@makaio/framework 1.0.0-dev-1784889676396 → 1.0.0-dev-1785344643235

package/dist/{src-XihJcAQS.mjs → src-DD0v-nIj.mjs}

@@ -1 +1 @@
-import{t as e}from"./jsonl-transport-D8RBF0dK.mjs";import{CorrelationTracker as t,DEFAULT_REQUEST_TIMEOUT_MS as n,handleCorrelationResponse as r,trackMessageCorrelation as i}from"@makaio/framework/bus";var a=class{name;spawnOptions;jsonl=null;handlers=new Set;correlations=new t;handshakeComplete=!1;terminalError=null;localSubscriptions=new Map;readyResolve=null;readyReject=null;onNewReadySession=void 0;onConnected=void 0;onDisconnected=void 0;ready;constructor(e){this.name=e.name??`stdio-server`,this.spawnOptions=e.spawn,this.ready=this.createReadyPromise()}async connect(){if(this.jsonl!==null)throw Error(`StdioServerTransport: already connected`);this.readyResolve===null&&this.readyReject===null&&(this.ready=this.createReadyPromise()),this.handshakeComplete=!1,this.terminalError=null;let t=e(this.spawnOptions);this.jsonl=t,t.onMessage(e=>{this.jsonl===t&&this.handleInbound(e)}),t.onError(e=>{this.jsonl===t&&this.terminateSession(e,!0)}),t.process.once(`exit`,e=>{this.jsonl===t&&this.terminateSession(Error(`Child process exited (code ${e??`signal`}) before subscribe-sync handshake completed`),!1)}),this.localSubscriptions.size>0&&this.sendSubscribeMessage()}async send(e,t){if(this.jsonl===null)throw Error(`StdioServerTransport: not connected`);return this.jsonl.send(e),i(e,this.correlations,t??n)}onReceive(e){return this.handlers.add(e),()=>{this.handlers.delete(e)}}async disconnect(){let e=this.jsonl;this.jsonl=null,this.handshakeComplete=!1,this.terminalError=null,this.readyResolve?.(),this.readyResolve=null,this.readyReject=null,this.correlations.cleanup(),e?.close()}async subscribe(e,t,n=[],r){let i=r??this.localSubscriptions.get(e)?.deliveryClass??`relayable`;this.localSubscriptions.set(e,{priorities:n,filter:t,deliveryClass:i}),this.jsonl!==null&&this.sendSubscribeMessage(e,t,n,i)}async unsubscribe(e){let t=this.localSubscriptions.delete(e);this.jsonl!==null&&t&&this.jsonl.send({type:`unsubscribe`,subjects:{[e]:[]}})}isReady(){return this.jsonl!==null&&this.terminalError===null&&this.handshakeComplete&&this.jsonl.process.exitCode===null}cancelRequest(e,t){this.correlations.cancel(e,t)}createReadyPromise(){let e=new Promise((e,t)=>{this.readyResolve=e,this.readyReject=t});return this.onNewReadySession?.(e),e}terminateSession(e,t){let n=this.jsonl;this.jsonl=null,this.handshakeComplete=!1,this.terminalError=e,this.readyReject?.(e),this.readyResolve=null,this.readyReject=null,this.correlations.cleanup(),t&&n?.close(),this.onDisconnected?.()}async handleInbound(e){if(typeof e!=`object`||!e||typeof e.type!=`string`)return;let t=e;if(t.type!==`heartbeat`){if(t.type===`subscribe-sync-complete`){this.handshakeComplete=!0,this.readyResolve?.(),this.readyResolve=null,this.readyReject=null,this.jsonl?.send({type:`subscribe-sync-complete`}),this.onConnected?.();return}if(!r(t,this.correlations))for(let e of this.handlers)try{await e(t,{transportName:this.name})}catch{}}}sendSubscribeMessage(e,t,n=[],r=`relayable`){if(this.jsonl===null)return;if(e!==void 0){this.jsonl.send({type:`subscribe`,subjects:{[e]:n},deliveryClasses:{[e]:r},...t===void 0?{}:{filters:{[e]:t}}});return}let i={},a={},o={},s=!1;for(let[e,t]of this.localSubscriptions)i[e]=t.priorities,a[e]=t.deliveryClass,t.filter!==void 0&&(o[e]=t.filter,s=!0);this.jsonl.send({type:`subscribe`,subjects:i,deliveryClasses:a,...s?{filters:o}:{}})}};export{a as StdioServerTransport};
+import{t as e}from"./jsonl-transport-bQl3JwIu.mjs";import{CorrelationTracker as t,DEFAULT_REQUEST_TIMEOUT_MS as n,handleCorrelationResponse as r,trackMessageCorrelation as i}from"@makaio/framework/bus";var a=class{name;spawnOptions;jsonl=null;handlers=new Set;correlations=new t;handshakeComplete=!1;terminalError=null;localSubscriptions=new Map;readyResolve=null;readyReject=null;onNewReadySession=void 0;onConnected=void 0;onDisconnected=void 0;ready;constructor(e){this.name=e.name??`stdio-server`,this.spawnOptions=e.spawn,this.ready=this.createReadyPromise()}async connect(){if(this.jsonl!==null)throw Error(`StdioServerTransport: already connected`);this.readyResolve===null&&this.readyReject===null&&(this.ready=this.createReadyPromise()),this.handshakeComplete=!1,this.terminalError=null;let t=e(this.spawnOptions);this.jsonl=t,t.onMessage(e=>{this.jsonl===t&&this.handleInbound(e)}),t.onError(e=>{this.jsonl===t&&this.terminateSession(e,!0)}),t.process.once(`exit`,e=>{this.jsonl===t&&this.terminateSession(Error(`Child process exited (code ${e??`signal`}) before subscribe-sync handshake completed`),!1)}),this.localSubscriptions.size>0&&this.sendSubscribeMessage()}async send(e,t){if(this.jsonl===null)throw Error(`StdioServerTransport: not connected`);return this.jsonl.send(e),i(e,this.correlations,t??n)}onReceive(e){return this.handlers.add(e),()=>{this.handlers.delete(e)}}async disconnect(){let e=this.jsonl;this.jsonl=null,this.handshakeComplete=!1,this.terminalError=null,this.readyResolve?.(),this.readyResolve=null,this.readyReject=null,this.correlations.cleanup(),e?.close()}async subscribe(e,t,n=[],r){let i=r??this.localSubscriptions.get(e)?.deliveryClass??`relayable`;this.localSubscriptions.set(e,{priorities:n,filter:t,deliveryClass:i}),this.jsonl!==null&&this.sendSubscribeMessage(e,t,n,i)}async unsubscribe(e){let t=this.localSubscriptions.delete(e);this.jsonl!==null&&t&&this.jsonl.send({type:`unsubscribe`,subjects:{[e]:[]}})}isReady(){return this.jsonl!==null&&this.terminalError===null&&this.handshakeComplete&&this.jsonl.process.exitCode===null}cancelRequest(e,t){this.correlations.cancel(e,t)}createReadyPromise(){let e=new Promise((e,t)=>{this.readyResolve=e,this.readyReject=t});return this.onNewReadySession?.(e),e}terminateSession(e,t){let n=this.jsonl;this.jsonl=null,this.handshakeComplete=!1,this.terminalError=e,this.readyReject?.(e),this.readyResolve=null,this.readyReject=null,this.correlations.cleanup(),t&&n?.close(),this.onDisconnected?.()}async handleInbound(e){if(typeof e!=`object`||!e||typeof e.type!=`string`)return;let t=e;if(t.type!==`heartbeat`){if(t.type===`subscribe-sync-complete`){this.handshakeComplete=!0,this.readyResolve?.(),this.readyResolve=null,this.readyReject=null,this.jsonl?.send({type:`subscribe-sync-complete`}),this.onConnected?.();return}if(!r(t,this.correlations))for(let e of this.handlers)try{await e(t,{transportName:this.name})}catch{}}}sendSubscribeMessage(e,t,n=[],r=`relayable`){if(this.jsonl===null)return;if(e!==void 0){this.jsonl.send({type:`subscribe`,subjects:{[e]:n},deliveryClasses:{[e]:r},...t===void 0?{}:{filters:{[e]:t}}});return}let i={},a={},o={},s=!1;for(let[e,t]of this.localSubscriptions)i[e]=t.priorities,a[e]=t.deliveryClass,t.filter!==void 0&&(o[e]=t.filter,s=!0);this.jsonl.send({type:`subscribe`,subjects:i,deliveryClasses:a,...s?{filters:o}:{}})}};export{a as StdioServerTransport};

