@lydia-agent/core 0.1.0 → 0.1.1

package/dist/index.cjs

@@ -713,17 +713,20 @@ var StrategyRegistry = class {
 
 // src/strategy/approval-service.ts
 var os2 = __toESM(require("os"), 1);
-var path2 = __toESM(require("path"), 1);
+var path3 = __toESM(require("path"), 1);
 
 // src/memory/manager.ts
 var import_better_sqlite3 = __toESM(require("better-sqlite3"), 1);
 var import_node_events = require("events");
+var fs2 = __toESM(require("fs"), 1);
+var path2 = __toESM(require("path"), 1);
 var MemoryManager = class extends import_node_events.EventEmitter {
   db;
   checkpointTtlMs;
   observationFrameTtlMs;
   constructor(dbPath, options = {}) {
     super();
+    fs2.mkdirSync(path2.dirname(dbPath), { recursive: true });
     this.db = new import_better_sqlite3.default(dbPath);
     this.checkpointTtlMs = options.checkpointTtlMs ?? 24 * 60 * 60 * 1e3;
     this.observationFrameTtlMs = options.observationFrameTtlMs ?? 24 * 7 * 60 * 60 * 1e3;
@@ -1607,7 +1610,7 @@ var StrategyApprovalService = class {
     if (memoryManager) {
       this.memory = memoryManager;
     } else {
-      const dbPath = path2.join(os2.homedir(), ".lydia", "memory.db");
+      const dbPath = path3.join(os2.homedir(), ".lydia", "memory.db");
       this.memory = new MemoryManager(dbPath);
     }
     this.configLoader = configLoader || new ConfigLoader();
@@ -1668,7 +1671,7 @@ var StrategyApprovalService = class {
 };
 
 // src/strategy/shadow-router.ts
-var path3 = __toESM(require("path"), 1);
+var path4 = __toESM(require("path"), 1);
 var os3 = __toESM(require("os"), 1);
 var ShadowRouter = class {
   memory;
@@ -1678,7 +1681,7 @@ var ShadowRouter = class {
     if (memoryManager) {
       this.memory = memoryManager;
     } else {
-      const dbPath = path3.join(os3.homedir(), ".lydia", "memory.db");
+      const dbPath = path4.join(os3.homedir(), ".lydia", "memory.db");
       this.memory = new MemoryManager(dbPath);
     }
     this.registry = strategyRegistry || new StrategyRegistry();
@@ -1949,39 +1952,39 @@ var StrategyReviewer = class {
 };
 
 // src/strategy/branch-manager.ts
-var fs2 = __toESM(require("fs/promises"), 1);
-var path4 = __toESM(require("path"), 1);
+var fs3 = __toESM(require("fs/promises"), 1);
+var path5 = __toESM(require("path"), 1);
 var os4 = __toESM(require("os"), 1);
 var import_yaml2 = require("yaml");
 var StrategyBranchManager = class {
   baseDir;
   constructor(baseDir) {
-    this.baseDir = baseDir || path4.join(os4.homedir(), ".lydia", "strategies");
+    this.baseDir = baseDir || path5.join(os4.homedir(), ".lydia", "strategies");
   }
   async init() {
-    await fs2.mkdir(this.baseDir, { recursive: true });
-    await fs2.mkdir(path4.join(this.baseDir, "branches"), { recursive: true });
-    await fs2.mkdir(path4.join(this.baseDir, "archive"), { recursive: true });
+    await fs3.mkdir(this.baseDir, { recursive: true });
+    await fs3.mkdir(path5.join(this.baseDir, "branches"), { recursive: true });
+    await fs3.mkdir(path5.join(this.baseDir, "archive"), { recursive: true });
   }
   async listBranches() {
-    const branchesDir = path4.join(this.baseDir, "branches");
+    const branchesDir = path5.join(this.baseDir, "branches");
     try {
-      const entries = await fs2.readdir(branchesDir, { withFileTypes: true });
+      const entries = await fs3.readdir(branchesDir, { withFileTypes: true });
       const branches = [];
       for (const entry of entries) {
         if (!entry.isDirectory()) continue;
       }
-      const files = await fs2.readdir(branchesDir);
+      const files = await fs3.readdir(branchesDir);
       for (const file of files) {
         if (!file.endsWith(".yml")) continue;
-        const content = await fs2.readFile(path4.join(branchesDir, file), "utf-8");
+        const content = await fs3.readFile(path5.join(branchesDir, file), "utf-8");
         try {
           const strategy = StrategySchema.parse((0, import_yaml2.parse)(content));
           branches.push({
             name: strategy.metadata.id,
             // ID is used as branch name effectively
             version: strategy.metadata.version,
-            path: path4.join(branchesDir, file),
+            path: path5.join(branchesDir, file),
             parent: strategy.metadata.inheritFrom,
             createdAt: Date.now()
             // We might want to store this in metadata later
@@ -1997,8 +2000,8 @@ var StrategyBranchManager = class {
     }
   }
