@maiaos/agent 0.1.0-canary.2

package/dist/extensions/safety/lifecycle.js

@@ -0,0 +1,92 @@
+import { homedir } from "node:os";
+import { inspectDestructiveCommand, } from "./destructive-guard.js";
+const BLOCK_EVENT = "maia-safety:blocked";
+const blockReason = (code) => code === "PARSER_DEPTH_EXCEEDED"
+    ? "Maia blocked a destructive command beyond its safe parser limit."
+    : "Maia blocked recursive deletion of a protected system or home root.";
+const recordValue = (input, key) => typeof input === "object" && input !== null
+    ? Reflect.get(input, key)
+    : undefined;
+const commandCandidate = (event, sessionCwd) => {
+    const toolName = event.toolName;
+    if (toolName !== "bash" && toolName !== "shell" && toolName !== "process") {
+        return undefined;
+    }
+    if (toolName === "process" &&
+        recordValue(event.input, "action") !== "start") {
+        return undefined;
+    }
+    const command = recordValue(event.input, "command");
+    if (typeof command !== "string")
+        return undefined;
+    const requestedCwd = recordValue(event.input, "cwd");
+    return {
+        command,
+        cwd: typeof requestedCwd === "string" ? requestedCwd : sessionCwd,
+        toolName,
+    };
+};
+const emitBlocked = (pi, input) => {
+    const payload = { ...input, protocolVersion: 1 };
+    try {
+        pi.appendEntry(BLOCK_EVENT, payload);
+    }
+    catch {
+        // Session persistence is best effort; blocking remains fail closed.
+    }
+    try {
+        pi.events.emit(BLOCK_EVENT, payload);
+    }
+    catch {
+        // Observability is best effort; blocking remains fail closed.
+    }
+};
+const inspectCandidate = (pi, candidate) => {
+    const decision = inspectDestructiveCommand({
+        command: candidate.command,
+        cwd: candidate.cwd,
+        homeDir: homedir(),
+        uid: process.getuid?.(),
+    });
+    if (decision.decision === "allow")
+        return;
+    emitBlocked(pi, {
+        operation: decision.operation,
+        reasonCode: decision.reasonCode,
+        toolName: candidate.toolName,
+    });
+    return blockReason(decision.reasonCode);
+};
+const registerToolGuard = (pi) => {
+    pi.on("tool_call", (event, context) => {
+        const candidate = commandCandidate(event, context.cwd);
+        if (candidate === undefined)
+            return undefined;
+        const reason = inspectCandidate(pi, candidate);
+        return reason === undefined ? undefined : { block: true, reason };
+    });
+};
+const registerUserBashGuard = (pi) => {
+    pi.on("user_bash", (event) => {
+        const reason = inspectCandidate(pi, {
+            command: event.command,
+            cwd: event.cwd,
+            toolName: "bash",
+        });
+        return reason === undefined
+            ? undefined
+            : {
+                result: {
+                    cancelled: false,
+                    exitCode: 126,
+                    output: `${reason}\n`,
+                    truncated: false,
+                },
+            };
+    });
+};
+export const registerSafetyGuard = (pi) => {
+    registerToolGuard(pi);
+    registerUserBashGuard(pi);
+};
+//# sourceMappingURL=lifecycle.js.map

package/dist/extensions/safety/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/extensions/safety/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AASlC,OAAO,EAGL,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAU1C,MAAM,WAAW,GAAG,CAAC,IAAqB,EAAU,EAAE,CACpD,IAAI,KAAK,uBAAuB;IAC9B,CAAC,CAAC,kEAAkE;IACpE,CAAC,CAAC,qEAAqE,CAAC;AAE5E,MAAM,WAAW,GAAG,CAAC,KAAc,EAAE,GAAW,EAAW,EAAE,CAC3D,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;IACzC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC;IACzB,CAAC,CAAC,SAAS,CAAC;AAEhB,MAAM,gBAAgB,GAAG,CACvB,KAAoB,EACpB,UAAkB,EACY,EAAE;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC1E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,QAAQ,KAAK,SAAS;QACtB,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,OAAO,EAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,OAAO;QACL,OAAO;QACP,GAAG,EAAE,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;QACjE,QAAQ;KACT,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAClB,EAAgB,EAChB,KAIC,EACK,EAAE;IACR,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,EAAgB,EAAE,SAA2B,EAAE,EAAE;IACzE,MAAM,QAAQ,GAAG,yBAAyB,CAAC;QACzC,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,OAAO,EAAE,OAAO,EAAE;QAClB,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE;KACxB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IAC1C,WAAW,CAAC,EAAE,EAAE;QACd,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,QAAQ,EAAE,SAAS,CAAC,QAAQ;KAC7B,CAAC,CAAC;IACH,OAAO,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,EAAgB,EAAQ,EAAE;IACnD,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAmC,EAAE;QACrE,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC/C,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,EAAgB,EAAQ,EAAE;IACvD,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAmC,EAAE;QAC5D,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,EAAE;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,OAAO,MAAM,KAAK,SAAS;YACzB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,MAAM,EAAE;oBACN,SAAS,EAAE,KAAK;oBAChB,QAAQ,EAAE,GAAG;oBACb,MAAM,EAAE,GAAG,MAAM,IAAI;oBACrB,SAAS,EAAE,KAAK;iBACjB;aACF,CAAC;IACR,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,EAAgB,EAAQ,EAAE;IAC5D,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACtB,qBAAqB,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC,CAAC"}