package/dist/storage/drizzle/client.d.mts

@@ -1,2 +1,2 @@
-import { i as createDatabaseClient, n as DatabaseClientConfig, r as PostgresClientOptions, t as DatabaseClient } from "../../client-DYEHDiJN.mjs";
+import { i as createDatabaseClient, n as DatabaseClientConfig, r as PostgresClientOptions, t as DatabaseClient } from "../../client-B--e2qcU.mjs";
 export { DatabaseClient, DatabaseClientConfig, PostgresClientOptions, createDatabaseClient };

package/dist/storage/drizzle/client.mjs

@@ -1 +1 @@
-import{a as e,h as t,n}from"../../registry-Dw6l7k3e.mjs";async function r(r={}){if(r.url!==void 0){let n=e(r.url);if(n.kind===`missing-engine`)throw Error(t(n.dialect,n.packageName));if(n.kind===`engine`)return n.engine.createClient(r)}return n(`sqlite`).createClient(r)}export{r as createDatabaseClient};
+import{a as e,h as t,n}from"../../registry-wfF2uTty.mjs";async function r(r={}){if(r.url!==void 0){let n=e(r.url);if(n.kind===`missing-engine`)throw Error(t(n.dialect,n.packageName));if(n.kind===`engine`)return n.engine.createClient(r)}return n(`sqlite`).createClient(r)}export{r as createDatabaseClient};

package/dist/storage/drizzle/index.d.mts

@@ -1,4 +1,4 @@
-import { a as DATABASE_DIALECT, c as getDatabaseDialect, n as DatabaseClientConfig, o as MakaioDatabase, s as StorageDialect, t as DatabaseClient } from "../../client-DYEHDiJN.mjs";
+import { a as DATABASE_DIALECT, c as getDatabaseDialect, n as DatabaseClientConfig, o as MakaioDatabase, s as StorageDialect, t as DatabaseClient } from "../../client-B--e2qcU.mjs";
 import { IMakaioBus } from "@makaio/framework/bus";
 import { ExtensionContext } from "@makaio/framework/contracts";
 import * as _$drizzle_orm_sqlite_core0 from "drizzle-orm/sqlite-core";
@@ -675,6 +675,54 @@ type LibSQLTransactionExecutor = MakaioDatabase['transaction'];
  * @typeParam T - Callback result type
  */
 type TransactionCallback<T> = Parameters<LibSQLTransactionExecutor>[0] extends ((tx: infer TTx) => Promise<unknown>) ? (tx: TTx) => Promise<T> : never;
+/**
+ * Keyed store of in-flight operation tails.
+ *
+ * Declared structurally so a caller may choose the keyspace its identity
+ * actually lives in: both `Map` and `WeakMap` satisfy it, so a caller keyed on
+ * an object holds no strong reference to it, while a caller keyed on a derived
+ * value (a file path, a connection identity) still gets a queue.
+ * @typeParam TKey - Identity operations are serialized against.
+ */
+interface OperationTailStore<TKey> {
+  /**
+   * Read the tail currently queued for a key.
+   * @param key - Identity to read.
+   * @returns The queued tail, or `undefined` when nothing is in flight.
+   */
+  get(key: TKey): Promise<void> | undefined;
+  /**
+   * Publish the new tail for a key.
+   * @param key - Identity to write.
+   * @param tail - Tail that resolves once the newly queued work has finished.
+   */
+  set(key: TKey, tail: Promise<void>): unknown;
+  /**
+   * Drop a key whose queue has drained.
+   * @param key - Identity to forget.
+   */
+  delete(key: TKey): unknown;
+}
+/**
+ * Run work as the only in-flight operation for a key.
+ *
+ * The queue is a chain of tails: each caller reads the tail currently
+ * published for its key, publishes its own, and waits for the one it read.
+ * A rejected predecessor is absorbed rather than propagated, because a failed
+ * operation still releases the queue for the next one. The key is dropped only
+ * when the tail still published is the one this call wrote, so a successor
+ * that already queued behind it is never orphaned.
+ *
+ * The guarantee is process-local: two processes over one database do not share
+ * a store and must coordinate through the database itself.
+ * @param tails - Store holding the in-flight tail per key.
+ * @param key - Identity this work must not overlap other work on.
+ * @param work - Async work to run once the queue reaches it.
+ * @returns Whatever `work` resolves to.
+ * @typeParam TKey - Identity operations are serialized against.
+ * @typeParam TResult - Result type produced by the work.
+ */
+declare function serializeByKey<TKey, TResult>(tails: OperationTailStore<TKey>, key: TKey, work: () => Promise<TResult>): Promise<TResult>;
 /**
  * Serialize one database operation with transactions using the same handle.
  * @param db - Makaio database instance.
@@ -1094,4 +1142,4 @@ declare module '@makaio/framework/storage' {
   }
 }
 //#endregion
-export { DATABASE_DIALECT, type DialectSchema, type DrizzleHandlerRegistration, DrizzleSchemaRecord, type DrizzleWriteResult, type DualBuilder, type DualColumnBuilderBase, type DualColumnBundle, type DualColumnRef, type DualReferenceActions, type DualTable, type DualTableExtras, type Equal, type FtsMessageExcerptHit, type FtsMessageSearchInput, type FtsSearchStrategy, type FtsSessionCountInput, type FtsSessionSearchInput, type MakaioDatabase, NON_BASELINE_GENERATION_LEGS, type PostgresTwinSchema, type RawSqlExecutor, type RawSqlSession, STORAGE_ENGINE_URL_HINTS, type StorageDialect, type StorageEngine, type StorageEngineCapabilities, type StorageEngineErrorClassifiers, type StorageEngineGenerationLeg, type StorageEngineMigrationBehavior, type StorageEngineUrlHint, type StorageEngineUrlResolution, type StorageNamespace, type StorageNamespaceConfig, type StorageNamespaceExtensions, type TransactionCallback, affectedRowCount, brandDatabase, buildFirstUserMessagePreviewQuery, createStorageNamespace, defineDialectSchema, defineDualTable, describeMissingStorageEngine, didAffectRows, executeTransaction, findGenerationLegForDialect, findStorageEngine, getDatabaseDialect, getRawSqlExecutor, getStorageEngine, importRuntimeModule, isSqliteDuplicateObjectError, isSqliteUniqueViolationError, quoteSqlIdentifier, readErrorCode, registerDrizzleHandlers, registerStorageEngine, resolveSchema, resolveStorageEngine, resolveStorageEngineForUrl, sanitizeFtsQuery, serializeDatabaseOperation, someInCauseChain, sqliteFtsSearchStrategy, sqliteStorageEngine };
+export { DATABASE_DIALECT, type DialectSchema, type DrizzleHandlerRegistration, DrizzleSchemaRecord, type DrizzleWriteResult, type DualBuilder, type DualColumnBuilderBase, type DualColumnBundle, type DualColumnRef, type DualReferenceActions, type DualTable, type DualTableExtras, type Equal, type FtsMessageExcerptHit, type FtsMessageSearchInput, type FtsSearchStrategy, type FtsSessionCountInput, type FtsSessionSearchInput, type MakaioDatabase, NON_BASELINE_GENERATION_LEGS, type OperationTailStore, type PostgresTwinSchema, type RawSqlExecutor, type RawSqlSession, STORAGE_ENGINE_URL_HINTS, type StorageDialect, type StorageEngine, type StorageEngineCapabilities, type StorageEngineErrorClassifiers, type StorageEngineGenerationLeg, type StorageEngineMigrationBehavior, type StorageEngineUrlHint, type StorageEngineUrlResolution, type StorageNamespace, type StorageNamespaceConfig, type StorageNamespaceExtensions, type TransactionCallback, affectedRowCount, brandDatabase, buildFirstUserMessagePreviewQuery, createStorageNamespace, defineDialectSchema, defineDualTable, describeMissingStorageEngine, didAffectRows, executeTransaction, findGenerationLegForDialect, findStorageEngine, getDatabaseDialect, getRawSqlExecutor, getStorageEngine, importRuntimeModule, isSqliteDuplicateObjectError, isSqliteUniqueViolationError, quoteSqlIdentifier, readErrorCode, registerDrizzleHandlers, registerStorageEngine, resolveSchema, resolveStorageEngine, resolveStorageEngineForUrl, sanitizeFtsQuery, serializeByKey, serializeDatabaseOperation, someInCauseChain, sqliteFtsSearchStrategy, sqliteStorageEngine };