   async createBranch(sourceStrategy, newBranchName, modifications) {
-    const targetDir = path4.join(this.baseDir, "branches");
-    await fs2.mkdir(targetDir, { recursive: true });
+    const targetDir = path5.join(this.baseDir, "branches");
+    await fs3.mkdir(targetDir, { recursive: true });
     const newStrategy = {
       ...sourceStrategy,
       ...modifications,
@@ -2012,14 +2015,14 @@ var StrategyBranchManager = class {
         ...modifications.metadata
       }
     };
-    const filePath = path4.join(targetDir, `${newBranchName}.yml`);
-    await fs2.writeFile(filePath, (0, import_yaml2.stringify)(newStrategy), "utf-8");
+    const filePath = path5.join(targetDir, `${newBranchName}.yml`);
+    await fs3.writeFile(filePath, (0, import_yaml2.stringify)(newStrategy), "utf-8");
     return newStrategy;
   }
   async getBranch(branchName) {
-    const filePath = path4.join(this.baseDir, "branches", `${branchName}.yml`);
+    const filePath = path5.join(this.baseDir, "branches", `${branchName}.yml`);
     try {
-      const content = await fs2.readFile(filePath, "utf-8");
+      const content = await fs3.readFile(filePath, "utf-8");
       return StrategySchema.parse((0, import_yaml2.parse)(content));
     } catch {
       return null;
@@ -2030,12 +2033,12 @@ var StrategyBranchManager = class {
     if (!branch) throw new Error(`Branch ${branchName} not found`);
     const parentId = branch.metadata.inheritFrom;
     if (!parentId) throw new Error("Branch has no parent to merge into");
-    const files = await fs2.readdir(this.baseDir);
+    const files = await fs3.readdir(this.baseDir);
     let parentFile = null;
     for (const file of files) {
       if (file === "branches" || file === "archive") continue;
       try {
-        const content = await fs2.readFile(path4.join(this.baseDir, file), "utf-8");
+        const content = await fs3.readFile(path5.join(this.baseDir, file), "utf-8");
         const data = (0, import_yaml2.parse)(content);
         if (data.metadata?.id === parentId) {
           parentFile = file;
@@ -2047,18 +2050,18 @@ var StrategyBranchManager = class {
     if (!parentFile) {
       throw new Error(`Parent strategy ${parentId} not found in ${this.baseDir}`);
     }
-    const parentPath = path4.join(this.baseDir, parentFile);
-    await fs2.copyFile(parentPath, path4.join(this.baseDir, "archive", `${parentId}-${Date.now()}.bak.yml`));
+    const parentPath = path5.join(this.baseDir, parentFile);
+    await fs3.copyFile(parentPath, path5.join(this.baseDir, "archive", `${parentId}-${Date.now()}.bak.yml`));
     const start = Date.now();
-    const branchContent = await fs2.readFile(path4.join(this.baseDir, "branches", `${branchName}.yml`), "utf-8");
-    await fs2.writeFile(parentPath, branchContent, "utf-8");
+    const branchContent = await fs3.readFile(path5.join(this.baseDir, "branches", `${branchName}.yml`), "utf-8");
+    await fs3.writeFile(parentPath, branchContent, "utf-8");
     await this.archiveBranch(branchName);
   }
   async archiveBranch(branchName) {
-    const srcPath = path4.join(this.baseDir, "branches", `${branchName}.yml`);
-    const destPath = path4.join(this.baseDir, "archive", `${branchName}-${Date.now()}.yml`);
+    const srcPath = path5.join(this.baseDir, "branches", `${branchName}.yml`);
+    const destPath = path5.join(this.baseDir, "archive", `${branchName}-${Date.now()}.yml`);
     try {
-      await fs2.rename(srcPath, destPath);
+      await fs3.rename(srcPath, destPath);
     } catch (e) {
       console.error(`Failed to archive branch ${branchName}:`, e);
       throw e;
@@ -2321,11 +2324,11 @@ var SkillRegistry = class {
 };
 
 // src/skills/loader.ts
-var fs3 = __toESM(require("fs/promises"), 1);
-var path5 = __toESM(require("path"), 1);
+var fs4 = __toESM(require("fs/promises"), 1);
+var path6 = __toESM(require("path"), 1);
 var os5 = __toESM(require("os"), 1);
 var import_node_url2 = require("url");
-var __dirname2 = path5.dirname((0, import_node_url2.fileURLToPath)(importMetaUrl));
+var __dirname2 = path6.dirname((0, import_node_url2.fileURLToPath)(importMetaUrl));
 var SkillLoader = class {
   registry;
   /** Ordered list of directories to scan for skills */
@@ -2340,13 +2343,13 @@ var SkillLoader = class {
   getDirectories(extraDirs = []) {
     return [
       // 1. Built-in skills (relative to this file in dist/skills)
-      path5.resolve(__dirname2, "../../skills"),
