@mono-agent/agent-app 0.20.11 → 0.21.0

package/dist/configuration-proposal-tool.d.ts

@@ -1,33 +0,0 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-export declare const CONFIGURATION_PROPOSAL_MCP_SERVER_NAME = "agent_configuration";
-export declare const CONFIGURATION_PROPOSAL_TOOL_NAME = "ProposeAgentConfiguration";
-export interface JsonPatchOperation {
-    readonly op: "add" | "remove" | "replace" | "move" | "copy" | "test";
-    readonly path: string;
-    readonly from?: string;
-    readonly value?: unknown;
-}
-export interface AgentConfigurationProposal {
-    readonly schema: "mono-agent.configuration-proposal.v1";
-    readonly id: string;
-    readonly baseVersion: string;
-    readonly rationale: string;
-    readonly patch: readonly JsonPatchOperation[];
-    readonly role?: string;
-    readonly createdAt: string;
-}
-export interface ConfigurationProposalChildSettings {
-    readonly sinkPath: string;
-    readonly baseVersion: string;
-}
-/**
- * Proposal copy is rendered in an out-of-band terminal approval card. Keep
- * ordinary Unicode text and LF newlines intact, but reject terminal controls
- * and bidi controls that could clear, overwrite, or visually reorder the
- * operator's review.
- */
-export declare function containsUnsafeConfigurationReviewControl(value: string): boolean;
-export declare function configurationProposalChildSettingsFromEnv(env: Record<string, string | undefined>): ConfigurationProposalChildSettings;
-export declare function configurationProposalMcpServerSpec(settings: ConfigurationProposalChildSettings, cwd: string): Record<string, unknown>;
-export declare function createConfigurationProposalServer(settings: ConfigurationProposalChildSettings): McpServer;
-//# sourceMappingURL=configuration-proposal-tool.d.ts.map

package/dist/configuration-proposal-tool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"configuration-proposal-tool.d.ts","sourceRoot":"","sources":["../src/configuration-proposal-tool.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,eAAO,MAAM,sCAAsC,wBAAwB,CAAC;AAC5E,eAAO,MAAM,gCAAgC,8BAA8B,CAAC;AAM5E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,sCAAsC,CAAC;IACxD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAgB,wCAAwC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAY/E;AAwCD,wBAAgB,yCAAyC,CACvD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,kCAAkC,CAUpC;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,kCAAkC,EAC5C,GAAG,EAAE,MAAM,GACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWzB;AAED,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,kCAAkC,GAAG,SAAS,CAoFzG"}

package/dist/configuration-proposal-tool.js

@@ -1,188 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { rename, rm, writeFile } from "node:fs/promises";
-import { fileURLToPath } from "node:url";
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z } from "zod";
-export const CONFIGURATION_PROPOSAL_MCP_SERVER_NAME = "agent_configuration";
-export const CONFIGURATION_PROPOSAL_TOOL_NAME = "ProposeAgentConfiguration";
-const SINK_ENV = "MONO_AGENT_CONFIGURATION_PROPOSAL_SINK";
-const BASE_VERSION_ENV = "MONO_AGENT_CONFIGURATION_BASE_VERSION";
-const BIDI_CONTROL = /\p{Bidi_Control}/u;
-/**
- * Proposal copy is rendered in an out-of-band terminal approval card. Keep
- * ordinary Unicode text and LF newlines intact, but reject terminal controls
- * and bidi controls that could clear, overwrite, or visually reorder the
- * operator's review.