package/dist/storage/drizzle/index.mjs

@@ -1 +1 @@
-import{C as e,S as t,_ as n,a as r,b as i,c as a,d as o,f as s,g as c,h as l,i as u,l as d,m as f,n as p,o as m,p as h,r as g,s as _,t as v,u as y,v as b,x,y as S}from"../../registry-Dw6l7k3e.mjs";import{autoPk as C,bool as w,epochMs as T,float8 as E,jsonCol as D}from"./columns/sqlite.mjs";import{autoPk as O,bool as k,epochMs as A,float8 as j,jsonCol as M}from"./columns/postgres.mjs";import{integer as N,sqliteTable as P,text as F}from"drizzle-orm/sqlite-core";import{bigint as I,integer as L,pgTable as R,text as z}from"drizzle-orm/pg-core";import{getTableColumns as B}from"drizzle-orm";import{createStorageNamespace as V}from"@makaio/framework/storage";const H=[{dialect:`postgres`,enginePackageName:`@makaio/storage-pg`,chainDirName:`drizzle-postgres`,drizzleConfigSpecifier:`drizzle.config.ts`,normalizeScriptSpecifier:`scripts/normalize-migrations.ts`}];function U(e){return H.find(t=>t.dialect===e)}async function W(e,t){let n=K.get(e)??Promise.resolve(),r=Promise.withResolvers(),i=n.catch(()=>void 0).then(()=>r.promise);K.set(e,i),await n.catch(()=>void 0);try{return await t()}finally{r.resolve(),K.get(e)===i&&K.delete(e)}}async function G(e,t){return W(e,()=>e.transaction(t))}const K=new WeakMap;function q(e){return(t,n,r)=>e(t,n,r)}function J(e,t){return{sqlite:e,postgres:t}}function Y(t,n){return n[e(t)]}function X(e,t){let n=(e,t)=>({sqlite:e,postgres:t,notNull:()=>n(e.notNull(),t.notNull()),default:r=>n(e.default(r),t.default(r)),primaryKey:()=>n(e.primaryKey(),t.primaryKey()),unique:r=>n(e.unique(r),t.unique(r)),$type:()=>n(e,t),references:(r,i)=>n(e.references(()=>r().sqlite,i),t.references(()=>r().postgres,i))});return n(e,t)}const Z={text:e=>X(F(e),z(e)),textEnum:(e,t)=>X(F(e,t),z(e,t)),epochMs:e=>X(T(e),A(e)),bool:e=>X(w(e),k(e)),jsonCol:e=>X(D(e),M(e)),autoPk:e=>X(C(e),O(e)),float8:e=>X(E(e),j(e)),int4:e=>X(N(e),L(e)),int8:e=>X(N(e),I(e,{mode:`number`}))};function Q(e,t,n){let r=t(Z),i={},a={};for(let[e,t]of Object.entries(r))i[e]=t.sqlite,a[e]=t.postgres;let o=P(e,i,n?.sqlite),s=R(e,a,n?.postgres),c=B(o),l=B(s);return{sqlite:o,postgres:s,columnPair(e){return{sqlite:c[e],postgres:l[e]}}}}export{t as DATABASE_DIALECT,H as NON_BASELINE_GENERATION_LEGS,f as STORAGE_ENGINE_URL_HINTS,i as affectedRowCount,b as brandDatabase,d as buildFirstUserMessagePreviewQuery,V as createStorageNamespace,J as defineDialectSchema,Q as defineDualTable,l as describeMissingStorageEngine,x as didAffectRows,G as executeTransaction,U as findGenerationLegForDialect,v as findStorageEngine,e as getDatabaseDialect,S as getRawSqlExecutor,p as getStorageEngine,n as importRuntimeModule,y as isSqliteDuplicateObjectError,o as isSqliteUniqueViolationError,c as quoteSqlIdentifier,s as readErrorCode,q as registerDrizzleHandlers,g as registerStorageEngine,Y as resolveSchema,u as resolveStorageEngine,r as resolveStorageEngineForUrl,a as sanitizeFtsQuery,W as serializeDatabaseOperation,h as someInCauseChain,_ as sqliteFtsSearchStrategy,m as sqliteStorageEngine};
+import{C as e,S as t,_ as n,a as r,b as i,c as a,d as o,f as s,g as c,h as l,i as u,l as d,m as f,n as p,o as m,p as h,r as g,s as _,t as v,u as y,v as b,x,y as S}from"../../registry-wfF2uTty.mjs";import{autoPk as C,bool as w,epochMs as T,float8 as E,jsonCol as D}from"./columns/sqlite.mjs";import{autoPk as O,bool as k,epochMs as A,float8 as j,jsonCol as M}from"./columns/postgres.mjs";import{integer as N,sqliteTable as P,text as F}from"drizzle-orm/sqlite-core";import{bigint as I,integer as L,pgTable as R,text as z}from"drizzle-orm/pg-core";import{getTableColumns as B}from"drizzle-orm";import{createStorageNamespace as V}from"@makaio/framework/storage";const H=[{dialect:`postgres`,enginePackageName:`@makaio/storage-pg`,chainDirName:`drizzle-postgres`,drizzleConfigSpecifier:`drizzle.config.ts`,normalizeScriptSpecifier:`scripts/normalize-migrations.ts`}];function U(e){return H.find(t=>t.dialect===e)}async function W(e,t,n){let r=e.get(t)??Promise.resolve(),i=Promise.withResolvers(),a=r.catch(()=>void 0).then(()=>i.promise);e.set(t,a),await r.catch(()=>void 0);try{return await n()}finally{i.resolve(),e.get(t)===a&&e.delete(t)}}async function G(e,t){return W(q,e,t)}async function K(e,t){return G(e,()=>e.transaction(t))}const q=new WeakMap;function J(e){return(t,n,r)=>e(t,n,r)}function Y(e,t){return{sqlite:e,postgres:t}}function X(t,n){return n[e(t)]}function Z(e,t){let n=(e,t)=>({sqlite:e,postgres:t,notNull:()=>n(e.notNull(),t.notNull()),default:r=>n(e.default(r),t.default(r)),primaryKey:()=>n(e.primaryKey(),t.primaryKey()),unique:r=>n(e.unique(r),t.unique(r)),$type:()=>n(e,t),references:(r,i)=>n(e.references(()=>r().sqlite,i),t.references(()=>r().postgres,i))});return n(e,t)}const Q={text:e=>Z(F(e),z(e)),textEnum:(e,t)=>Z(F(e,t),z(e,t)),epochMs:e=>Z(T(e),A(e)),bool:e=>Z(w(e),k(e)),jsonCol:e=>Z(D(e),M(e)),autoPk:e=>Z(C(e),O(e)),float8:e=>Z(E(e),j(e)),int4:e=>Z(N(e),L(e)),int8:e=>Z(N(e),I(e,{mode:`number`}))};function $(e,t,n){let r=t(Q),i={},a={};for(let[e,t]of Object.entries(r))i[e]=t.sqlite,a[e]=t.postgres;let o=P(e,i,n?.sqlite),s=R(e,a,n?.postgres),c=B(o),l=B(s);return{sqlite:o,postgres:s,columnPair(e){return{sqlite:c[e],postgres:l[e]}}}}export{t as DATABASE_DIALECT,H as NON_BASELINE_GENERATION_LEGS,f as STORAGE_ENGINE_URL_HINTS,i as affectedRowCount,b as brandDatabase,d as buildFirstUserMessagePreviewQuery,V as createStorageNamespace,Y as defineDialectSchema,$ as defineDualTable,l as describeMissingStorageEngine,x as didAffectRows,K as executeTransaction,U as findGenerationLegForDialect,v as findStorageEngine,e as getDatabaseDialect,S as getRawSqlExecutor,p as getStorageEngine,n as importRuntimeModule,y as isSqliteDuplicateObjectError,o as isSqliteUniqueViolationError,c as quoteSqlIdentifier,s as readErrorCode,J as registerDrizzleHandlers,g as registerStorageEngine,X as resolveSchema,u as resolveStorageEngine,r as resolveStorageEngineForUrl,a as sanitizeFtsQuery,W as serializeByKey,G as serializeDatabaseOperation,h as someInCauseChain,_ as sqliteFtsSearchStrategy,m as sqliteStorageEngine};

