@mono-agent/agent-app 0.20.14 → 0.21.0

package/skills/mono-agent-composer/references/package-map.md

@@ -50,11 +50,12 @@ Use this path when the agent needs identity, selected skills, history, and optio
 | Selected skill bodies | `@mono-agent/agent-harness` | Load only configured skills from `<skillsRoot>/<name>/SKILL.md` |
 | Live operator skill registry | `@mono-agent/agent-app` + `@mono-agent/operator-adapter` | Classify installed skills as inlined, on-demand, or unavailable and expose a bounded memory-only snapshot for console discovery |
 | Memory substrate (schema, migrations, FTS+vector db, RRF) | `@mono-agent/memory/store` | SQLite storage, BM25 FTS, optional vector index, hybrid recall; re-exports `MemoryStore`/`MemoryBlock`/`MemoryWriteResult` from `@mono-agent/agent-contracts` |
-| Memory engine (all tiers: lite/journal/bujo) | `@mono-agent/memory/bujo` | `BujoMemoryStore` — tier-aware: FTS recall (lite), hybrid recall + static salience (journal), LLM capture/reconcile + entity graph + projection-only scheduled consolidation (bujo) |
+| Memory engine (all tiers: lite/journal/bujo) | `@mono-agent/memory/bujo` | `BujoMemoryStore` — tier-aware: FTS recall (lite), hybrid recall + static salience (journal), LLM capture/reconcile + entity graph + projection-only scheduled consolidation (bujo); all tiers affirm bounded canonical chronological browse |
 | Embedding providers | `@mono-agent/memory/search` | Exclusive Ollama/LM Studio/OpenAI embedding providers used by the store subpath for vector recall; `agent-app` owns guided typed discovery and the real readiness probe |
 | Composer documentation search + guided reading | `@mono-agent/docs-mcp` (optional plugin) | Exact-version offline hybrid semantic/BM25 `mono_agent_docs` search plus anchored reads, cross-link resolution, and continuation windows over canonical docs and composer references; paired by `mono-agent install-skill`, outside the composed agent's own `mcp.json` |
 | External Supermemory backend | `@mono-agent/memory-supermemory` (optional plugin) | Explicitly installed lockstep package selected by `memory.backend: "supermemory"`; proxies the shared `MemoryStore` / `MemoryRecall` contracts to local or hosted Supermemory for server-side extraction, consolidation, and hybrid recall |
 | Recall tool surface | `@mono-agent/agent-app` (bundled) | Auto-provisions read-only `MemoryRecall` for every configured tier and direct configured responder; automatic/tool recall share the same store and per-turn query cache |
+| Chronological journal tool surface | `@mono-agent/agent-app` (bundled) | Auto-provisions policy-gated `MemoryJournal` only for affirmative local Lite/Journal/BuJo capability; strict explicit dates/zone, frozen request snapshots, safe provenance, no Supermemory/search fallback |
 
 Mono-agent selected skills are not auto-selected by description. The host chooses `context.selectedSkills`, and the harness loads those exact bodies.
 
@@ -82,13 +83,15 @@ companion, not an MCP server injected into every composed agent. Add project
 MCP servers to the agent's own `mcp.json`; do not copy the documentation server
 there unless the resulting agent itself must answer mono-agent framework questions.
 
-`RunHistory`, `SessionHistory`, and `SetConversationTitle` are app-owned
+`RunHistory`, `SessionHistory`, `MemoryJournal`, and `SetConversationTitle` are app-owned
 request-scoped tools, not entries for `mcp.json`. `SessionHistory` searches the
 current logical session's retained managed-tool calls/results and needs no config
 key. `SetConversationTitle` appears only for writable interactive web threads;
 it keeps automatic semantic titles current, while a user rename permanently
 wins. Allow-all exposes eligible tools; a specific allowlist must name each one.
-Every route is Pi-native, so no route family suppresses any of the three; the
+`MemoryJournal` also requires `memory.recallTool.enabled` and an affirmative local
+browse capability; Supermemory never acquires it through policy alone. Every route is
+Pi-native, so no route family suppresses any of these tools; the
 surface conditions above (writable interactive web thread, retained managed-tool
 calls) are the only gates.
 `@mono-agent/agent-app` also owns rich reply composition. `PublishReplyFile`

package/skills/mono-agent-composer/references/playbooks.md

@@ -11,6 +11,18 @@ Flow, check whether one of these fits and adapt it. Verify every key against
 
 ---
 
+## Efficient command watches
+
+For repeated terminal redraws, enable `processJobs.enabled` and
+`monitors.enabled`, then use Monitor with `wake_on: "batch"`,
+`dedupe: "batch"`, and a chosen `min_wake_interval_ms`. The host clamps the
+interval to `monitors.maxWakeIntervalMs` (default/cap 300000); check the start
+receipt's effective policy. First and terminal wakes bypass the floor.