- */
-export function containsUnsafeConfigurationReviewControl(value) {
-    for (const character of value) {
-        const codePoint = character.codePointAt(0);
-        if ((codePoint <= 0x1f && codePoint !== 0x0a)
-            || (codePoint >= 0x7f && codePoint <= 0x9f)
-            || BIDI_CONTROL.test(character)) {
-            return true;
-        }
-    }
-    return false;
-}
-const patchOperationSchema = z.object({
-    op: z.enum(["add", "remove", "replace", "move", "copy", "test"]),
-    path: z.string().min(1).max(500).startsWith("/"),
-    from: z.string().min(1).max(500).startsWith("/").optional(),
-    value: z.unknown().optional(),
-}).superRefine((operation, context) => {
-    if ((operation.op === "move" || operation.op === "copy") && operation.from === undefined) {
-        context.addIssue({ code: "custom", message: `${operation.op} requires from.` });
-    }
-    if ((operation.op === "add" || operation.op === "replace" || operation.op === "test") && !("value" in operation)) {
-        context.addIssue({ code: "custom", message: `${operation.op} requires value.` });
-    }
-});
-const proposalInputSchema = {
-    rationale: configurationReviewTextSchema(2_000, "Short operator-facing reason for this change."),
-    patch: z.array(patchOperationSchema).max(50).describe("RFC 6902 patch against mono-agent.config.json. May be empty only for a Role-only proposal."),
-    role: configurationReviewTextSchema(8_000, "Optional replacement body for the existing ## Role section in the configured identity document (normally IDENTITY.md).").optional(),
-};
-function configurationReviewTextSchema(maxLength, description) {
-    return z.string()
-        .superRefine((value, context) => {
-        if (containsUnsafeConfigurationReviewControl(value)) {
-            context.addIssue({
-                code: "custom",
-                message: "Configuration proposal review text contains unsafe terminal or bidi controls.",
-            });
-        }
-    })
-        .transform((value) => value.trim())
-        .pipe(z.string().min(1).max(maxLength))
-        .describe(description);
-}
-export function configurationProposalChildSettingsFromEnv(env) {
-    const sinkPath = env[SINK_ENV]?.trim();
-    const baseVersion = env[BASE_VERSION_ENV]?.trim();
-    if (sinkPath === undefined || sinkPath.length === 0) {
-        throw new Error(`Missing ${SINK_ENV}.`);
-    }
-    if (baseVersion === undefined || baseVersion.length === 0) {
-        throw new Error(`Missing ${BASE_VERSION_ENV}.`);
-    }
-    return { sinkPath, baseVersion };
-}
-export function configurationProposalMcpServerSpec(settings, cwd) {
-    return {
-        type: "stdio",
-        command: process.execPath,
-        args: [fileURLToPath(new URL("./configuration-proposal-main.js", import.meta.url))],
-        cwd,
-        env: {
-            [SINK_ENV]: settings.sinkPath,
-            [BASE_VERSION_ENV]: settings.baseVersion,
-        },
-    };
-}
-export function createConfigurationProposalServer(settings) {
-    const server = new McpServer({ name: "agent-configuration", version: "1.0.0" });
-    let proposed = false;
-    server.registerTool(CONFIGURATION_PROPOSAL_TOOL_NAME, {
-        title: "Propose agent configuration",
-        description: "Propose, but never apply, a small local agent configuration change. The host validates the candidate and asks the operator to approve it outside the model conversation. Never include credentials or secret values.",
-        annotations: {
-            // This call records an inert, session-scoped proposal only. It cannot
-            // mutate the agent config or reach the network; the host owns the
-            // separate validation and approval transaction. Marking that boundary
-            // explicitly also prevents unattended MCP clients from inserting a
-            // second, provider-owned approval prompt before our review card.
