@moxt-ai/mobius 0.0.34 → 0.0.35

package/dist/runtime.js

@@ -22562,7 +22562,7 @@ var configValueSchema = external_exports.strictObject({
   name: external_exports.string().min(1).max(255),
   value: external_exports.string().min(1).max(500)
 }).readonly();
-var configOptionSchema = external_exports.strictObject({
+var sessionConfigOptionSchema = external_exports.strictObject({
   booleanValue: external_exports.boolean(),
   category: external_exports.string().max(128),
   currentValue: external_exports.string().max(500),
@@ -22572,6 +22572,26 @@ var configOptionSchema = external_exports.strictObject({
   type: external_exports.enum(["boolean", "select"]),
   values: external_exports.array(configValueSchema).max(500).readonly()
 }).readonly();
+var sessionConfigOptionsSchema = external_exports.array(sessionConfigOptionSchema).max(100).readonly();
+var sessionConfigurationSelectionSchema = external_exports.strictObject({
+  booleanValue: external_exports.boolean(),
+  configId: IDENTIFIER,
+  value: external_exports.string().max(500),
+  valueType: external_exports.enum(["boolean", "select"])
+}).readonly();
+var sessionConfigurationSelectionsSchema = external_exports.array(sessionConfigurationSelectionSchema).max(100).superRefine((selections, context) => {
+  const identifiers = /* @__PURE__ */ new Set();
+  for (const [index, selection] of selections.entries()) {
+    if (identifiers.has(selection.configId)) {
+      context.addIssue({
+        code: "custom",
+        message: "Session configuration identifiers must be unique",
+        path: [index, "configId"]
+      });
+    }
+    identifiers.add(selection.configId);
+  }
+}).readonly();
 var sessionCapabilitiesSchema = external_exports.strictObject({
   additionalDirectories: external_exports.boolean(),
   audioPrompt: external_exports.boolean(),
@@ -22682,7 +22702,8 @@ var sessionIdentityFields = {
 var sessionPrepareCommandSchema = external_exports.strictObject({
   ...sessionIdentityFields,
   kind: external_exports.literal(SESSION_PREPARE_KIND),
-  requestId: IDENTIFIER
+  requestId: IDENTIFIER,
+  transient: external_exports.boolean().optional()
 }).readonly();
 var sessionReadyEventSchema = external_exports.strictObject({
   additionalDirectories: external_exports.array(workspaceEntrySchema).max(16).readonly(),
@@ -22691,7 +22712,7 @@ var sessionReadyEventSchema = external_exports.strictObject({
   agentVersion: external_exports.string().max(128),
   capabilities: sessionCapabilitiesSchema,
   commands: external_exports.array(sessionCommandSchema).max(500).readonly(),
-  configOptions: external_exports.array(configOptionSchema).max(100).readonly(),
+  configOptions: sessionConfigOptionsSchema,
   directoryId: DIRECTORY_IDENTIFIER,
   directoryLabel: external_exports.string().min(1).max(2048),
   kind: external_exports.literal(SESSION_READY_KIND),
@@ -22709,7 +22730,7 @@ var sessionConfigureCommandSchema = external_exports.strictObject({
   valueType: external_exports.enum(["boolean", "select"])
 }).readonly();
 var sessionConfigUpdatedEventSchema = external_exports.strictObject({
-  configOptions: external_exports.array(configOptionSchema).max(100).readonly(),
+  configOptions: sessionConfigOptionsSchema,
   kind: external_exports.literal(SESSION_CONFIG_UPDATED_KIND),
   requestId: IDENTIFIER,