package/dist/extensions/safety/shell-tokens.d.ts

@@ -0,0 +1,13 @@
+/** The code points of a string, without splitting surrogate pairs. */
+export declare const codePoints: (text: string) => readonly string[];
+/**
+ * Splits a shell command into straight-line segments at `;`, `|`, `&`,
+ * parentheses and newlines, honoring quotes and backslash escapes. Quoting
+ * keeps `$` and `~` literal where the shell would not expand them.
+ */
+export declare const tokenizeSegments: (command: string) => readonly (readonly string[])[];
+/** Restores the literal `$` and `~` of a token that a nested shell re-parses. */
+export declare const restoreLiterals: (token: string) => string;
+/** Expands `$HOME`, `${HOME}`, `~`, `~root` and `~<user>` the way a shell would. */
+export declare const expandHome: (target: string, homeDirectory: string) => string;
+//# sourceMappingURL=shell-tokens.d.ts.map

package/dist/extensions/safety/shell-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-tokens.d.ts","sourceRoot":"","sources":["../../../src/extensions/safety/shell-tokens.ts"],"names":[],"mappings":"AAeA,sEAAsE;AACtE,eAAO,MAAM,UAAU,SAAU,MAAM,KAAG,SAAS,MAAM,EAC3B,CAAC;AA8E/B;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,YAClB,MAAM,KACd,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAU9B,CAAC;AAEF,iFAAiF;AACjF,eAAO,MAAM,eAAe,UAAW,MAAM,KAAG,MACsB,CAAC;AAevE,oFAAoF;AACpF,eAAO,MAAM,UAAU,WAAY,MAAM,iBAAiB,MAAM,KAAG,MAMhE,CAAC"}

package/dist/extensions/safety/shell-tokens.js

@@ -0,0 +1,115 @@
+// Provenance: a reviewed port of vllnt/pi-config
+// extensions/pi-safety/destructive-guard.ts (tokenizer and home expansion) at
+// commit b90808fbd2e51301ab8351367c69c5166c44ead7, rewritten without loops for
+// the Maia lint rules (D-069).
+import { basename } from "node:path";
+const LITERAL_DOLLAR = "\u{E000}";
+const LITERAL_TILDE = "\u{E001}";
+const EXPANDED_HOME = "\u{E002}";
+const HOME_VARIABLE = /\$(?:HOME|\{HOME\})/gu;
+const SEPARATORS = new Set(["\n", "\r", "&", "(", ")", ";", "|"]);
+const WHITESPACE = /\s/u;
+/** The code points of a string, without splitting surrogate pairs. */
+export const codePoints = (text) => text.match(/[\s\S]/gu) ?? [];
+const finishToken = (state) => {
+    if (state.token.length === 0)
+        return;
+    state.segment.push(state.token.replaceAll(HOME_VARIABLE, EXPANDED_HOME));
+    state.token = "";
+};
+const finishSegment = (state) => {
+    finishToken(state);
+    if (state.segment.length === 0)
+        return;
+    state.segments.push(state.segment);
+    state.segment = [];
+};
+const escapedCharacter = (character) => {
+    if (character === "$")
+        return LITERAL_DOLLAR;
+    return character === "~" ? LITERAL_TILDE : character;
+};
+const quotedCharacter = (quote, character) => {
+    if (character === "$" && quote === "single")
+        return LITERAL_DOLLAR;
+    if (character === "~" && quote !== undefined)
+        return LITERAL_TILDE;
+    return character;
+};
+const toggledQuote = (quote, character) => {
+    if (character === "'" && quote !== "double") {
+        return quote === "single" ? {} : { quote: "single" };
+    }
+    if (character === '"' && quote !== "single") {
+        return quote === "double" ? {} : { quote: "double" };
+    }
+    return undefined;
+};
+const splitCharacter = (state, character) => {
+    if (state.quote !== undefined)
+        return false;
+    if (SEPARATORS.has(character)) {
+        finishSegment(state);
+        return true;
+    }
+    if (!WHITESPACE.test(character))
+        return false;
+    finishToken(state);
+    return true;
+};
+const step = (state, character) => {
+    if (state.escaped) {
+        state.token += escapedCharacter(character);
+        state.escaped = false;
+        return state;
+    }
+    if (character === "\\" && state.quote !== "single") {
+        state.escaped = true;
+        return state;
+    }
+    const toggled = toggledQuote(state.quote, character);
+    if (toggled !== undefined) {
+        state.quote = toggled.quote;
+        return state;
+    }
+    if (splitCharacter(state, character))
+        return state;
+    state.token += quotedCharacter(state.quote, character);
+    return state;
+};
+/**
+ * Splits a shell command into straight-line segments at `;`, `|`, `&`,
+ * parentheses and newlines, honoring quotes and backslash escapes. Quoting
+ * keeps `$` and `~` literal where the shell would not expand them.
+ */
+export const tokenizeSegments = (command) => {
+    const state = codePoints(command).reduce(step, {
+        escaped: false,
+        segment: [],
+        segments: [],
+        token: "",
+    });
+    if (state.escaped)
+        state.token += "\\";
+    finishSegment(state);
+    return state.segments;
+};
+/** Restores the literal `$` and `~` of a token that a nested shell re-parses. */
+export const restoreLiterals = (token) => token.replaceAll(LITERAL_DOLLAR, "$").replaceAll(LITERAL_TILDE, "~");
+const expandTilde = (target, homeDirectory) => {
+    if (target === "~" || target.startsWith("~/")) {
+        return `${homeDirectory}${target.slice(1)}`;
+    }
+    if (target === "~root" || target.startsWith("~root/")) {
+        return `/root${target.slice(5)}`;
+    }
+    const homeName = basename(homeDirectory);
+    return target === `~${homeName}` || target.startsWith(`~${homeName}/`)
+        ? `${homeDirectory}${target.slice(homeName.length + 1)}`
+        : target;
+};
+/** Expands `$HOME`, `${HOME}`, `~`, `~root` and `~<user>` the way a shell would. */
+export const expandHome = (target, homeDirectory) => expandTilde(target
+    .replaceAll(EXPANDED_HOME, homeDirectory)
+    .replaceAll(HOME_VARIABLE, homeDirectory), homeDirectory);
+//# sourceMappingURL=shell-tokens.js.map