+Use `wake_on: "exit"` with default dedupe/interval for exactly one terminal
+wake and a bounded retained tail. Finite work whose final result matters still
+fits a background process job. Cancellation intentionally stops the watch;
+never automatically recreate it.
+
 ## 1. Personal Telegram assistant with BuJo memory
 **For:** an individual wanting a private assistant that remembers.
 **Goal:** a Telegram bot (long polling) that captures every turn into BuJo memory with scheduled consolidation and recalls past notes semantically.
@@ -281,12 +293,15 @@ and are rejected at load; emit `runtime.fallbacks[]` only.
   "telegram": { "enabled": true, "allowedChatIds": ["123456789"], "apiRoot": "http://127.0.0.1:8081", "attachments": { "maxBytes": 268435456, "maxUploadBytes": 268435456 } }
 }
 ```
+Set `interaction.askUser.timeoutMs` to `null` when this workflow must keep the
+question pending until the user answers or cancels; the default remains ten
+minutes.
 **Steps:** run a loopback self-hosted Bot API server if files exceed 20 MB, wire a long-running MCP tool in `.mcp.json`, `validate`, `start`.
 **Smoke:** send media with no caption, answer the `AskUser` question, watch progress update during the long job, and receive both an explicit `TelegramSendFile` send and a final generated reply file published with `PublishReplyFile` as native documents.
 
 ## 16. Local-first web research agent
 **For:** a researcher wanting operator-owned search infrastructure and bounded public-page extraction.
-**Goal:** discover through loopback SearXNG, extract pages locally, and optionally render sparse JavaScript HTML in an isolated anonymous browser.
+**Goal:** discover through explicit Ollama or loopback SearXNG, extract pages locally, and optionally render JavaScript HTML in an isolated anonymous browser.
 **Features:** `runtime.web-research`, `runtime.webfetch-retry`, `runtime.builtin-tools`, `sandbox.network-policy`.
 
 ```json
@@ -295,7 +310,7 @@ and are rejected at load; emit `runtime.fallbacks[]` only.
   "tools": {
     "allowedTools": ["Read", "Glob", "Grep", "WebSearch", "WebFetch"],
     "web": {
-      "search": { "backend": "searxng", "endpoint": "http://127.0.0.1:8088" },
+      "search": { "backend": "auto", "maxRequestsPerRun": 4, "ollama": { "baseUrl": "http://127.0.0.1:11434" }, "searxng": { "endpoint": "http://127.0.0.1:8088" } },
       "fetch": { "render": "never", "browserCommand": "agent-browser" }
     }
   },
@@ -303,6 +318,6 @@ and are rejected at load; emit `runtime.fallbacks[]` only.
 }
 ```
 
-**Steps:** provision an operator-owned loopback SearXNG instance with JSON responses enabled → keep strict `searxng` or choose `auto` for ChatGPT-subscription Codex then keyless fallback → keep render `never`, or install `agent-browser >=0.33.1` and opt into `auto` for SPA pages → `validate` → `start`.
-**Boundary:** local SearXNG is private infrastructure, not an offline index; it contacts public engines and WebFetch contacts result sites. `localhost` permits the companion but blocks public fetches.
-**Smoke:** ask for two query variants and one official-page fetch; require canonical ranked URLs, untrusted-content boundaries, bounded timing metadata without query/URL leakage, and no duplicate network work for an identical call in the run.
+**Steps:** configure explicit local or hosted `ollama`, or provision an operator-owned loopback SearXNG instance with JSON responses enabled → keep a named backend strict or choose `auto` for explicitly configured Ollama, configured SearXNG, ChatGPT-subscription Codex, then keyless fallback → keep the default four-request run budget → keep config render `never`, or install `agent-browser >=0.33.1` and opt into config render `auto` for SPA pages; use per-call `WebFetch` `render: "always"` only when a known page must be browser-first → `validate` → `start`.
+**Boundary:** local SearXNG and Ollama search are private infrastructure, not offline indexes; they contact public services and WebFetch contacts result sites. Hosted Ollama credentials are bound to the exact official origin. `localhost` permits a local companion but blocks public fetches. Rendering does not bypass authentication or access challenges.
+**Smoke:** ask for one broad query and one official-page fetch; require canonical ranked URLs, request-budget metadata, untrusted-content boundaries, bounded timing metadata without query/URL leakage, and no duplicate network work for an identical call in the run. The researcher must not sleep or retry after a cooldown.

