@makaio/framework 1.0.0-dev-1787670071418 → 1.0.0-dev-1787670559522

package/dist/storage/handlers/index.mjs

@@ -1 +1 @@
-import{n as e,r as t,t as n}from"../../drizzle-Bzc-OGVI.mjs";function r(e,t){let n={...e};for(let e of t)n[e]===null&&(n[e]=void 0);return n}function i(e,t){let n={...e};for(let e of t)n[e]===void 0&&(n[e]=null);return n}export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler,r as nullToUndefined,i as undefinedToNull};
+import{n as e,r as t,t as n}from"../../drizzle-CPv3vdTE.mjs";function r(e,t){let n={...e};for(let e of t)n[e]===null&&(n[e]=void 0);return n}function i(e,t){let n={...e};for(let e of t)n[e]===void 0&&(n[e]=null);return n}export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler,r as nullToUndefined,i as undefinedToNull};

package/dist/tool-approval-service-BVgN9Q1r.mjs

@@ -0,0 +1 @@
+import{SessionStorageSubjects as e}from"./services/session/storage/namespace.mjs";import{n as t}from"./agent-namespace-D51PODFf.mjs";import"./session-BMy2kRpX.mjs";import{AgentSubjects as n,ApprovalSubjects as r,HarnessSubjects as i,computeMetaTags as a}from"@makaio/framework/contracts";import{BaseService as o}from"@makaio/framework/service-base";import{extractToolFilePath as s}from"@makaio/framework/tools";const c={"full-access":0,"always-ask":1,reject:2};function l(){return`apr_${crypto.randomUUID()}`}function u(e){switch(e){case`allow`:return`full-access`;case`deny`:return`reject`;case`ask`:return`always-ask`}}function d(e){if(!e?.length)return`neutral`;let t=a(e);return t.includes(`destructive`)?`destructive`:t.includes(`read-only`)?`safe`:`neutral`}function f(e,t){if(e)return t&&e.toolApprovalOverrides?.[t]!==void 0?e.toolApprovalOverrides[t]:e.approvalPolicy}function p(e,t,n,r){let i=r[t];if(!i?.length)return e;let a=e;for(let e of i){let t=n[e];t&&c[t]>c[a]&&(a=t)}return a}function m(e,t,n){return n.handled?n.data.allowedDirectories??void 0:t?[]:void 0}function h(e,t,n){if(!n||!e?.cwd)return{};let r;return(e.personaId||e.profileId)&&t&&(r=m(e.personaId,e.profileId,t)),{cwd:e.cwd,...r&&{allowedDirectories:r}}}function g(e,t,n){if(!(!e&&!t))return!n||!n.handled?{policy:`always-ask`}:{policy:u(n.data.action),...n.data.personaName&&{personaName:n.data.personaName},...n.data.profileName&&{profileName:n.data.profileName}}}function _(e,t){let n=t.harness?.toolCapabilityMap&&e.toolName?t.harness.toolCapabilityMap[e.toolName]:void 0;return{requestId:l(),toolCallId:e.toolCallId,toolName:e.toolName,args:e.args,agentId:e.agentId,sessionId:e.sessionId,adapterName:t.resolvedAdapterName,...t.personaName&&{personaName:t.personaName},...t.profileName&&{profileName:t.profileName},capabilities:n,riskLevel:d(n),reasoning:e.reasoning,createdAt:Date.now()}}var v=class extends o{logger=console;options;constructor(e,t={}){super(e),this.options=t}async onInit(){this.registerHandler(n.toolApprove,async e=>{let t=await this.getAgentMetadata(e.payload.agentId,e.payload.sessionId),n=(t?.personaId||t?.profileId)&&e.payload.toolName?await this.fetchRawEnrichedPolicy(t?.personaId,t?.profileId,e.payload.toolName):void 0,r=h(t,n,this.options.fileAccessRuleProvider),i=await this.checkFileAccessDenyReason(e.payload,r);if(i){e.setResult({action:`deny`,message:i,shouldAbort:!1});return}let a=await this.resolveSessionOverride(e.payload.sessionId);if(a===`full-access`){e.setResult({action:`allow`});return}if(a===`reject`){e.setResult({action:`deny`,message:`Tool use rejected by session approval policy override`,shouldAbort:!1});return}let o=await this.resolvePolicyWithContext({adapterName:e.payload.adapterName,toolName:e.payload.toolName},t,n);switch(a===`always-ask`?`always-ask`:o.policy){case`full-access`:e.setResult({action:`allow`});return;case`reject`:e.setResult({action:`deny`,message:`Tool use rejected by approval policy`,shouldAbort:!1});return;case`always-ask`:await this.dispatchAlwaysAskApproval(e.payload,e.setResult.bind(e),o);return}})}async dispatchAlwaysAskApproval(e,t,i){let a=_(e,i),o=new AbortController,s=this.bus.on(n.session.closed,()=>{o.abort()},{filter:{agentId:a.agentId,...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}});try{let e=await this.bus.requestOptional(r.request,a,{timeout:0,signal:o.signal});e.handled&&e.data.action===`allow`?t({action:`allow`,...e.data.updatedInput&&{updatedInput:e.data.updatedInput}}):t({action:`deny`,message:e.handled&&e.data.action===`deny`?e.data.message??`User denied tool execution`:`No approval handler available`,shouldAbort:!1})}catch{t({action:`deny`,message:o.signal.aborted?`Approval cancelled — agent session closed`:`Tool approval request failed`,shouldAbort:!1})}finally{s()}}async checkFileAccessDenyReason(e,t){if(!this.options.fileAccessRuleProvider||!t.cwd)return;let n=s(e.toolName,e.args,t.cwd);if(n)try{return(await this.options.fileAccessRuleProvider(t.cwd,t.allowedDirectories)).isDenied(n)?`Access denied: '${n}' is restricted by .makaioignore rules`:void 0}catch{return`Access denied: file access rules could not be evaluated`}}async fetchRawEnrichedPolicy(e,t,n){try{return await this.bus.requestOptional(r.resolveEnrichedPolicy,{toolName:n,personaId:e,profileId:t})}catch(r){return this.logger.error(`[ToolApprovalService] approval.resolveEnrichedPolicy failed; falling back to fail-closed`,{toolName:n,personaId:e,profileId:t,error:r}),{handled:!1}}}async resolvePolicyWithContext(e,t,n){let r=t?.adapterName??e.adapterName,i=g(t?.personaId,t?.profileId,n),a=await this.resolveHarnessPolicy(r,t?.harnessId,t?.clientId),o=f(a,e.toolName),s=i?.policy??o??`always-ask`,c=s;return a?.capabilityOverrides&&a.toolCapabilityMap&&e.toolName&&(c=p(s,e.toolName,a.capabilityOverrides,a.toolCapabilityMap)),{policy:c,harness:a,agent:t,resolvedAdapterName:r,...i?.personaName&&{personaName:i.personaName},...i?.profileName&&{profileName:i.profileName}}}async getAgentMetadata(e,n){try{if(n){let{agents:r}=await this.bus.request(t.listBySession,{sessionId:n});return r.find(t=>t.agentId===e)??null}let r=await this.bus.requestOptional(t.get,{agentId:e});return r.handled?r.data.agent:null}catch{return null}}async resolveSessionOverride(t){if(t)try{let n=await this.bus.requestOptional(e.get,{sessionId:t});return n.handled?n.data.session?.approvalPolicyOverride??void 0:void 0}catch{return}}async resolveHarnessPolicy(e,t,n){try{let r=await this.bus.request(i.resolve,{adapterName:e,...t&&{profileHarnessId:t},...n&&{clientId:n}});return{approvalPolicy:r.approvalPolicy,capabilityOverrides:r.capabilityOverrides,toolCapabilityMap:r.toolCapabilityMap,toolApprovalOverrides:r.toolApprovalOverrides}}catch{return}}};export{v as t};