package/dist/extensions/safety/shell-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-tokens.js","sourceRoot":"","sources":["../../../src/extensions/safety/shell-tokens.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,8EAA8E;AAC9E,+EAA+E;AAC/E,+BAA+B;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,cAAc,GAAG,UAAU,CAAC;AAClC,MAAM,aAAa,GAAG,UAAU,CAAC;AACjC,MAAM,aAAa,GAAG,UAAU,CAAC;AACjC,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAC9C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAClE,MAAM,UAAU,GAAG,KAAK,CAAC;AAIzB,sEAAsE;AACtE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAqB,EAAE,CAC5D,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;AAU/B,MAAM,WAAW,GAAG,CAAC,KAAqB,EAAQ,EAAE;IAClD,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACrC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;IACzE,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAqB,EAAQ,EAAE;IACpD,WAAW,CAAC,KAAK,CAAC,CAAC;IACnB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACvC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAU,EAAE;IACrD,IAAI,SAAS,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAC7C,OAAO,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,KAAwB,EAAE,SAAiB,EAAE,EAAE;IACtE,IAAI,SAAS,KAAK,GAAG,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC;IACnE,IAAI,SAAS,KAAK,GAAG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IACnE,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,KAAwB,EACxB,SAAiB,EACuB,EAAE;IAC1C,IAAI,SAAS,KAAK,GAAG,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,SAAS,KAAK,GAAG,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAqB,EAAE,SAAiB,EAAW,EAAE;IAC3E,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,WAAW,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,KAAqB,EAAE,SAAiB,EAAkB,EAAE;IACxE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,KAAK,CAAC,KAAK,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnD,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,KAAK,CAAC,KAAK,IAAI,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,OAAe,EACiB,EAAE;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QAC7C,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;KACV,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,OAAO;QAAE,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;IACvC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,QAAQ,CAAC;AACxB,CAAC,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAa,EAAU,EAAE,CACvD,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AAEvE,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,aAAqB,EAAU,EAAE;IACpE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,OAAO,GAAG,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,OAAO,QAAQ,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACnC,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IACzC,OAAO,MAAM,KAAK,IAAI,QAAQ,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,QAAQ,GAAG,CAAC;QACpE,CAAC,CAAC,GAAG,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE;QACxD,CAAC,CAAC,MAAM,CAAC;AACb,CAAC,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,aAAqB,EAAU,EAAE,CAC1E,WAAW,CACT,MAAM;KACH,UAAU,CAAC,aAAa,EAAE,aAAa,CAAC;KACxC,UAAU,CAAC,aAAa,EAAE,aAAa,CAAC,EAC3C,aAAa,CACd,CAAC"}