-            readOnlyHint: true,
-            destructiveHint: false,
-            openWorldHint: false,
-        },
-        inputSchema: proposalInputSchema,
-    }, async (args) => {
-        if (args.patch.length === 0 && args.role === undefined) {
-            return {
-                isError: true,
-                content: [{ type: "text", text: "A configuration proposal must change config, the configured identity document's ## Role, or both." }],
-            };
-        }
-        if (proposed) {
-            return {
-                isError: true,
-                content: [{ type: "text", text: "Only one configuration proposal is accepted per turn." }],
-            };
-        }
-        if (containsUnsafeConfigurationReviewControl(args.rationale)
-            || (args.role !== undefined && containsUnsafeConfigurationReviewControl(args.role))) {
-            return {
-                isError: true,
-                content: [{
-                        type: "text",
-                        text: "Configuration proposal review text may contain printable characters and LF newlines only; unsafe terminal or bidi controls were rejected.",
-                    }],
-            };
-        }
-        if (args.patch.some((operation) => secretBearingPointer(operation.path)
-            || (operation.from !== undefined && secretBearingPointer(operation.from))
-            || containsSecretLike(operation.value))
-            || containsSecretLike(args.rationale)
-            || (args.role !== undefined && containsSecretLike(args.role))) {
-            return {
-                isError: true,
-                content: [{
-                        type: "text",
-                        text: "Secret-bearing values and fields cannot enter a configuration proposal. Hand off to the masked mono-agent auth or owner-only .env flow.",
-                    }],
-            };
-        }
-        proposed = true;
-        const proposal = {
-            schema: "mono-agent.configuration-proposal.v1",
-            id: randomUUID(),
-            baseVersion: settings.baseVersion,
-            rationale: args.rationale,
-            patch: args.patch,
-            ...(args.role === undefined ? {} : { role: args.role }),
-            createdAt: new Date().toISOString(),
-        };
-        await writeProposal(settings.sinkPath, proposal);
-        return {
-            content: [{
-                    type: "text",
-                    text: "Proposal recorded. Explain it briefly, but do not claim it was applied; the host will validate it and ask the operator separately.",
-                }],
-            structuredContent: { proposalId: proposal.id, status: "pending_host_validation" },
-        };
-    });
-    return server;
-}
-function secretBearingPointer(pointer) {
-    return pointer.slice(1).split("/").some((raw) => {
-        const segment = raw.replaceAll("~1", "/").replaceAll("~0", "~");
-        return /(?:api.?key|credential|password|secret|token)/iu.test(segment) && !/(?:env|path)$/iu.test(segment);
-    });
-}
-function containsSecretLike(value) {
-    if (typeof value === "string") {
-        return /\b(?:sk-[A-Za-z0-9_-]{12,}|gh[pousr]_[A-Za-z0-9]{20,}|xox[baprs]-[A-Za-z0-9-]{12,}|Bearer\s+\S{12,}|\d{6,12}:[A-Za-z0-9_-]{20,})\b/u.test(value);
-    }
-    if (Array.isArray(value))
-        return value.some(containsSecretLike);
-    if (typeof value === "object" && value !== null) {
-        return Object.entries(value).some(([key, entry]) => (/(?:api.?key|credential|password|secret|token)/iu.test(key) && !/(?:env|path)$/iu.test(key))
-            || containsSecretLike(entry));
-    }
-    return false;
-}
-async function writeProposal(path, proposal) {
-    // The owner-local TUI pre-creates the capability directory. Never recreate
-    // it here: removing that directory on console exit must revoke late tool
-    // calls from an abort-ignoring provider rather than resurrect the session.
-    const temporary = `${path}.tmp-${process.pid}-${Date.now()}`;
-    try {
-        await writeFile(temporary, `${JSON.stringify(proposal)}\n`, { flag: "wx", mode: 0o600 });
-        await rename(temporary, path);
-    }
-    finally {
-        await rm(temporary, { force: true });
-    }
-}
-//# sourceMappingURL=configuration-proposal-tool.js.map