package/skills/mono-agent-composer/references/validation.md

@@ -123,9 +123,10 @@ pnpm test
 | Webhook | `curl` the invocation path and inspect the response body/status. |
 | Cron | Run a one-off scheduled invocation or wait for one tick. |
 | Observability | Confirm a run writes a JSONL artifact with strings capped: non-numeric values under sensitive-looking object keys are redacted; numeric values under matched keys are retained; retained free text is scanned for a closed set of high-confidence credential shapes. If an `observability.exporters` Phoenix entry is set, confirm the trace appears in Phoenix. |
-| Memory recall tool | With any memory tier configured (`memory.recallTool.enabled` defaults on), ask the agent to recall an old note and confirm `MemoryRecall` appears separately from action-tool allowlists and returns it. |
-| Session tool history | Complete a managed tool call, start a later cold turn in the same logical conversation, and confirm its bounded path-opaque call/result projection is available. After compaction, use `SessionHistory.search` then `get`; verify another conversation and the current run remain unavailable. A crash-dangling call must recover once as `interrupted` without rerun, while a clean writer shutdown must not be reported as crash recovery. |
-| Web research | Run `mono-agent validate` and require the Web search & fetch section to prove configured loopback SearXNG plus `agent-browser >=0.33.1` when rendering is enabled. Then ask for two query variants and one official-page fetch; require canonical ranked URLs, untrusted-content boundaries, and bounded timing metadata without query/URL leakage. |
+| Memory recall tool | With any memory backend configured (`memory.recallTool.enabled` defaults on), ask the agent for one targeted old fact and confirm `MemoryRecall` appears and returns it. Active-conversation-relative questions must remain in chat context, not durable search. |
+| Memory journal tool | With a synthetic local Lite/Journal/BuJo store and policy allowing `MemoryJournal`, call an explicit date range and IANA zone over at least two pages. Verify instant/id order, stable cursor continuation, safe relative provenance, lifecycle state, audit/dropped exclusion, explicit completeness metadata, and no embedding/chat request. A complete empty range must be `noData`; backend failure must be `journal_unavailable`; Supermemory or disabled reads must advertise no endpoint. Prompt/description assertions prove routing contracts, not autonomous model choice. |
+| Session tool history | Complete a managed tool call, start a later cold turn in the same logical conversation, and confirm its bounded path-opaque call/result projection is available. Force one accepted write past the 250 ms foreground ceiling in a throwaway store: its event must say `deferred` without the “not saved” warning, and run finalization must wait until `SessionHistory` can retrieve the committed row. After compaction, use `SessionHistory.search` then `get`; verify another conversation and the current run remain unavailable. A definitive writer rejection must still say `failed`; a crash-dangling call must recover once as `interrupted` without rerun, while a clean writer shutdown must not be reported as crash recovery. |
+| Web research | Run `mono-agent validate` and require the Web search & fetch section to prove the explicitly selected Ollama or configured loopback SearXNG route plus `agent-browser >=0.33.1` when rendering is enabled. Then ask for two query variants and one official-page fetch; require canonical ranked URLs, untrusted-content boundaries, honest provider/render failures, and bounded timing metadata without query/URL/credential leakage. Rendering never proves access-challenge bypass. |
 | Semantic memory search | With `memory.embeddings` set, first prove the configured provider only: Ollama model advertises `embedding` through `/api/show` and answers `/api/embed`, or LM Studio model has exact `type: "embedding"` in `/api/v1/models` and answers `/v1/embeddings`. Verify the finite vector dimension matches config, then ask a paraphrased question about an old note and confirm `MemoryRecall` returns it. Never accept a cross-provider fallback as proof. |
 
 ## Failure Handling

package/dist/configuration-proposal-main.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=configuration-proposal-main.d.ts.map

package/dist/configuration-proposal-main.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"configuration-proposal-main.d.ts","sourceRoot":"","sources":["../src/configuration-proposal-main.ts"],"names":[],"mappings":""}

package/dist/configuration-proposal-main.js

@@ -1,13 +0,0 @@
-#!/usr/bin/env node
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { configurationProposalChildSettingsFromEnv, createConfigurationProposalServer, } from "./configuration-proposal-tool.js";
-async function main() {
-    const settings = configurationProposalChildSettingsFromEnv(process.env);
-    const server = createConfigurationProposalServer(settings);
-    await server.connect(new StdioServerTransport());
-}
-main().catch((error) => {
-    process.stderr.write(`mono-agent-configuration-proposal: fatal: ${error instanceof Error ? error.message : String(error)}\n`);
-    process.exitCode = 1;
-});
-//# sourceMappingURL=configuration-proposal-main.js.map

package/dist/configuration-proposal-main.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"configuration-proposal-main.js","sourceRoot":"","sources":["../src/configuration-proposal-main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EACL,yCAAyC,EACzC,iCAAiC,GAClC,MAAM,kCAAkC,CAAC;AAE1C,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,yCAAyC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,iCAAiC,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9H,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/configuration-proposal-tool.d.ts

@@ -1,33 +0,0 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-export declare const CONFIGURATION_PROPOSAL_MCP_SERVER_NAME = "agent_configuration";
-export declare const CONFIGURATION_PROPOSAL_TOOL_NAME = "ProposeAgentConfiguration";
-export interface JsonPatchOperation {
-    readonly op: "add" | "remove" | "replace" | "move" | "copy" | "test";
-    readonly path: string;
-    readonly from?: string;
-    readonly value?: unknown;
-}
-export interface AgentConfigurationProposal {
-    readonly schema: "mono-agent.configuration-proposal.v1";
-    readonly id: string;
-    readonly baseVersion: string;
-    readonly rationale: string;
-    readonly patch: readonly JsonPatchOperation[];
-    readonly role?: string;
-    readonly createdAt: string;
-}
-export interface ConfigurationProposalChildSettings {
-    readonly sinkPath: string;
-    readonly baseVersion: string;
-}
-/**
- * Proposal copy is rendered in an out-of-band terminal approval card. Keep
- * ordinary Unicode text and LF newlines intact, but reject terminal controls
- * and bidi controls that could clear, overwrite, or visually reorder the
- * operator's review.