package/dist/extensions/search/bounds.d.ts

@@ -0,0 +1,22 @@
+/** The hit limit when a call names none. */
+export declare const DEFAULT_SEARCH_LIMIT = 80;
+/** The highest hit limit one call may request. */
+export declare const MAXIMUM_SEARCH_LIMIT = 200;
+export type SearchLimitInput = {
+    readonly glob?: string;
+    readonly limit?: number;
+    readonly path?: string;
+};
+export type SearchLimit = {
+    readonly error: string;
+    readonly ok: false;
+} | {
+    readonly limit: number;
+    readonly ok: true;
+};
+/**
+ * Applies the default hit limit and rejects a raise above 200, or above
+ * 80 without a `path` or `glob` that narrows the search.
+ */
+export declare const resolveSearchLimit: (input: SearchLimitInput) => SearchLimit;
+//# sourceMappingURL=bounds.d.ts.map

package/dist/extensions/search/bounds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounds.d.ts","sourceRoot":"","sources":["../../../src/extensions/search/bounds.ts"],"names":[],"mappings":"AAGA,4CAA4C;AAC5C,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,kDAAkD;AAClD,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAA;CAAE,GAC9C;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC;AAMlD;;;GAGG;AACH,eAAO,MAAM,kBAAkB,UAAW,gBAAgB,KAAG,WAqB5D,CAAC"}

package/dist/extensions/search/bounds.js

@@ -0,0 +1,35 @@
+// Provenance: a reviewed port of vllnt/pi-config extensions/pi-search/bounds.ts
+// at commit b90808fbd2e51301ab8351367c69c5166c44ead7 (D-069).
+/** The hit limit when a call names none. */
+export const DEFAULT_SEARCH_LIMIT = 80;
+/** The highest hit limit one call may request. */
+export const MAXIMUM_SEARCH_LIMIT = 200;
+const scoped = (input) => (input.path?.trim() ?? "").length > 0 ||
+    (input.glob?.trim() ?? "").length > 0;
+/**
+ * Applies the default hit limit and rejects a raise above 200, or above
+ * 80 without a `path` or `glob` that narrows the search.
+ */
+export const resolveSearchLimit = (input) => {
+    if (input.limit === undefined) {
+        return { limit: DEFAULT_SEARCH_LIMIT, ok: true };
+    }
+    if (!Number.isFinite(input.limit) || input.limit < 1) {
+        return { error: "The search limit must be a positive number.", ok: false };
+    }
+    const limit = Math.floor(input.limit);
+    if (limit > MAXIMUM_SEARCH_LIMIT) {
+        return {
+            error: `The search limit is at most ${String(MAXIMUM_SEARCH_LIMIT)}; narrow the path or glob instead.`,
+            ok: false,
+        };
+    }
+    if (limit > DEFAULT_SEARCH_LIMIT && !scoped(input)) {
+        return {
+            error: `A search limit above ${String(DEFAULT_SEARCH_LIMIT)} needs a path or glob.`,
+            ok: false,
+        };
+    }
+    return { limit, ok: true };
+};
+//# sourceMappingURL=bounds.js.map

package/dist/extensions/search/bounds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounds.js","sourceRoot":"","sources":["../../../src/extensions/search/bounds.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8DAA8D;AAE9D,4CAA4C;AAC5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,kDAAkD;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAYxC,MAAM,MAAM,GAAG,CAAC,KAAuB,EAAW,EAAE,CAClD,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;IACrC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAExC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAuB,EAAe,EAAE;IACzE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,KAAK,EAAE,6CAA6C,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACjC,OAAO;YACL,KAAK,EAAE,+BAA+B,MAAM,CAAC,oBAAoB,CAAC,oCAAoC;YACtG,EAAE,EAAE,KAAK;SACV,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,GAAG,oBAAoB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,KAAK,EAAE,wBAAwB,MAAM,CAAC,oBAAoB,CAAC,wBAAwB;YACnF,EAAE,EAAE,KAAK;SACV,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC,CAAC"}

package/dist/extensions/search/extension.d.ts

@@ -0,0 +1,7 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+/**
+ * Caps Pi's `find` and `grep` at 80 hits by default and 200 at most, and
+ * rejects a raise above 80 that names no path or glob.
+ */
+export declare const searchBoundsExtension: (pi: ExtensionAPI) => void;
+//# sourceMappingURL=extension.d.ts.map

package/dist/extensions/search/extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.d.ts","sourceRoot":"","sources":["../../../src/extensions/search/extension.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,YAAY,EAGb,MAAM,iCAAiC,CAAC;AAYzC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,OAAQ,YAAY,KAAG,IAExD,CAAC"}

