@makaio/framework 1.0.0-dev-1785409369816 → 1.0.0-dev-1787670071418

package/dist/storage/drizzle/index.d.mts

@@ -1,4 +1,4 @@
-import { a as DATABASE_DIALECT, c as getDatabaseDialect, n as DatabaseClientConfig, o as MakaioDatabase, s as StorageDialect, t as DatabaseClient } from "../../client-B--e2qcU.mjs";
+import { a as DATABASE_DIALECT, c as getDatabaseDialect, n as DatabaseClientConfig, o as MakaioDatabase, s as StorageDialect, t as DatabaseClient } from "../../client-BG0WX5Vz.mjs";
 import { IMakaioBus } from "@makaio/framework/bus";
 import { ExtensionContext } from "@makaio/framework/contracts";
 import * as _$drizzle_orm_sqlite_core0 from "drizzle-orm/sqlite-core";
@@ -248,6 +248,26 @@ interface FtsSearchStrategy {
 }
 //#endregion
 //#region storage/drizzle/src/engine/types.d.ts
+/** Stable identity for a transaction-scoped cross-process lock. */
+interface TransactionLock {
+  /** Versioned domain that owns the identity format. */
+  readonly namespace: string;
+  /** Domain-owned stable identity within the lock namespace. */
+  readonly identity: string;
+}
+/** Engine-specific expressions that acquire transaction-scoped stable keys. */
+interface StorageEngineTransactionLocks {
+  /**
+   * Build transaction-lock expressions for the supplied stable keys.
+   *
+   * The generic Drizzle seam executes every returned expression sequentially.
+   * Engines that serialize these operations without a cross-process primitive
+   * return an empty list.
+   * @param locks - Stable keys the caller needs for this transaction.
+   * @returns Expressions whose evaluation acquires the requested locks.
+   */
+  lockExpressions(locks: readonly TransactionLock[]): readonly SQL[];
+}
 /**
  * Dialect-specific classification of database errors.
  *
@@ -306,6 +326,28 @@ interface StorageEngineCapabilities {
    */
   tableExists(executor: RawSqlExecutor, tableName: string): Promise<boolean>;
 }
+/**
+ * Engine-owned protocol for suspending referential-integrity enforcement
+ * around a migration.
+ *
+ * The statements are executed outside the migration transaction, because an
+ * engine that needs this protocol at all is one whose enforcement switch is
+ * connection-scoped and inert inside a transaction.
+ */
+interface StorageEngineConstraintSuspension {
+  /**
+   * Returns `true` when a migration's statement stream asks for enforcement to
+   * be suspended, so migrations that do not need it keep running with
+   * enforcement active.
+   * @param statements - The migration's statements, in execution order.
+   * @returns Whether the migration requests constraint suspension.
+   */
+  isRequestedBy(statements: readonly string[]): boolean;
+  /** Statement that disables enforcement, run before the transaction opens. */
+  readonly suspendStatement: string;
+  /** Statement that re-enables enforcement, run after the transaction closes. */
+  readonly restoreStatement: string;
+}
 /**
  * Migration behavior owned by an engine: ledger naming and DDL, journal
  * dialect, chain directory layout, and transaction semantics.
@@ -350,6 +392,24 @@ interface StorageEngineMigrationBehavior {
    * isolation-level pinning the engine's ledger recheck protocol requires.
    */
   readonly beginTransactionStatement: string;
+  /**
+   * Protocol for migrations that must run without referential-integrity
+   * enforcement.
+   *
+   * Optional: engines whose DDL can restructure a referenced parent table
+   * in place omit it. SQLite declares it because its only way to add or drop
+   * a table constraint is the documented table rebuild
+   * (`CREATE __new_x` → copy → `DROP x` → `RENAME`), and dropping a referenced
+   * parent while enforcement is active fires the cascade delete actions
+   * declared by its children. Generated rebuild migrations therefore carry a
+   * `PRAGMA foreign_keys=OFF` request in their own statement stream, which
+   * SQLite silently ignores there because the applicator has already opened a
+   * transaction — enforcement pragmas are no-ops inside one. The applicator
+   * honors the request by bracketing the whole migration, transaction
+   * included, with {@link StorageEngineConstraintSuspension.suspendStatement}
+   * and {@link StorageEngineConstraintSuspension.restoreStatement}.
+   */
+  readonly constraintSuspension?: StorageEngineConstraintSuspension;
   /**
    * Acquire the engine's cross-process migration lock inside an open
    * transaction.
@@ -405,6 +465,8 @@ interface StorageEngine {
   readonly capabilities: StorageEngineCapabilities;
   /** Migration ledger, journal, and transaction behavior. */
   readonly migrations: StorageEngineMigrationBehavior;
+  /** Transaction-scoped stable-key locking behavior. */
+  readonly transactionLocks: StorageEngineTransactionLocks;
   /**
