@makaio/framework 1.0.0-dev-1785409369816 → 1.0.0-dev-1786014320559

package/dist/tool-approval-service-BVgN9Q1r.mjs

@@ -0,0 +1 @@
+import{SessionStorageSubjects as e}from"./services/session/storage/namespace.mjs";import{n as t}from"./agent-namespace-D51PODFf.mjs";import"./session-BMy2kRpX.mjs";import{AgentSubjects as n,ApprovalSubjects as r,HarnessSubjects as i,computeMetaTags as a}from"@makaio/framework/contracts";import{BaseService as o}from"@makaio/framework/service-base";import{extractToolFilePath as s}from"@makaio/framework/tools";const c={"full-access":0,"always-ask":1,reject:2};function l(){return`apr_${crypto.randomUUID()}`}function u(e){switch(e){case`allow`:return`full-access`;case`deny`:return`reject`;case`ask`:return`always-ask`}}function d(e){if(!e?.length)return`neutral`;let t=a(e);return t.includes(`destructive`)?`destructive`:t.includes(`read-only`)?`safe`:`neutral`}function f(e,t){if(e)return t&&e.toolApprovalOverrides?.[t]!==void 0?e.toolApprovalOverrides[t]:e.approvalPolicy}function p(e,t,n,r){let i=r[t];if(!i?.length)return e;let a=e;for(let e of i){let t=n[e];t&&c[t]>c[a]&&(a=t)}return a}function m(e,t,n){return n.handled?n.data.allowedDirectories??void 0:t?[]:void 0}function h(e,t,n){if(!n||!e?.cwd)return{};let r;return(e.personaId||e.profileId)&&t&&(r=m(e.personaId,e.profileId,t)),{cwd:e.cwd,...r&&{allowedDirectories:r}}}function g(e,t,n){if(!(!e&&!t))return!n||!n.handled?{policy:`always-ask`}:{policy:u(n.data.action),...n.data.personaName&&{personaName:n.data.personaName},...n.data.profileName&&{profileName:n.data.profileName}}}function _(e,t){let n=t.harness?.toolCapabilityMap&&e.toolName?t.harness.toolCapabilityMap[e.toolName]:void 0;return{requestId:l(),toolCallId:e.toolCallId,toolName:e.toolName,args:e.args,agentId:e.agentId,sessionId:e.sessionId,adapterName:t.resolvedAdapterName,...t.personaName&&{personaName:t.personaName},...t.profileName&&{profileName:t.profileName},capabilities:n,riskLevel:d(n),reasoning:e.reasoning,createdAt:Date.now()}}var v=class extends o{logger=console;options;constructor(e,t={}){super(e),this.options=t}async onInit(){this.registerHandler(n.toolApprove,async e=>{let t=await this.getAgentMetadata(e.payload.agentId,e.payload.sessionId),n=(t?.personaId||t?.profileId)&&e.payload.toolName?await this.fetchRawEnrichedPolicy(t?.personaId,t?.profileId,e.payload.toolName):void 0,r=h(t,n,this.options.fileAccessRuleProvider),i=await this.checkFileAccessDenyReason(e.payload,r);if(i){e.setResult({action:`deny`,message:i,shouldAbort:!1});return}let a=await this.resolveSessionOverride(e.payload.sessionId);if(a===`full-access`){e.setResult({action:`allow`});return}if(a===`reject`){e.setResult({action:`deny`,message:`Tool use rejected by session approval policy override`,shouldAbort:!1});return}let o=await this.resolvePolicyWithContext({adapterName:e.payload.adapterName,toolName:e.payload.toolName},t,n);switch(a===`always-ask`?`always-ask`:o.policy){case`full-access`:e.setResult({action:`allow`});return;case`reject`:e.setResult({action:`deny`,message:`Tool use rejected by approval policy`,shouldAbort:!1});return;case`always-ask`:await this.dispatchAlwaysAskApproval(e.payload,e.setResult.bind(e),o);return}})}async dispatchAlwaysAskApproval(e,t,i){let a=_(e,i),o=new AbortController,s=this.bus.on(n.session.closed,()=>{o.abort()},{filter:{agentId:a.agentId,...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}});try{let e=await this.bus.requestOptional(r.request,a,{timeout:0,signal:o.signal});e.handled&&e.data.action===`allow`?t({action:`allow`,...e.data.updatedInput&&{updatedInput:e.data.updatedInput}}):t({action:`deny`,message:e.handled&&e.data.action===`deny`?e.data.message??`User denied tool execution`:`No approval handler available`,shouldAbort:!1})}catch{t({action:`deny`,message:o.signal.aborted?`Approval cancelled — agent session closed`:`Tool approval request failed`,shouldAbort:!1})}finally{s()}}async checkFileAccessDenyReason(e,t){if(!this.options.fileAccessRuleProvider||!t.cwd)return;let n=s(e.toolName,e.args,t.cwd);if(n)try{return(await this.options.fileAccessRuleProvider(t.cwd,t.allowedDirectories)).isDenied(n)?`Access denied: '${n}' is restricted by .makaioignore rules`:void 0}catch{return`Access denied: file access rules could not be evaluated`}}async fetchRawEnrichedPolicy(e,t,n){try{return await this.bus.requestOptional(r.resolveEnrichedPolicy,{toolName:n,personaId:e,profileId:t})}catch(r){return this.logger.error(`[ToolApprovalService] approval.resolveEnrichedPolicy failed; falling back to fail-closed`,{toolName:n,personaId:e,profileId:t,error:r}),{handled:!1}}}async resolvePolicyWithContext(e,t,n){let r=t?.adapterName??e.adapterName,i=g(t?.personaId,t?.profileId,n),a=await this.resolveHarnessPolicy(r,t?.harnessId,t?.clientId),o=f(a,e.toolName),s=i?.policy??o??`always-ask`,c=s;return a?.capabilityOverrides&&a.toolCapabilityMap&&e.toolName&&(c=p(s,e.toolName,a.capabilityOverrides,a.toolCapabilityMap)),{policy:c,harness:a,agent:t,resolvedAdapterName:r,...i?.personaName&&{personaName:i.personaName},...i?.profileName&&{profileName:i.profileName}}}async getAgentMetadata(e,n){try{if(n){let{agents:r}=await this.bus.request(t.listBySession,{sessionId:n});return r.find(t=>t.agentId===e)??null}let r=await this.bus.requestOptional(t.get,{agentId:e});return r.handled?r.data.agent:null}catch{return null}}async resolveSessionOverride(t){if(t)try{let n=await this.bus.requestOptional(e.get,{sessionId:t});return n.handled?n.data.session?.approvalPolicyOverride??void 0:void 0}catch{return}}async resolveHarnessPolicy(e,t,n){try{let r=await this.bus.request(i.resolve,{adapterName:e,...t&&{profileHarnessId:t},...n&&{clientId:n}});return{approvalPolicy:r.approvalPolicy,capabilityOverrides:r.capabilityOverrides,toolCapabilityMap:r.toolCapabilityMap,toolApprovalOverrides:r.toolApprovalOverrides}}catch{return}}};export{v as t};