package/dist/extensions/search/extension.js

@@ -0,0 +1,18 @@
+import { resolveSearchLimit } from "./bounds.js";
+const boundSearch = (event) => {
+    if (event.toolName !== "find" && event.toolName !== "grep")
+        return undefined;
+    const bound = resolveSearchLimit(event.input);
+    if (!bound.ok)
+        return { block: true, reason: bound.error };
+    event.input.limit = bound.limit;
+    return undefined;
+};
+/**
+ * Caps Pi's `find` and `grep` at 80 hits by default and 200 at most, and
+ * rejects a raise above 80 that names no path or glob.
+ */
+export const searchBoundsExtension = (pi) => {
+    pi.on("tool_call", boundSearch);
+};
+//# sourceMappingURL=extension.js.map

package/dist/extensions/search/extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.js","sourceRoot":"","sources":["../../../src/extensions/search/extension.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,WAAW,GAAG,CAAC,KAAoB,EAAmC,EAAE;IAC5E,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAC7E,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3D,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAChC,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,EAAgB,EAAQ,EAAE;IAC9D,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAClC,CAAC,CAAC"}

package/dist/extensions/search/index.d.ts

@@ -0,0 +1,2 @@
+export { searchBoundsExtension } from "./extension.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/extensions/search/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/extensions/search/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/extensions/search/index.js

@@ -0,0 +1,2 @@
+export { searchBoundsExtension } from "./extension.js";
+//# sourceMappingURL=index.js.map

package/dist/extensions/search/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/extensions/search/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/extensions/tasks/context.d.ts

@@ -0,0 +1,20 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { Effect } from "effect";
+import { type TaskRow } from "./summary.js";
+declare const TaskLedgerError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "TaskLedgerError";
+} & Readonly<A>;
+/** A task ledger that is unreadable, unsafe or incompatible. */
+export declare class TaskLedgerError extends TaskLedgerError_base<{
+    readonly message: string;
+}> {
+}
+/** Reads one Session's task ledger, as the task tool does. */
+export type TaskLedgerReader = (sessionId: string) => Effect.Effect<readonly TaskRow[], TaskLedgerError>;
+/**
+ * Registers the `/tasks` view, which people use and which changes nothing, and the bounded open-task
+ * section added to the system prompt before each run.
+ */
+export declare const registerTasksContext: (pi: ExtensionAPI, read: TaskLedgerReader) => void;
+export {};
+//# sourceMappingURL=context.d.ts.map

package/dist/extensions/tasks/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/extensions/tasks/context.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAEV,YAAY,EAGb,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAQ,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAGL,KAAK,OAAO,EAEb,MAAM,cAAc,CAAC;;;;AAEtB,gEAAgE;AAChE,qBAAa,eAAgB,SAAQ,qBAAoC;IACvE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL,8DAA8D;AAC9D,MAAM,MAAM,gBAAgB,GAAG,CAC7B,SAAS,EAAE,MAAM,KACd,MAAM,CAAC,MAAM,CAAC,SAAS,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AAyCxD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,OAC3B,YAAY,QACV,gBAAgB,SAevB,CAAC"}

package/dist/extensions/tasks/context.js

@@ -0,0 +1,36 @@
+import { Data, Effect } from "effect";
+import { buildTasksSection, formatTasks, TASKS_SECTION, } from "./summary.js";
+/** A task ledger that is unreadable, unsafe or incompatible. */
+export class TaskLedgerError extends Data.TaggedError("TaskLedgerError") {
+}
+const VIEWS = ["all", "open"];
+const showTasks = (read, argumentsText, context) => {
+    const view = argumentsText.trim().toLowerCase();
+    if (view !== "" && view !== "all" && view !== "open") {
+        return Effect.sync(() => {
+            context.ui.notify("Usage: /tasks [open|all]", "warning");
+        });
+    }
+    return read(context.sessionManager.getSessionId()).pipe(Effect.map((tasks) => formatTasks(tasks, view === "all")), Effect.catchTag("TaskLedgerError", (error) => Effect.succeed(error.message)), Effect.flatMap((text) => Effect.sync(() => {
+        context.ui.notify(text, "info");
+    })));
+};
+const projectTasks = (read, event, context) => read(context.sessionManager.getSessionId()).pipe(Effect.map((tasks) => {
+    const section = buildTasksSection(tasks);
+    if (section === undefined)
+        return;
+    event.systemPromptOptions.sections[TASKS_SECTION] = section.text;
+}));
+/**
+ * Registers the `/tasks` view, which people use and which changes nothing, and the bounded open-task
+ * section added to the system prompt before each run.
+ */
+export const registerTasksContext = (pi, read) => {
+    pi.registerCommand("tasks", {
+        description: "List this session's open tasks, or every task with /tasks all",
+        getArgumentCompletions: (prefix) => VIEWS.filter((view) => view.startsWith(prefix.trim().toLowerCase())).map((value) => ({ label: value, value })),
+        handler: (argumentsText, context) => Effect.runPromise(showTasks(read, argumentsText, context)),
+    });
+    pi.on("before_agent_start", (event, context) => Effect.runPromise(projectTasks(read, event, context)));
+};
+//# sourceMappingURL=context.js.map