+      path6.resolve(__dirname2, "../../skills"),
       // 1.5 Built-in skills in source tree (dev mode)
-      path5.resolve(__dirname2, "../skills"),
+      path6.resolve(__dirname2, "../skills"),
       // 2. User global skills
-      path5.join(os5.homedir(), ".lydia", "skills"),
+      path6.join(os5.homedir(), ".lydia", "skills"),
       // 3. Project local skills
-      path5.join(process.cwd(), ".lydia", "skills"),
+      path6.join(process.cwd(), ".lydia", "skills"),
       // 4. Extra directories from config
       ...extraDirs
     ];
@@ -2367,11 +2370,11 @@ var SkillLoader = class {
    */
   async loadMetadataFromDirectory(dirPath) {
     try {
-      const stats = await fs3.stat(dirPath);
+      const stats = await fs4.stat(dirPath);
       if (!stats.isDirectory()) return;
-      const entries = await fs3.readdir(dirPath, { withFileTypes: true });
+      const entries = await fs4.readdir(dirPath, { withFileTypes: true });
       for (const entry of entries) {
-        const fullPath = path5.join(dirPath, entry.name);
+        const fullPath = path6.join(dirPath, entry.name);
         if (entry.isDirectory()) {
           await this.loadMetadataFromDirectory(fullPath);
         } else if (entry.isFile() && entry.name.endsWith(".md")) {
@@ -2387,7 +2390,7 @@ var SkillLoader = class {
    */
   async loadSkillMeta(filePath) {
     try {
-      const content = await fs3.readFile(filePath, "utf-8");
+      const content = await fs4.readFile(filePath, "utf-8");
       if (content.startsWith("---")) {
         const meta = SkillParser.parseMeta(content, filePath);
         this.registry.register(meta);
@@ -2408,7 +2411,7 @@ var SkillLoader = class {
     const meta = this.registry.get(name);
     if (!meta?.path) return null;
     try {
-      const fileContent = await fs3.readFile(meta.path, "utf-8");
+      const fileContent = await fs4.readFile(meta.path, "utf-8");
       const skill = SkillParser.parse(fileContent, meta.path);
       return skill.content;
     } catch (error) {
@@ -2424,7 +2427,7 @@ var SkillLoader = class {
     const meta = this.registry.get(name);
     if (!meta?.path) return null;
     try {
-      const fileContent = await fs3.readFile(meta.path, "utf-8");
+      const fileContent = await fs4.readFile(meta.path, "utf-8");
       return SkillParser.parse(fileContent, meta.path);
     } catch (error) {
       console.warn(`Failed to load full skill "${name}":`, error);
@@ -2437,7 +2440,7 @@ var SkillLoader = class {
    */
   async reloadSkillMeta(filePath) {
     try {
-      const content = await fs3.readFile(filePath, "utf-8");
+      const content = await fs4.readFile(filePath, "utf-8");
       if (content.startsWith("---")) {
         const meta = SkillParser.parseMeta(content, filePath);
         this.registry.register(meta);
@@ -2452,9 +2455,9 @@ var SkillLoader = class {
 
 // src/skills/watcher.ts
 var import_node_events2 = require("events");
-var fs4 = __toESM(require("fs"), 1);
+var fs5 = __toESM(require("fs"), 1);
 var fsPromises = __toESM(require("fs/promises"), 1);
-var path6 = __toESM(require("path"), 1);
+var path7 = __toESM(require("path"), 1);
 var SkillWatcher = class extends import_node_events2.EventEmitter {
   constructor(directories, registry, loader, options) {
     super();
@@ -2464,7 +2467,7 @@ var SkillWatcher = class extends import_node_events2.EventEmitter {
     this.debounceMs = options?.debounceMs ?? 300;
     for (const skill of this.registry.list()) {
       if (skill.path) {
-        this.pathToName.set(path6.resolve(skill.path), skill.name);
+        this.pathToName.set(path7.resolve(skill.path), skill.name);
       }
     }
   }
@@ -2503,12 +2506,12 @@ var SkillWatcher = class extends import_node_events2.EventEmitter {
   }
   watchDirectory(dirPath) {
     try {
-      if (!fs4.existsSync(dirPath) || !fs4.statSync(dirPath).isDirectory()) {
+      if (!fs5.existsSync(dirPath) || !fs5.statSync(dirPath).isDirectory()) {
         return;
       }
-      const watcher = fs4.watch(dirPath, { recursive: true }, (eventType, filename) => {
+      const watcher = fs5.watch(dirPath, { recursive: true }, (eventType, filename) => {
         if (!filename) return;
-        const fullPath = path6.resolve(dirPath, filename);
+        const fullPath = path7.resolve(dirPath, filename);
         if (!filename.endsWith(".md")) return;
         this.handleFileChange(fullPath, eventType);
       });