   sessionId: IDENTIFIER
@@ -22885,6 +22906,7 @@ var decodeAgentDisplayContentValue = (value) => decodeValue(value, displayConten
 var decodeRecordedAgentContentValue = (value) => decodeValue(value, recordedDisplayContentSchema);
 var decodePromptImagesValue = (value) => decodeValue(value, external_exports.array(promptImageSchema).max(8).readonly());
 var decodePromptResourcesValue = (value) => decodeValue(value, external_exports.array(promptResourceSchema).max(16).readonly());
+var decodeSessionConfigurationSelections = (value) => decodeValue(value, sessionConfigurationSelectionsSchema);
 var encode3 = (message, schema) => JSON.stringify(decodeValue(message, schema));
 var decodeWorkspaceListCommand = (encoded) => decode3(encoded, workspaceListCommandSchema);
 var encodeWorkspaceEntriesEvent = (message) => encode3(message, workspaceEntriesEventSchema);
@@ -23421,8 +23443,9 @@ var BotExecutionBindingApprovalRequest = class {
   requestId;
   requiredCapabilities;
   runtimeId;
+  sessionConfigurations;
   workspaceRef;
-  constructor(requestId, botId, behaviorRevisionId, bindingId, bindingRevision, runtimeId, agentRef, workspaceRef, agentConfigRevision, behaviorInstructions, behaviorDigest, requiredCapabilities, allowedDeliveryTargets, completionPolicy) {
+  constructor(requestId, botId, behaviorRevisionId, bindingId, bindingRevision, runtimeId, agentRef, workspaceRef, agentConfigRevision, behaviorInstructions, behaviorDigest, requiredCapabilities, allowedDeliveryTargets, completionPolicy, sessionConfigurations = []) {
     this.requestId = requestId;
     this.botId = botId;
     this.behaviorRevisionId = behaviorRevisionId;
@@ -23435,6 +23458,7 @@ var BotExecutionBindingApprovalRequest = class {
     this.behaviorInstructions = behaviorInstructions;
     this.behaviorDigest = behaviorDigest;
     this.requiredCapabilities = Object.freeze([...requiredCapabilities]);
+    this.sessionConfigurations = Object.freeze([...sessionConfigurations]);
     this.allowedDeliveryTargets = Object.freeze(
       allowedDeliveryTargets.map(
         (target) => new BotDeliveryTargetReference(target.alias, target.deliveryTargetId)
@@ -23442,6 +23466,13 @@ var BotExecutionBindingApprovalRequest = class {
     );
     this.completionPolicy = completionPolicy;
   }
+  toJSON() {
+    const { sessionConfigurations, ...request } = this;
+    return {
+      ...request,
+      ...sessionConfigurations.length === 0 ? {} : { sessionConfigurations }
+    };
+  }
 };
 var BotExecutionBindingApprovedEvent = class {
   agentIdentityDigest;
@@ -23506,9 +23537,10 @@ var BotSessionPromptCommand = class {
   prompt;
   replyRoute;
   resources;
+  sessionConfigurations;
   sessionId;
   turnId;
-  constructor(sessionId, commandId, agentId, bindingId, directoryId2, additionalDirectoryIds, images, resources, prompt, executionId, executionCapabilityId, executionCapabilitySecret, executionDeadlineAt, botId, conversationId, turnId, behaviorRevisionId, bindingRevision, localGrantId, behaviorInstructions, behaviorDigest, allowedDeliveryTargets, replyRoute) {
+  constructor(sessionId, commandId, agentId, bindingId, directoryId2, additionalDirectoryIds, images, resources, prompt, executionId, executionCapabilityId, executionCapabilitySecret, executionDeadlineAt, botId, conversationId, turnId, behaviorRevisionId, bindingRevision, localGrantId, behaviorInstructions, behaviorDigest, allowedDeliveryTargets, replyRoute, sessionConfigurations = []) {