package/dist/configuration-proposal-tool.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"configuration-proposal-tool.js","sourceRoot":"","sources":["../src/configuration-proposal-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,sCAAsC,GAAG,qBAAqB,CAAC;AAC5E,MAAM,CAAC,MAAM,gCAAgC,GAAG,2BAA2B,CAAC;AAE5E,MAAM,QAAQ,GAAG,wCAAwC,CAAC;AAC1D,MAAM,gBAAgB,GAAG,uCAAuC,CAAC;AACjE,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAwBzC;;;;;GAKG;AACH,MAAM,UAAU,wCAAwC,CAAC,KAAa;IACpE,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QAC5C,IACE,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,IAAI,CAAC;eACtC,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC;eACxC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAC/B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3D,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IACpC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,IAAI,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzF,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,IAAI,SAAS,CAAC,EAAE,KAAK,SAAS,IAAI,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,EAAE,CAAC;QACjH,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG;IAC1B,SAAS,EAAE,6BAA6B,CAAC,KAAK,EAAE,+CAA+C,CAAC;IAChG,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,4FAA4F,CAAC;IACnJ,IAAI,EAAE,6BAA6B,CACjC,KAAK,EACL,wHAAwH,CACzH,CAAC,QAAQ,EAAE;CACb,CAAC;AAEF,SAAS,6BAA6B,CAAC,SAAiB,EAAE,WAAmB;IAC3E,OAAO,CAAC,CAAC,MAAM,EAAE;SACd,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9B,IAAI,wCAAwC,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,+EAA+E;aACzF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;SACD,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAClC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;SACtC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,yCAAyC,CACvD,GAAuC;IAEvC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,WAAW,QAAQ,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,WAAW,gBAAgB,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,QAA4C,EAC5C,GAAW;IAEX,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,GAAG;QACH,GAAG,EAAE;YACH,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,QAAQ;YAC7B,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,WAAW;SACzC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,QAA4C;IAC5F,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,CAAC,YAAY,CACjB,gCAAgC,EAChC;QACE,KAAK,EAAE,6BAA6B;QACpC,WAAW,EACT,sNAAsN;QACxN,WAAW,EAAE;YACX,sEAAsE;YACtE,kEAAkE;YAClE,sEAAsE;YACtE,mEAAmE;YACnE,iEAAiE;YACjE,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,aAAa,EAAE,KAAK;SACrB;QACD,WAAW,EAAE,mBAAmB;KACjC,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mGAAmG,EAAE,CAAC;aACvI,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uDAAuD,EAAE,CAAC;aAC3F,CAAC;QACJ,CAAC;QACD,IACE,wCAAwC,CAAC,IAAI,CAAC,SAAS,CAAC;eACrD,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EACnF,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,2IAA2I;qBAClJ,CAAC;aACH,CAAC;QACJ,CAAC;QACD,IACE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC5B,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC;eACjC,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;eACtE,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CACvC;eACE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;eAClC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAC7D,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,yIAAyI;qBAChJ,CAAC;aACH,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,QAAQ,GAA+B;YAC3C,MAAM,EAAE,sCAAsC;YAC9C,EAAE,EAAE,UAAU,EAAE;YAChB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAsC;YAClD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACvD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,MAAM,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,oIAAoI;iBAC3I,CAAC;YACF,iBAAiB,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE;SAClF,CAAC;IACJ,CAAC,CACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChE,OAAO,iDAAiD,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,qIAAqI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3J,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACjD,CAAC,iDAAiD,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;eAC1F,kBAAkB,CAAC,KAAK,CAAC,CAC7B,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,QAAoC;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC"}

package/dist/local-configuration.d.ts

@@ -1,99 +0,0 @@
-import type { AgentResponder } from "@mono-agent/agent-contracts";
-import { type MonoAgentConfig, type MonoAgentConfigJson } from "@mono-agent/config";
-import type { AgentHarnessRuntimeOptionsExtension, AgentHarnessRuntimeOptionsInput } from "@mono-agent/agent-harness";
-import type { ConfigurationProposalCard, ConfigurationProposalResult, TuiConfigurationController } from "@mono-agent/tui";
-import type { BackgroundSnapshot } from "./background-snapshot.js";
-import { type AgentConfigurationProposal, type JsonPatchOperation } from "./configuration-proposal-tool.js";