@@ -2520,7 +2523,7 @@ var SkillWatcher = class extends import_node_events2.EventEmitter {
     }
   }
   handleFileChange(filePath, _eventType) {
-    const resolvedPath = path6.resolve(filePath);
+    const resolvedPath = path7.resolve(filePath);
     const existingTimer = this.debounceTimers.get(resolvedPath);
     if (existingTimer) {
       clearTimeout(existingTimer);
@@ -2577,7 +2580,7 @@ var ShellServer = class {
     this.server = new import_server.Server(
       {
         name: "internal-shell",
-        version: "0.1.0"
+        version: "0.1.1"
       },
       {
         capabilities: {
@@ -2644,18 +2647,18 @@ ${error.stderr || ""}`
 // src/mcp/servers/filesystem.ts
 var import_server2 = require("@modelcontextprotocol/sdk/server/index.js");
 var import_types4 = require("@modelcontextprotocol/sdk/types.js");
-var fs5 = __toESM(require("fs/promises"), 1);
-var path7 = __toESM(require("path"), 1);
+var fs6 = __toESM(require("fs/promises"), 1);
+var path8 = __toESM(require("path"), 1);
 var import_node_zlib = require("zlib");
 var FileSystemServer = class {
   server;
   allowedRootDir;
   constructor(allowedRootDir = process.cwd()) {
-    this.allowedRootDir = path7.resolve(allowedRootDir);
+    this.allowedRootDir = path8.resolve(allowedRootDir);
     this.server = new import_server2.Server(
       {
         name: "internal-fs",
-        version: "0.1.0"
+        version: "0.1.1"
       },
       {
         capabilities: {
@@ -2666,7 +2669,7 @@ var FileSystemServer = class {
     this.setupHandlers();
   }
   validatePath(requestedPath) {
-    const resolvedPath = path7.resolve(this.allowedRootDir, requestedPath);
+    const resolvedPath = path8.resolve(this.allowedRootDir, requestedPath);
     const root = process.platform === "win32" ? this.allowedRootDir.toLowerCase() : this.allowedRootDir;
     const target = process.platform === "win32" ? resolvedPath.toLowerCase() : resolvedPath;
     if (!target.startsWith(root)) {
@@ -2788,22 +2791,22 @@ var FileSystemServer = class {
         switch (request.params.name) {
           case "fs_read_file": {
             const filePath = this.validatePath(args.path);
-            const content = await fs5.readFile(filePath, "utf-8");
+            const content = await fs6.readFile(filePath, "utf-8");
             return {
               content: [{ type: "text", text: content }]
             };
           }
           case "fs_write_file": {
             const filePath = this.validatePath(args.path);
-            await fs5.mkdir(path7.dirname(filePath), { recursive: true });
-            await fs5.writeFile(filePath, args.content, "utf-8");
+            await fs6.mkdir(path8.dirname(filePath), { recursive: true });
+            await fs6.writeFile(filePath, args.content, "utf-8");
             return {
               content: [{ type: "text", text: `Successfully wrote to ${filePath}` }]
             };
           }
           case "fs_list_directory": {
             const dirPath = this.validatePath(args.path);
-            const entries = await fs5.readdir(dirPath, { withFileTypes: true });
+            const entries = await fs6.readdir(dirPath, { withFileTypes: true });
             const list = entries.map((e) => `${e.isDirectory() ? "[DIR]" : "[FILE]"} ${e.name}`).join("\n");
             return {
               content: [{ type: "text", text: list }]
@@ -2814,8 +2817,8 @@ var FileSystemServer = class {
             const toPath = this.validatePath(args.to);
             const overwrite = Boolean(args.overwrite);
             await this.ensureDestWritable(toPath, overwrite);
-            await fs5.mkdir(path7.dirname(toPath), { recursive: true });
-            await fs5.copyFile(fromPath, toPath);
+            await fs6.mkdir(path8.dirname(toPath), { recursive: true });
+            await fs6.copyFile(fromPath, toPath);
             return {
               content: [{ type: "text", text: `Successfully copied ${fromPath} -> ${toPath}` }]
             };
@@ -2825,7 +2828,7 @@ var FileSystemServer = class {
             const toPath = this.validatePath(args.to);
             const overwrite = Boolean(args.overwrite);
             await this.ensureDestWritable(toPath, overwrite);
-            await fs5.mkdir(path7.dirname(toPath), { recursive: true });
+            await fs6.mkdir(path8.dirname(toPath), { recursive: true });
             await this.moveFile(fromPath, toPath);
             return {