    * Full-text-search provisioning and query operations.
    *
@@ -758,6 +820,23 @@ declare function serializeDatabaseOperation<T>(db: MakaioDatabase, operation: ()
  */
 declare function executeTransaction<T>(db: MakaioDatabase, callback: TransactionCallback<T>): Promise<T>;
 //#endregion
+//#region storage/drizzle/src/transaction-locks.d.ts
+/** Transaction context accepted by {@link acquireTransactionLocks}. */
+type TransactionLockTransaction = Parameters<TransactionCallback<unknown>>[0];
+/**
+ * Acquire all requested stable keys before the caller evaluates or mutates the
+ * rows they protect.
+ *
+ * Expressions are evaluated one at a time so an engine that maps keys to
+ * database locks controls the exact acquisition order. SQLite returns no
+ * expressions because its transaction writer serialization already supplies
+ * the required ordering.
+ * @param db - Database handle selecting the storage engine strategy.
+ * @param tx - Open transaction that will retain acquired locks until completion.
+ * @param locks - Stable keys the following statements may mutate.
+ */
+declare function acquireTransactionLocks(db: MakaioDatabase, tx: TransactionLockTransaction, locks: readonly TransactionLock[]): Promise<void>;
+//#endregion
 //#region storage/drizzle/src/fts/sanitize.d.ts
 /**
  * FTS5 query utilities for SQLite full-text search.
@@ -1142,4 +1221,4 @@ declare module '@makaio/framework/storage' {
   }
 }
 //#endregion
-export { DATABASE_DIALECT, type DialectSchema, type DrizzleHandlerRegistration, DrizzleSchemaRecord, type DrizzleWriteResult, type DualBuilder, type DualColumnBuilderBase, type DualColumnBundle, type DualColumnRef, type DualReferenceActions, type DualTable, type DualTableExtras, type Equal, type FtsMessageExcerptHit, type FtsMessageSearchInput, type FtsSearchStrategy, type FtsSessionCountInput, type FtsSessionSearchInput, type MakaioDatabase, NON_BASELINE_GENERATION_LEGS, type OperationTailStore, type PostgresTwinSchema, type RawSqlExecutor, type RawSqlSession, STORAGE_ENGINE_URL_HINTS, type StorageDialect, type StorageEngine, type StorageEngineCapabilities, type StorageEngineErrorClassifiers, type StorageEngineGenerationLeg, type StorageEngineMigrationBehavior, type StorageEngineUrlHint, type StorageEngineUrlResolution, type StorageNamespace, type StorageNamespaceConfig, type StorageNamespaceExtensions, type TransactionCallback, affectedRowCount, brandDatabase, buildFirstUserMessagePreviewQuery, createStorageNamespace, defineDialectSchema, defineDualTable, describeMissingStorageEngine, didAffectRows, executeTransaction, findGenerationLegForDialect, findStorageEngine, getDatabaseDialect, getRawSqlExecutor, getStorageEngine, importRuntimeModule, isSqliteDuplicateObjectError, isSqliteUniqueViolationError, quoteSqlIdentifier, readErrorCode, registerDrizzleHandlers, registerStorageEngine, resolveSchema, resolveStorageEngine, resolveStorageEngineForUrl, sanitizeFtsQuery, serializeByKey, serializeDatabaseOperation, someInCauseChain, sqliteFtsSearchStrategy, sqliteStorageEngine };
+export { DATABASE_DIALECT, type DialectSchema, type DrizzleHandlerRegistration, DrizzleSchemaRecord, type DrizzleWriteResult, type DualBuilder, type DualColumnBuilderBase, type DualColumnBundle, type DualColumnRef, type DualReferenceActions, type DualTable, type DualTableExtras, type Equal, type FtsMessageExcerptHit, type FtsMessageSearchInput, type FtsSearchStrategy, type FtsSessionCountInput, type FtsSessionSearchInput, type MakaioDatabase, NON_BASELINE_GENERATION_LEGS, type OperationTailStore, type PostgresTwinSchema, type RawSqlExecutor, type RawSqlSession, STORAGE_ENGINE_URL_HINTS, type StorageDialect, type StorageEngine, type StorageEngineCapabilities, type StorageEngineConstraintSuspension, type StorageEngineErrorClassifiers, type StorageEngineGenerationLeg, type StorageEngineMigrationBehavior, type StorageEngineTransactionLocks, type StorageEngineUrlHint, type StorageEngineUrlResolution, type StorageNamespace, type StorageNamespaceConfig, type StorageNamespaceExtensions, type TransactionCallback, type TransactionLock, type TransactionLockTransaction, acquireTransactionLocks, affectedRowCount, brandDatabase, buildFirstUserMessagePreviewQuery, createStorageNamespace, defineDialectSchema, defineDualTable, describeMissingStorageEngine, didAffectRows, executeTransaction, findGenerationLegForDialect, findStorageEngine, getDatabaseDialect, getRawSqlExecutor, getStorageEngine, importRuntimeModule, isSqliteDuplicateObjectError, isSqliteUniqueViolationError, quoteSqlIdentifier, readErrorCode, registerDrizzleHandlers, registerStorageEngine, resolveSchema, resolveStorageEngine, resolveStorageEngineForUrl, sanitizeFtsQuery, serializeByKey, serializeDatabaseOperation, someInCauseChain, sqliteFtsSearchStrategy, sqliteStorageEngine };

