +1 @@
+class f{client;constructor(e){this.client=e}async generateImage(e,s){return(await this.client.images.generations.create(a(e),s)).data.map(t=>({...typeof t.b64_json=="string"?{base64:t.b64_json}:{},...typeof t.url=="string"?{url:t.url}:{},...typeof t.revised_prompt=="string"?{revisedPrompt:t.revised_prompt}:{}}))}async editImage(e,s){const o={...a(e),image:e.images,...e.mask===void 0?{}:{mask:e.mask},...e.inputFidelity===void 0?{}:{input_fidelity:e.inputFidelity}};return(await this.client.images.edits.create(o,s)).data.map(n=>({...typeof n.b64_json=="string"?{base64:n.b64_json}:{},...typeof n.url=="string"?{url:n.url}:{},...typeof n.revised_prompt=="string"?{revisedPrompt:n.revised_prompt}:{}}))}async createSpeech(e,s){if(e.streamFormat==="sse")throw new Error("Use createSpeechStream for SSE speech responses.");const o=e.streamFormat??"audio",t=await this.client.audio.speech.create({model:e.model,input:e.input,voice:e.voice,...e.instructions===void 0?{}:{instructions:e.instructions},...e.responseFormat===void 0?{}:{response_format:e.responseFormat},...e.speed===void 0?{}:{speed:e.speed},stream_format:o},s);return d(t)}createSpeechStream(e,s){return this.client.audio.speech.create({model:e.model,input:e.input,voice:e.voice,...e.instructions===void 0?{}:{instructions:e.instructions},...e.responseFormat===void 0?{}:{response_format:e.responseFormat},...e.speed===void 0?{}:{speed:e.speed},stream_format:"sse"},s)}async transcribe(e,s){return(await this.client.audio.transcriptions.create(m(e),s)).text}async translate(e,s){return(await this.client.audio.translations.create(c(e),s)).text}async createVideo(e,s){const o={model:e.model,instances:[{prompt:e.prompt}],...e.parameters===void 0?{}:{parameters:e.parameters}};return i(await this.client.video.generations.create(o,s))}async getVideoOperation(e,s){return i(await this.client.video.operations.retrieve(e,s))}async downloadVideo(e,s){return d(await this.client.video.operations.download(e,s))}}function a(r){return{model:r.model,prompt:r.prompt,...r.n===void 0?{}:{n:r.n},...r.size===void 0?{}:{size:r.size},...r.quality===void 0?{}:{quality:r.quality},...r.background===void 0?{}:{background:r.background},...r.outputFormat===void 0?{}:{output_format:r.outputFormat},...r.outputCompression===void 0?{}:{output_compression:r.outputCompression},...r.moderation===void 0?{}:{moderation:r.moderation},...r.user===void 0?{}:{user:r.user}}}function m(r){const e={model:r.model,file:r.file,filename:r.filename};return r.prompt!==void 0&&(e.prompt=r.prompt),r.temperature!==void 0&&(e.temperature=r.temperature),r.responseFormat!==void 0&&(e.response_format=r.responseFormat),r.language!==void 0&&(e.language=r.language),r.timestampGranularities!==void 0&&(e.timestamp_granularities=[...r.timestampGranularities]),r.include!==void 0&&(e.include=[...r.include]),e}function c(r){const e={model:r.model,file:r.file,filename:r.filename};return r.prompt!==void 0&&(e.prompt=r.prompt),r.temperature!==void 0&&(e.temperature=r.temperature),r.responseFormat!==void 0&&(e.response_format=r.responseFormat),e}function d(r){const e=r.headers.get("content-type")?.split(";",1)[0]?.trim();return{bytes:new Uint8Array(r.data),...e===void 0||e.length===0?{}:{contentType:e}}}function i(r){return{id:r.name,done:r.done===!0,...typeof r.error?.message=="string"?{errorMessage:r.error.message}:{}}}export{f as SdkMediaGatewayClient};

package/dist/infrastructure/sessions/file-goal-store.d.ts

@@ -0,0 +1,21 @@
+import { type CreateGoalInput, type GoalEvaluation, type GoalState, type GoalUsageDelta } from '../../domain/orchestration/goal.js';
+import type { GoalStore } from '../../ports/goal-store.js';
+import type { SessionStore } from '../../ports/session-store.js';
+export declare class FileGoalStore implements GoalStore {
+    private readonly sessions;
+    constructor(sessions: SessionStore);
+    get(sessionId: string): Promise<GoalState | undefined>;
+    create(sessionId: string, input: CreateGoalInput): Promise<GoalState>;
+    replace(sessionId: string, input: CreateGoalInput): Promise<GoalState>;
+    pause(sessionId: string, reason?: string): Promise<GoalState>;
+    resume(sessionId: string): Promise<GoalState>;
+    recordTurn(sessionId: string): Promise<GoalState>;
+    recordUsage(sessionId: string, delta: GoalUsageDelta): Promise<GoalState>;
+    recordEvaluation(sessionId: string, evaluation: GoalEvaluation): Promise<GoalState>;
+    clear(sessionId: string, reason?: string): Promise<void>;
+    private requireActiveUnlocked;
+    private getOrThrowUnlocked;
+    private invalidState;
+    private appendState;
+    private append;
+}