package/dist/storage/handlers/drizzle/index.d.mts

@@ -1,2 +1,2 @@
-import { a as DrizzleCrudConfig, i as CrudLifecycleConfig, n as createDrizzleListHandler, o as DrizzleListConfig, r as createDrizzleCrudHandlers, t as buildScopePredicates } from "../../../index-BG9-vQHD.mjs";
+import { a as DrizzleCrudConfig, i as CrudLifecycleConfig, n as createDrizzleListHandler, o as DrizzleListConfig, r as createDrizzleCrudHandlers, t as buildScopePredicates } from "../../../index-DZunhZec.mjs";
 export { CrudLifecycleConfig, DrizzleCrudConfig, DrizzleListConfig, buildScopePredicates, createDrizzleCrudHandlers, createDrizzleListHandler };

package/dist/storage/handlers/drizzle/index.mjs

@@ -1 +1 @@
-import{n as e,r as t,t as n}from"../../../drizzle-oCH9H53q.mjs";export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler};
+import{n as e,r as t,t as n}from"../../../drizzle-z_0SiGY8.mjs";export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler};

package/dist/storage/handlers/index.d.mts

@@ -1,4 +1,4 @@
-import { a as DrizzleCrudConfig, i as CrudLifecycleConfig, n as createDrizzleListHandler, o as DrizzleListConfig, r as createDrizzleCrudHandlers, t as buildScopePredicates } from "../../index-BG9-vQHD.mjs";
+import { a as DrizzleCrudConfig, i as CrudLifecycleConfig, n as createDrizzleListHandler, o as DrizzleListConfig, r as createDrizzleCrudHandlers, t as buildScopePredicates } from "../../index-DZunhZec.mjs";
 
 //#region storage/handlers/src/utils.d.ts
 /**

package/dist/storage/handlers/index.mjs

@@ -1 +1 @@
-import{n as e,r as t,t as n}from"../../drizzle-oCH9H53q.mjs";function r(e,t){let n={...e};for(let e of t)n[e]===null&&(n[e]=void 0);return n}function i(e,t){let n={...e};for(let e of t)n[e]===void 0&&(n[e]=null);return n}export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler,r as nullToUndefined,i as undefinedToNull};
+import{n as e,r as t,t as n}from"../../drizzle-z_0SiGY8.mjs";function r(e,t){let n={...e};for(let e of t)n[e]===null&&(n[e]=void 0);return n}function i(e,t){let n={...e};for(let e of t)n[e]===void 0&&(n[e]=null);return n}export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler,r as nullToUndefined,i as undefinedToNull};