package/dist/storage/drizzle/index.mjs

@@ -1 +1 @@
-import{C as e,S as t,_ as n,a as r,b as i,c as a,d as o,f as s,g as c,h as l,i as u,l as d,m as f,n as p,o as m,p as h,r as g,s as _,t as v,u as y,v as b,x,y as S}from"../../registry-wfF2uTty.mjs";import{autoPk as C,bool as w,epochMs as T,float8 as E,jsonCol as D}from"./columns/sqlite.mjs";import{autoPk as O,bool as k,epochMs as A,float8 as j,jsonCol as M}from"./columns/postgres.mjs";import{integer as N,sqliteTable as P,text as F}from"drizzle-orm/sqlite-core";import{bigint as I,integer as L,pgTable as R,text as z}from"drizzle-orm/pg-core";import{getTableColumns as B}from"drizzle-orm";import{createStorageNamespace as V}from"@makaio/framework/storage";const H=[{dialect:`postgres`,enginePackageName:`@makaio/storage-pg`,chainDirName:`drizzle-postgres`,drizzleConfigSpecifier:`drizzle.config.ts`,normalizeScriptSpecifier:`scripts/normalize-migrations.ts`}];function U(e){return H.find(t=>t.dialect===e)}async function W(e,t,n){let r=e.get(t)??Promise.resolve(),i=Promise.withResolvers(),a=r.catch(()=>void 0).then(()=>i.promise);e.set(t,a),await r.catch(()=>void 0);try{return await n()}finally{i.resolve(),e.get(t)===a&&e.delete(t)}}async function G(e,t){return W(q,e,t)}async function K(e,t){return G(e,()=>e.transaction(t))}const q=new WeakMap;function J(e){return(t,n,r)=>e(t,n,r)}function Y(e,t){return{sqlite:e,postgres:t}}function X(t,n){return n[e(t)]}function Z(e,t){let n=(e,t)=>({sqlite:e,postgres:t,notNull:()=>n(e.notNull(),t.notNull()),default:r=>n(e.default(r),t.default(r)),primaryKey:()=>n(e.primaryKey(),t.primaryKey()),unique:r=>n(e.unique(r),t.unique(r)),$type:()=>n(e,t),references:(r,i)=>n(e.references(()=>r().sqlite,i),t.references(()=>r().postgres,i))});return n(e,t)}const Q={text:e=>Z(F(e),z(e)),textEnum:(e,t)=>Z(F(e,t),z(e,t)),epochMs:e=>Z(T(e),A(e)),bool:e=>Z(w(e),k(e)),jsonCol:e=>Z(D(e),M(e)),autoPk:e=>Z(C(e),O(e)),float8:e=>Z(E(e),j(e)),int4:e=>Z(N(e),L(e)),int8:e=>Z(N(e),I(e,{mode:`number`}))};function $(e,t,n){let r=t(Q),i={},a={};for(let[e,t]of Object.entries(r))i[e]=t.sqlite,a[e]=t.postgres;let o=P(e,i,n?.sqlite),s=R(e,a,n?.postgres),c=B(o),l=B(s);return{sqlite:o,postgres:s,columnPair(e){return{sqlite:c[e],postgres:l[e]}}}}export{t as DATABASE_DIALECT,H as NON_BASELINE_GENERATION_LEGS,f as STORAGE_ENGINE_URL_HINTS,i as affectedRowCount,b as brandDatabase,d as buildFirstUserMessagePreviewQuery,V as createStorageNamespace,Y as defineDialectSchema,$ as defineDualTable,l as describeMissingStorageEngine,x as didAffectRows,K as executeTransaction,U as findGenerationLegForDialect,v as findStorageEngine,e as getDatabaseDialect,S as getRawSqlExecutor,p as getStorageEngine,n as importRuntimeModule,y as isSqliteDuplicateObjectError,o as isSqliteUniqueViolationError,c as quoteSqlIdentifier,s as readErrorCode,J as registerDrizzleHandlers,g as registerStorageEngine,X as resolveSchema,u as resolveStorageEngine,r as resolveStorageEngineForUrl,a as sanitizeFtsQuery,W as serializeByKey,G as serializeDatabaseOperation,h as someInCauseChain,_ as sqliteFtsSearchStrategy,m as sqliteStorageEngine};
+import{C as e,S as t,_ as n,a as r,b as i,c as a,d as o,f as s,g as c,h as l,i as u,l as d,m as f,n as p,o as m,p as h,r as g,s as _,t as v,u as y,v as b,x,y as S}from"../../registry-Dk12tAfv.mjs";import{autoPk as C,bool as w,epochMs as T,float8 as E,jsonCol as D}from"./columns/sqlite.mjs";import{autoPk as O,bool as k,epochMs as A,float8 as j,jsonCol as M}from"./columns/postgres.mjs";import{integer as N,sqliteTable as P,text as F}from"drizzle-orm/sqlite-core";import{bigint as ee,integer as I,pgTable as L,text as R}from"drizzle-orm/pg-core";import{getTableColumns as z,sql as B}from"drizzle-orm";import{createStorageNamespace as V}from"@makaio/framework/storage";const H=[{dialect:`postgres`,enginePackageName:`@makaio/storage-pg`,chainDirName:`drizzle-postgres`,drizzleConfigSpecifier:`drizzle.config.ts`,normalizeScriptSpecifier:`scripts/normalize-migrations.ts`}];function U(e){return H.find(t=>t.dialect===e)}async function W(e,t,n){for(let r of u(e).transactionLocks.lockExpressions(n))await t.select({acquired:r}).from(B.raw(`(SELECT 1) AS transaction_lock_anchor`))}async function G(e,t,n){let r=e.get(t)??Promise.resolve(),i=Promise.withResolvers(),a=r.catch(()=>void 0).then(()=>i.promise);e.set(t,a),await r.catch(()=>void 0);try{return await n()}finally{i.resolve(),e.get(t)===a&&e.delete(t)}}async function K(e,t){return G(J,e,t)}async function q(e,t){return K(e,()=>e.transaction(t))}const J=new WeakMap;function Y(e){return(t,n,r)=>e(t,n,r)}function X(e,t){return{sqlite:e,postgres:t}}function Z(t,n){return n[e(t)]}function Q(e,t){let n=(e,t)=>({sqlite:e,postgres:t,notNull:()=>n(e.notNull(),t.notNull()),default:r=>n(e.default(r),t.default(r)),primaryKey:()=>n(e.primaryKey(),t.primaryKey()),unique:r=>n(e.unique(r),t.unique(r)),$type:()=>n(e,t),references:(r,i)=>n(e.references(()=>r().sqlite,i),t.references(()=>r().postgres,i))});return n(e,t)}const $={text:e=>Q(F(e),R(e)),textEnum:(e,t)=>Q(F(e,t),R(e,t)),epochMs:e=>Q(T(e),A(e)),bool:e=>Q(w(e),k(e)),jsonCol:e=>Q(D(e),M(e)),autoPk:e=>Q(C(e),O(e)),float8:e=>Q(E(e),j(e)),int4:e=>Q(N(e),I(e)),int8:e=>Q(N(e),ee(e,{mode:`number`}))};function te(e,t,n){let r=t($),i={},a={};for(let[e,t]of Object.entries(r))i[e]=t.sqlite,a[e]=t.postgres;let o=P(e,i,n?.sqlite),s=L(e,a,n?.postgres),c=z(o),l=z(s);return{sqlite:o,postgres:s,columnPair(e){return{sqlite:c[e],postgres:l[e]}}}}export{t as DATABASE_DIALECT,H as NON_BASELINE_GENERATION_LEGS,f as STORAGE_ENGINE_URL_HINTS,W as acquireTransactionLocks,i as affectedRowCount,b as brandDatabase,d as buildFirstUserMessagePreviewQuery,V as createStorageNamespace,X as defineDialectSchema,te as defineDualTable,l as describeMissingStorageEngine,x as didAffectRows,q as executeTransaction,U as findGenerationLegForDialect,v as findStorageEngine,e as getDatabaseDialect,S as getRawSqlExecutor,p as getStorageEngine,n as importRuntimeModule,y as isSqliteDuplicateObjectError,o as isSqliteUniqueViolationError,c as quoteSqlIdentifier,s as readErrorCode,Y as registerDrizzleHandlers,g as registerStorageEngine,Z as resolveSchema,u as resolveStorageEngine,r as resolveStorageEngineForUrl,a as sanitizeFtsQuery,G as serializeByKey,K as serializeDatabaseOperation,h as someInCauseChain,_ as sqliteFtsSearchStrategy,m as sqliteStorageEngine};