package/dist/{tools-PdG9fO1M.mjs → tools-DxwHox1a.mjs}

@@ -1 +1 @@
-import{u as e}from"./framework-packages-C3RWfJDk.mjs";import{FILE_ACCESS_RULES_KEY as t,extractToolFilePath as n}from"@makaio/framework/tools";function r(){let t=new Map;return{filter:e=>!!e.tools?.createToolsets,async processActivated(n,r,i){let a=i.getService(e);if(!a)throw Error(`ToolRegistry is not available. Ensure toolRegistryPackage is included in the composition root.`);let o=r.tools.createToolsets(i),s=[];try{for(let e of o)await a.register(e),s.push(()=>a.deregister(e.metadata.name))}catch(e){for(let e=s.length-1;e>=0;--e)try{await s[e]()}catch(e){console.error(`[ToolContributionProcessor] Rollback error for "${n}":`,e)}throw e}t.set(n,s)},async processStopped(e){let n=t.get(e);if(n){for(let t=n.length-1;t>=0;--t)try{await n[t]()}catch(t){console.error(`[ToolContributionProcessor] Deregister error for "${e}":`,t)}t.delete(e)}}}}export{n,r,t};
+import{u as e}from"./framework-packages-D_2hBZ-p.mjs";import{FILE_ACCESS_RULES_KEY as t,extractToolFilePath as n}from"@makaio/framework/tools";function r(){let t=new Map;return{filter:e=>!!e.tools?.createToolsets,async processActivated(n,r,i){let a=i.getService(e);if(!a)throw Error(`ToolRegistry is not available. Ensure toolRegistryPackage is included in the composition root.`);let o=r.tools.createToolsets(i),s=[];try{for(let e of o)await a.register(e),s.push(()=>a.deregister(e.metadata.name))}catch(e){for(let e=s.length-1;e>=0;--e)try{await s[e]()}catch(e){console.error(`[ToolContributionProcessor] Rollback error for "${n}":`,e)}throw e}t.set(n,s)},async processStopped(e){let n=t.get(e);if(n){for(let t=n.length-1;t>=0;--t)try{await n[t]()}catch(t){console.error(`[ToolContributionProcessor] Deregister error for "${e}":`,t)}t.delete(e)}}}}export{n,r,t};

package/dist/{transition-Du3MQzJV.d.mts → transition-BF1nevaC.d.mts}

@@ -1,5 +1,5 @@
-import { q as ArtifactRevision$1 } from "./context-resolution-DdyhpH4L.mjs";
-import { i as JsonValue$1 } from "./json-value-Brslhqbm.mjs";
+import { q as ArtifactRevision$1 } from "./context-resolution-CW0ya4QO.mjs";
+import { a as JsonValue$1 } from "./json-value-C1RGgS0a.mjs";
 import { z } from "zod";
 import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
 