package/dist/extensions/tasks/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../src/extensions/tasks/context.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EACL,iBAAiB,EACjB,WAAW,EAEX,aAAa,GACd,MAAM,cAAc,CAAC;AAEtB,gEAAgE;AAChE,MAAM,OAAO,eAAgB,SAAQ,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAErE;CAAG;AAOL,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,MAAM,CAAU,CAAC;AAEvC,MAAM,SAAS,GAAG,CAChB,IAAsB,EACtB,aAAqB,EACrB,OAAgC,EACX,EAAE;IACvB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACrD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,0BAA0B,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CACrD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,EACzD,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC3C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAC9B,EACD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACtB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,CACH,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,IAAsB,EACtB,KAA4B,EAC5B,OAAyB,EACa,EAAE,CACxC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;IACnB,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO;IAClC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;AACnE,CAAC,CAAC,CACH,CAAC;AAEJ;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,EAAgB,EAChB,IAAsB,EACtB,EAAE;IACF,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE;QAC1B,WAAW,EACT,+DAA+D;QACjE,sBAAsB,EAAE,CAAC,MAAM,EAAE,EAAE,CACjC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CACtE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CACrC;QACH,OAAO,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,CAClC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;KAC7D,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAC7C,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC,CAAC"}

package/dist/extensions/tasks/extension.d.ts

@@ -0,0 +1,7 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+/** `standalone` adds the human `/tasks` view and the task prompt section. */
+export type TasksExtensionOptions = {
+    readonly standalone?: boolean;
+};
+export declare const makeTasksExtension: (stateRoot: string, durableSessionId?: string, options?: TasksExtensionOptions) => (pi: ExtensionAPI) => void;
+//# sourceMappingURL=extension.d.ts.map

package/dist/extensions/tasks/extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.d.ts","sourceRoot":"","sources":["../../../src/extensions/tasks/extension.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,YAAY,EAEb,MAAM,iCAAiC,CAAC;AAkOzC,6EAA6E;AAC7E,MAAM,MAAM,qBAAqB,GAAG;IAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtE,eAAO,MAAM,kBAAkB,cAEhB,MAAM,qBACE,MAAM,YACf,qBAAqB,UAE5B,YAAY,KAAG,IAkBnB,CAAC"}