package/dist/testing/drizzle-harness.d.mts

@@ -97,6 +97,47 @@ interface PluginTestDbConfig {
  * @returns Object with db, dbPath, close, and cleanup
  */
 declare function createTempDb(name: string): Promise<TestDbContext>;
+/**
+ * One temporary database file that independent connections can be opened on.
+ *
+ * It exists for suites about restart: a component that is torn down and rebuilt
+ * against the same durable state must be rebuilt against a *new connection*, or
+ * the suite proves only that one JavaScript object still agrees with itself.
+ * Handing out connections rather than a single handle is what makes that the
+ * default rather than something each suite has to remember.
+ */
+interface RestartableTestDb {
+  /** Absolute path of the single file every connection is opened on. */
+  readonly dbPath: string;
+  /**
+   * Open one more independent connection to that file.
+   *
+   * Each call returns a separate connection with its own transaction state, so
+   * two handles see each other's writes only once they are committed.
+   * @returns A newly opened handle to the shared database file.
+   */
+  connect(): Promise<MakaioDatabase>;
+  /**
+   * Close every connection handed out and remove the database files.
+   * @returns Promise that settles once all connections are closed.
+   */
+  close(): Promise<void>;
+}
+/**
+ * Create a temporary SQLite database that survives its connections.
+ *
+ * Unlike {@link createTempDb} this hands out no initial handle: a caller states
+ * how many independent connections it wants by calling
+ * {@link RestartableTestDb.connect}, which is the whole point when the suite is
+ * about what survives a restart.
+ *
+ * Nothing is opened here: the file is created by the first
+ * {@link RestartableTestDb.connect}, which is also where a driver problem
+ * surfaces.
+ * @param name - Service name used in the temporary file name.
+ * @returns The shared store, its path, and its teardown.
+ */
+declare function createRestartableTempDb(name: string): RestartableTestDb;
 /**
  * Creates a suite-level test database for plugin storage tests.
  *
@@ -136,11 +177,11 @@ declare function createPgBrandedTestDb(): Promise<PgBrandedTestDbContext>;
  * Creates cleanup function for test database.
  * @param handlerCleanup - Storage handler cleanup function
  * @param close - Function to close the database connection. Must close synchronously
- *   (true for all SQLite drivers) — the temp file is unlinked immediately after the
+ *   (true for all SQLite drivers) — the temp files are unlinked immediately after the
  *   call, so clients whose close resolves asynchronously must use an awaited teardown
  *   such as {@link PluginTestDbContext.close} instead.
  * @param dbPath - Path to temp database file
- * @returns Cleanup function that closes connection and deletes temp file
+ * @returns Cleanup function that closes the connection and deletes the temp files
  */
 declare function createDbCleanup(handlerCleanup: () => void, close: () => void, dbPath: string): () => void;
 /**
@@ -173,4 +214,4 @@ interface PluginStorageTestContext {
  */
 declare function usePluginStorageTestLifecycle(createTestDbFn: () => Promise<PluginTestDbContext>): PluginStorageTestContext;
 //#endregion
-export { PgBrandedTestDbContext, PluginStorageTestContext, PluginTestDbConfig, PluginTestDbContext, TestDbContext, TestDbContextWithCleanup, createDbCleanup, createPgBrandedTestDb, createPluginTestDb, createTempDb, usePluginStorageTestLifecycle };
+export { PgBrandedTestDbContext, PluginStorageTestContext, PluginTestDbConfig, PluginTestDbContext, RestartableTestDb, TestDbContext, TestDbContextWithCleanup, createDbCleanup, createPgBrandedTestDb, createPluginTestDb, createRestartableTempDb, createTempDb, usePluginStorageTestLifecycle };

package/dist/testing/drizzle-harness.mjs

@@ -1 +1 @@
-import{createRequire as e}from"node:module";import{pathToFileURL as t}from"node:url";import*as n from"node:path";import*as r from"node:fs";import{brandDatabase as i,findStorageEngine as a,getRawSqlExecutor as o,registerStorageEngine as s}from"@makaio/framework/storage/drizzle";import{sql as c}from"drizzle-orm";import*as l from"node:os";import{afterAll as u,afterEach as d,beforeAll as f,beforeEach as p}from"vitest";import{drizzle as m}from"drizzle-orm/libsql";import{createDatabaseClient as h}from"@makaio/framework/storage/drizzle/client";const g=e(import.meta.url);async function _(e){let t=n.join(l.tmpdir(),`makaio-${e}-test-${crypto.randomUUID()}.db`),{db:i,close:a}=await h({url:`file:${t}`}),s=o(i);try{await s.run(c`SELECT 1`)}catch(e){await a();try{r.unlinkSync(t)}catch{}throw e}return{db:i,dbPath:t,exec:e=>s.run(e),close:a,cleanup:x(()=>{},a,t)}}async function v(e){let t=n.join(l.tmpdir(),`makaio-${e.name}-test-${crypto.randomUUID()}.db`),{db:i,close:a}=await h({url:`file:${t}`}),s=o(i);try{for(let t of e.schemas)await s.run(t)}catch(e){await a();try{r.unlinkSync(t)}catch{}throw e}return{db:i,dbPath:t,exec:e=>s.run(e),clearData:async()=>{for(let t of e.tables)await s.run(c.raw(`DELETE FROM ${t}`))},registerHandlers:()=>e.registerHandlers(i),close:async()=>{await a();try{r.unlinkSync(t)}catch{}}}}async function y(){let{storageEngine:e}=await import(t(g.resolve(`@makaio/storage-pg`)).href);return e}async function b(){if(!a(`postgres`)){let e;try{e=await y()}catch(e){throw Error(`createPgBrandedTestDb requires @makaio/storage-pg to be resolvable from @makaio/test-utils.`,{cause:e})}s(e)}let e=[],t={async run(t){return e.push(JSON.stringify(t.queryChunks)),{rowsAffected:0}},async all(){return[]}},n={dialect:`postgres`,run:t.run,all:t.all,withSession:e=>e(t)};return{db:i(m({connection:{url:`:memory:`}}),`postgres`,n),statements:e}}function x(e,t,n){return()=>{e(),t();try{r.unlinkSync(n)}catch{}}}function S(e){let t,n;return f(async()=>{t=await e()}),p(async()=>{if(!t)throw Error(`usePluginStorageTestLifecycle: createTestDbFn did not initialize db context`);await t.clearData(),n=t.registerHandlers()}),d(()=>{n?.(),n=void 0}),u(async()=>{t&&await t.close()}),{get dbContext(){return t}}}export{x as createDbCleanup,b as createPgBrandedTestDb,v as createPluginTestDb,_ as createTempDb,S as usePluginStorageTestLifecycle};
+import{createRequire as e}from"node:module";import{pathToFileURL as t}from"node:url";import*as n from"node:path";import*as r from"node:fs";import{brandDatabase as i,findStorageEngine as a,getRawSqlExecutor as o,registerStorageEngine as s}from"@makaio/framework/storage/drizzle";import{sql as c}from"drizzle-orm";import*as l from"node:os";import{afterAll as u,afterEach as d,beforeAll as f,beforeEach as p}from"vitest";import{drizzle as m}from"drizzle-orm/libsql";import{createDatabaseClient as h}from"@makaio/framework/storage/drizzle/client";const g=e(import.meta.url);async function _(e,t,n){let r=[e];try{await t()}catch(e){r.push(e)}finally{n?.()}throw r.length===1?e:AggregateError(r,`Database setup and cleanup both failed`)}async function v(e){let t=n.join(l.tmpdir(),`makaio-${e}-test-${crypto.randomUUID()}.db`),{db:r,close:i}=await h({url:`file:${t}`}),a=o(r);try{await a.run(c`SELECT 1`)}catch(e){await _(e,i,()=>C(t))}return{db:r,dbPath:t,exec:e=>a.run(e),close:i,cleanup:w(()=>{},i,t)}}function y(e){let t=n.join(l.tmpdir(),`makaio-${e}-test-${crypto.randomUUID()}.db`),r=[],i;return{dbPath:t,connect:async()=>{let e=await h({url:`file:${t}`});try{await o(e.db).run(c`SELECT 1`)}catch(t){await _(t,e.close)}return r.push(e.close),e.db},close:()=>i??=(async()=>{let e=await Promise.allSettled(r.splice(0).map(e=>e()));C(t);let n=e.filter(e=>e.status===`rejected`);if(n.length>0)throw AggregateError(n.map(e=>e.reason),`Failed to close ${n.length} restartable test database connections`)})()}}async function b(e){let t=n.join(l.tmpdir(),`makaio-${e.name}-test-${crypto.randomUUID()}.db`),{db:r,close:i}=await h({url:`file:${t}`}),a=o(r);try{for(let t of e.schemas)await a.run(t)}catch(e){await _(e,i,()=>C(t))}return{db:r,dbPath:t,exec:e=>a.run(e),clearData:async()=>{for(let t of e.tables)await a.run(c.raw(`DELETE FROM ${t}`))},registerHandlers:()=>e.registerHandlers(r),close:async()=>{try{await i()}finally{C(t)}}}}async function x(){let{storageEngine:e}=await import(t(g.resolve(`@makaio/storage-pg`)).href);return e}async function S(){if(!a(`postgres`)){let e;try{e=await x()}catch(e){throw Error(`createPgBrandedTestDb requires @makaio/storage-pg to be resolvable from @makaio/test-utils.`,{cause:e})}s(e)}let e=[],t={async run(t){return e.push(JSON.stringify(t.queryChunks)),{rowsAffected:0}},async all(){return[]}},n={dialect:`postgres`,run:t.run,all:t.all,withSession:e=>e(t)};return{db:i(m({connection:{url:`:memory:`}}),`postgres`,n),statements:e}}function C(e){for(let t of[``,`-wal`,`-shm`])try{r.unlinkSync(`${e}${t}`)}catch{}}function w(e,t,n){return()=>{let r=[];try{e()}catch(e){r.push(e)}try{t()}catch(e){r.push(e)}finally{C(n)}if(r.length>0)throw AggregateError(r,`Test database cleanup failed with ${r.length} error(s)`)}}function T(e){let t,n;return f(async()=>{t=await e()}),p(async()=>{if(!t)throw Error(`usePluginStorageTestLifecycle: createTestDbFn did not initialize db context`);await t.clearData(),n=t.registerHandlers()}),d(()=>{try{n?.()}finally{n=void 0}}),u(async()=>{t&&await t.close()}),{get dbContext(){return t}}}export{w as createDbCleanup,S as createPgBrandedTestDb,b as createPluginTestDb,y as createRestartableTempDb,v as createTempDb,T as usePluginStorageTestLifecycle};