@@ -129,19 +129,6 @@ interface WorkflowBlockMetadata {
   /** Grouping tags for the builder palette. Uncategorized blocks appear in "Other". */
   categories?: string[];
 }
-/**
- * A trigger block declaration — determines WHEN a workflow starts.
- * @typeParam TConfig - Zod shape for the builder configuration form.
- * @typeParam TOutput - Zod type for the payload passed into the workflow as input.
- */
-interface WorkflowTriggerBlock<TConfig extends z.ZodRawShape = z.ZodRawShape, TOutput extends z.ZodType = z.ZodType> {
-  /** Shared metadata used in the builder palette and catalog. */
-  metadata: WorkflowBlockMetadata;
-  /** Drives the configuration form in the builder UI. */
-  configSchema: z.ZodObject<TConfig>;
-  /** The payload shape passed into the workflow when this trigger fires. */
-  outputSchema: TOutput;
-}
 /**
  * A step block declaration — determines WHAT happens inside a workflow.
  *
@@ -173,29 +160,15 @@ interface WorkflowStepBlock<TConfig extends z.ZodRawShape = z.ZodRawShape, TInpu
 }
 /**
  * Collection of workflow blocks contributed by an extension.
+ *
+ * Blocks describe WHAT happens inside a workflow. WHEN a workflow starts is
+ * modelled by executable automation trigger types contributed through the
+ * `automationTriggers` extension surface, so this collection carries steps only.
  */
 interface WorkflowBlockCollection$1 {
-  /** Trigger block declarations — each determines WHEN a workflow starts. */
-  readonly triggers?: readonly WorkflowTriggerBlock[];
   /** Step block declarations — each determines WHAT happens inside a workflow. */
   readonly steps?: readonly WorkflowStepBlock[];
 }
-/**
- * Serialized trigger block as stored in the registry and served via bus.
- *
- * Schema fields are stored as JSON Schema objects for transport and builder
- * catalog rendering.
- */
-interface RegisteredTriggerBlock$1 {
-  /** Trigger metadata combined with the owning extension name. */
-  metadata: WorkflowBlockMetadata & {
-    extensionName: string;
-  };
-  /** JSON Schema representation of the builder configuration form. */
-  configSchema: Record<string, unknown>;
-  /** JSON Schema representation of the trigger output payload. */
-  outputSchema: Record<string, unknown>;
-}
 /**
  * Serialized step block as stored in the registry and served via bus.
  *
@@ -420,4 +393,4 @@ interface TransitionEvaluationContext$1 {
   };
 }
 //#endregion
-export { WorkflowTriggerBlock as C, WorkflowStepBlockRun as S, RegisteredTriggerBlock$1 as _, TransitionActionInvocation$1 as a, WorkflowBlockMetadata as b, TransitionConditionSchema as c, TransitionEventTypeSchema as d, TransitionRuleDefinition$1 as f, RegisteredStepBlock$1 as g, DelegateRoleNodeBlockRun as h, TransitionActionHandler as i, TransitionEvaluationContext$1 as l, DelegateAgentNodeBlockRun as m, ExtensionTransitionRulesContribution as n, TransitionActionInvocationSchema as o, TransitionRuleDefinitionSchema$1 as p, TransitionActionFactory$1 as r, TransitionCondition as s, ExtensionTransitionActionsContribution as t, TransitionEventType$1 as u, StationNodeBlockRun as v, WorkflowStepBlock as x, WorkflowBlockCollection$1 as y };
+export { StationNodeBlockRun as _, TransitionActionInvocation$1 as a, WorkflowStepBlock as b, TransitionConditionSchema as c, TransitionEventTypeSchema as d, TransitionRuleDefinition$1 as f, RegisteredStepBlock$1 as g, DelegateRoleNodeBlockRun as h, TransitionActionHandler as i, TransitionEvaluationContext$1 as l, DelegateAgentNodeBlockRun as m, ExtensionTransitionRulesContribution as n, TransitionActionInvocationSchema as o, TransitionRuleDefinitionSchema$1 as p, TransitionActionFactory$1 as r, TransitionCondition as s, ExtensionTransitionActionsContribution as t, TransitionEventType$1 as u, WorkflowBlockCollection$1 as v, WorkflowStepBlockRun as x, WorkflowBlockMetadata as y };

package/dist/{types-DMLDHFR9.d.mts → types-BNjPhj_a.d.mts}

@@ -1,4 +1,4 @@
-import { r as LogImportMode, t as LogImporterInfo } from "./index-CWHfOz6d.mjs";
+import { r as LogImportMode, t as LogImporterInfo } from "./index-CK3f0bAL.mjs";
 import * as _$_makaio_bus_core0 from "@makaio/framework/bus";
 import { IMakaioBus } from "@makaio/framework/bus";
 import { LogImportOrchestrator, LogImporter } from "@makaio/framework/adapters";