-export declare const LOCAL_CONFIGURATION_PROMPT = "Begin the dedicated self-configuration session. This is not ordinary chat. Read the mono-agent-configure skill. In the first assistant message, identify the session as SELF-CONFIG and show one compact, user-led map of every capability area: identity and knowledge; runtime and models; skills, tools, MCP servers, and plugins; memory; channels, APIs, and A2A; automation and proactive work; security, sandboxing, and secrets; observability and operations; and acceptance criteria. Explain that the conversation can build a workflow from trigger \u2192 context/data \u2192 tools/actions \u2192 delivery \u2192 memory \u2192 safety/operations \u2192 success checks. State that secrets must never be entered, every file change requires a separate host-owned approval, and approval, rejection, done, or no changes keeps SELF-CONFIG active. Only /quit, /exit, or ctrl+c twice exits this session; quitting never sends a background stop request. Invite the operator to choose an area or describe the workflow they want, using one concise question. Do not repeat the setup wizard and do not overwhelm the operator with a questionnaire. The session may use multiple turns: ask one focused question at a time, and record one minimal coherent proposal with ProposeAgentConfiguration only when enough information is available. It is valid to explain or ask the next question without proposing a change. Never execute ordinary tasks with configuration authority or claim a proposal was applied; the local host validates proposals and asks for separate approval.";
-export declare const LOCAL_CONFIGURATION_OPERATOR_PROMPT = "Continue the dedicated SELF-CONFIG conversation. The capability map and opening invitation were already shown: do not repeat them. Apply the mono-agent-configure skill instructions already in this conversation, loading them with ReadSkill only if they are absent, and use the existing conversation plus any host outcome below. Help the operator shape a usable workflow across trigger \u2192 context/data \u2192 tools/actions \u2192 delivery \u2192 memory \u2192 safety/operations \u2192 success checks. Take one conversational step: ask at most one focused question, explain the relevant supported or guided path, or, when the request is decision-complete, record one minimal coherent proposal with ProposeAgentConfiguration. A turn without a proposal is expected while exploring. After a host-applied or rejected proposal, continue with the next relevant area instead of handing off to ordinary chat. Never ask for secrets, execute an ordinary task with configuration authority, or claim a proposal was applied.";
-export interface ConfigurationBackgroundConnection {
-    readonly baseUrl: string;
-    readonly apiKey?: string;
-}
-export type ConfigurationBackgroundRestartResult = {
-    readonly ok: true;
-    readonly connection: ConfigurationBackgroundConnection;
-} | {
-    readonly ok: false;
-    readonly message: string;
-};
-export type RestartConfigurationBackground = (expectedSnapshot: BackgroundSnapshot) => Promise<ConfigurationBackgroundRestartResult>;
-interface AppliedConfigurationChange {
-    readonly changeId: string;
-    readonly rollbackDir: string;
-    readonly snapshot: BackgroundSnapshot;
-    rollback(): Promise<BackgroundSnapshot>;
-}
-export interface LocalConfigurationSession {
-    readonly responder: AgentResponder;
-    readonly title: string;
-    dispose(): Promise<void>;
-}
-export interface CreateLocalConfigurationSessionOptions {
-    readonly cwd: string;
-    readonly configPath: string;
-    readonly env: Record<string, string | undefined>;
-    readonly configure?: boolean;
-    readonly envFile?: string;
-    /** Deterministic transaction-race seam for regression tests. */
-    readonly beforeSnapshotCapture?: (phase: "apply" | "rollback") => void | Promise<void>;
-}
-export interface CreateRemoteConfigurationSessionOptions extends CreateLocalConfigurationSessionOptions {
-    readonly restartBackground: RestartConfigurationBackground;
-    /** Deterministic failure seam for capability-rotation regression tests. */
-    readonly beforeRotateAttempt?: () => void | Promise<void>;
-}
-export interface RemoteConfigurationSession {
-    readonly configuration: TuiConfigurationController;
-    dispose(): Promise<void>;
-}
-/** Build a current-folder responder for ordinary embedded chat only. */
-export declare function createLocalConfigurationSession(options: CreateLocalConfigurationSessionOptions): Promise<LocalConfigurationSession>;
-/**
- * Create the local host controller for a remote configuration conversation.
- * The daemon only proposes; this process validates, confirms, writes, restarts,
- * proves readiness, and rolls back on failure.