               content: [{ type: "text", text: `Successfully moved ${fromPath} -> ${toPath}` }]
@@ -2847,9 +2850,9 @@ var FileSystemServer = class {
             const overwrite = Boolean(args.overwrite);
             const maxBytes = Math.max(1024, Number(args.maxBytes) || 20 * 1024 * 1024);
             await this.ensureDestWritable(outputPath, overwrite);
-            await fs5.mkdir(path7.dirname(outputPath), { recursive: true });
+            await fs6.mkdir(path8.dirname(outputPath), { recursive: true });
             const bundle = await this.createArchiveBundle(sourcePath, maxBytes);
-            await fs5.writeFile(outputPath, bundle.buffer);
+            await fs6.writeFile(outputPath, bundle.buffer);
             return {
               content: [{ type: "text", text: `Successfully archived ${bundle.fileCount} file(s) to ${outputPath}` }]
             };
@@ -2859,7 +2862,7 @@ var FileSystemServer = class {
             const outputDir = this.validatePath(args.outputDir);
             const overwrite = Boolean(args.overwrite);
             const maxBytes = Math.max(1024, Number(args.maxBytes) || 20 * 1024 * 1024);
-            const archiveBuffer = await fs5.readFile(archivePath);
+            const archiveBuffer = await fs6.readFile(archivePath);
             const bundle = this.parseArchiveBundle(archiveBuffer);
             const written = await this.extractArchiveBundle(bundle, outputDir, overwrite, maxBytes);
             return {
@@ -2879,11 +2882,11 @@ var FileSystemServer = class {
   }
   async ensureDestWritable(destPath, overwrite) {
     try {
-      await fs5.access(destPath);
+      await fs6.access(destPath);
       if (!overwrite) {
         throw new Error(`Destination already exists: ${destPath}. Pass overwrite=true to replace.`);
       }
-      await fs5.rm(destPath, { recursive: true, force: true });
+      await fs6.rm(destPath, { recursive: true, force: true });
     } catch (error) {
       if (error?.code === "ENOENT") return;
       throw error;
@@ -2891,11 +2894,11 @@ var FileSystemServer = class {
   }
   async moveFile(fromPath, toPath) {
     try {
-      await fs5.rename(fromPath, toPath);
+      await fs6.rename(fromPath, toPath);
     } catch (error) {
       if (error?.code !== "EXDEV") throw error;
-      await fs5.copyFile(fromPath, toPath);
-      await fs5.unlink(fromPath);
+      await fs6.copyFile(fromPath, toPath);
+      await fs6.unlink(fromPath);
     }
   }
   async searchByName(basePath, pattern, maxResults) {
@@ -2905,10 +2908,10 @@ var FileSystemServer = class {
     while (queue.length > 0 && results.length < maxResults) {
       const current = queue.shift();
       if (!current) break;
-      const entries = await fs5.readdir(current, { withFileTypes: true });
+      const entries = await fs6.readdir(current, { withFileTypes: true });
       for (const entry of entries) {
-        const fullPath = path7.join(current, entry.name);
-        const relative3 = path7.relative(this.allowedRootDir, fullPath) || ".";
+        const fullPath = path8.join(current, entry.name);
+        const relative3 = path8.relative(this.allowedRootDir, fullPath) || ".";
         if (matcher(entry.name)) {
           results.push(`${entry.isDirectory() ? "[DIR]" : "[FILE]"} ${relative3}`);
           if (results.length >= maxResults) break;
@@ -2932,11 +2935,11 @@ var FileSystemServer = class {
     return (name) => name.toLowerCase().includes(lowered);
   }
   async createArchiveBundle(sourcePath, maxBytes) {
-    const stat3 = await fs5.stat(sourcePath);
+    const stat3 = await fs6.stat(sourcePath);
     const files = [];
     let totalBytes = 0;
     const readAndAppend = async (absolutePath, relativePath) => {
-      const data = await fs5.readFile(absolutePath);
+      const data = await fs6.readFile(absolutePath);
       totalBytes += data.length;
       if (totalBytes > maxBytes) {
         throw new Error(`Archive exceeds maxBytes limit (${maxBytes}).`);
@@ -2949,28 +2952,28 @@ var FileSystemServer = class {
       });
     };
     if (stat3.isFile()) {
-      await readAndAppend(sourcePath, path7.basename(sourcePath));
+      await readAndAppend(sourcePath, path8.basename(sourcePath));
     } else if (stat3.isDirectory()) {
       const queue = [sourcePath];
       while (queue.length > 0) {
         const current = queue.shift();
         if (!current) break;
-        const entries = await fs5.readdir(current, { withFileTypes: true });