package/dist/{tool-approval-service-fIZ9x0kL.mjs → tool-approval-service-kBA0fRzm.mjs}

@@ -1 +1 @@
-import{F as e}from"./handlers-cMBmexF4.mjs";import{SessionStorageSubjects as t}from"./services/session/storage/namespace.mjs";import"./session-idI1jk5X.mjs";import{AgentSubjects as n,ApprovalSubjects as r,HarnessSubjects as i,computeMetaTags as a}from"@makaio/framework/contracts";import{BaseService as o}from"@makaio/framework/service-base";import{extractToolFilePath as s}from"@makaio/framework/tools";const c={"full-access":0,"always-ask":1,reject:2};function l(){return`apr_${crypto.randomUUID()}`}function u(e){switch(e){case`allow`:return`full-access`;case`deny`:return`reject`;case`ask`:return`always-ask`}}function d(e){if(!e?.length)return`neutral`;let t=a(e);return t.includes(`destructive`)?`destructive`:t.includes(`read-only`)?`safe`:`neutral`}function f(e,t){if(e)return t&&e.toolApprovalOverrides?.[t]!==void 0?e.toolApprovalOverrides[t]:e.approvalPolicy}function p(e,t,n,r){let i=r[t];if(!i?.length)return e;let a=e;for(let e of i){let t=n[e];t&&c[t]>c[a]&&(a=t)}return a}function m(e,t,n){return n.handled?n.data.allowedDirectories??void 0:t?[]:void 0}function h(e,t,n){if(!n||!e?.cwd)return{};let r;return(e.personaId||e.profileId)&&t&&(r=m(e.personaId,e.profileId,t)),{cwd:e.cwd,...r&&{allowedDirectories:r}}}function g(e,t,n){if(!(!e&&!t))return!n||!n.handled?{policy:`always-ask`}:{policy:u(n.data.action),...n.data.personaName&&{personaName:n.data.personaName},...n.data.profileName&&{profileName:n.data.profileName}}}function _(e,t){let n=t.harness?.toolCapabilityMap&&e.toolName?t.harness.toolCapabilityMap[e.toolName]:void 0;return{requestId:l(),toolCallId:e.toolCallId,toolName:e.toolName,args:e.args,agentId:e.agentId,sessionId:e.sessionId,adapterName:t.resolvedAdapterName,...t.personaName&&{personaName:t.personaName},...t.profileName&&{profileName:t.profileName},capabilities:n,riskLevel:d(n),reasoning:e.reasoning,createdAt:Date.now()}}var v=class extends o{logger=console;options;constructor(e,t={}){super(e),this.options=t}async onInit(){this.registerHandler(n.toolApprove,async e=>{let t=await this.getAgentMetadata(e.payload.agentId,e.payload.sessionId),n=(t?.personaId||t?.profileId)&&e.payload.toolName?await this.fetchRawEnrichedPolicy(t?.personaId,t?.profileId,e.payload.toolName):void 0,r=h(t,n,this.options.fileAccessRuleProvider),i=await this.checkFileAccessDenyReason(e.payload,r);if(i){e.setResult({action:`deny`,message:i,shouldAbort:!1});return}let a=await this.resolveSessionOverride(e.payload.sessionId);if(a===`full-access`){e.setResult({action:`allow`});return}if(a===`reject`){e.setResult({action:`deny`,message:`Tool use rejected by session approval policy override`,shouldAbort:!1});return}let o=await this.resolvePolicyWithContext({adapterName:e.payload.adapterName,toolName:e.payload.toolName},t,n);switch(a===`always-ask`?`always-ask`:o.policy){case`full-access`:e.setResult({action:`allow`});return;case`reject`:e.setResult({action:`deny`,message:`Tool use rejected by approval policy`,shouldAbort:!1});return;case`always-ask`:await this.dispatchAlwaysAskApproval(e.payload,e.setResult.bind(e),o);return}})}async dispatchAlwaysAskApproval(e,t,i){let a=_(e,i),o=new AbortController,s=this.bus.on(n.session.closed,()=>{o.abort()},{filter:{agentId:a.agentId,...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}});try{let e=await this.bus.requestOptional(r.request,a,{timeout:0,signal:o.signal});e.handled&&e.data.action===`allow`?t({action:`allow`,...e.data.updatedInput&&{updatedInput:e.data.updatedInput}}):t({action:`deny`,message:e.handled&&e.data.action===`deny`?e.data.message??`User denied tool execution`:`No approval handler available`,shouldAbort:!1})}catch{t({action:`deny`,message:o.signal.aborted?`Approval cancelled — agent session closed`:`Tool approval request failed`,shouldAbort:!1})}finally{s()}}async checkFileAccessDenyReason(e,t){if(!this.options.fileAccessRuleProvider||!t.cwd)return;let n=s(e.toolName,e.args,t.cwd);if(n)try{return(await this.options.fileAccessRuleProvider(t.cwd,t.allowedDirectories)).isDenied(n)?`Access denied: '${n}' is restricted by .makaioignore rules`:void 0}catch{return`Access denied: file access rules could not be evaluated`}}async fetchRawEnrichedPolicy(e,t,n){try{return await this.bus.requestOptional(r.resolveEnrichedPolicy,{toolName:n,personaId:e,profileId:t})}catch(r){return this.logger.error(`[ToolApprovalService] approval.resolveEnrichedPolicy failed; falling back to fail-closed`,{toolName:n,personaId:e,profileId:t,error:r}),{handled:!1}}}async resolvePolicyWithContext(e,t,n){let r=t?.adapterName??e.adapterName,i=g(t?.personaId,t?.profileId,n),a=await this.resolveHarnessPolicy(r,t?.harnessId,t?.clientId),o=f(a,e.toolName),s=i?.policy??o??`always-ask`,c=s;return a?.capabilityOverrides&&a.toolCapabilityMap&&e.toolName&&(c=p(s,e.toolName,a.capabilityOverrides,a.toolCapabilityMap)),{policy:c,harness:a,agent:t,resolvedAdapterName:r,...i?.personaName&&{personaName:i.personaName},...i?.profileName&&{profileName:i.profileName}}}async getAgentMetadata(t,n){try{if(n){let{agents:r}=await this.bus.request(e.listBySession,{sessionId:n});return r.find(e=>e.agentId===t)??null}let r=await this.bus.requestOptional(e.get,{agentId:t});return r.handled?r.data.agent:null}catch{return null}}async resolveSessionOverride(e){if(e)try{let n=await this.bus.requestOptional(t.get,{sessionId:e});return n.handled?n.data.session?.approvalPolicyOverride??void 0:void 0}catch{return}}async resolveHarnessPolicy(e,t,n){try{let r=await this.bus.request(i.resolve,{adapterName:e,...t&&{profileHarnessId:t},...n&&{clientId:n}});return{approvalPolicy:r.approvalPolicy,capabilityOverrides:r.capabilityOverrides,toolCapabilityMap:r.toolCapabilityMap,toolApprovalOverrides:r.toolApprovalOverrides}}catch{return}}};export{v as t};