package/dist/storage/handlers/drizzle/index.d.mts

@@ -1,2 +1,2 @@
-import { a as DrizzleCrudConfig, i as CrudLifecycleConfig, n as createDrizzleListHandler, o as DrizzleListConfig, r as createDrizzleCrudHandlers, t as buildScopePredicates } from "../../../index-DZunhZec.mjs";
+import { a as DrizzleCrudConfig, i as CrudLifecycleConfig, n as createDrizzleListHandler, o as DrizzleListConfig, r as createDrizzleCrudHandlers, t as buildScopePredicates } from "../../../index-B5dP8rj6.mjs";
 export { CrudLifecycleConfig, DrizzleCrudConfig, DrizzleListConfig, buildScopePredicates, createDrizzleCrudHandlers, createDrizzleListHandler };

package/dist/storage/handlers/drizzle/index.mjs

@@ -1 +1 @@
-import{n as e,r as t,t as n}from"../../../drizzle-z_0SiGY8.mjs";export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler};
+import{n as e,r as t,t as n}from"../../../drizzle-Bzc-OGVI.mjs";export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler};

package/dist/storage/handlers/index.d.mts

@@ -1,4 +1,4 @@
-import { a as DrizzleCrudConfig, i as CrudLifecycleConfig, n as createDrizzleListHandler, o as DrizzleListConfig, r as createDrizzleCrudHandlers, t as buildScopePredicates } from "../../index-DZunhZec.mjs";
+import { a as DrizzleCrudConfig, i as CrudLifecycleConfig, n as createDrizzleListHandler, o as DrizzleListConfig, r as createDrizzleCrudHandlers, t as buildScopePredicates } from "../../index-B5dP8rj6.mjs";
 