package/dist/infrastructure/sessions/file-goal-store.js

@@ -0,0 +1 @@
+import v from"node:crypto";import{CliError as l}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as p}from"../../domain/errors/error-codes.js";import{RESOURCE_LIMITS as i}from"../../domain/runtime/resource-limits.js";import{addGoalUsage as w,EMPTY_GOAL_USAGE as m,isGoalEvaluation as h,isGoalEventType as y,isGoalState as E,validateGoalInput as g}from"../../domain/orchestration/goal.js";class T{sessions;constructor(t){this.sessions=t}async get(t){return c(await this.sessions.readEvents(t))}async create(t,e){return this.sessions.withLock(t,async()=>{const s=g(e),n=c(await this.sessions.readEvents(t));return n?.status==="active"||n?.status==="paused"?this.appendState(n,s,"goal.replaced"):this.appendState(void 0,s,"goal.created",t)})}async replace(t,e){return this.sessions.withLock(t,async()=>this.appendState(void 0,g(e),"goal.replaced",t))}async pause(t,e="Paused by user."){return this.sessions.withLock(t,async()=>{const n={...await this.requireActiveUnlocked(t),status:"paused",updatedAt:r(),lastError:o(e,i.goalReasonBytes)};return await this.append(n,"goal.paused",{reason:n.lastError},!0),n})}async resume(t){return this.sessions.withLock(t,async()=>{const e=await this.getOrThrowUnlocked(t);if(e.status!=="paused")throw this.invalidState(`Goal cannot be resumed from ${e.status}.`);const s=r(),n=f({...e,status:"active",startedAt:s,updatedAt:s});return await this.append(n,"goal.resumed",{},!0),n})}async recordTurn(t){return this.sessions.withLock(t,async()=>{const e=await this.requireActiveUnlocked(t),s={...e,turns:e.turns+1,updatedAt:r()};return await this.append(s,"goal.turn.started",{},!0),s})}async recordUsage(t,e){return this.sessions.withLock(t,async()=>{const s=await this.requireActiveUnlocked(t),n={...s,usage:w(s.usage,e),updatedAt:r()};return await this.append(n,"goal.usage_recorded",{},!0),n})}async recordEvaluation(t,e){return this.sessions.withLock(t,async()=>{const s=await this.requireActiveUnlocked(t);if(!h(e))throw this.invalidState("Goal evaluation is invalid.");const n=k(e.decision),u=S(e),d=f({...s,status:n,evaluatorRuns:s.evaluatorRuns+1,updatedAt:r(),lastEvaluation:u});return await this.append(d,n==="active"?"goal.evaluated":`goal.${n}`,{evaluation:u},!0),d})}async clear(t,e="Cleared by user."){await this.sessions.withLock(t,async()=>{const s=c(await this.sessions.readEvents(t));s!==void 0&&await this.append(s,"goal.cleared",{reason:o(e,i.goalReasonBytes)},!0)})}async requireActiveUnlocked(t){const e=await this.getOrThrowUnlocked(t);if(e.status!=="active")throw this.invalidState(`Goal is not active: ${e.status}.`);return e}async getOrThrowUnlocked(t){const e=c(await this.sessions.readEvents(t));if(e===void 0)throw new l(p.GOAL_NOT_FOUND,`Goal not found for session: ${t}`,{category:"goal",userMessage:"No goal is configured for this session."});return e}invalidState(t){return new l(p.GOAL_INVALID_STATE,t,{category:"goal",userMessage:t})}async appendState(t,e,s,n){const u=t?.sessionId??n;if(u===void 0)throw this.invalidState("A session id is required to create a goal.");const d=A(u,e);return await this.append(d,s,{},!0),d}async append(t,e,s,n){await this.sessions.appendEvent({type:e,timestamp:r(),sessionId:t.sessionId,data:{goal:G(t),...s}},{locked:n})}}function A(a,t){const e=r();return{id:v.randomUUID(),sessionId:a,objective:t.objective,status:"active",createdAt:e,updatedAt:e,startedAt:e,turns:0,evaluatorRuns:0,usage:{...m},...t.tokenBudget===void 0?{}:{tokenBudget:t.tokenBudget},...t.maxTurns===void 0?{}:{maxTurns:t.maxTurns},...t.maxDurationMs===void 0?{}:{maxDurationMs:t.maxDurationMs}}}function c(a){let t;for(const e of a){if(!y(e.type))continue;if(e.type==="goal.cleared"){t=void 0;continue}const s=e.data?.goal;E(s)&&(t=s,e.type==="goal.evaluated"&&e.data?.evaluation!==void 0&&h(e.data.evaluation)&&(t={...t,lastEvaluation:e.data.evaluation}))}return t}function k(a){return a==="complete"?"completed":a==="blocked"?"blocked":a==="budget_limited"?"budget_limited":a==="usage_limited"?"usage_limited":"active"}function S(a){return{decision:a.decision,reason:o(a.reason,i.goalReasonBytes),evidence:a.evidence.slice(0,i.goalEvidenceItems).map(t=>o(t,i.goalEvidenceBytes)),timestamp:a.timestamp,...a.evaluatorModel===void 0?{}:{evaluatorModel:o(a.evaluatorModel,256)}}}function G(a){return{...a,objective:o(a.objective,i.goalObjectiveBytes)}}function o(a,t){return a.length<=t?a:`${a.slice(0,t-3)}...`}function r(){return new Date().toISOString()}function f(a){return delete a.lastError,a}export{T as FileGoalStore};

package/dist/infrastructure/sessions/file-session-store.d.ts

@@ -0,0 +1,50 @@
+import type { SessionEvent, SessionMetadata, TranscriptEntry } from '../../domain/session/session.js';
+import type { Attachment } from '../../domain/session/attachment.js';
+import type { SessionStore, SessionBundle, SessionHistory, SessionJournalAppend, SessionRepairResult } from '../../ports/session-store.js';
+import type { PlatformPaths } from '../platform/platform-paths.js';
+export declare class FileSessionStore implements SessionStore {
+    private readonly paths;
+    private readonly journalHealth;
+    constructor(paths: PlatformPaths);
+    create(input: Omit<SessionMetadata, 'id' | 'createdAt' | 'updatedAt'>): Promise<SessionMetadata>;
+    get(sessionId: string): Promise<SessionMetadata | undefined>;
+    list(projectFingerprint?: string): Promise<readonly SessionMetadata[]>;
+    updateStatus(sessionId: string, status: SessionMetadata['status']): Promise<SessionMetadata>;
+    rename(sessionId: string, name: string): Promise<SessionMetadata>;
+    appendEvent(event: SessionEvent, options?: {
+        locked?: boolean;
+    }): Promise<void>;
+    appendTranscript(sessionId: string, entry: TranscriptEntry): Promise<void>;
+    appendJournal(sessionId: string, records: readonly SessionJournalAppend[]): Promise<void>;
+    readEvents(sessionId: string): Promise<readonly SessionEvent[]>;
+    readTranscript(sessionId: string): Promise<readonly TranscriptEntry[]>;
+    readHistory(sessionId: string): Promise<SessionHistory>;
+    delete(sessionId: string): Promise<boolean>;
+    fork(sessionId: string, overrides?: Partial<Pick<SessionMetadata, 'model' | 'profile'>>): Promise<SessionMetadata>;
+    compact(sessionId: string, summary: string, options?: {
+        turnId?: string;
+    }): Promise<void>;
+    export(sessionId: string): Promise<SessionBundle>;
+    import(bundle: SessionBundle, projectFingerprint: string, cwd: string): Promise<SessionMetadata>;
+    saveAttachment(sessionId: string, attachment: Attachment, bytes: Uint8Array): Promise<Attachment>;
+    private persistAttachment;
+    readAttachment(sessionId: string, attachmentId: string): Promise<Uint8Array | undefined>;
+    deleteAttachment(sessionId: string, attachmentId: string): Promise<boolean>;
+    recoverStaleLock(sessionId: string): Promise<boolean>;
+    repair(sessionId: string): Promise<SessionRepairResult>;
+    withLock<T>(sessionId: string, action: () => Promise<T>): Promise<T>;
+    private require;
+    private requirePaths;
+    private locate;
+    private locateByScan;
+    private projectKeys;
+    private readOrRebuildIndex;
+    private indexMatchesJournals;
+    private projectJournalIds;
+    private rebuildProjectIndex;
+    private readSnapshot;
+    private appendJournalLocked;
+    private readSessionJournal;
+    private readAttachmentMetadata;
+    private corrupt;
+}