+import{F as e}from"./handlers-CfnLyLfE.mjs";import{SessionStorageSubjects as t}from"./services/session/storage/namespace.mjs";import"./session-BTFiDoGz.mjs";import{AgentSubjects as n,ApprovalSubjects as r,HarnessSubjects as i,computeMetaTags as a}from"@makaio/framework/contracts";import{BaseService as o}from"@makaio/framework/service-base";import{extractToolFilePath as s}from"@makaio/framework/tools";const c={"full-access":0,"always-ask":1,reject:2};function l(){return`apr_${crypto.randomUUID()}`}function u(e){switch(e){case`allow`:return`full-access`;case`deny`:return`reject`;case`ask`:return`always-ask`}}function d(e){if(!e?.length)return`neutral`;let t=a(e);return t.includes(`destructive`)?`destructive`:t.includes(`read-only`)?`safe`:`neutral`}function f(e,t){if(e)return t&&e.toolApprovalOverrides?.[t]!==void 0?e.toolApprovalOverrides[t]:e.approvalPolicy}function p(e,t,n,r){let i=r[t];if(!i?.length)return e;let a=e;for(let e of i){let t=n[e];t&&c[t]>c[a]&&(a=t)}return a}function m(e,t,n){return n.handled?n.data.allowedDirectories??void 0:t?[]:void 0}function h(e,t,n){if(!n||!e?.cwd)return{};let r;return(e.personaId||e.profileId)&&t&&(r=m(e.personaId,e.profileId,t)),{cwd:e.cwd,...r&&{allowedDirectories:r}}}function g(e,t,n){if(!(!e&&!t))return!n||!n.handled?{policy:`always-ask`}:{policy:u(n.data.action),...n.data.personaName&&{personaName:n.data.personaName},...n.data.profileName&&{profileName:n.data.profileName}}}function _(e,t){let n=t.harness?.toolCapabilityMap&&e.toolName?t.harness.toolCapabilityMap[e.toolName]:void 0;return{requestId:l(),toolCallId:e.toolCallId,toolName:e.toolName,args:e.args,agentId:e.agentId,sessionId:e.sessionId,adapterName:t.resolvedAdapterName,...t.personaName&&{personaName:t.personaName},...t.profileName&&{profileName:t.profileName},capabilities:n,riskLevel:d(n),reasoning:e.reasoning,createdAt:Date.now()}}var v=class extends o{logger=console;options;constructor(e,t={}){super(e),this.options=t}async onInit(){this.registerHandler(n.toolApprove,async e=>{let t=await this.getAgentMetadata(e.payload.agentId,e.payload.sessionId),n=(t?.personaId||t?.profileId)&&e.payload.toolName?await this.fetchRawEnrichedPolicy(t?.personaId,t?.profileId,e.payload.toolName):void 0,r=h(t,n,this.options.fileAccessRuleProvider),i=await this.checkFileAccessDenyReason(e.payload,r);if(i){e.setResult({action:`deny`,message:i,shouldAbort:!1});return}let a=await this.resolveSessionOverride(e.payload.sessionId);if(a===`full-access`){e.setResult({action:`allow`});return}if(a===`reject`){e.setResult({action:`deny`,message:`Tool use rejected by session approval policy override`,shouldAbort:!1});return}let o=await this.resolvePolicyWithContext({adapterName:e.payload.adapterName,toolName:e.payload.toolName},t,n);switch(a===`always-ask`?`always-ask`:o.policy){case`full-access`:e.setResult({action:`allow`});return;case`reject`:e.setResult({action:`deny`,message:`Tool use rejected by approval policy`,shouldAbort:!1});return;case`always-ask`:await this.dispatchAlwaysAskApproval(e.payload,e.setResult.bind(e),o);return}})}async dispatchAlwaysAskApproval(e,t,i){let a=_(e,i),o=new AbortController,s=this.bus.on(n.session.closed,()=>{o.abort()},{filter:{agentId:a.agentId,...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}});try{let e=await this.bus.requestOptional(r.request,a,{timeout:0,signal:o.signal});e.handled&&e.data.action===`allow`?t({action:`allow`,...e.data.updatedInput&&{updatedInput:e.data.updatedInput}}):t({action:`deny`,message:e.handled&&e.data.action===`deny`?e.data.message??`User denied tool execution`:`No approval handler available`,shouldAbort:!1})}catch{t({action:`deny`,message:o.signal.aborted?`Approval cancelled — agent session closed`:`Tool approval request failed`,shouldAbort:!1})}finally{s()}}async checkFileAccessDenyReason(e,t){if(!this.options.fileAccessRuleProvider||!t.cwd)return;let n=s(e.toolName,e.args,t.cwd);if(n)try{return(await this.options.fileAccessRuleProvider(t.cwd,t.allowedDirectories)).isDenied(n)?`Access denied: '${n}' is restricted by .makaioignore rules`:void 0}catch{return`Access denied: file access rules could not be evaluated`}}async fetchRawEnrichedPolicy(e,t,n){try{return await this.bus.requestOptional(r.resolveEnrichedPolicy,{toolName:n,personaId:e,profileId:t})}catch(r){return this.logger.error(`[ToolApprovalService] approval.resolveEnrichedPolicy failed; falling back to fail-closed`,{toolName:n,personaId:e,profileId:t,error:r}),{handled:!1}}}async resolvePolicyWithContext(e,t,n){let r=t?.adapterName??e.adapterName,i=g(t?.personaId,t?.profileId,n),a=await this.resolveHarnessPolicy(r,t?.harnessId,t?.clientId),o=f(a,e.toolName),s=i?.policy??o??`always-ask`,c=s;return a?.capabilityOverrides&&a.toolCapabilityMap&&e.toolName&&(c=p(s,e.toolName,a.capabilityOverrides,a.toolCapabilityMap)),{policy:c,harness:a,agent:t,resolvedAdapterName:r,...i?.personaName&&{personaName:i.personaName},...i?.profileName&&{profileName:i.profileName}}}async getAgentMetadata(t,n){try{if(n){let{agents:r}=await this.bus.request(e.listBySession,{sessionId:n});return r.find(e=>e.agentId===t)??null}let r=await this.bus.requestOptional(e.get,{agentId:t});return r.handled?r.data.agent:null}catch{return null}}async resolveSessionOverride(e){if(e)try{let n=await this.bus.requestOptional(t.get,{sessionId:e});return n.handled?n.data.session?.approvalPolicyOverride??void 0:void 0}catch{return}}async resolveHarnessPolicy(e,t,n){try{let r=await this.bus.request(i.resolve,{adapterName:e,...t&&{profileHarnessId:t},...n&&{clientId:n}});return{approvalPolicy:r.approvalPolicy,capabilityOverrides:r.capabilityOverrides,toolCapabilityMap:r.toolCapabilityMap,toolApprovalOverrides:r.toolApprovalOverrides}}catch{return}}};export{v as t};