package/dist/{tools-DWKWX3eV.mjs → tools-DxwHox1a.mjs}

@@ -1 +1 @@
-import{l as e}from"./framework-packages-BHgul8Kl.mjs";import{FILE_ACCESS_RULES_KEY as t,extractToolFilePath as n}from"@makaio/framework/tools";function r(){let t=new Map;return{filter:e=>!!e.tools?.createToolsets,async processActivated(n,r,i){let a=i.getService(e);if(!a)throw Error(`ToolRegistry is not available. Ensure toolRegistryPackage is included in the composition root.`);let o=r.tools.createToolsets(i),s=[];try{for(let e of o)await a.register(e),s.push(()=>a.deregister(e.metadata.name))}catch(e){for(let e=s.length-1;e>=0;--e)try{await s[e]()}catch(e){console.error(`[ToolContributionProcessor] Rollback error for "${n}":`,e)}throw e}t.set(n,s)},async processStopped(e){let n=t.get(e);if(n){for(let t=n.length-1;t>=0;--t)try{await n[t]()}catch(t){console.error(`[ToolContributionProcessor] Deregister error for "${e}":`,t)}t.delete(e)}}}}export{n,r,t};
+import{u as e}from"./framework-packages-D_2hBZ-p.mjs";import{FILE_ACCESS_RULES_KEY as t,extractToolFilePath as n}from"@makaio/framework/tools";function r(){let t=new Map;return{filter:e=>!!e.tools?.createToolsets,async processActivated(n,r,i){let a=i.getService(e);if(!a)throw Error(`ToolRegistry is not available. Ensure toolRegistryPackage is included in the composition root.`);let o=r.tools.createToolsets(i),s=[];try{for(let e of o)await a.register(e),s.push(()=>a.deregister(e.metadata.name))}catch(e){for(let e=s.length-1;e>=0;--e)try{await s[e]()}catch(e){console.error(`[ToolContributionProcessor] Rollback error for "${n}":`,e)}throw e}t.set(n,s)},async processStopped(e){let n=t.get(e);if(n){for(let t=n.length-1;t>=0;--t)try{await n[t]()}catch(t){console.error(`[ToolContributionProcessor] Deregister error for "${e}":`,t)}t.delete(e)}}}}export{n,r,t};

package/dist/{transition-D3zUBTPc.d.mts → transition-C_Ka6b0-.d.mts}

@@ -1,5 +1,5 @@
-import { q as ArtifactRevision$1 } from "./context-resolution-841T7jBI.mjs";
-import { l as JsonValue$1 } from "./json-value-DPqb-SJ8.mjs";
+import { q as ArtifactRevision$1 } from "./context-resolution-ya9TXKg-.mjs";
+import { a as JsonValue$1 } from "./json-value-C1RGgS0a.mjs";
 import { z } from "zod";
 import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
 