package/dist/infrastructure/sessions/file-session-store.js

@@ -0,0 +1,4 @@
+import J from"node:crypto";import d from"node:fs/promises";import h from"node:path";import{CliError as u}from"../../domain/errors/cli-error.js";import{CLI_ERROR_CODES as l}from"../../domain/errors/error-codes.js";import{isRecord as x,isSessionEvent as I,isSessionMetadata as z,isTranscriptEntry as C}from"../../domain/session/session-schema.js";import{isGoalEventType as q,isPersistedGoalEventData as H}from"../../domain/orchestration/goal.js";import{isAlreadyExists as $,isFileNotFound as w}from"../filesystem/fs-errors.js";import{acquireAdvisoryFileLock as G,atomicWriteFile as O,isAdvisoryLockContention as V,recoverStaleAdvisoryLock as U,releaseAdvisoryFileLock as K}from"../filesystem/atomic-file-store.js";import{isSafeProjectKey as L,resolveProjectSessionPaths as W,resolveProjectSessionPathsForKey as v}from"./project-session-paths.js";import{appendJournalRecord as y,appendJournalRecords as Z,eventRecord as D,journalEvents as E,journalTranscript as P,latestMetadata as M,metadataRecord as T,readJournal as N,repairJournal as Q,transcriptRecord as B}from"./session-journal.js";import{indexProjectSession as j,readProjectSessionIndex as X,readSessionLocator as Y,removeIndexedSession as tt}from"./session-index.js";import{RESOURCE_LIMITS as f}from"../../domain/runtime/resource-limits.js";import{readJsonFileBounded as et}from"../filesystem/bounded-json-reader.js";import{SessionJournalHealth as at}from"./session-journal-health.js";import{ATTACHMENT_ID_PATTERN as S,SESSION_ID_PATTERN as _,SESSION_LOCK_STALE_MS as rt}from"./session-constants.js";class kt{paths;journalHealth=new at;constructor(t){this.paths=t}async create(t){const a=new Date().toISOString(),e={...t,id:J.randomUUID(),createdAt:a,updatedAt:a},r=W(this.paths,e.cwd,e.id);return await d.mkdir(r.attachmentsDirectory,{recursive:!0}),await y(r.journalFile,T(e)),await this.journalHealth.markValid(r.journalFile),await j(this.paths,e,r.projectKey),e}async get(t){const a=await this.locate(t);if(a===void 0)return;const e=(await this.readSessionJournal(t,a)).metadata;if(e===void 0)throw this.corrupt(t,new Error("Session metadata is missing."));return e}async list(t){const a=[];for(const e of await this.projectKeys()){const r=v(this.paths,e,"00000000-0000-4000-8000-000000000000"),n=await this.readOrRebuildIndex(r.projectIndexFile,e);for(const s of Object.values(n))(t===void 0||s.projectFingerprint===t)&&a.push(s)}return a.sort((e,r)=>r.updatedAt.localeCompare(e.updatedAt))}async updateStatus(t,a){return this.withLock(t,async()=>{const r={...await this.require(t),status:a,updatedAt:new Date().toISOString()},n=await this.requirePaths(t);return await y(n.journalFile,T(r)),await this.journalHealth.markValid(n.journalFile),await j(this.paths,r,n.projectKey),r})}async rename(t,a){const e=a.trim().replace(/\s+/gu," ");if(e.length===0||e.length>120||/[\r\n]/u.test(e)||e.includes("\0"))throw new u(l.INVALID_ARGUMENT,"Session name is invalid.",{category:"session",userMessage:"Session name must be between 1 and 120 printable characters."});return this.withLock(t,async()=>{const n={...await this.require(t),name:e,updatedAt:new Date().toISOString()},s=await this.requirePaths(t);return await y(s.journalFile,T(n)),await this.journalHealth.markValid(s.journalFile),await j(this.paths,n,s.projectKey),n})}async appendEvent(t,a={}){const e=[{kind:"event",event:t}];a.locked===!0?await this.appendJournalLocked(t.sessionId,e):await this.appendJournal(t.sessionId,e)}async appendTranscript(t,a){await this.appendJournal(t,[{kind:"transcript",entry:a}])}async appendJournal(t,a){a.length!==0&&await this.withLock(t,()=>this.appendJournalLocked(t,a))}async readEvents(t){const a=await this.readSessionJournal(t);if(a.metadata===void 0)throw this.corrupt(t,new Error("Session metadata is missing."));return E(a.records)}async readTranscript(t){const a=await this.readSessionJournal(t);if(a.metadata===void 0)throw this.corrupt(t,new Error("Session metadata is missing."));return P(a.records)}async readHistory(t){return this.withLock(t,async()=>{const a=await this.readSessionJournal(t);if(a.metadata===void 0)throw this.corrupt(t,new Error("Session metadata is missing."));const e=a.records;return{events:E(e),transcript:P(e)}})}async delete(t){const a=await this.get(t);return a===void 0?!1:(await this.withLock(t,async()=>{const e=await this.requirePaths(t);await d.rm(e.journalFile,{force:!0}),await d.rm(e.sessionDirectory,{recursive:!0,force:!0}),this.journalHealth.forget(e.journalFile),await tt(this.paths,a,e.projectKey)}),!0)}async fork(t,a={}){const e=await this.readSnapshot(t),r=e.metadata,n=await this.create({projectFingerprint:r.projectFingerprint,cwd:r.cwd,model:a.model??r.model,profile:a.profile??r.profile,status:"active"});try{return await this.withLock(n.id,async()=>{const s=await this.requirePaths(n.id);for(const o of e.events){const c=nt(o.data);await y(s.journalFile,D({...o,sessionId:n.id,...c===void 0?{}:{data:c}}))}for(const o of e.transcript)await y(s.journalFile,B(o));await this.journalHealth.markValid(s.journalFile);for(const[o,c]of e.attachments)c.attachment!==void 0&&await this.persistAttachment(n.id,{...c.attachment,id:o},c.bytes)}),n}catch(s){try{await this.delete(n.id)}catch(o){throw new AggregateError([s,o],"Session fork failed and cleanup was incomplete.")}throw s}}async compact(t,a,e={}){const r=a.trim();if(r.length===0)throw new u(l.SESSION_CORRUPTED,"Compaction summary cannot be empty.",{category:"session",userMessage:"Compaction summary cannot be empty."});const n=new Date().toISOString();await this.appendJournal(t,[{kind:"transcript",entry:{type:"system",timestamp:n,content:`[Compacted context]
+${r}`,...e.turnId===void 0?{}:{turnId:e.turnId}}},{kind:"event",event:{type:"context.compacted",timestamp:n,sessionId:t,...e.turnId===void 0?{}:{turnId:e.turnId},data:{summary:r}}}])}async export(t){const a=await this.readSnapshot(t),e=[];for(const r of a.transcript)for(const n of r.attachmentIds??[]){if(e.some(c=>c.attachment.id===n))continue;const s=a.attachments.get(n);if(s===void 0)continue;const o=s.attachment??{id:n,name:n,mimeType:"application/octet-stream",sizeBytes:s.bytes.byteLength,source:"file"};e.push({attachment:o,dataBase64:Buffer.from(s.bytes).toString("base64")})}return{metadata:a.metadata,events:a.events,transcript:a.transcript,attachments:e}}async import(t,a,e){ot(t);const r=await this.create({projectFingerprint:a,cwd:e,model:t.metadata.model,profile:t.metadata.profile,status:"active"});try{for(const n of t.events){const s=st(n.data);await this.appendEvent({...n,sessionId:r.id,...s===void 0?{}:{data:s}})}for(const n of t.transcript)await this.appendTranscript(r.id,n);for(const n of t.attachments)await this.saveAttachment(r.id,n.attachment,Buffer.from(n.dataBase64,"base64"));return r}catch(n){try{await this.delete(r.id)}catch(s){throw new AggregateError([n,s],"Session import failed and cleanup was incomplete.")}throw n}}async saveAttachment(t,a,e){if(!S.test(a.id))throw new u(l.ATTACHMENT_INVALID_IMAGE,"Attachment id is invalid.",{category:"attachment",userMessage:"Attachment name is invalid."});if(a.sizeBytes<0||a.sizeBytes>f.maxAttachmentBytes)throw new u(l.ATTACHMENT_TOO_LARGE,"Attachment exceeds the allowed size.",{category:"attachment",userMessage:"Attachment exceeds the allowed size."});if(e.byteLength!==a.sizeBytes)throw new u(l.ATTACHMENT_INVALID_IMAGE,"Attachment size does not match metadata.",{category:"attachment",userMessage:"Attachment size does not match its metadata."});return this.withLock(t,()=>this.persistAttachment(t,a,e))}async persistAttachment(t,a,e){const r=await this.requirePaths(t);await this.require(t),await d.mkdir(r.attachmentsDirectory,{recursive:!0});const n=await this.readAttachmentMetadata(r,a.id),s=n?.storagePath===void 0?await it(r.attachmentsDirectory,a.storageName,a.id):h.basename(n.storagePath),o=h.join(r.attachmentsDirectory,s);await d.writeFile(o,e,{flag:"wx",mode:384}).catch(async p=>{if(!$(p))throw p;await d.writeFile(o,e,{mode:384})});const c={...a,storagePath:h.posix.join("attachments",s)};return await O(h.join(r.attachmentsDirectory,`${a.id}.json`),`${JSON.stringify(c,null,2)}