- */
-export declare function createRemoteConfigurationSession(options: CreateRemoteConfigurationSessionOptions): Promise<RemoteConfigurationSession>;
-export interface ConfigurationRuntimeExtensionOptions {
-    readonly cwd: string;
-    /** Canonical mutable path used only to authenticate this agent folder/capability root. */
-    readonly configPath: string;
-    /** Immutable worker copy used for route classification and proposal base version. */
-    readonly configReadPath?: string;
-    readonly env: Record<string, string | undefined>;
-}
-/** Install proposal-only authority on explicitly capability-marked TUI requests. */
-export declare function createLocalConfigurationRuntimeExtension(options: ConfigurationRuntimeExtensionOptions): (input: AgentHarnessRuntimeOptionsInput) => Promise<AgentHarnessRuntimeOptionsExtension>;
-export declare class LocalConfigurationManager {
-    private readonly options;
-    private readonly proposalRoot;
-    readonly currentConfig: MonoAgentConfig;
-    readonly roleLocation: string;
-    private readonly prepared;
-    private readonly cleanupPaths;
-    private currentSessionId;
-    private currentSessionDir;
-    private disabledReason;
-    private constructor();
-    get sessionId(): string;
-    static create(options: CreateLocalConfigurationSessionOptions): Promise<LocalConfigurationManager>;
-    /** Revoke the completed attempt's opaque filesystem capability before issuing the next one. */
-    rotateAttempt(): Promise<void>;
-    /** Poison the public capability id and best-effort remove every owned attempt path. */
-    disableConfigurationAttempts(error: unknown): Promise<void>;
-    private assertAttemptsEnabled;
-    takeProposal(): Promise<ConfigurationProposalCard | undefined>;
-    reject(id: string): Promise<ConfigurationProposalResult>;
-    prepareProposal(proposal: AgentConfigurationProposal): Promise<ConfigurationProposalCard>;
-    private prepare;
-    apply(id: string): Promise<AppliedConfigurationChange>;
-    private applyPrepared;
-    private captureCommittedSnapshot;
-    private validateCandidate;
-    dispose(): Promise<void>;
-}
-export declare function isLocalConfigurationRequest(metadata: Record<string, unknown> | undefined): boolean;
-export declare function applyJsonPatch(input: MonoAgentConfigJson, operations: readonly JsonPatchOperation[]): MonoAgentConfigJson;
-export {};
-//# sourceMappingURL=local-configuration.d.ts.map

package/dist/local-configuration.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"local-configuration.d.ts","sourceRoot":"","sources":["../src/local-configuration.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,mCAAmC,EACnC,+BAA+B,EAChC,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EACV,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC3B,MAAM,iBAAiB,CAAC;AAOzB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,OAAO,EAKL,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACxB,MAAM,kCAAkC,CAAC;AAS1C,eAAO,MAAM,0BAA0B,ghDAC08C,CAAC;AAMl/C,eAAO,MAAM,mCAAmC,y/BAC06B,CAAC;AAY39B,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,oCAAoC,GAC5C;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,iCAAiC,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,MAAM,MAAM,8BAA8B,GAAG,CAC3C,gBAAgB,EAAE,kBAAkB,KACjC,OAAO,CAAC,oCAAoC,CAAC,CAAC;AAcnD,UAAU,0BAA0B;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxF;AAED,MAAM,WAAW,uCAAwC,SAAQ,sCAAsC;IACrG,QAAQ,CAAC,iBAAiB,EAAE,8BAA8B,CAAC;IAC3D,2EAA2E;IAC3E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,aAAa,EAAE,0BAA0B,CAAC;IACnD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,wEAAwE;AACxE,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,yBAAyB,CAAC,CAkCpC;AAED;;;;GAIG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,uCAAuC,GAC/C,OAAO,CAAC,0BAA0B,CAAC,CAyDrC;AAiHD,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qFAAqF;IACrF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAClD;AAED,oFAAoF;AACpF,wBAAgB,wCAAwC,CACtD,OAAO,EAAE,oCAAoC,GAC5C,CAAC,KAAK,EAAE,+BAA+B,KAAK,OAAO,CAAC,mCAAmC,CAAC,CAmD1F;AAiCD,qBAAa,yBAAyB;IAUlC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAV/B,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuC;IAChE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,cAAc,CAAqB;IAE3C,OAAO;IAcP,IAAI,SAAS,IAAI,MAAM,CAEtB;WAEY,MAAM,CAAC,OAAO,EAAE,sCAAsC,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAoBxG,+FAA+F;IACzF,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IA2CpC,uFAAuF;IACjF,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBjE,OAAO,CAAC,qBAAqB;IAQvB,YAAY,IAAI,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAmC9D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAWxD,eAAe,CAAC,QAAQ,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC;YAOjF,OAAO;IAgEf,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;YAS9C,aAAa;YAqKb,wBAAwB;YASxB,iBAAiB;IA4BzB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAO/B;AAED,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,OAAO,CAElG;AAkCD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,mBAAmB,EAC1B,UAAU,EAAE,SAAS,kBAAkB,EAAE,GACxC,mBAAmB,CAqBrB"}