     this.sessionId = sessionId;
     this.commandId = commandId;
     this.agentId = agentId;
@@ -23536,6 +23568,14 @@ var BotSessionPromptCommand = class {
       )
     );
     this.replyRoute = replyRoute;
+    this.sessionConfigurations = Object.freeze([...sessionConfigurations]);
+  }
+  toJSON() {
+    const { sessionConfigurations, ...command } = this;
+    return {
+      ...command,
+      ...sessionConfigurations.length === 0 ? {} : { sessionConfigurations }
+    };
   }
 };
 function isRecord5(value) {
@@ -23559,6 +23599,12 @@ function assertExactKeys2(value, expected) {
     throw new ProtocolMessageError("Message fields do not match the Bot protocol");
   }
 }
+function assertKeysWithOptional(value, expected, optional2) {
+  const keys = Object.keys(value);
+  if (keys.length < expected.length || keys.length > expected.length + optional2.length || expected.some((key) => !Object.hasOwn(value, key)) || keys.some((key) => !expected.includes(key) && !optional2.includes(key))) {
+    throw new ProtocolMessageError("Message fields do not match the Bot protocol");
+  }
+}
 function readText2(value, key, maximumLength, allowEmpty) {
   const field = value[key];
   if (typeof field !== "string" || field.length > maximumLength || !allowEmpty && field.length === 0) {
@@ -23648,6 +23694,12 @@ function readTargets(value, key) {
   }
   return Object.freeze(targets);
 }
+function readSessionConfigurations(value) {
+  if (!Object.hasOwn(value, "sessionConfigurations")) {
+    return [];
+  }
+  return decodeSessionConfigurationSelections(value["sessionConfigurations"]);
+}
 function readCompletionPolicy(value) {
   if (!isRecord5(value)) {
     throw new ProtocolMessageError("Invalid Bot completion policy");
@@ -23686,23 +23738,27 @@ function readReplyRoute(value) {
 }
 function decodeBotExecutionBindingApprovalRequest(encoded) {
   const value = parseJson3(encoded);
-  assertExactKeys2(value, [
-    "agentConfigRevision",
-    "agentRef",
-    "allowedDeliveryTargets",
-    "behaviorDigest",
-    "behaviorInstructions",
-    "behaviorRevisionId",
-    "bindingId",
-    "bindingRevision",
-    "botId",
-    "completionPolicy",
-    "kind",
-    "requestId",
-    "requiredCapabilities",
-    "runtimeId",
-    "workspaceRef"
-  ]);
+  assertKeysWithOptional(
+    value,
+    [
+      "agentConfigRevision",
+      "agentRef",
+      "allowedDeliveryTargets",
+      "behaviorDigest",
+      "behaviorInstructions",
+      "behaviorRevisionId",
+      "bindingId",
+      "bindingRevision",
+      "botId",
+      "completionPolicy",
+      "kind",
+      "requestId",
+      "requiredCapabilities",
+      "runtimeId",
+      "workspaceRef"
+    ],
+    ["sessionConfigurations"]
+  );
   if (value["kind"] !== BOT_BINDING_APPROVAL_REQUEST_KIND) {
     throw new ProtocolMessageError("Invalid Bot binding approval request kind");
   }
@@ -23720,7 +23776,8 @@ function decodeBotExecutionBindingApprovalRequest(encoded) {
     readDigest(value, "behaviorDigest"),
     readIdentifiers(value, "requiredCapabilities", 32),
     readTargets(value, "allowedDeliveryTargets"),
-    readCompletionPolicy(value["completionPolicy"])
+    readCompletionPolicy(value["completionPolicy"]),