+`),c}async readAttachment(t,a){const e=await this.requirePaths(t);if(await this.require(t),!S.test(a))return;const r=await this.readAttachmentMetadata(e,a),n=h.join(e.attachmentsDirectory,R(r,a));try{if((await d.stat(n)).size>f.maxAttachmentBytes)throw new u(l.ATTACHMENT_TOO_LARGE,"Stored attachment exceeds the allowed size.",{category:"attachment",userMessage:"Stored attachment exceeds the allowed size."});return await d.readFile(n)}catch(s){if(w(s))return;throw s}}async deleteAttachment(t,a){return S.test(a)?this.withLock(t,async()=>{const e=await this.requirePaths(t);await this.require(t);const r=await this.readAttachmentMetadata(e,a),n=h.join(e.attachmentsDirectory,R(r,a)),s=h.join(e.attachmentsDirectory,`${a}.json`);let o=!1;for(const c of[n,s])try{await d.unlink(c),o=!0}catch(p){if(!w(p))throw p}return o}):!1}async recoverStaleLock(t){const a=await this.locate(t);return a===void 0?!1:U(a.lockFile,rt)}async repair(t){const a=await this.requirePaths(t),e=await this.withLock(t,()=>Q(a.journalFile));return await this.journalHealth.markValid(a.journalFile),{eventsRemoved:e,transcriptRemoved:0}}async withLock(t,a){const e=await this.requirePaths(t);await d.mkdir(e.sessionDirectory,{recursive:!0});let r;try{r=await G(e.lockFile)}catch(n){const s=await V(n,e.lockFile);if(s&&await this.recoverStaleLock(t))return this.withLock(t,a);throw s?new u(l.SESSION_LOCKED,`Session is locked: ${t}`,{category:"session",userMessage:"The session is being used by another process. Try again later.",retryable:!0}):n}try{return await a()}finally{await K(r,e.lockFile)}}async require(t){const a=await this.get(t);if(a===void 0)throw new u(l.SESSION_NOT_FOUND,`Session not found: ${t}`,{category:"session",userMessage:`Session not found: ${t}.`});return a}async requirePaths(t){const a=await this.locate(t);if(a===void 0)throw new u(l.SESSION_NOT_FOUND,`Session not found: ${t}`,{category:"session",userMessage:`Session not found: ${t}.`});return a}async locate(t){if(!_.test(t))return;const e=(await Y(this.paths)).sessions[t];if(typeof e=="string"&&L(e)){const r=v(this.paths,e,t);if(await k(r.journalFile))return r}return this.locateByScan(t)}async locateByScan(t){for(const a of await this.projectKeys()){const e=v(this.paths,a,t);if(await k(e.journalFile))return e}}async projectKeys(){try{return(await d.readdir(this.paths.projectsDir,{withFileTypes:!0})).filter(t=>t.isDirectory()&&L(t.name)).map(t=>t.name)}catch(t){if(w(t))return[];throw t}}async readOrRebuildIndex(t,a){try{const e=(await X(t,a)).sessions;return await this.indexMatchesJournals(a,e)?e:this.rebuildProjectIndex(a)}catch{return this.rebuildProjectIndex(a)}}async indexMatchesJournals(t,a){const e=await this.projectJournalIds(t),r=Object.keys(a);return e.length===r.length&&e.every(n=>a[n]!==void 0)}async projectJournalIds(t){const a=h.join(this.paths.projectsDir,t);try{return(await d.readdir(a,{withFileTypes:!0})).filter(e=>e.isFile()&&e.name.endsWith(".jsonl")).map(e=>e.name.slice(0,-6)).filter(e=>_.test(e))}catch(e){if(w(e))return[];throw e}}async rebuildProjectIndex(t){const a={},e=h.join(this.paths.projectsDir,t);for(const n of await d.readdir(e,{withFileTypes:!0}))if(!(!n.isFile()||!n.name.endsWith(".jsonl")))try{const s=M(await N(h.join(e,n.name)));s!==void 0&&(a[s.id]=s)}catch{}const r=h.join(e,"index.json");await d.mkdir(e,{recursive:!0}),await O(r,`${JSON.stringify({projectKey:t,sessions:a},null,2)}
+`);for(const n of Object.values(a))await j(this.paths,n,t);return a}async readSnapshot(t){return this.withLock(t,async()=>{const a=await this.readSessionJournal(t),e=a.metadata;if(e===void 0)throw this.corrupt(t,new Error("Session metadata is missing."));const r=a.sessionPaths,n=a.records,s=E(n),o=P(n),c=new Map;for(const p of o)for(const g of p.attachmentIds??[]){if(c.has(g))continue;const F=await this.readAttachment(t,g);F!==void 0&&c.set(g,{bytes:F,attachment:await this.readAttachmentMetadata(r,g)})}return{metadata:e,events:s,transcript:o,attachments:c}})}async appendJournalLocked(t,a){const e=await this.requirePaths(t);try{if(!await this.journalHealth.ensureValid(e.journalFile))throw new Error("Session metadata is missing.")}catch(n){throw this.corrupt(t,n)}const r=a.map(n=>{if(n.kind==="event"&&n.event.sessionId!==t)throw new u(l.SESSION_CORRUPTED,"Cannot append an event to a different session.",{category:"session",userMessage:"Session event data is invalid."});return n.kind==="event"?D(n.event):B(n.entry)});await Z(e.journalFile,r),await this.journalHealth.markValid(e.journalFile)}async readSessionJournal(t,a){const e=a??await this.requirePaths(t);try{const r=await N(e.journalFile),n=M(r);return await this.journalHealth.markValid(e.journalFile,n!==void 0),{sessionPaths:e,records:r,metadata:n}}catch(r){throw this.corrupt(t,r)}}async readAttachmentMetadata(t,a){try{return ht(await et(h.join(t.attachmentsDirectory,`${a}.json`),f.configFileBytes))}catch(e){if(w(e))return;throw e}}corrupt(t,a){return new u(l.SESSION_CORRUPTED,`Session metadata is corrupted: ${t}`,{category:"session",userMessage:"Session is corrupted and its metadata cannot be read.",cause:a})}}function nt(i){return b(i)}function st(i){return b(i)}function b(i){if(i===void 0||typeof i.goal!="object"||i.goal===null)return i;const t=i.goal;return t.status!=="active"?i:{...i,goal:{...t,status:"paused",updatedAt:new Date().toISOString()},reason:"Explicit resume is required after fork or import."}}async function k(i){try{return await d.access(i),!0}catch(t){if(w(t))return!1;throw t}}function R(i,t){const a=i?.storagePath;if(typeof a=="string"&&a.startsWith("attachments/")){const e=h.basename(a);if(e.length>0&&e!=="."&&e!=="..")return e}return`${t}.bin`}async function it(i,t,a){if(t===void 0)return`${a}.bin`;const e=h.basename(t).replace(/[^A-Za-z0-9._-]/gu,"_").slice(0,120)||`${a}.bin`,r=h.extname(e),n=r.length===0?e:e.slice(0,-r.length);for(let s=0;s<1e4;s+=1){const o=s===0?e:`${n}-${s}${r}`;if(!await k(h.join(i,o)))return o}throw new u(l.ATTACHMENT_TOO_LARGE,"Too many attachments share the same filename.",{category:"attachment",userMessage:"Too many attachments share the same filename."})}function ot(i){if(!z(i.metadata)||!Array.isArray(i.events)||!Array.isArray(i.transcript)||!Array.isArray(i.attachments))throw m("Session export file is invalid.");if(i.events.length>f.sessionEvents||i.transcript.length>f.sessionTranscriptEntries||i.attachments.length>f.sessionAttachments)throw m("Session export exceeds the supported entry limits.");for(const e of i.events){if(!I(e))throw m("Session export contains an invalid event.");if(q(e.type)&&!H(e.data))throw m("Session export contains an invalid goal event.");if(A(e.type)>256||A(e.timestamp)>128||A(e.sessionId)>128)throw m("Session event metadata is too large.")}const t=new Set;let a=0;for(const e of i.transcript){if(!C(e)||A(e.content)>f.sessionTextBytes)throw m("Session export contains an invalid transcript entry.");if(e.attachmentIds!==void 0&&(!Array.isArray(e.attachmentIds)||e.attachmentIds.some(r=>typeof r!="string"||!S.test(r))))throw m("Session transcript contains invalid attachment references.")}for(const e of i.attachments){if(!ct(e))throw m("Session export contains an invalid attachment.");const r=e.attachment;if(typeof r.id!="string"||!S.test(r.id)||t.has(r.id)||typeof r.name!="string"||typeof r.mimeType!="string"||typeof r.sizeBytes!="number"||!Number.isSafeInteger(r.sizeBytes)||r.sizeBytes<0||r.sizeBytes>f.maxAttachmentBytes||r.source!=="clipboard"&&r.source!=="file")throw m("Session export contains invalid attachment metadata.");const n=Buffer.from(e.dataBase64,"base64");if(n.toString("base64")!==e.dataBase64||n.byteLength!==r.sizeBytes)throw m("Session export contains an invalid attachment payload.");if(a+=n.byteLength,a>f.sessionAttachmentTotalBytes)throw m("Session export exceeds the total attachment limit.");t.add(r.id)}}function ct(i){if(!x(i)||!x(i.attachment)||typeof i.dataBase64!="string")return!1;const t=i.attachment;return typeof t.id=="string"&&typeof t.name=="string"&&typeof t.mimeType=="string"&&typeof t.sizeBytes=="number"&&Number.isSafeInteger(t.sizeBytes)&&(t.source==="clipboard"||t.source==="file")}function A(i){return Buffer.byteLength(i,"utf8")}function m(i){return new u(l.SESSION_CORRUPTED,i,{category:"session",userMessage:i})}function ht(i){if(typeof i!="object"||i===null)throw new Error("Invalid attachment metadata.");const t=i;if(typeof t.id!="string"||typeof t.name!="string"||typeof t.mimeType!="string"||typeof t.sizeBytes!="number"||t.source!=="clipboard"&&t.source!=="file")throw new Error("Invalid attachment metadata.");return i}export{kt as FileSessionStore};