- */
-export declare function containsUnsafeConfigurationReviewControl(value: string): boolean;
-export declare function configurationProposalChildSettingsFromEnv(env: Record<string, string | undefined>): ConfigurationProposalChildSettings;
-export declare function configurationProposalMcpServerSpec(settings: ConfigurationProposalChildSettings, cwd: string): Record<string, unknown>;
-export declare function createConfigurationProposalServer(settings: ConfigurationProposalChildSettings): McpServer;
-//# sourceMappingURL=configuration-proposal-tool.d.ts.map

package/dist/configuration-proposal-tool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"configuration-proposal-tool.d.ts","sourceRoot":"","sources":["../src/configuration-proposal-tool.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKpE,eAAO,MAAM,sCAAsC,wBAAwB,CAAC;AAC5E,eAAO,MAAM,gCAAgC,8BAA8B,CAAC;AAK5E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,sCAAsC,CAAC;IACxD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAgB,wCAAwC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/E;AAwCD,wBAAgB,yCAAyC,CACvD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,kCAAkC,CAUpC;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,kCAAkC,EAC5C,GAAG,EAAE,MAAM,GACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWzB;AAED,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,kCAAkC,GAAG,SAAS,CAoFzG"}

package/dist/configuration-proposal-tool.js

@@ -1,180 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { rename, rm, writeFile } from "node:fs/promises";
-import { fileURLToPath } from "node:url";
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z } from "zod";
-import { containsSecretLikeValue, containsUnsafeReviewControl } from "./untrusted-text.js";
-export const CONFIGURATION_PROPOSAL_MCP_SERVER_NAME = "agent_configuration";
-export const CONFIGURATION_PROPOSAL_TOOL_NAME = "ProposeAgentConfiguration";
-const SINK_ENV = "MONO_AGENT_CONFIGURATION_PROPOSAL_SINK";
-const BASE_VERSION_ENV = "MONO_AGENT_CONFIGURATION_BASE_VERSION";
-/**
- * Proposal copy is rendered in an out-of-band terminal approval card. Keep
- * ordinary Unicode text and LF newlines intact, but reject terminal controls
- * and bidi controls that could clear, overwrite, or visually reorder the
- * operator's review.
- */
-export function containsUnsafeConfigurationReviewControl(value) {
-    return containsUnsafeReviewControl(value);
-}
-const patchOperationSchema = z.object({
-    op: z.enum(["add", "remove", "replace", "move", "copy", "test"]),
-    path: z.string().min(1).max(500).startsWith("/"),
-    from: z.string().min(1).max(500).startsWith("/").optional(),
-    value: z.unknown().optional(),
-}).superRefine((operation, context) => {
-    if ((operation.op === "move" || operation.op === "copy") && operation.from === undefined) {
-        context.addIssue({ code: "custom", message: `${operation.op} requires from.` });
-    }
-    if ((operation.op === "add" || operation.op === "replace" || operation.op === "test") && !("value" in operation)) {
-        context.addIssue({ code: "custom", message: `${operation.op} requires value.` });
-    }
-});
-const proposalInputSchema = {
-    rationale: configurationReviewTextSchema(2_000, "Short operator-facing reason for this change."),
-    patch: z.array(patchOperationSchema).max(50).describe("RFC 6902 patch against mono-agent.config.json. May be empty only for a Role-only proposal."),
-    role: configurationReviewTextSchema(8_000, "Optional replacement body for the existing ## Role section in the configured identity document (normally IDENTITY.md).").optional(),
-};
-function configurationReviewTextSchema(maxLength, description) {
-    return z.string()
-        .superRefine((value, context) => {
-        if (containsUnsafeConfigurationReviewControl(value)) {
-            context.addIssue({
-                code: "custom",
-                message: "Configuration proposal review text contains unsafe terminal or bidi controls.",
-            });
-        }
-    })
-        .transform((value) => value.trim())
-        .pipe(z.string().min(1).max(maxLength))
-        .describe(description);
-}
-export function configurationProposalChildSettingsFromEnv(env) {
-    const sinkPath = env[SINK_ENV]?.trim();
-    const baseVersion = env[BASE_VERSION_ENV]?.trim();
-    if (sinkPath === undefined || sinkPath.length === 0) {
-        throw new Error(`Missing ${SINK_ENV}.`);
-    }
-    if (baseVersion === undefined || baseVersion.length === 0) {
-        throw new Error(`Missing ${BASE_VERSION_ENV}.`);
-    }
-    return { sinkPath, baseVersion };
-}
-export function configurationProposalMcpServerSpec(settings, cwd) {
-    return {
-        type: "stdio",
-        command: process.execPath,
-        args: [fileURLToPath(new URL("./configuration-proposal-main.js", import.meta.url))],
-        cwd,
-        env: {
-            [SINK_ENV]: settings.sinkPath,