+    readSessionConfigurations(value)
   );
 }
 function decodeBotExecutionBindingApprovedEvent(encoded) {
@@ -23783,32 +23840,36 @@ function encodeBotExecutionBindingUnavailableEvent(event) {
 }
 function decodeBotSessionPromptCommand(encoded) {
   const value = parseJson3(encoded);
-  assertExactKeys2(value, [
-    "additionalDirectoryIds",
-    "agentId",
-    "allowedDeliveryTargets",
-    "behaviorDigest",
-    "behaviorInstructions",
-    "behaviorRevisionId",
-    "bindingId",
-    "bindingRevision",
-    "botId",
-    "commandId",
-    "conversationId",
-    "directoryId",
-    "executionCapabilityId",
-    "executionCapabilitySecret",
-    "executionDeadlineAt",
-    "executionId",
-    "images",
-    "kind",
-    "localGrantId",
-    "prompt",
-    "replyRoute",
-    "resources",
-    "sessionId",
-    "turnId"
-  ]);
+  assertKeysWithOptional(
+    value,
+    [
+      "additionalDirectoryIds",
+      "agentId",
+      "allowedDeliveryTargets",
+      "behaviorDigest",
+      "behaviorInstructions",
+      "behaviorRevisionId",
+      "bindingId",
+      "bindingRevision",
+      "botId",
+      "commandId",
+      "conversationId",
+      "directoryId",
+      "executionCapabilityId",
+      "executionCapabilitySecret",
+      "executionDeadlineAt",
+      "executionId",
+      "images",
+      "kind",
+      "localGrantId",
+      "prompt",
+      "replyRoute",
+      "resources",
+      "sessionId",
+      "turnId"
+    ],
+    ["sessionConfigurations"]
+  );
   if (value["kind"] !== BOT_SESSION_PROMPT_KIND) {
     throw new ProtocolMessageError("Invalid Bot Session prompt kind");
   }
@@ -23835,7 +23896,8 @@ function decodeBotSessionPromptCommand(encoded) {
     readText2(value, "behaviorInstructions", MAX_INSTRUCTIONS_LENGTH, true),
     readDigest(value, "behaviorDigest"),
     readTargets(value, "allowedDeliveryTargets"),
-    readReplyRoute(value["replyRoute"])
+    readReplyRoute(value["replyRoute"]),
+    readSessionConfigurations(value)
   );
 }
 
@@ -23958,6 +24020,7 @@ var nativeSessionTurnForkCommandSchema = external_exports.strictObject({
   title: external_exports.string().max(500)
 }).readonly();
 var nativeSessionCommandSchema = external_exports.discriminatedUnion("action", [
+  external_exports.strictObject({ ...identity, action: external_exports.literal("preview"), entryId: identifier }).readonly(),
   external_exports.strictObject({
     ...identity,
     action: external_exports.literal("list"),
@@ -24008,7 +24071,7 @@ var nativeSessionResultSchema = external_exports.discriminatedUnion("action", [
     action: external_exports.literal("preview"),
     entryId: identifier,
     targetSessionId: identifier,
-    reason: external_exports.literal("continuation_unavailable"),
+    reason: external_exports.enum(["continuation_unavailable", "requested"]),
     history: sessionHistorySchema,
     title: external_exports.string().max(500)
   }).readonly(),
@@ -27421,6 +27484,29 @@ var AcpSessionManager = class {
     const runtime = await this.#startPreparation(options);
     return runtime.prepared();
   };
+  /**
+   * Opens a short-lived ACP session only to read the Agent's authoritative
+   * configuration options. The runtime and any persisted native-session
+   * record are released before this method resolves.