package/dist/infrastructure/sessions/project-session-paths.d.ts

@@ -0,0 +1,17 @@
+import type { PlatformPaths } from '../platform/platform-paths.js';
+import { type HostPlatformContext } from '../platform/host-platform.js';
+export interface ProjectSessionPaths {
+    projectKey: string;
+    projectDirectory: string;
+    projectIndexFile: string;
+    sessionId: string;
+    journalFile: string;
+    sessionDirectory: string;
+    attachmentsDirectory: string;
+    subagentsDirectory: string;
+    lockFile: string;
+}
+export declare function isSafeProjectKey(value: string): boolean;
+export declare function createProjectKey(cwd: string, platform?: HostPlatformContext): string;
+export declare function resolveProjectSessionPaths(paths: PlatformPaths, cwd: string, sessionId: string): ProjectSessionPaths;
+export declare function resolveProjectSessionPathsForKey(paths: PlatformPaths, projectKey: string, sessionId: string): ProjectSessionPaths;

package/dist/infrastructure/sessions/project-session-paths.js

@@ -0,0 +1 @@
+import s from"node:crypto";import r from"node:path";import{detectHostPlatform as i}from"../platform/host-platform.js";function a(o){return/^[A-Za-z0-9._-]+--[0-9a-f]{12}$/u.test(o)}function l(o,n=i()){const e=r.resolve(o),t=n.isWindows?e.toLowerCase():e,c=s.createHash("sha256").update(t,"utf8").digest("hex").slice(0,12);return`${e.replaceAll("\\","-").replaceAll("/","-").replaceAll(":","-").replace(/[^A-Za-z0-9._-]+/gu,"-").replace(/-+/gu,"-").replace(/^-|-$/gu,"").slice(0,120)||"project"}--${c}`}function h(o,n,e){const t=l(n,o.platform);return p(o,t,e)}function p(o,n,e){if(!a(n))throw new Error("Invalid project session key.");const t=r.join(o.projectsDir,n),c=r.join(t,e);return{projectKey:n,projectDirectory:t,projectIndexFile:r.join(t,"index.json"),sessionId:e,journalFile:r.join(t,`${e}.jsonl`),sessionDirectory:c,attachmentsDirectory:r.join(c,"attachments"),subagentsDirectory:r.join(c,"subagents"),lockFile:r.join(c,"lock")}}export{l as createProjectKey,a as isSafeProjectKey,h as resolveProjectSessionPaths,p as resolveProjectSessionPathsForKey};