-            [BASE_VERSION_ENV]: settings.baseVersion,
-        },
-    };
-}
-export function createConfigurationProposalServer(settings) {
-    const server = new McpServer({ name: "agent-configuration", version: "1.0.0" });
-    let proposed = false;
-    server.registerTool(CONFIGURATION_PROPOSAL_TOOL_NAME, {
-        title: "Propose agent configuration",
-        description: "Propose, but never apply, a small local agent configuration change. The host validates the candidate and asks the operator to approve it outside the model conversation. Never include credentials or secret values.",
-        annotations: {
-            // This call records an inert, session-scoped proposal only. It cannot
-            // mutate the agent config or reach the network; the host owns the
-            // separate validation and approval transaction. Marking that boundary
-            // explicitly also prevents unattended MCP clients from inserting a
-            // second, provider-owned approval prompt before our review card.
-            readOnlyHint: true,
-            destructiveHint: false,
-            openWorldHint: false,
-        },
-        inputSchema: proposalInputSchema,
-    }, async (args) => {
-        if (args.patch.length === 0 && args.role === undefined) {
-            return {
-                isError: true,
-                content: [{ type: "text", text: "A configuration proposal must change config, the configured identity document's ## Role, or both." }],
-            };
-        }
-        if (proposed) {
-            return {
-                isError: true,
-                content: [{ type: "text", text: "Only one configuration proposal is accepted per turn." }],
-            };
-        }
-        if (containsUnsafeConfigurationReviewControl(args.rationale)
-            || (args.role !== undefined && containsUnsafeConfigurationReviewControl(args.role))) {
-            return {
-                isError: true,
-                content: [{
-                        type: "text",
-                        text: "Configuration proposal review text may contain printable characters and LF newlines only; unsafe terminal or bidi controls were rejected.",
-                    }],
-            };
-        }
-        if (args.patch.some((operation) => secretBearingPointer(operation.path)
-            || (operation.from !== undefined && secretBearingPointer(operation.from))
-            || containsSecretLike(operation.value))
-            || containsSecretLike(args.rationale)
-            || (args.role !== undefined && containsSecretLike(args.role))) {
-            return {
-                isError: true,
-                content: [{
-                        type: "text",
-                        text: "Secret-bearing values and fields cannot enter a configuration proposal. Hand off to the masked mono-agent auth or owner-only .env flow.",
-                    }],
-            };
-        }
-        proposed = true;
-        const proposal = {
-            schema: "mono-agent.configuration-proposal.v1",
-            id: randomUUID(),
-            baseVersion: settings.baseVersion,
-            rationale: args.rationale,
-            patch: args.patch,
-            ...(args.role === undefined ? {} : { role: args.role }),
-            createdAt: new Date().toISOString(),
-        };
-        await writeProposal(settings.sinkPath, proposal);
-        return {
-            content: [{
-                    type: "text",
-                    text: "Proposal recorded. Explain it briefly, but do not claim it was applied; the host will validate it and ask the operator separately.",
-                }],
-            structuredContent: { proposalId: proposal.id, status: "pending_host_validation" },
-        };
-    });
-    return server;
-}
-function secretBearingPointer(pointer) {
-    return pointer.slice(1).split("/").some((raw) => {
-        const segment = raw.replaceAll("~1", "/").replaceAll("~0", "~");
-        return /(?:api.?key|credential|password|secret|token)/iu.test(segment) && !/(?:env|path)$/iu.test(segment);
-    });
-}
-function containsSecretLike(value) {
-    if (typeof value === "string") {
-        return containsSecretLikeValue(value);
-    }
-    if (Array.isArray(value))
-        return value.some(containsSecretLike);
-    if (typeof value === "object" && value !== null) {
-        return Object.entries(value).some(([key, entry]) => (/(?:api.?key|credential|password|secret|token)/iu.test(key) && !/(?:env|path)$/iu.test(key))
-            || containsSecretLike(entry));
-    }
-    return false;
-}
-async function writeProposal(path, proposal) {
-    // The owner-local TUI pre-creates the capability directory. Never recreate
-    // it here: removing that directory on console exit must revoke late tool
-    // calls from an abort-ignoring provider rather than resurrect the session.