 //#region storage/handlers/src/utils.d.ts
 /**

package/dist/storage/handlers/index.mjs

@@ -1 +1 @@
-import{n as e,r as t,t as n}from"../../drizzle-z_0SiGY8.mjs";function r(e,t){let n={...e};for(let e of t)n[e]===null&&(n[e]=void 0);return n}function i(e,t){let n={...e};for(let e of t)n[e]===void 0&&(n[e]=null);return n}export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler,r as nullToUndefined,i as undefinedToNull};
+import{n as e,r as t,t as n}from"../../drizzle-Bzc-OGVI.mjs";function r(e,t){let n={...e};for(let e of t)n[e]===null&&(n[e]=void 0);return n}function i(e,t){let n={...e};for(let e of t)n[e]===void 0&&(n[e]=null);return n}export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler,r as nullToUndefined,i as undefinedToNull};

package/dist/tool-approval-service-BFDOFUGC.mjs

@@ -0,0 +1 @@
+import{a as e}from"./ownership-recovery-guard-DyW5vGBr.mjs";import{SessionStorageSubjects as t}from"./services/session/storage/namespace.mjs";import"./session-CXOPk3yg.mjs";import{AgentSubjects as n,ApprovalSubjects as r,HarnessSubjects as i,computeMetaTags as a}from"@makaio/framework/contracts";import{BaseService as o}from"@makaio/framework/service-base";import{extractToolFilePath as s}from"@makaio/framework/tools";const c={"full-access":0,"always-ask":1,reject:2};function l(){return`apr_${crypto.randomUUID()}`}function u(e){switch(e){case`allow`:return`full-access`;case`deny`:return`reject`;case`ask`:return`always-ask`}}function d(e){if(!e?.length)return`neutral`;let t=a(e);return t.includes(`destructive`)?`destructive`:t.includes(`read-only`)?`safe`:`neutral`}function f(e,t){if(e)return t&&e.toolApprovalOverrides?.[t]!==void 0?e.toolApprovalOverrides[t]:e.approvalPolicy}function p(e,t,n,r){let i=r[t];if(!i?.length)return e;let a=e;for(let e of i){let t=n[e];t&&c[t]>c[a]&&(a=t)}return a}function m(e,t,n){return n.handled?n.data.allowedDirectories??void 0:t?[]:void 0}function h(e,t,n){if(!n||!e?.cwd)return{};let r;return(e.personaId||e.profileId)&&t&&(r=m(e.personaId,e.profileId,t)),{cwd:e.cwd,...r&&{allowedDirectories:r}}}function g(e,t,n){if(!(!e&&!t))return!n||!n.handled?{policy:`always-ask`}:{policy:u(n.data.action),...n.data.personaName&&{personaName:n.data.personaName},...n.data.profileName&&{profileName:n.data.profileName}}}function _(e,t){let n=t.harness?.toolCapabilityMap&&e.toolName?t.harness.toolCapabilityMap[e.toolName]:void 0;return{requestId:l(),toolCallId:e.toolCallId,toolName:e.toolName,args:e.args,agentId:e.agentId,sessionId:e.sessionId,adapterName:t.resolvedAdapterName,...t.personaName&&{personaName:t.personaName},...t.profileName&&{profileName:t.profileName},capabilities:n,riskLevel:d(n),reasoning:e.reasoning,createdAt:Date.now()}}var v=class extends o{logger=console;options;constructor(e,t={}){super(e),this.options=t}async onInit(){this.registerHandler(n.toolApprove,async e=>{let t=await this.getAgentMetadata(e.payload.agentId,e.payload.sessionId),n=(t?.personaId||t?.profileId)&&e.payload.toolName?await this.fetchRawEnrichedPolicy(t?.personaId,t?.profileId,e.payload.toolName):void 0,r=h(t,n,this.options.fileAccessRuleProvider),i=await this.checkFileAccessDenyReason(e.payload,r);if(i){e.setResult({action:`deny`,message:i,shouldAbort:!1});return}let a=await this.resolveSessionOverride(e.payload.sessionId);if(a===`full-access`){e.setResult({action:`allow`});return}if(a===`reject`){e.setResult({action:`deny`,message:`Tool use rejected by session approval policy override`,shouldAbort:!1});return}let o=await this.resolvePolicyWithContext({adapterName:e.payload.adapterName,toolName:e.payload.toolName},t,n);switch(a===`always-ask`?`always-ask`:o.policy){case`full-access`:e.setResult({action:`allow`});return;case`reject`:e.setResult({action:`deny`,message:`Tool use rejected by approval policy`,shouldAbort:!1});return;case`always-ask`:await this.dispatchAlwaysAskApproval(e.payload,e.setResult.bind(e),o);return}})}async dispatchAlwaysAskApproval(e,t,i){let a=_(e,i),o=new AbortController,s=this.bus.on(n.session.closed,()=>{o.abort()},{filter:{agentId:a.agentId,...