+   */
+  inspectSession = async (options) => {
+    if (this.#preparing.has(options.sessionId) || this.#sessions.has(options.sessionId)) {
+      throw new AcpExecutionError("The configuration inspection session is already in use", {}, "session_busy");
+    }
+    const runtime = await this.#startPreparation(options);
+    try {
+      return runtime.prepared();
+    } finally {
+      if (this.#sessions.get(options.sessionId) === runtime) {
+        this.#sessions.delete(options.sessionId);
+      }
+      try {
+        await runtime.close();
+      } finally {
+        this.#store.remove(options.sessionId);
+      }
+    }
+  };
   prepareExecutionSession = async (options) => {
     const pending = this.#preparing.get(options.sessionId);
     if (pending !== void 0) {
@@ -27681,6 +27767,33 @@ var AcpSessionManager = class {
     return started;
   }
   listNativeSessions = async (options, cursor) => await (await this.#ensureNativeSessionBrowser(options)).listNativeSessions(cursor, options.signal);
+  previewNativeSession = async (options, nativeSessionId) => {
+    const key = `${options.agent.id}:${nativeSessionId}`;
+    const linked = this.#store.findNative(options.agent.id, nativeSessionId);
+    if (this.#nativeOperations.has(key) || linked.some((entry) => this.#activeSessionIds.has(entry.sessionId) || this.#preparing.has(entry.sessionId))) {
+      throw new AcpExecutionError(
+        "Wait for the native session's running operation to finish",
+        {},
+        "session_busy"
+      );
+    }
+    this.#nativeOperations.add(key);
+    try {
+      const runtime = await AcpProcessSession.startNativeSessionBrowser(
+        options,
+        () => this.#nativeBrowserObserver,
+        new MemoryAcpSessionStore()
+      );
+      try {
+        runtime.selectNativeSession(nativeSessionId);
+        return await runtime.loadHistory(options.signal);
+      } finally {
+        await runtime.closeProcess();
+      }
+    } finally {
+      this.#nativeOperations.delete(key);
+    }
+  };
   openNativeSession = async (options, origin) => {
     const key = `${options.agent.id}:${origin.nativeSessionId}`;
     if (this.#nativeOperations.has(key)) {
@@ -27907,6 +28020,7 @@ async function publishAgentCatalog(config2, signal) {
         agents: catalog.agents.map((agent) => ({
           agentPath: agent.agentIdentity.requestedPath,
           agentVersion: agent.agentVersion,
+          botSessionConfiguration: true,
           capabilities: agent.capabilities,
           id: agent.id,
           label: agent.label
@@ -29045,6 +29159,16 @@ function exactTargets(left, right) {
   const actual = [...right].sort();
   return expected.every((target, index) => target === actual[index]);
 }
+function exactSessionConfigurations(left, right) {
+  if (left.length !== right.length) {
+    return false;
+  }
+  const expected = new Map(left.map((selection) => [selection.configId, selection]));
+  return right.every((selection) => {
+    const approved = expected.get(selection.configId);
+    return approved !== void 0 && approved.booleanValue === selection.booleanValue && approved.value === selection.value && approved.valueType === selection.valueType;
+  });
+}
 function rowString(row, key) {
   const value = Reflect.get(row, key);
   if (typeof value !== "string") {
@@ -29071,6 +29195,15 @@ function parseTargets(encoded) {
   }
   return value.filter((target) => typeof target === "string");
 }
+function parseSessionConfigurations(encoded) {
+  let value;
+  try {
+    value = JSON.parse(encoded);
+    return decodeSessionConfigurationSelections(value);
+  } catch (cause) {
+    throw new LocalBotAuthorizationError("local_grant_invalid", "The local Bot grant is invalid", { cause });
+  }
+}
 var LocalBotGrantStore = class {
   #database;
   static containsBot = (path2, botId) => {
@@ -29115,6 +29248,10 @@ var LocalBotGrantStore = class {
             error_code TEXT,
             error_message TEXT
           ) STRICT;
+          CREATE TABLE IF NOT EXISTS local_bot_grant_configurations (
+            local_grant_id TEXT PRIMARY KEY,
+            session_configurations_json TEXT NOT NULL
+          ) STRICT;
         `);
   }
   /** Only the local CLI may invoke this explicit approval transition. */
@@ -29240,6 +29377,11 @@ var LocalBotGrantStore = class {
         now,
         expiresAt
       );
+      this.#database.prepare(
+        `INSERT INTO local_bot_grant_configurations (
+                       local_grant_id, session_configurations_json
+                     ) VALUES (?, ?)`
+      ).run(localGrantId, JSON.stringify(request.sessionConfigurations));
       this.#database.prepare(
         `INSERT INTO local_bot_binding_resolutions (
                        request_id, binding_id, local_grant_id, resolved_at, result
@@ -29265,8 +29407,12 @@ var LocalBotGrantStore = class {
   resolveExecution = async (command, catalog, directories, bindingAuthorityId, now, signal) => {
     signal.throwIfAborted();
     const row = this.#database.prepare(
-      `SELECT * FROM local_bot_grants
-                  WHERE local_grant_id = ? AND bot_id = ?