-    const temporary = `${path}.tmp-${process.pid}-${Date.now()}`;
-    try {
-        await writeFile(temporary, `${JSON.stringify(proposal)}\n`, { flag: "wx", mode: 0o600 });
-        await rename(temporary, path);
-    }
-    finally {
-        await rm(temporary, { force: true });
-    }
-}
-//# sourceMappingURL=configuration-proposal-tool.js.map

package/dist/configuration-proposal-tool.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"configuration-proposal-tool.js","sourceRoot":"","sources":["../src/configuration-proposal-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAE3F,MAAM,CAAC,MAAM,sCAAsC,GAAG,qBAAqB,CAAC;AAC5E,MAAM,CAAC,MAAM,gCAAgC,GAAG,2BAA2B,CAAC;AAE5E,MAAM,QAAQ,GAAG,wCAAwC,CAAC;AAC1D,MAAM,gBAAgB,GAAG,uCAAuC,CAAC;AAwBjE;;;;;GAKG;AACH,MAAM,UAAU,wCAAwC,CAAC,KAAa;IACpE,OAAO,2BAA2B,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3D,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IACpC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,IAAI,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzF,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,IAAI,SAAS,CAAC,EAAE,KAAK,SAAS,IAAI,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,EAAE,CAAC;QACjH,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG;IAC1B,SAAS,EAAE,6BAA6B,CAAC,KAAK,EAAE,+CAA+C,CAAC;IAChG,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,4FAA4F,CAAC;IACnJ,IAAI,EAAE,6BAA6B,CACjC,KAAK,EACL,wHAAwH,CACzH,CAAC,QAAQ,EAAE;CACb,CAAC;AAEF,SAAS,6BAA6B,CAAC,SAAiB,EAAE,WAAmB;IAC3E,OAAO,CAAC,CAAC,MAAM,EAAE;SACd,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9B,IAAI,wCAAwC,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,+EAA+E;aACzF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;SACD,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAClC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;SACtC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,yCAAyC,CACvD,GAAuC;IAEvC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,WAAW,QAAQ,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,WAAW,gBAAgB,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,QAA4C,EAC5C,GAAW;IAEX,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,GAAG;QACH,GAAG,EAAE;YACH,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,QAAQ;YAC7B,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,WAAW;SACzC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,QAA4C;IAC5F,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,CAAC,YAAY,CACjB,gCAAgC,EAChC;QACE,KAAK,EAAE,6BAA6B;QACpC,WAAW,EACT,sNAAsN;QACxN,WAAW,EAAE;YACX,sEAAsE;YACtE,kEAAkE;YAClE,sEAAsE;YACtE,mEAAmE;YACnE,iEAAiE;YACjE,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,aAAa,EAAE,KAAK;SACrB;QACD,WAAW,EAAE,mBAAmB;KACjC,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mGAAmG,EAAE,CAAC;aACvI,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uDAAuD,EAAE,CAAC;aAC3F,CAAC;QACJ,CAAC;QACD,IACE,wCAAwC,CAAC,IAAI,CAAC,SAAS,CAAC;eACrD,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EACnF,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,2IAA2I;qBAClJ,CAAC;aACH,CAAC;QACJ,CAAC;QACD,IACE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC5B,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC;eACjC,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;eACtE,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CACvC;eACE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;eAClC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAC7D,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,yIAAyI;qBAChJ,CAAC;aACH,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,QAAQ,GAA+B;YAC3C,MAAM,EAAE,sCAAsC;YAC9C,EAAE,EAAE,UAAU,EAAE;YAChB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAsC;YAClD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACvD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,MAAM,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,oIAAoI;iBAC3I,CAAC;YACF,iBAAiB,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE;SAClF,CAAC;IACJ,CAAC,CACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChE,OAAO,iDAAiD,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACjD,CAAC,iDAAiD,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;eAC1F,kBAAkB,CAAC,KAAK,CAAC,CAC7B,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,QAAoC;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC"}

package/dist/local-configuration.d.ts

@@ -1,99 +0,0 @@
-import type { AgentResponder } from "@mono-agent/agent-contracts";
-import { type MonoAgentConfig, type MonoAgentConfigJson } from "@mono-agent/config";
-import type { AgentHarnessRuntimeOptionsExtension, AgentHarnessRuntimeOptionsInput } from "@mono-agent/agent-harness";
-import type { ConfigurationProposalCard, ConfigurationProposalResult, TuiConfigurationController } from "@mono-agent/tui";
-import type { BackgroundSnapshot } from "./background-snapshot.js";