+        const entries = await fs6.readdir(current, { withFileTypes: true });
         for (const entry of entries) {
-          const fullPath = path7.join(current, entry.name);
+          const fullPath = path8.join(current, entry.name);
           if (entry.isDirectory()) {
             queue.push(fullPath);
             continue;
           }
           if (!entry.isFile()) continue;
-          const relativePath = path7.relative(sourcePath, fullPath) || entry.name;
+          const relativePath = path8.relative(sourcePath, fullPath) || entry.name;
           await readAndAppend(fullPath, relativePath.replace(/\\/g, "/"));
         }
       }
     } else {
       throw new Error("Only files and directories can be archived.");
     }
-    const sourceRelative = path7.relative(this.allowedRootDir, sourcePath).replace(/\\/g, "/");
+    const sourceRelative = path8.relative(this.allowedRootDir, sourcePath).replace(/\\/g, "/");
     const bundle = {
       format: "lydia-archive-v1",
       source: sourceRelative || ".",
@@ -3003,13 +3006,13 @@ var FileSystemServer = class {
     let count = 0;
     for (const file of bundle.files) {
       const relPath = String(file.path || "").replace(/\\/g, "/");
-      if (!relPath || path7.isAbsolute(relPath) || relPath.includes("..")) {
+      if (!relPath || path8.isAbsolute(relPath) || relPath.includes("..")) {
         throw new Error(`Unsafe archive entry path: ${relPath || "<empty>"}`);
       }
-      const targetPath = path7.resolve(outputDir, relPath);
+      const targetPath = path8.resolve(outputDir, relPath);
       const safeOutputDir = process.platform === "win32" ? outputDir.toLowerCase() : outputDir;
       const safeTarget = process.platform === "win32" ? targetPath.toLowerCase() : targetPath;
-      if (!safeTarget.startsWith(safeOutputDir + path7.sep) && safeTarget !== safeOutputDir) {
+      if (!safeTarget.startsWith(safeOutputDir + path8.sep) && safeTarget !== safeOutputDir) {
         throw new Error(`Archive entry escapes destination: ${relPath}`);
       }
       const data = this.decodeArchiveEntry(file);
@@ -3017,8 +3020,8 @@ var FileSystemServer = class {
       if (totalBytes > maxBytes) {
         throw new Error(`Unarchive exceeds maxBytes limit (${maxBytes}).`);
       }
-      await fs5.mkdir(path7.dirname(targetPath), { recursive: true });
-      await fs5.writeFile(targetPath, data);
+      await fs6.mkdir(path8.dirname(targetPath), { recursive: true });
+      await fs6.writeFile(targetPath, data);
       count += 1;
     }
     return count;
@@ -3038,22 +3041,22 @@ var FileSystemServer = class {
   }
   async prepareOutputDirectory(outputDir, overwrite) {
     try {
-      const stat3 = await fs5.stat(outputDir);
+      const stat3 = await fs6.stat(outputDir);
       if (!stat3.isDirectory()) {
         throw new Error(`Output path is not a directory: ${outputDir}`);
       }
       if (!overwrite) {
-        const entries = await fs5.readdir(outputDir);
+        const entries = await fs6.readdir(outputDir);
         if (entries.length > 0) {
           throw new Error(`Output directory is not empty: ${outputDir}. Pass overwrite=true to replace.`);
         }
       } else {
-        await fs5.rm(outputDir, { recursive: true, force: true });
-        await fs5.mkdir(outputDir, { recursive: true });
+        await fs6.rm(outputDir, { recursive: true, force: true });
+        await fs6.mkdir(outputDir, { recursive: true });
       }
     } catch (error) {
       if (error?.code === "ENOENT") {
-        await fs5.mkdir(outputDir, { recursive: true });
+        await fs6.mkdir(outputDir, { recursive: true });
         return;
       }
       throw error;
@@ -3073,7 +3076,7 @@ var GitServer = class {
     this.server = new import_server3.Server(
       {
         name: "internal-git",
-        version: "0.1.0"
+        version: "0.1.1"
       },
       {
         capabilities: {
@@ -3250,7 +3253,7 @@ var MemoryServer = class {
     this.server = new import_server4.Server(
       {
         name: "internal-memory",
-        version: "0.1.0"
+        version: "0.1.1"
       },
       {
         capabilities: {
@@ -3376,7 +3379,7 @@ var InteractionServer = class extends import_node_events3.EventEmitter {
   constructor() {
     super();
     this.server = new import_server5.Server(
-      { name: "internal-interaction", version: "0.1.0" },
+      { name: "internal-interaction", version: "0.1.1" },