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}});try{let e=await this.bus.requestOptional(r.request,a,{timeout:0,signal:o.signal});e.handled&&e.data.action===`allow`?t({action:`allow`,...e.data.updatedInput&&{updatedInput:e.data.updatedInput}}):t({action:`deny`,message:e.handled&&e.data.action===`deny`?e.data.message??`User denied tool execution`:`No approval handler available`,shouldAbort:!1})}catch{t({action:`deny`,message:o.signal.aborted?`Approval cancelled — agent session closed`:`Tool approval request failed`,shouldAbort:!1})}finally{s()}}async checkFileAccessDenyReason(e,t){if(!this.options.fileAccessRuleProvider||!t.cwd)return;let n=s(e.toolName,e.args,t.cwd);if(n)try{return(await this.options.fileAccessRuleProvider(t.cwd,t.allowedDirectories)).isDenied(n)?`Access denied: '${n}' is restricted by .makaioignore rules`:void 0}catch{return`Access denied: file access rules could not be evaluated`}}async fetchRawEnrichedPolicy(e,t,n){try{return await this.bus.requestOptional(r.resolveEnrichedPolicy,{toolName:n,personaId:e,profileId:t})}catch(r){return this.logger.error(`[ToolApprovalService] approval.resolveEnrichedPolicy failed; falling back to fail-closed`,{toolName:n,personaId:e,profileId:t,error:r}),{handled:!1}}}async resolvePolicyWithContext(e,t,n){let r=t?.adapterName??e.adapterName,i=g(t?.personaId,t?.profileId,n),a=await this.resolveHarnessPolicy(r,t?.harnessId,t?.clientId),o=f(a,e.toolName),s=i?.policy??o??`always-ask`,c=s;return a?.capabilityOverrides&&a.toolCapabilityMap&&e.toolName&&(c=p(s,e.toolName,a.capabilityOverrides,a.toolCapabilityMap)),{policy:c,harness:a,agent:t,resolvedAdapterName:r,...i?.personaName&&{personaName:i.personaName},...i?.profileName&&{profileName:i.profileName}}}async getAgentMetadata(t,n){try{if(n){let{agents:r}=await this.bus.request(e.listBySession,{sessionId:n});return r.find(e=>e.agentId===t)??null}let r=await this.bus.requestOptional(e.get,{agentId:t});return r.handled?r.data.agent:null}catch{return null}}async resolveSessionOverride(e){if(e)try{let n=await this.bus.requestOptional(t.get,{sessionId:e});return n.handled?n.data.session?.approvalPolicyOverride??void 0:void 0}catch{return}}async resolveHarnessPolicy(e,t,n){try{let r=await this.bus.request(i.resolve,{adapterName:e,...t&&{profileHarnessId:t},...n&&{clientId:n}});return{approvalPolicy:r.approvalPolicy,capabilityOverrides:r.capabilityOverrides,toolCapabilityMap:r.toolCapabilityMap,toolApprovalOverrides:r.toolApprovalOverrides}}catch{return}}};export{v as t};

package/dist/{tools-PdG9fO1M.mjs → tools-DWKWX3eV.mjs}

@@ -1 +1 @@
-import{u as e}from"./framework-packages-C3RWfJDk.mjs";import{FILE_ACCESS_RULES_KEY as t,extractToolFilePath as n}from"@makaio/framework/tools";function r(){let t=new Map;return{filter:e=>!!e.tools?.createToolsets,async processActivated(n,r,i){let a=i.getService(e);if(!a)throw Error(`ToolRegistry is not available. Ensure toolRegistryPackage is included in the composition root.`);let o=r.tools.createToolsets(i),s=[];try{for(let e of o)await a.register(e),s.push(()=>a.deregister(e.metadata.name))}catch(e){for(let e=s.length-1;e>=0;--e)try{await s[e]()}catch(e){console.error(`[ToolContributionProcessor] Rollback error for "${n}":`,e)}throw e}t.set(n,s)},async processStopped(e){let n=t.get(e);if(n){for(let t=n.length-1;t>=0;--t)try{await n[t]()}catch(t){console.error(`[ToolContributionProcessor] Deregister error for "${e}":`,t)}t.delete(e)}}}}export{n,r,t};
+import{l as e}from"./framework-packages-BHgul8Kl.mjs";import{FILE_ACCESS_RULES_KEY as t,extractToolFilePath as n}from"@makaio/framework/tools";function r(){let t=new Map;return{filter:e=>!!e.tools?.createToolsets,async processActivated(n,r,i){let a=i.getService(e);if(!a)throw Error(`ToolRegistry is not available. Ensure toolRegistryPackage is included in the composition root.`);let o=r.tools.createToolsets(i),s=[];try{for(let e of o)await a.register(e),s.push(()=>a.deregister(e.metadata.name))}catch(e){for(let e=s.length-1;e>=0;--e)try{await s[e]()}catch(e){console.error(`[ToolContributionProcessor] Rollback error for "${n}":`,e)}throw e}t.set(n,s)},async processStopped(e){let n=t.get(e);if(n){for(let t=n.length-1;t>=0;--t)try{await n[t]()}catch(t){console.error(`[ToolContributionProcessor] Deregister error for "${e}":`,t)}t.delete(e)}}}}export{n,r,t};