-import { type AgentConfigurationProposal, type JsonPatchOperation } from "./configuration-proposal-tool.js";
-export declare const LOCAL_CONFIGURATION_PROMPT = "Begin the dedicated self-configuration session. This is not ordinary chat. Read the mono-agent-configure skill. In the first assistant message, identify the session as SELF-CONFIG and show one compact, user-led map of every capability area: identity and knowledge; runtime and models; skills, tools, MCP servers, and plugins; memory; channels, APIs, and A2A; automation and proactive work; security, sandboxing, and secrets; observability and operations; and acceptance criteria. Explain that the conversation can build a workflow from trigger \u2192 context/data \u2192 tools/actions \u2192 delivery \u2192 memory \u2192 safety/operations \u2192 success checks. State that secrets must never be entered, every file change requires a separate host-owned approval, and approval, rejection, done, or no changes keeps SELF-CONFIG active. Only /quit, /exit, or ctrl+c twice exits this session; quitting never sends a background stop request. Invite the operator to choose an area or describe the workflow they want, using one concise question. Do not repeat the setup wizard and do not overwhelm the operator with a questionnaire. The session may use multiple turns: ask one focused question at a time, and record one minimal coherent proposal with ProposeAgentConfiguration only when enough information is available. It is valid to explain or ask the next question without proposing a change. Never execute ordinary tasks with configuration authority or claim a proposal was applied; the local host validates proposals and asks for separate approval.";
-export declare const LOCAL_CONFIGURATION_OPERATOR_PROMPT = "Continue the dedicated SELF-CONFIG conversation. The capability map and opening invitation were already shown: do not repeat them. Apply the mono-agent-configure skill instructions already in this conversation, loading them with ReadSkill only if they are absent, and use the existing conversation plus any host outcome below. Help the operator shape a usable workflow across trigger \u2192 context/data \u2192 tools/actions \u2192 delivery \u2192 memory \u2192 safety/operations \u2192 success checks. Take one conversational step: ask at most one focused question, explain the relevant supported or guided path, or, when the request is decision-complete, record one minimal coherent proposal with ProposeAgentConfiguration. A turn without a proposal is expected while exploring. After a host-applied or rejected proposal, continue with the next relevant area instead of handing off to ordinary chat. Never ask for secrets, execute an ordinary task with configuration authority, or claim a proposal was applied.";
-export interface ConfigurationBackgroundConnection {
-    readonly baseUrl: string;
-    readonly apiKey?: string;
-}
-export type ConfigurationBackgroundRestartResult = {
-    readonly ok: true;
-    readonly connection: ConfigurationBackgroundConnection;
-} | {
-    readonly ok: false;
-    readonly message: string;
-};
-export type RestartConfigurationBackground = (expectedSnapshot: BackgroundSnapshot) => Promise<ConfigurationBackgroundRestartResult>;
-interface AppliedConfigurationChange {
-    readonly changeId: string;
-    readonly rollbackDir: string;
-    readonly snapshot: BackgroundSnapshot;
-    rollback(): Promise<BackgroundSnapshot>;
-}
-export interface LocalConfigurationSession {
-    readonly responder: AgentResponder;
-    readonly title: string;
-    dispose(): Promise<void>;
-}
-export interface CreateLocalConfigurationSessionOptions {
-    readonly cwd: string;
-    readonly configPath: string;
-    readonly env: Record<string, string | undefined>;
-    readonly configure?: boolean;
-    readonly envFile?: string;
-    /** Deterministic transaction-race seam for regression tests. */
-    readonly beforeSnapshotCapture?: (phase: "apply" | "rollback") => void | Promise<void>;
-}
-export interface CreateRemoteConfigurationSessionOptions extends CreateLocalConfigurationSessionOptions {
-    readonly restartBackground: RestartConfigurationBackground;
-    /** Deterministic failure seam for capability-rotation regression tests. */
-    readonly beforeRotateAttempt?: () => void | Promise<void>;
-}
-export interface RemoteConfigurationSession {
-    readonly configuration: TuiConfigurationController;
-    dispose(): Promise<void>;
-}
-/** Build a current-folder responder for ordinary embedded chat only. */
-export declare function createLocalConfigurationSession(options: CreateLocalConfigurationSessionOptions): Promise<LocalConfigurationSession>;
-/**
- * Create the local host controller for a remote configuration conversation.
- * The daemon only proposes; this process validates, confirms, writes, restarts,
- * proves readiness, and rolls back on failure.