       { capabilities: { tools: {} } }
     );
     this.setupHandlers();
@@ -3757,7 +3760,7 @@ var McpClientManager = class {
     const client = new import_client.Client(
       {
         name: "lydia-client",
-        version: "0.1.0"
+        version: "0.1.1"
       },
       {
         capabilities: {
@@ -3865,7 +3868,7 @@ var McpClientManager = class {
 };
 
 // src/gate/risk.ts
-var path8 = __toESM(require("path"), 1);
+var path9 = __toESM(require("path"), 1);
 var os6 = __toESM(require("os"), 1);
 var DEFAULT_USER_DATA_DIRS = [
   "~/.lydia",
@@ -3895,13 +3898,13 @@ var COMPUTER_USE_HIGH_RISK_ACTIONS = /* @__PURE__ */ new Set([
 ]);
 function expandHome(p) {
   if (p.startsWith("~/") || p === "~") {
-    return path8.join(os6.homedir(), p.slice(2));
+    return path9.join(os6.homedir(), p.slice(2));
   }
   return p;
 }
 function normalizePath(p) {
   const expanded = expandHome(p);
-  const normalized = path8.resolve(expanded);
+  const normalized = path9.resolve(expanded);
   return process.platform === "win32" ? normalized.toLowerCase() : normalized;
 }
 function buildProtectedDirs(config) {
@@ -3914,7 +3917,7 @@ function buildProtectedDirs(config) {
 }
 function isInProtectedDir(targetPath, protectedDirs) {
   const normalizedTarget = normalizePath(targetPath);
-  return protectedDirs.some((dir) => normalizedTarget === dir || normalizedTarget.startsWith(dir + path8.sep));
+  return protectedDirs.some((dir) => normalizedTarget === dir || normalizedTarget.startsWith(dir + path9.sep));
 }
 function extractPathsFromCommand(command) {
   const paths = [];
@@ -3936,7 +3939,7 @@ function hasRelativePathTraversal(input) {
   return /(^|[\\\/])\.\.([\\\/]|$)/.test(input);
 }
 function isRelativePath(input) {
-  return !path8.isAbsolute(input);
+  return !path9.isAbsolute(input);
 }
 function resolveCanonicalComputerUseAction(toolName) {
   const direct = resolveCanonicalComputerUseToolName(toolName);
@@ -4001,7 +4004,7 @@ function assessRisk(toolName, args, mcp, config) {
         return {
           level: "high",
           reason: `${opLabel} with relative path traversal`,
-          signature: `fs_write_rel:${normalizePath(path8.resolve(targetPath))}`,
+          signature: `fs_write_rel:${normalizePath(path9.resolve(targetPath))}`,
           details: targetPath
         };
       }
@@ -4032,6 +4035,14 @@ function assessRisk(toolName, args, mcp, config) {
   if (toolName === "shell_execute") {
     const command = typeof args?.command === "string" ? args.command : "";
     if (command && (isDestructiveShellCommand(command) || isPermissionChangeCommand(command))) {
+      if (isPermissionChangeCommand(command)) {
+        return {
+          level: "high",
+          reason: "Permission change shell command",
+          signature: `shell_permission:${command.toLowerCase().slice(0, 80)}`,
+          details: command
+        };
+      }
       const targets = extractPathsFromCommand(command);
       const hasTraversal = hasRelativePathTraversal(command);
       if (targets.length === 0 || hasTraversal) {
@@ -4270,7 +4281,7 @@ var StrategyUpdateGate = class {
 };
 
 // src/gate/review-manager.ts
-var path9 = __toESM(require("path"), 1);
+var path10 = __toESM(require("path"), 1);
 var os7 = __toESM(require("os"), 1);
 var ReviewManager = class {
   memory;
@@ -4279,7 +4290,7 @@ var ReviewManager = class {
       this.memory = memoryManager;
       return;
     }
-    const dbPath = path9.join(os7.homedir(), ".lydia", "memory.db");
+    const dbPath = path10.join(os7.homedir(), ".lydia", "memory.db");
     this.memory = new MemoryManager(dbPath);
   }
   async init() {
@@ -4458,7 +4469,7 @@ ${this.originalPlan}
 };
 
 // src/replay/mcp.ts
-var path10 = __toESM(require("path"), 1);
+var path11 = __toESM(require("path"), 1);
 var ReplayMcpClientManager = class extends McpClientManager {
   traces;
   callIndex = 0;
@@ -4613,12 +4624,12 @@ var ReplayMcpClientManager = class extends McpClientManager {
       const loweredPattern = rawPattern.toLowerCase();
       const names = /* @__PURE__ */ new Set();
       for (const storedPath of this.virtualFiles.keys()) {
-        const rel = path10.relative(normalized, storedPath);
+        const rel = path11.relative(normalized, storedPath);
         if (rel.startsWith("..")) continue;
         const parts = rel.split("/").filter(Boolean);
         for (const part of parts) {
           if (part.toLowerCase().includes(loweredPattern)) {