package/dist/{transition-Du3MQzJV.d.mts → transition-D3zUBTPc.d.mts}

@@ -1,5 +1,5 @@
-import { q as ArtifactRevision$1 } from "./context-resolution-DdyhpH4L.mjs";
-import { i as JsonValue$1 } from "./json-value-Brslhqbm.mjs";
+import { q as ArtifactRevision$1 } from "./context-resolution-841T7jBI.mjs";
+import { l as JsonValue$1 } from "./json-value-DPqb-SJ8.mjs";
 import { z } from "zod";
 import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
 
@@ -129,19 +129,6 @@ interface WorkflowBlockMetadata {
   /** Grouping tags for the builder palette. Uncategorized blocks appear in "Other". */
   categories?: string[];
 }
-/**
- * A trigger block declaration — determines WHEN a workflow starts.
- * @typeParam TConfig - Zod shape for the builder configuration form.
- * @typeParam TOutput - Zod type for the payload passed into the workflow as input.
- */
-interface WorkflowTriggerBlock<TConfig extends z.ZodRawShape = z.ZodRawShape, TOutput extends z.ZodType = z.ZodType> {
-  /** Shared metadata used in the builder palette and catalog. */
-  metadata: WorkflowBlockMetadata;
-  /** Drives the configuration form in the builder UI. */
-  configSchema: z.ZodObject<TConfig>;
-  /** The payload shape passed into the workflow when this trigger fires. */
-  outputSchema: TOutput;
-}
 /**
  * A step block declaration — determines WHAT happens inside a workflow.
  *
@@ -173,29 +160,15 @@ interface WorkflowStepBlock<TConfig extends z.ZodRawShape = z.ZodRawShape, TInpu
 }
 /**
  * Collection of workflow blocks contributed by an extension.
+ *
+ * Blocks describe WHAT happens inside a workflow. WHEN a workflow starts is
+ * modelled by executable automation trigger types contributed through the
+ * `automationTriggers` extension surface, so this collection carries steps only.
  */
 interface WorkflowBlockCollection$1 {
-  /** Trigger block declarations — each determines WHEN a workflow starts. */
-  readonly triggers?: readonly WorkflowTriggerBlock[];
   /** Step block declarations — each determines WHAT happens inside a workflow. */
   readonly steps?: readonly WorkflowStepBlock[];
 }
-/**
- * Serialized trigger block as stored in the registry and served via bus.
- *
- * Schema fields are stored as JSON Schema objects for transport and builder
- * catalog rendering.
- */
-interface RegisteredTriggerBlock$1 {
-  /** Trigger metadata combined with the owning extension name. */
-  metadata: WorkflowBlockMetadata & {
-    extensionName: string;
-  };
-  /** JSON Schema representation of the builder configuration form. */
-  configSchema: Record<string, unknown>;
-  /** JSON Schema representation of the trigger output payload. */
-  outputSchema: Record<string, unknown>;
-}
 /**
  * Serialized step block as stored in the registry and served via bus.
  *
@@ -252,7 +225,7 @@ type TransitionEventType$1 = z.infer<typeof TransitionEventTypeSchema>;
  * - `path` — the status path for `artifact.status.changed` events
  * - `current` — the new status value for `artifact.status.changed` events
  */
-declare const TransitionConditionSchema: z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>;
+declare const TransitionConditionSchema: z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue>>>;
 type TransitionCondition = z.infer<typeof TransitionConditionSchema>;
 /**
  * Invocation descriptor for the action to execute when a transition rule fires.
@@ -265,7 +238,7 @@ type TransitionCondition = z.infer<typeof TransitionConditionSchema>;
  */
 declare const TransitionActionInvocationSchema: z.ZodObject<{
   type: z.ZodString;
-  input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
+  input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue>>>>;
 }, z.core.$strip>;
 type TransitionActionInvocation$1 = z.infer<typeof TransitionActionInvocationSchema>;
 /**
@@ -290,10 +263,10 @@ declare const TransitionRuleDefinitionSchema$1: z.ZodObject<{
     "artifact.revised": "artifact.revised";
     "artifact.status.changed": "artifact.status.changed";
   }>;
-  when: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
+  when: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue>>>>;
   action: z.ZodObject<{
     type: z.ZodString;
-    input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
+    input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue>>>>;
   }, z.core.$strip>;
   enabled: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
@@ -420,4 +393,4 @@ interface TransitionEvaluationContext$1 {
   };
 }
 //#endregion
-export { WorkflowTriggerBlock as C, WorkflowStepBlockRun as S, RegisteredTriggerBlock$1 as _, TransitionActionInvocation$1 as a, WorkflowBlockMetadata as b, TransitionConditionSchema as c, TransitionEventTypeSchema as d, TransitionRuleDefinition$1 as f, RegisteredStepBlock$1 as g, DelegateRoleNodeBlockRun as h, TransitionActionHandler as i, TransitionEvaluationContext$1 as l, DelegateAgentNodeBlockRun as m, ExtensionTransitionRulesContribution as n, TransitionActionInvocationSchema as o, TransitionRuleDefinitionSchema$1 as p, TransitionActionFactory$1 as r, TransitionCondition as s, ExtensionTransitionActionsContribution as t, TransitionEventType$1 as u, StationNodeBlockRun as v, WorkflowStepBlock as x, WorkflowBlockCollection$1 as y };
+export { StationNodeBlockRun as _, TransitionActionInvocation$1 as a, WorkflowStepBlock as b, TransitionConditionSchema as c, TransitionEventTypeSchema as d, TransitionRuleDefinition$1 as f, RegisteredStepBlock$1 as g, DelegateRoleNodeBlockRun as h, TransitionActionHandler as i, TransitionEvaluationContext$1 as l, DelegateAgentNodeBlockRun as m, ExtensionTransitionRulesContribution as n, TransitionActionInvocationSchema as o, TransitionRuleDefinitionSchema$1 as p, TransitionActionFactory$1 as r, TransitionCondition as s, ExtensionTransitionActionsContribution as t, TransitionEventType$1 as u, WorkflowBlockCollection$1 as v, WorkflowStepBlockRun as x, WorkflowBlockMetadata as y };