- */
-export declare function createRemoteConfigurationSession(options: CreateRemoteConfigurationSessionOptions): Promise<RemoteConfigurationSession>;
-export interface ConfigurationRuntimeExtensionOptions {
-    readonly cwd: string;
-    /** Canonical mutable path used only to authenticate this agent folder/capability root. */
-    readonly configPath: string;
-    /** Immutable worker copy used for route classification and proposal base version. */
-    readonly configReadPath?: string;
-    readonly env: Record<string, string | undefined>;
-}
-/** Install proposal-only authority on explicitly capability-marked TUI requests. */
-export declare function createLocalConfigurationRuntimeExtension(options: ConfigurationRuntimeExtensionOptions): (input: AgentHarnessRuntimeOptionsInput) => Promise<AgentHarnessRuntimeOptionsExtension>;
-export declare class LocalConfigurationManager {
-    private readonly options;
-    private readonly proposalRoot;
-    readonly currentConfig: MonoAgentConfig;
-    readonly roleLocation: string;
-    private readonly prepared;
-    private readonly cleanupPaths;
-    private currentSessionId;
-    private currentSessionDir;
-    private disabledReason;
-    private constructor();
-    get sessionId(): string;
-    static create(options: CreateLocalConfigurationSessionOptions): Promise<LocalConfigurationManager>;
-    /** Revoke the completed attempt's opaque filesystem capability before issuing the next one. */
-    rotateAttempt(): Promise<void>;
-    /** Poison the public capability id and best-effort remove every owned attempt path. */
-    disableConfigurationAttempts(error: unknown): Promise<void>;
-    private assertAttemptsEnabled;
-    takeProposal(): Promise<ConfigurationProposalCard | undefined>;
-    reject(id: string): Promise<ConfigurationProposalResult>;
-    prepareProposal(proposal: AgentConfigurationProposal): Promise<ConfigurationProposalCard>;
-    private prepare;
-    apply(id: string): Promise<AppliedConfigurationChange>;
-    private applyPrepared;
-    private captureCommittedSnapshot;
-    private validateCandidate;
-    dispose(): Promise<void>;
-}
-export declare function isLocalConfigurationRequest(metadata: Record<string, unknown> | undefined): boolean;
-export declare function applyJsonPatch(input: MonoAgentConfigJson, operations: readonly JsonPatchOperation[]): MonoAgentConfigJson;
-export {};
-//# sourceMappingURL=local-configuration.d.ts.map

package/dist/local-configuration.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"local-configuration.d.ts","sourceRoot":"","sources":["../src/local-configuration.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,mCAAmC,EACnC,+BAA+B,EAChC,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EACV,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC3B,MAAM,iBAAiB,CAAC;AAOzB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,OAAO,EAKL,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACxB,MAAM,kCAAkC,CAAC;AAa1C,eAAO,MAAM,0BAA0B,ghDAC08C,CAAC;AAMl/C,eAAO,MAAM,mCAAmC,y/BAC06B,CAAC;AAY39B,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,oCAAoC,GAC5C;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,iCAAiC,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,MAAM,MAAM,8BAA8B,GAAG,CAC3C,gBAAgB,EAAE,kBAAkB,KACjC,OAAO,CAAC,oCAAoC,CAAC,CAAC;AAcnD,UAAU,0BAA0B;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxF;AAED,MAAM,WAAW,uCAAwC,SAAQ,sCAAsC;IACrG,QAAQ,CAAC,iBAAiB,EAAE,8BAA8B,CAAC;IAC3D,2EAA2E;IAC3E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,aAAa,EAAE,0BAA0B,CAAC;IACnD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,wEAAwE;AACxE,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,yBAAyB,CAAC,CAkCpC;AAED;;;;GAIG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,uCAAuC,GAC/C,OAAO,CAAC,0BAA0B,CAAC,CAyDrC;AAiHD,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qFAAqF;IACrF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAClD;AAED,oFAAoF;AACpF,wBAAgB,wCAAwC,CACtD,OAAO,EAAE,oCAAoC,GAC5C,CAAC,KAAK,EAAE,+BAA+B,KAAK,OAAO,CAAC,mCAAmC,CAAC,CAgD1F;AAED,qBAAa,yBAAyB;IAUlC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAV/B,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuC;IAChE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,cAAc,CAAqB;IAE3C,OAAO;IAcP,IAAI,SAAS,IAAI,MAAM,CAEtB;WAEY,MAAM,CAAC,OAAO,EAAE,sCAAsC,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAoBxG,+FAA+F;IACzF,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IA2CpC,uFAAuF;IACjF,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBjE,OAAO,CAAC,qBAAqB;IAQvB,YAAY,IAAI,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAmC9D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAWxD,eAAe,CAAC,QAAQ,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC;YAOjF,OAAO;IAgEf,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;YAS9C,aAAa;YAqKb,wBAAwB;YASxB,iBAAiB;IA4BzB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAO/B;AAED,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,OAAO,CAElG;AAkCD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,mBAAmB,EAC1B,UAAU,EAAE,SAAS,kBAAkB,EAAE,GACxC,mBAAmB,CAqBrB"}