-            names.add(`[FILE] ${path10.posix.join(path10.posix.relative(this.virtualRoot, normalized), rel)}`);
+            names.add(`[FILE] ${path11.posix.join(path11.posix.relative(this.virtualRoot, normalized), rel)}`);
             break;
           }
         }
@@ -4646,12 +4657,12 @@ var ReplayMcpClientManager = class extends McpClientManager {
         createdAt: 0,
         totalBytes: sourceFile ? sourceFile.length : sourceEntries.reduce((acc, [, text]) => acc + text.length, 0),
         files: sourceFile ? [{
-          path: path10.posix.basename(source),
+          path: path11.posix.basename(source),
           size: sourceFile.length,
           encoding: "base64",
           data: Buffer.from(sourceFile, "utf-8").toString("base64")
         }] : sourceEntries.map(([filePath, text]) => ({
-          path: path10.posix.relative(source, filePath),
+          path: path11.posix.relative(source, filePath),
           size: text.length,
           encoding: "base64",
           data: Buffer.from(text, "utf-8").toString("base64")
@@ -4706,7 +4717,7 @@ var ReplayMcpClientManager = class extends McpClientManager {
       for (const item of parsed.files) {
         const rel = typeof item?.path === "string" ? item.path.replace(/\\/g, "/") : "";
         if (!rel || rel.includes("..") || rel.startsWith("/")) continue;
-        const target = this.normalizeFsPath(path10.posix.join(outputDir, rel));
+        const target = this.normalizeFsPath(path11.posix.join(outputDir, rel));
         const base64 = typeof item?.data === "string" ? item.data : "";
         const text = base64 ? Buffer.from(base64, "base64").toString("utf-8") : "";
         this.virtualFiles.set(target, text);
@@ -4999,12 +5010,12 @@ var ReplayMcpClientManager = class extends McpClientManager {
     if (driveMatch) {
       const drive = driveMatch[1].toLowerCase();
       const rest = driveMatch[2] || "/";
-      return path10.posix.normalize(`/${drive}${rest}`);
+      return path11.posix.normalize(`/${drive}${rest}`);
     }
     if (source.startsWith("/")) {
-      return path10.posix.normalize(source);
+      return path11.posix.normalize(source);
     }
-    return path10.posix.normalize(path10.posix.join(this.virtualRoot, source));
+    return path11.posix.normalize(path11.posix.join(this.virtualRoot, source));
   }
   listDirectoryEntries(directory) {
     const normalizedDir = this.normalizeFsPath(directory);
@@ -5195,7 +5206,7 @@ var StrategyEvaluator = class {
 };
 
 // src/replay/manager.ts
-var path11 = __toESM(require("path"), 1);
+var path12 = __toESM(require("path"), 1);
 var os8 = __toESM(require("os"), 1);
 var ReplayManager = class {
   memoryManager;
@@ -5204,7 +5215,7 @@ var ReplayManager = class {
     if (memoryManager) {
       this.memoryManager = memoryManager;
     } else {
-      const dbPath = path11.join(os8.homedir(), ".lydia", "memory.db");
+      const dbPath = path12.join(os8.homedir(), ".lydia", "memory.db");
       this.memoryManager = new MemoryManager(dbPath);
     }
     this.evaluator = new StrategyEvaluator();
@@ -5224,7 +5235,7 @@ var ReplayManager = class {
     const agent = new Agent(mockLLM);
     agent.mcpClientManager = mockMcp;
     agent.isInitialized = true;
-    const tempDb = path11.join(os8.tmpdir(), `lydia-replay-${Date.now()}-${episodeId}.db`);
+    const tempDb = path12.join(os8.tmpdir(), `lydia-replay-${Date.now()}-${episodeId}.db`);
     agent.memoryManager = new MemoryManager(tempDb);
     try {
       const config = await agent.configLoader.load();
@@ -5544,7 +5555,7 @@ var FeedbackCollector = class {
 };
 
 // src/execution/agent.ts
-var path12 = __toESM(require("path"), 1);
+var path13 = __toESM(require("path"), 1);
 var os9 = __toESM(require("os"), 1);
 var Agent = class extends import_node_events5.EventEmitter {
   llm;
@@ -5641,7 +5652,7 @@ var Agent = class extends import_node_events5.EventEmitter {
     await this.reviewManager.init();
     const config = await this.configLoader.load();
     this.config = config;
-    const dbPath = path12.join(os9.homedir(), ".lydia", "memory.db");
+    const dbPath = path13.join(os9.homedir(), ".lydia", "memory.db");
     this.memoryManager = new MemoryManager(dbPath, {
       checkpointTtlMs: Math.max(1, config.memory?.checkpointTtlHours ?? 24) * 60 * 60 * 1e3,
       observationFrameTtlMs: Math.max(1, config.memory?.observationFrameTtlHours ?? 24 * 7) * 60 * 60 * 1e3