package/dist/tools-PdG9fO1M.mjs

@@ -0,0 +1 @@
+import{u as e}from"./framework-packages-C3RWfJDk.mjs";import{FILE_ACCESS_RULES_KEY as t,extractToolFilePath as n}from"@makaio/framework/tools";function r(){let t=new Map;return{filter:e=>!!e.tools?.createToolsets,async processActivated(n,r,i){let a=i.getService(e);if(!a)throw Error(`ToolRegistry is not available. Ensure toolRegistryPackage is included in the composition root.`);let o=r.tools.createToolsets(i),s=[];try{for(let e of o)await a.register(e),s.push(()=>a.deregister(e.metadata.name))}catch(e){for(let e=s.length-1;e>=0;--e)try{await s[e]()}catch(e){console.error(`[ToolContributionProcessor] Rollback error for "${n}":`,e)}throw e}t.set(n,s)},async processStopped(e){let n=t.get(e);if(n){for(let t=n.length-1;t>=0;--t)try{await n[t]()}catch(t){console.error(`[ToolContributionProcessor] Deregister error for "${e}":`,t)}t.delete(e)}}}}export{n,r,t};

package/dist/{transition-BodgGLZx.d.mts → transition-DuVzKt8-.d.mts}

@@ -1,5 +1,5 @@
-import { q as ArtifactRevision$1 } from "./context-resolution-B9ANWbG0.mjs";
-import { i as JsonValue$1 } from "./json-value-BwVdTylT.mjs";
+import { q as ArtifactRevision$1 } from "./context-resolution-BQBk4Ish.mjs";
+import { i as JsonValue$1 } from "./json-value-Brslhqbm.mjs";
 import { z } from "zod";
 import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
 
@@ -258,8 +258,7 @@ type TransitionCondition = z.infer<typeof TransitionConditionSchema>;
  * Invocation descriptor for the action to execute when a transition rule fires.
  *
  * `type` selects the registered action handler; `input` supplies the
- * action-specific payload; `executionHints` threads optional infrastructure
- * hints to the execution host.
+ * action-specific payload.
  *
  * Built-in action type:
  * - `'workflow.start'` — start a workflow execution via the bus
@@ -267,25 +266,6 @@ type TransitionCondition = z.infer<typeof TransitionConditionSchema>;
 declare const TransitionActionInvocationSchema: z.ZodObject<{
   type: z.ZodString;
   input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-  executionHints: z.ZodOptional<z.ZodObject<{
-    source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-      kind: z.ZodLiteral<"path">;
-      path: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-      kind: z.ZodLiteral<"source">;
-      filename: z.ZodString;
-      source: z.ZodString;
-    }, z.core.$strict>], "kind">>;
-    requirements: z.ZodOptional<z.ZodObject<{
-      isolation: z.ZodOptional<z.ZodEnum<{
-        local: "local";
-        remote: "remote";
-        container: "container";
-      }>>;
-      capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-    providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-  }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
 }, z.core.$strip>;
 type TransitionActionInvocation$1 = z.infer<typeof TransitionActionInvocationSchema>;
 /**
@@ -314,25 +294,6 @@ declare const TransitionRuleDefinitionSchema$1: z.ZodObject<{
   action: z.ZodObject<{
     type: z.ZodString;
     input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-    executionHints: z.ZodOptional<z.ZodObject<{
-      source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"path">;
-        path: z.ZodString;
-      }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"source">;
-        filename: z.ZodString;
-        source: z.ZodString;
-      }, z.core.$strict>], "kind">>;
-      requirements: z.ZodOptional<z.ZodObject<{
-        isolation: z.ZodOptional<z.ZodEnum<{
-          local: "local";
-          remote: "remote";
-          container: "container";
-        }>>;
-        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-      providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
   }, z.core.$strip>;
   enabled: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;

package/dist/{types-LspCUW09.d.mts → types-B1MNcwgH.d.mts}

@@ -1,4 +1,4 @@
-import { r as LogImportMode, t as LogImporterInfo } from "./index-DaMfTvfz.mjs";
+import { r as LogImportMode, t as LogImporterInfo } from "./index-DA9g2A5P.mjs";
 import * as _$_makaio_bus_core0 from "@makaio/framework/bus";
 import { IMakaioBus } from "@makaio/framework/bus";
 import { LogImportOrchestrator, LogImporter } from "@makaio/framework/adapters";