package/dist/{types-D7_kevBK.d.mts → types-BlB23n4f.d.mts}

@@ -90,8 +90,8 @@ declare const ActionResultSchema: z.ZodUnion<readonly [z.ZodObject<{
     editOf: z.ZodOptional<z.ZodString>;
     origin: z.ZodOptional<z.ZodEnum<{
       text: "text";
-      voice: "voice";
       compact: "compact";
+      voice: "voice";
     }>>;
   }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{

package/dist/{types-DMLDHFR9.d.mts → types-CtDGkyLx2.d.mts}

@@ -1,4 +1,4 @@
-import { r as LogImportMode, t as LogImporterInfo } from "./index-CWHfOz6d.mjs";
+import { r as LogImportMode, t as LogImporterInfo } from "./index-pvX-BIpr2.mjs";
 import * as _$_makaio_bus_core0 from "@makaio/framework/bus";
 import { IMakaioBus } from "@makaio/framework/bus";
 import { LogImportOrchestrator, LogImporter } from "@makaio/framework/adapters";

package/dist/types-Cwza95hS.mjs

@@ -0,0 +1 @@
+import{z as e}from"zod";import{CODE_EXECUTION_FAILED_OUTCOME_CODES as t,CODE_EXECUTION_FAILURE_MESSAGE_MAX_LENGTH as n,JsonValueSchema as r,boundCodeExecutionFailureMessage as i,rejectingLossyJsonValues as a}from"@makaio/framework/contracts";const o=256,s=5*1024*1024,c=1024*1024,l=1024*1024,u=4,d=16,f=3e4,p=64,m=`namespace`,h=e.discriminatedUnion(`kind`,[e.strictObject({kind:e.literal(`completed`),value:a(r,{prototypeKey:`"__proto__" is not a valid result key`,nonPlainObject:`the result must be JSON data: only plain objects and arrays are transportable`,symbolKey:`the result carries a symbol-keyed property, which cannot be transported as JSON`,nonEnumerableKey:`the result carries a non-enumerable property, which the record parse would drop`,extraArrayKey:`the result carries an array with extra own properties, which the array rebuild would drop`})}),e.strictObject({kind:e.literal(`failed`),code:e.enum(t),message:e.string().min(1).max(n)})]);function g(e){return e.replace(/\s+/g,` `).trim()}function _(e,t){let n=g(e),r=new Set(t.map(e=>g(e)));r.delete(``);for(let e of[...r].sort((e,t)=>t.length-e.length))n=n.split(e).join(`<redacted>`);return n.length===0?`No diagnostic detail available.`:i(n)}function v(e,t){return{status:`failed`,error:{code:e,message:t}}}function y(e){return Buffer.byteLength(JSON.stringify(e)??``,`utf8`)}function b(e){try{return e instanceof Error?`${e.name}: ${e.message}`:String(e)}catch{return`A value of type ${typeof e} with no string representation was thrown.`}}export{o as a,s as c,g as d,b as f,_ as h,p as i,m as l,y as m,l as n,d as o,v as p,u as r,c as s,f as t,h as u};