package/dist/infrastructure/sessions/session-constants.d.ts

@@ -0,0 +1,3 @@
+export declare const SESSION_ID_PATTERN: RegExp;
+export declare const ATTACHMENT_ID_PATTERN: RegExp;
+export declare const SESSION_LOCK_STALE_MS: number;

package/dist/infrastructure/sessions/session-constants.js

@@ -0,0 +1 @@
+const a=/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,S=/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/,T=3e5;export{S as ATTACHMENT_ID_PATTERN,a as SESSION_ID_PATTERN,T as SESSION_LOCK_STALE_MS};

package/dist/infrastructure/sessions/session-index.d.ts

@@ -0,0 +1,16 @@
+import type { SessionMetadata } from '../../domain/session/session.js';
+import type { PlatformPaths } from '../platform/platform-paths.js';
+interface ProjectSessionIndex {
+    projectKey: string;
+    sessions: Record<string, SessionMetadata>;
+}
+interface SessionLocatorIndex {
+    sessions: Record<string, string>;
+}
+export declare function readProjectSessionIndex(filePath: string, projectKey: string): Promise<ProjectSessionIndex>;
+export declare function writeProjectSessionIndex(filePath: string, projectKey: string, sessions: Readonly<Record<string, SessionMetadata>>): Promise<void>;
+export declare function readSessionLocator(paths: PlatformPaths): Promise<SessionLocatorIndex>;
+export declare function writeSessionLocator(paths: PlatformPaths, sessions: Readonly<Record<string, string>>): Promise<void>;
+export declare function indexProjectSession(paths: PlatformPaths, metadata: SessionMetadata, projectKey: string): Promise<void>;
+export declare function removeIndexedSession(paths: PlatformPaths, metadata: SessionMetadata, projectKey: string): Promise<void>;
+export {};

package/dist/infrastructure/sessions/session-index.js

@@ -0,0 +1,3 @@
+import c from"node:path";import{atomicWriteFile as p,withFileLock as a}from"../filesystem/atomic-file-store.js";import{isFileNotFound as l}from"../filesystem/fs-errors.js";import{resolveProjectSessionPathsForKey as w}from"./project-session-paths.js";import{readJsonFileBounded as x}from"../filesystem/bounded-json-reader.js";import{RESOURCE_LIMITS as d}from"../../domain/runtime/resource-limits.js";async function j(o,s){try{return m(await x(o,d.sessionIndexBytes),s)}catch(t){if(l(t))return{projectKey:s,sessions:{}};throw t}}async function y(o,s,t){const e=`${JSON.stringify({projectKey:s,sessions:t},null,2)}
+`;if(Buffer.byteLength(e,"utf8")>d.sessionIndexBytes)throw new Error("The project session index exceeds the supported size limit.");await p(o,e)}async function I(o){const s=c.join(o.projectsDir,"locator.json");try{return h(await x(s,d.sessionIndexBytes))}catch(t){if(l(t))return{sessions:{}};throw t}}function m(o,s){if(!r(o)||o.projectKey!==s||!r(o.sessions))throw new Error("Invalid project session index.");for(const t of Object.values(o.sessions))if(!F(t))throw new Error("Invalid project session metadata.");return{projectKey:s,sessions:o.sessions}}function h(o){if(!r(o)||!r(o.sessions)||Object.values(o.sessions).some(s=>typeof s!="string"))throw new Error("Invalid session locator index.");return{sessions:o.sessions}}function F(o){return r(o)?typeof o.id=="string"&&typeof o.projectFingerprint=="string"&&typeof o.cwd=="string"&&(typeof o.model=="string"||o.model===null)&&(typeof o.profile=="string"||o.profile===null)&&(o.status==="active"||o.status==="completed"||o.status==="failed"||o.status==="cancelled")&&typeof o.createdAt=="string"&&typeof o.updatedAt=="string":!1}function r(o){return typeof o=="object"&&o!==null&&!Array.isArray(o)}async function u(o,s){const t=`${JSON.stringify({sessions:s},null,2)}
+`;if(Buffer.byteLength(t,"utf8")>d.sessionIndexBytes)throw new Error("The session locator exceeds the supported size limit.");await p(c.join(o.projectsDir,"locator.json"),t)}async function b(o,s,t){const e=w(o,t,s.id);await a(e.projectIndexFile,async()=>{const n=await j(e.projectIndexFile,t);await y(e.projectIndexFile,t,{...n.sessions,[s.id]:s})});const f=c.join(o.projectsDir,"locator.json");await a(f,async()=>{const n=await I(o);await u(o,{...n.sessions,[s.id]:t})})}async function O(o,s,t){const e=w(o,t,s.id);await a(e.projectIndexFile,async()=>{const i={...(await j(e.projectIndexFile,t)).sessions};delete i[s.id],await y(e.projectIndexFile,t,i)});const f=c.join(o.projectsDir,"locator.json");await a(f,async()=>{const i={...(await I(o)).sessions};delete i[s.id],await u(o,i)})}export{b as indexProjectSession,j as readProjectSessionIndex,I as readSessionLocator,O as removeIndexedSession,y as writeProjectSessionIndex,u as writeSessionLocator};

package/dist/infrastructure/sessions/session-journal-health.d.ts

@@ -0,0 +1,7 @@
+/** Avoids reparsing an unchanged journal on every append while detecting external writes. */
+export declare class SessionJournalHealth {
+    private readonly entries;
+    ensureValid(filePath: string): Promise<boolean>;
+    markValid(filePath: string, hasMetadata?: boolean): Promise<void>;
+    forget(filePath: string): void;
+}

package/dist/infrastructure/sessions/session-journal-health.js

@@ -0,0 +1 @@
+import c from"node:fs/promises";import{latestMetadata as m,readJournal as u}from"./session-journal.js";class g{entries=new Map;async ensureValid(e){const s=await n(e),a=this.entries.get(e);if(a!==void 0&&o(a.signature,s))return a.hasMetadata;const r=await u(e),i=m(r)!==void 0;return this.entries.set(e,{signature:await n(e),hasMetadata:i}),i}async markValid(e,s=!0){this.entries.set(e,{signature:await n(e),hasMetadata:s})}forget(e){this.entries.delete(e)}}async function n(t){const e=await c.stat(t);return{size:e.size,mtimeMs:e.mtimeMs,ctimeMs:e.ctimeMs}}function o(t,e){return t.size===e.size&&t.mtimeMs===e.mtimeMs&&t.ctimeMs===e.ctimeMs}export{g as SessionJournalHealth};