@@ -225,7 +225,7 @@ type TransitionEventType$1 = z.infer<typeof TransitionEventTypeSchema>;
  * - `path` — the status path for `artifact.status.changed` events
  * - `current` — the new status value for `artifact.status.changed` events
  */
-declare const TransitionConditionSchema: z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue>>>;
+declare const TransitionConditionSchema: z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>;
 type TransitionCondition = z.infer<typeof TransitionConditionSchema>;
 /**
  * Invocation descriptor for the action to execute when a transition rule fires.
@@ -238,7 +238,7 @@ type TransitionCondition = z.infer<typeof TransitionConditionSchema>;
  */
 declare const TransitionActionInvocationSchema: z.ZodObject<{
   type: z.ZodString;
-  input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue>>>>;
+  input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
 }, z.core.$strip>;
 type TransitionActionInvocation$1 = z.infer<typeof TransitionActionInvocationSchema>;
 /**
@@ -263,10 +263,10 @@ declare const TransitionRuleDefinitionSchema$1: z.ZodObject<{
     "artifact.revised": "artifact.revised";
     "artifact.status.changed": "artifact.status.changed";
   }>;
-  when: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue>>>>;
+  when: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
   action: z.ZodObject<{
     type: z.ZodString;
-    input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue>>>>;
+    input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
   }, z.core.$strip>;
   enabled: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;

package/dist/{types-CtDGkyLx2.d.mts → types-BNjPhj_a.d.mts}

@@ -1,4 +1,4 @@
-import { r as LogImportMode, t as LogImporterInfo } from "./index-pvX-BIpr2.mjs";
+import { r as LogImportMode, t as LogImporterInfo } from "./index-CK3f0bAL.mjs";
 import * as _$_makaio_bus_core0 from "@makaio/framework/bus";
 import { IMakaioBus } from "@makaio/framework/bus";
 import { LogImportOrchestrator, LogImporter } from "@makaio/framework/adapters";

package/dist/{types-OKJCOjme.d.mts → types-ClpEaoAm.d.mts}

@@ -1145,10 +1145,10 @@ declare class GenerationRetirementLedger {
    * without it, a synchronous retirement would silently claim what an asynchronous
    * one has to prove.
    *
-   * The caller still does not wait, but the ledger continues observing the end it
-   * already holds. Once that promise fulfils, the generation is proven retired and
-   * no longer caps later teardowns. A rejected observation remains unproven: it
-   * did not establish that the resource ended.
+   * A no-op in effect, because {@link supersede} already booked the generation as
+   * unproven. It is kept as an explicit statement of intent: a caller that never
+   * intends to wait says so, rather than leaving the reader to infer it from the
+   * absence of a `retire`.
    * @param generation - Generation returned by {@link supersede}.
    */
   abandon(generation: SupersededGeneration): void;
@@ -2232,22 +2232,6 @@ declare class AgentTeardownArbiter {
    * @returns Whether a replacement is installed for it
    */
   hasReplacementInFlight(agentId: string): boolean;
-  /**
-   * Whether any teardown or replacement still owns lifecycle work.
-   * @returns Whether this adapter instance still has an active lifecycle flight
-   */
-  hasLifecycleWorkInFlight(): boolean;
-  /**
-   * Enumerate identities with a replacement that still owns post-settlement work.
-   *
-   * The registry normally discovers teardown subjects through its live entries.
-   * An expired replacement wait deliberately removes that entry before the
-   * replacement retires, though, so instance shutdown must include these
-   * replacement-only identities in its accounting without trying to close their
-   * runtimes out from under the replacement.
-   * @returns Agent identities whose replacements have not retired
-   */
-  replacementAgentIdsInFlight(): IterableIterator<string>;
   /**
    * Admit a connector replacement, or refuse it.
    *
@@ -2654,10 +2638,6 @@ interface BaseAgentConnectorConfig<TBus extends ScopedBus<string> = ScopedBus<st
  * @typeParam TConnector - The connector type (for proper factory return typing)
  */
 interface AIAgentConfig<TBus extends ScopedBus<string> = ScopedBus<string>, TConnector extends AIAgentConnector<TBus> = AIAgentConnector<TBus>> extends Omit<AgentIdentity, 'adapterSessionId'>, AgentRuntimeInput {
-  /** Stable machine identity of the adapter runtime hosting this agent. */
-  machineId: string;
-  /** Exact authority incarnation hosting this agent's adapter runtime. */
-  ownerInstanceId: string;
   /** Adapter-specific session identifier for multi-turn conversations */
   adapterSessionId?: string;
   /** Makaio session identifier */