+      `SELECT grants.*, COALESCE(configurations.session_configurations_json, '[]')
+                            AS session_configurations_json
+                   FROM local_bot_grants AS grants
+                   LEFT JOIN local_bot_grant_configurations AS configurations
+                     ON configurations.local_grant_id = grants.local_grant_id
+                  WHERE grants.local_grant_id = ? AND grants.bot_id = ?
                     AND behavior_revision_id = ? AND behavior_digest = ?
                     AND binding_id = ? AND binding_revision = ?
                     AND agent_ref = ?
@@ -29295,6 +29441,13 @@ var LocalBotGrantStore = class {
         "The Bot execution target policy changed after local approval"
       );
     }
+    const approvedConfigurations = parseSessionConfigurations(rowString(row, "session_configurations_json"));
+    if (!exactSessionConfigurations(approvedConfigurations, command.sessionConfigurations)) {
+      throw new LocalBotAuthorizationError(
+        "binding_not_approved",
+        "The Bot Agent configuration changed after local approval"
+      );
+    }
     const agent = catalog.find(command.agentId);
     const [adapterUnchanged, agentUnchanged] = await Promise.all([
       revalidateExecutable(agent.adapterIdentity),
@@ -29889,6 +30042,23 @@ var NativeSessionService = class {
       );
     }
     const target = await this.resolveTarget(command, options, selected);
+    if (command.action === "preview") {
+      const history = await this.#sessions.previewNativeSession(
+        { ...options, cwd: target.cwd, additionalDirectories: target.additionalDirectories },
+        target.info.sessionId
+      );
+      signal.throwIfAborted();
+      this.record(command, "native_session_previewed");
+      return {
+        ...envelope2,
+        action: "preview",
+        entryId: command.entryId,
+        targetSessionId: command.sessionId,
+        reason: "requested",
+        title: target.info.title ?? "Untitled session",
+        history
+      };
+    }
     if (command.action === "delete") {
       if (!prepared.capabilities.deleteSession) {
         throw new AcpExecutionError(
@@ -31888,13 +32058,14 @@ async function executeSessionPrepare(publisher, socket, command, config2, direct
       signal
     );
     const agent = config2.catalog.find(command.agentId);
-    const prepared = await sessions.prepareSession({
+    const preparation = {
       additionalDirectories: resolved.additionalDirectories,
       agent,
       cwd: resolved.cwd,
       sessionId: command.sessionId,
       signal
-    });
+    };
+    const prepared = command.transient === true ? await sessions.inspectSession(preparation) : await sessions.prepareSession(preparation);
     const listing = await directories.list(config2.bindingId, command.directoryId, signal);
     audit.record({
       commandId: command.requestId,
@@ -32173,6 +32344,20 @@ async function executeBotPrompt(outbox, publisher, command, config2, directories
         sessionId: command.sessionId,
         signal: executionSignal
       });
+      for (const selection of command.sessionConfigurations) {
+        await sessions.configureSession({
+          additionalDirectories: resolved.additionalDirectories,
+          agent,
+          booleanValue: selection.booleanValue,
+          configId: selection.configId,
+          cwd: resolved.cwd,
+          requestId: `cfg_${randomUUID4()}`,
+          sessionId: command.sessionId,
+          signal: executionSignal,
+          value: selection.value,
+          valueType: selection.valueType
+        });
+      }
       audit.record({
         commandId: command.commandId,
         details: {
@@ -33393,6 +33578,7 @@ async function claimPairing(options, defaultWorkspace, localAgents, installableA
   const agents = localAgents.map((agent) => ({
     agentPath: agent.agentIdentity.requestedPath,
     agentVersion: agent.agentVersion,
+    botSessionConfiguration: true,
     capabilities: agent.capabilities,
     id: agent.id,
     label: agent.label