package/dist/extensions/tasks/extension.js

@@ -0,0 +1,178 @@
+import { lstat, mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { Type } from "@earendil-works/pi-ai";
+import { Effect } from "effect";
+import { registerTasksContext, TaskLedgerError, } from "./context.js";
+const MAX_LEDGER_BYTES = 1024 * 1024;
+const taskStatus = Type.Union([
+    Type.Literal("pending"),
+    Type.Literal("in_progress"),
+    Type.Literal("completed"),
+]);
+const parameters = Type.Object({
+    action: Type.Union([
+        Type.Literal("create"),
+        Type.Literal("get"),
+        Type.Literal("list"),
+        Type.Literal("update"),
+    ]),
+    activeForm: Type.Optional(Type.String({ maxLength: 160 })),
+    description: Type.Optional(Type.String({ maxLength: 4096 })),
+    status: Type.Optional(taskStatus),
+    subject: Type.Optional(Type.String({ maxLength: 240 })),
+    taskId: Type.Optional(Type.String({ maxLength: 32 })),
+});
+const emptyLedger = () => ({
+    nextId: 1,
+    protocolVersion: 2,
+    revision: 0,
+    tasks: [],
+});
+const textResult = (value) => ({
+    content: [{ text: JSON.stringify(value), type: "text" }],
+    details: value,
+});
+const ledgerPath = (stateRoot, sessionId) => join(stateRoot, "sessions", sessionId, "tasks.json");
+const parseLedger = (text) => {
+    const value = JSON.parse(text);
+    if (typeof value !== "object" ||
+        value === null ||
+        Reflect.get(value, "protocolVersion") !== 2 ||
+        !Array.isArray(Reflect.get(value, "tasks")) ||
+        typeof Reflect.get(value, "nextId") !== "number" ||
+        typeof Reflect.get(value, "revision") !== "number") {
+        throw new Error("The session task ledger is incompatible.");
+    }
+    return value;
+};
+const readLedger = async (path) => {
+    try {
+        const stats = await lstat(path);
+        if (!stats.isFile() ||
+            stats.isSymbolicLink() ||
+            stats.size > MAX_LEDGER_BYTES) {
+            throw new Error("The session task ledger is unsafe or too large.");
+        }
+        return parseLedger(await readFile(path, "utf8"));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return emptyLedger();
+        throw error;
+    }
+};
+const writeLedger = async (path, ledger) => {
+    const directory = dirname(path);
+    await mkdir(directory, { mode: 0o700, recursive: true });
+    const temporary = `${path}.${String(process.pid)}.${String(ledger.revision)}.tmp`;
+    const text = `${JSON.stringify(ledger, undefined, 2)}\n`;
+    if (Buffer.byteLength(text, "utf8") > MAX_LEDGER_BYTES) {
+        throw new Error("The session task ledger exceeds its byte limit.");
+    }
+    await writeFile(temporary, text, { flag: "wx", mode: 0o600 });
+    await rename(temporary, path);
+};
+const requireTask = (ledger, taskId) => {
+    const task = ledger.tasks.find(({ id }) => id === taskId);
+    if (task === undefined)
+        throw new Error("The task does not exist.");
+    return task;
+};
+const buildTask = (ledger, input) => {
+    if (input.subject === undefined || input.subject.trim().length === 0) {
+        throw new Error("Task create requires a subject.");
+    }
+    const now = Date.now();
+    return {
+        ...(input.activeForm === undefined ? {} : { activeForm: input.activeForm }),
+        blockedBy: [],
+        blocks: [],
+        createdAt: now,
+        ...(input.description === undefined
+            ? {}
+            : { description: input.description }),
+        id: String(ledger.nextId),
+        kind: "work",
+        revision: 1,
+        status: "pending",
+        subject: input.subject.trim(),
+        updatedAt: now,
+    };
+};
+const createTask = (ledger, input) => {
+    const task = buildTask(ledger, input);
+    return {
+        ledger: {
+            ...ledger,
+            nextId: ledger.nextId + 1,
+            revision: ledger.revision + 1,
+            tasks: [...ledger.tasks, task],
+        },
+        task,
+    };
+};
+const patchTask = (current, input) => ({
+    ...current,
+    ...(input.activeForm === undefined ? {} : { activeForm: input.activeForm }),
+    ...(input.description === undefined
+        ? {}
+        : { description: input.description }),
+    revision: current.revision + 1,
+    ...(input.status === undefined ? {} : { status: input.status }),
+    ...(input.subject === undefined ? {} : { subject: input.subject }),
+    updatedAt: Date.now(),
+});
+const updateTask = (ledger, input) => {
+    const task = patchTask(requireTask(ledger, input.taskId), input);
+    return {
+        ledger: {
+            ...ledger,
+            revision: ledger.revision + 1,
+            tasks: ledger.tasks.map((candidate) => candidate.id === task.id ? task : candidate),
+        },
+        task,
+    };
+};
+const createExecuteTask = (stateRoot, durableSessionId) => async (...arguments_) => {
+    const input = arguments_[1];
+    const context = arguments_[4];
+    const path = ledgerPath(stateRoot, durableSessionId ?? context.sessionManager.getSessionId());
+    const ledger = await readLedger(path);
+    if (input.action === "list")
+        return textResult(ledger);
+    if (input.action === "get") {
+        return textResult(requireTask(ledger, input.taskId));
+    }
+    const mutation = input.action === "create"
+        ? createTask(ledger, input)
+        : updateTask(ledger, input);
+    await writeLedger(path, mutation.ledger);
+    return textResult(mutation.task);
+};
+// The task ledger lifted into Effect for the standalone /tasks view and the
+// task prompt section.
+const ledgerReader = (stateRoot, durableSessionId) => (sessionId) => Effect.tryPromise({
+    catch: (cause) => new TaskLedgerError({
+        message: cause instanceof Error ? cause.message : String(cause),
+    }),
+    try: () => readLedger(ledgerPath(stateRoot, durableSessionId ?? sessionId)),
+}).pipe(Effect.map((ledger) => ledger.tasks));
+export const makeTasksExtension = (stateRoot, durableSessionId, options) => (pi) => {
+    if (options?.standalone === true) {
+        registerTasksContext(pi, ledgerReader(stateRoot, durableSessionId));
+    }
+    pi.registerTool({
+        description: "Create, inspect, list, or update work on this agent session's durable task ledger.",
+        execute: createExecuteTask(stateRoot, durableSessionId),
+        executionMode: "sequential",
+        label: "Task",
+        name: "task",
+        parameters,
+        promptGuidelines: [
+            "Use task for multi-turn work and keep progress in the session ledger.",
+            "Task rows do not authorize Factory or swarm orchestration.",
+        ],
+        promptSnippet: "Track durable work for this agent session",
+    });
+};
+//# sourceMappingURL=extension.js.map