package/dist/infrastructure/sessions/session-journal.d.ts

@@ -0,0 +1,22 @@
+import type { SessionEvent, SessionMetadata, TranscriptEntry } from '../../domain/session/session.js';
+export type SessionJournalRecord = {
+    recordType: 'metadata';
+    metadata: SessionMetadata;
+} | {
+    recordType: 'event';
+    event: SessionEvent;
+} | {
+    recordType: 'transcript';
+    entry: TranscriptEntry;
+};
+export declare function metadataRecord(metadata: SessionMetadata): SessionJournalRecord;
+export declare function eventRecord(event: SessionEvent): SessionJournalRecord;
+export declare function transcriptRecord(entry: TranscriptEntry): SessionJournalRecord;
+export declare function appendJournalRecord(filePath: string, record: SessionJournalRecord): Promise<void>;
+/** Appends one crash-consistent physical JSONL record for an ordered logical batch. */
+export declare function appendJournalRecords(filePath: string, records: readonly SessionJournalRecord[]): Promise<void>;
+export declare function readJournal(filePath: string): Promise<readonly SessionJournalRecord[]>;
+export declare function latestMetadata(records: readonly SessionJournalRecord[]): SessionMetadata | undefined;
+export declare function journalEvents(records: readonly SessionJournalRecord[]): readonly SessionEvent[];
+export declare function journalTranscript(records: readonly SessionJournalRecord[]): readonly TranscriptEntry[];
+export declare function repairJournal(filePath: string): Promise<number>;

package/dist/infrastructure/sessions/session-journal.js

@@ -0,0 +1,6 @@
+import a from"node:fs/promises";import T from"node:path";import{isFileNotFound as s}from"../filesystem/fs-errors.js";import{atomicWriteFile as g}from"../filesystem/atomic-file-store.js";import{isRecord as u,isSessionEvent as x,isSessionMetadata as J,isTranscriptEntry as v}from"../../domain/session/session-schema.js";import{RESOURCE_LIMITS as p}from"../../domain/runtime/resource-limits.js";function L(e){return{recordType:"metadata",metadata:e}}function M(e){return{recordType:"event",event:e}}function N(e){return{recordType:"transcript",entry:e}}async function O(e,r){await f(e,r)}async function A(e,r){r.length!==0&&await f(e,r.length===1?r[0]:{recordType:"batch",records:r})}async function f(e,r){await a.mkdir(T.dirname(e),{recursive:!0});const t=`${JSON.stringify(r)}
+`;await E(e,Buffer.byteLength(t,"utf8")),await a.appendFile(e,t,{encoding:"utf8",mode:384})}async function U(e){let r;try{await z(e),r=await a.readFile(e,"utf8")}catch(t){if(s(t))return[];throw t}try{return l(r)}catch(t){if(!R(r))throw t;return await new Promise(o=>setImmediate(o)),l(await a.readFile(e,"utf8"))}}function l(e){return e.split(/\r?\n/u).filter(Boolean).flatMap(r=>m(JSON.parse(r)))}function R(e){const r=e.replace(/\r\n/gu,`
+`);return r.length>0&&!r.endsWith(`
+`)}async function z(e){if((await a.stat(e)).size>p.sessionJournalBytes)throw new Error("Session journal exceeds the supported size limit. Repair or export the session before resuming it.")}async function E(e,r){let t=0;try{t=(await a.stat(e)).size}catch(o){if(!s(o))throw o}if(t+r>p.sessionJournalBytes)throw new Error("Session journal exceeds the supported size limit. Compact or export the session before adding more data.")}function W(e){return e.filter(r=>r.recordType==="metadata").at(-1)?.metadata}function $(e){return e.filter(r=>r.recordType==="event").map(r=>r.event)}function k(e){return e.filter(r=>r.recordType==="transcript").map(r=>r.entry)}async function _(e){const r=await a.stat(e).catch(n=>{if(!s(n))throw n});if(r===void 0)return 0;if(r.size>p.sessionJournalBytes)throw new Error("Session journal exceeds the supported size limit. Repair cannot process an oversized journal.");let t;try{t=await a.readFile(e,"utf8")}catch(n){if(s(n))return 0;throw n}const o=t.split(/\r?\n/u),c=[];let d=0;for(let n=0;n<o.length;n+=1){const i=o[n]?.trim();if(!(i===void 0||i.length===0))try{m(JSON.parse(i)),c.push(i)}catch(w){if(!o.slice(n+1).every(h=>h.trim().length===0))throw w;d+=1}}return d>0&&await g(e,c.length===0?"":`${c.join(`
+`)}
+`),d}function m(e){if(u(e)&&e.recordType==="batch"){const r=e.records;if(!Array.isArray(r)||r.length===0)throw new Error("Invalid session journal batch.");return r.map(y)}return[y(e)]}function y(e){if(!u(e))throw new Error("Invalid session journal record.");const r=e;if(r.recordType==="metadata"&&J(r.metadata))return{recordType:"metadata",metadata:r.metadata};if(r.recordType==="event"&&x(r.event))return{recordType:"event",event:r.event};if(r.recordType==="transcript"&&v(r.entry))return{recordType:"transcript",entry:r.entry};throw new Error("Unsupported or malformed session journal record.")}export{O as appendJournalRecord,A as appendJournalRecords,M as eventRecord,$ as journalEvents,k as journalTranscript,W as latestMetadata,L as metadataRecord,U as readJournal,_ as repairJournal,N as transcriptRecord};

package/dist/infrastructure/sessions/subagent-journal-store.d.ts

@@ -0,0 +1,28 @@
+import type { PlatformPaths } from '../platform/platform-paths.js';
+import type { SubagentResult } from '../../domain/orchestration/subagent.js';
+export type SubagentJournalRecord = {
+    recordType: 'created';
+    id: string;
+    displayName: string;
+    task: string;
+    mode: 'research' | 'worker';
+    model: string;
+    timestamp: string;
+} | {
+    recordType: 'started';
+    id: string;
+    displayName: string;
+    mode: 'research' | 'worker';
+    model: string;
+    timestamp: string;
+} | {
+    recordType: 'completed' | 'completed_with_warning' | 'failed' | 'cancelled';
+    result: SubagentResult;
+    timestamp: string;
+};
+/** Persists bounded child-agent lifecycle records beside the parent session. */
+export declare class SubagentJournalStore {
+    private readonly paths;
+    constructor(paths: PlatformPaths);
+    append(parentSessionId: string, cwd: string, record: SubagentJournalRecord): Promise<void>;
+}

package/dist/infrastructure/sessions/subagent-journal-store.js

@@ -0,0 +1,2 @@
+import s from"node:fs/promises";import a from"node:path";import{resolveProjectSessionPaths as u}from"./project-session-paths.js";class m{paths;constructor(e){this.paths=e}async append(e,r,o){c(e);const n=u(this.paths,r,e),i=a.join(n.subagentsDirectory,`${f(o)}.jsonl`);await s.mkdir(n.subagentsDirectory,{recursive:!0,mode:448}),await d(i,o)}}function c(t){if(!/^[A-Za-z0-9._-]{1,128}$/u.test(t))throw new Error("Invalid parent session id for subagent journal.")}async function d(t,e){const r=`${JSON.stringify(e)}
+`;if(Buffer.byteLength(r,"utf8")>32*1024)throw new Error("Subagent journal record exceeds the configured limit.");await s.appendFile(t,r,{encoding:"utf8",mode:384})}function f(t){return t.recordType==="created"||t.recordType==="started"?t.id:t.result.id}export{m as SubagentJournalStore};