package/dist/extensions/tasks/extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.js","sourceRoot":"","sources":["../../../src/extensions/tasks/extension.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAK7C,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EACL,oBAAoB,EACpB,eAAe,GAEhB,MAAM,cAAc,CAAC;AAEtB,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AACrC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;IACvB,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;IAC3B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;CAC1B,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC;QACjB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;KACvB,CAAC;IACF,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IACjC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;CACtD,CAAC,CAAC;AAuBH,MAAM,WAAW,GAAG,GAAW,EAAE,CAAC,CAAC;IACjC,MAAM,EAAE,CAAC;IACT,eAAe,EAAE,CAAC;IAClB,QAAQ,EAAE,CAAC;IACX,KAAK,EAAE,EAAE;CACV,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC;IACjE,OAAO,EAAE,KAAK;CACf,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,SAAiB,EAAU,EAAE,CAClE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAEvD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE;IAC3C,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC;QAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,QAAQ;QAChD,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,QAAQ,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAe,CAAC;AACzB,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,KAAK,EAAE,IAAY,EAAmB,EAAE;IACzD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IACE,CAAC,KAAK,CAAC,MAAM,EAAE;YACf,KAAK,CAAC,cAAc,EAAE;YACtB,KAAK,CAAC,IAAI,GAAG,gBAAgB,EAC7B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,WAAW,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YACpD,OAAO,WAAW,EAAE,CAAC;QACvB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,KAAK,EAAE,IAAY,EAAE,MAAc,EAAiB,EAAE;IACxE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IAClF,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC;IACzD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,MAA0B,EAAQ,EAAE;IACvE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC1D,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAUF,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,KAAgB,EAAQ,EAAE;IAC3D,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QAC3E,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,GAAG;QACd,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QACvC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;QAC7B,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CACjB,MAAc,EACd,KAAgB,EACkC,EAAE;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO;QACL,MAAM,EAAE;YACN,GAAG,MAAM;YACT,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,CAAC;YAC7B,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;SAC/B;QACD,IAAI;KACL,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,OAAa,EAAE,KAAgB,EAAQ,EAAE,CAAC,CAAC;IAC5D,GAAG,OAAO;IACV,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;IAC3E,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;QACjC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;IACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC;IAC9B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC/D,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAClE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CACjB,MAAc,EACd,KAAgB,EACkC,EAAE;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,OAAO;QACL,MAAM,EAAE;YACN,GAAG,MAAM;YACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,CAAC;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACpC,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAC5C;SACF;QACD,IAAI;KACL,CAAC;AACJ,CAAC,CAAC;AAGF,MAAM,iBAAiB,GACrB,CAAC,SAAiB,EAAE,gBAAyB,EAAe,EAAE,CAC9D,KAAK,EAAE,GAAG,UAAmC,EAAE,EAAE;IAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,UAAU,CACrB,SAAS,EACT,gBAAgB,IAAI,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,CAC1D,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,QAAQ,GACZ,KAAK,CAAC,MAAM,KAAK,QAAQ;QACvB,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC;QAC3B,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC;AAEJ,4EAA4E;AAC5E,uBAAuB;AACvB,MAAM,YAAY,GAChB,CAAC,SAAiB,EAAE,gBAAyB,EAAoB,EAAE,CACnE,CAAC,SAAS,EAAE,EAAE,CACZ,MAAM,CAAC,UAAU,CAAC;IAChB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,eAAe,CAAC;QAClB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAChE,CAAC;IACJ,GAAG,EAAE,GAAG,EAAE,CACR,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,IAAI,SAAS,CAAC,CAAC;CACnE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAKlD,MAAM,CAAC,MAAM,kBAAkB,GAC7B,CACE,SAAiB,EACjB,gBAAyB,EACzB,OAA+B,EAC/B,EAAE,CACJ,CAAC,EAAgB,EAAQ,EAAE;IACzB,IAAI,OAAO,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;QACjC,oBAAoB,CAAC,EAAE,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,EAAE,CAAC,YAAY,CAAC;QACd,WAAW,EACT,oFAAoF;QACtF,OAAO,EAAE,iBAAiB,CAAC,SAAS,EAAE,gBAAgB,CAAC;QACvD,aAAa,EAAE,YAAY;QAC3B,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,MAAM;QACZ,UAAU;QACV,gBAAgB,EAAE;YAChB,uEAAuE;YACvE,4DAA4D;SAC7D;QACD,aAAa,EAAE,2CAA2C;KAC3D,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/extensions/tasks/index.d.ts

@@ -0,0 +1,2 @@
+export { makeTasksExtension } from "./extension.js";
+//# sourceMappingURL=index.d.ts.map