package/dist/infrastructure/shell/shell-tool-executor.d.ts

@@ -0,0 +1,21 @@
+import type { ToolDefinition } from '@lotagate/sdk';
+import type { ToolExecutionContext, ToolExecutor, ToolInfo, ToolResult } from '@lotagate/agent-sdk';
+import type { ToolActivityObserver } from '../../ports/tool-activity.js';
+import { type HostPlatformContext } from '../platform/host-platform.js';
+import type { Logger } from '../../ports/logger.js';
+export type ShellToolEnvironment = 'host' | 'linux-guest';
+/** Exposes the same shell capability definitions to runtime and context accounting. */
+export declare function shellToolDefinitions(environment?: ShellToolEnvironment): readonly ToolDefinition[];
+export declare class ShellToolExecutor implements ToolExecutor {
+    private readonly options;
+    constructor(options?: {
+        onActivity?: ToolActivityObserver;
+        readOnly?: boolean;
+        platform?: HostPlatformContext;
+        logger?: Logger;
+        toolEnvironment?: ShellToolEnvironment;
+    });
+    listTools(): readonly ToolDefinition[];
+    getToolInfo(toolName: string): ToolInfo | undefined;
+    execute(toolName: string, input: Record<string, unknown>, context: ToolExecutionContext): Promise<ToolResult>;
+}

package/dist/infrastructure/shell/shell-tool-executor.js

@@ -0,0 +1,2 @@
+import{resolveReadOnlyExecutable as y,readOnlyArguments as E}from"../platform/read-only-executable.js";import{resolveWorkspacePath as p}from"../filesystem/path-resolver.js";import{isReadOnlyShellRequest as b}from"../../application/security/tool-risk-classifier.js";import{detectHostPlatform as S}from"../platform/host-platform.js";import{normalizePowerShellScriptInput as T,execPlatformCommand as v}from"../platform/host-process.js";import{formatShellCommandForDisplay as P}from"../../application/agent/tool-display.js";import{withToolExecutionLogging as C}from"../observability/tool-execution-logger.js";import{RESOURCE_LIMITS as c}from"../../domain/runtime/resource-limits.js";const h=[{type:"function",function:{name:"shell.exec",description:"Execute one program with structured arguments inside the trusted workspace. Shell interpretation is disabled. When the runtime platform is Windows, prefer powershell.exe with script for operating-system work; use direct command and args for project executables. On other platforms, follow the runtime shell and executable availability. Keep the executable in command and pass arguments separately in args (for example, git status --short means command git and args [status, --short]). The script field is a complete PowerShell script, is valid only with powershell.exe or pwsh.exe, and cannot be combined with args. Inspect stdout, stderr, exit code, and the resulting state before reporting success.",parameters:{type:"object",properties:{command:{type:"string",description:"Executable name or path."},args:{type:"array",items:{type:"string"},description:"Structured process arguments."},script:{type:"string",description:"Optional complete PowerShell script. Use only with powershell.exe or pwsh.exe; passed as one -Command argument."},cwd:{type:"string",description:"Optional workspace-relative working directory."},timeoutMs:{type:"number",description:"Timeout between 100 milliseconds and the configured runtime maximum."}},required:["command"],additionalProperties:!1}}}],k="Process completed successfully with no output.";function O(o="host"){return o==="host"?h:h.map(t=>"function"in t?{...t,function:{...t.function,description:'Execute one Linux program with structured arguments inside the isolated Desktop WSL2 guest. Use Linux executables and workspace-relative paths; never invoke powershell.exe, cmd.exe, wsl.exe, Windows paths, or host interop. Keep command and args separate. For multiple shell operations, use bash with args ["-lc", "..."] only when a shell script is necessary. Inspect stdout, stderr, exit code, and returned data before continuing.'}}:t)}class B{options;constructor(t={}){this.options=t}listTools(){return O(this.options.toolEnvironment)}getToolInfo(t){return t==="shell.exec"?{toolName:t,source:"shell",executorId:"local-shell"}:void 0}async execute(t,l,i){return t!=="shell.exec"?{content:`Unknown shell tool: ${t}`,isError:!0}:C(this.options.logger,{toolName:t,source:"shell",context:i},async()=>{if(typeof l.command!="string"||l.command.trim().length===0)return{content:"shell.exec requires a command.",isError:!0};const a=this.options.platform??S();let r;try{r=T(l,a,{allowNonWindows:this.options.toolEnvironment!=="linux-guest"})}catch(n){return{content:n instanceof Error?n.message:"Invalid shell.exec PowerShell script.",isError:!0}}const e=r.args===void 0?[]:r.args;if(!Array.isArray(e)||e.some(n=>typeof n!="string"))return{content:"shell.exec args must be an array of strings.",isError:!0};const s=await b(r.command,e,i,p,r.cwd,a);if(this.options.readOnly&&!s)return{content:"This subagent is limited to read-only shell commands inside the trusted workspace.",isError:!0};const g=this.options.toolEnvironment==="linux-guest"?c.guestShellTimeoutMs:c.hostShellTimeoutMs,w=typeof r.timeoutMs=="number"?Math.min(Math.max(r.timeoutMs,100),g):c.defaultShellTimeoutMs,u=await p(r.cwd??".",i),m=s?await y(r.command,i.workspaceRoot??u,a):void 0;if(s&&m===void 0)return{content:"Read-only executable is no longer available.",isError:!0};const x=P(r.command,e),d=this.options.onActivity?.start({key:`${i.runId}:shell.exec`,toolName:"shell.exec",source:"shell",label:x});try{const n=await M(m??r.command,s?E(r.command,e):e,u,w,i,a);return d?.complete(n.isError===!0),n}catch(n){throw d?.complete(!0),n}})}}async function M(o,t,l,i,a,r){try{const e=await v(o,t,r,{cwd:l,timeoutMs:i,maxBufferBytes:a.maxResultBytes,rejectOnNonZero:!1,...a.signal===void 0?{}:{signal:a.signal}}),s=`${e.stdout}${e.stderr}${e.exitCode===0?"":`
+Process exited with code ${String(e.exitCode)}.`}`;return{content:f(s||k),isError:e.exitCode!==0,metadata:{exitCode:e.exitCode}}}catch(e){const s=e instanceof Error?e.message:"Process execution failed.";return{content:f(s),isError:!0,metadata:{errorCode:I(s)}}}}function I(o){return/timed out/iu.test(o)?"timeout":/cancelled/iu.test(o)?"cancelled":/output exceeded/iu.test(o)?"output_limit":"process_failure"}function f(o){return o.replace(/Bearer\s+[^\s]+/gi,"Bearer [REDACTED]").replace(/sk-[A-Za-z0-9_-]{8,}/g,"[REDACTED]")}export{B as ShellToolExecutor,O as shellToolDefinitions};