@murphai/hosted-execution 0.1.15 → 0.1.17

package/node_modules/@murphai/runtime-state/dist/assistant-state-security.js

@@ -0,0 +1,159 @@
+import { appendFile, chmod, lstat, mkdir, readdir } from 'node:fs/promises';
+import path from 'node:path';
+import { ASSISTANT_RUNTIME_DIRECTORY_NAME, } from "./shared.js";
+export const ASSISTANT_STATE_DIRECTORY_MODE = 0o700;
+export const ASSISTANT_STATE_FILE_MODE = 0o600;
+export function isAssistantStatePath(targetPath) {
+    const absolutePath = path.resolve(targetPath);
+    const segments = absolutePath.split(path.sep).filter((segment) => segment.length > 0);
+    return hasAssistantRuntimeRootSegments(segments);
+}
+export async function ensureAssistantStateDirectory(directoryPath) {
+    await mkdir(directoryPath, { recursive: true });
+    if (!isAssistantStatePath(directoryPath)) {
+        return;
+    }
+    await applyAssistantStateDirectoryModes(directoryPath);
+}
+export async function ensureAssistantStateParentDirectory(filePath) {
+    await ensureAssistantStateDirectory(path.dirname(filePath));
+}
+export function resolveAssistantStateFileMode(filePath, explicitMode) {
+    if (typeof explicitMode === 'number') {
+        return explicitMode;
+    }
+    return isAssistantStatePath(filePath) ? ASSISTANT_STATE_FILE_MODE : undefined;
+}
+export async function appendTextFileWithMode(filePath, value, options = {}) {
+    const fileMode = resolveAssistantStateFileMode(filePath, options.mode);
+    await ensureAssistantStateParentDirectory(filePath);
+    await appendFile(filePath, value, 'utf8');
+    if (typeof fileMode === 'number') {
+        await chmod(filePath, fileMode);
+    }
+}
+export async function auditAssistantStatePermissions(input) {
+    const rootPath = path.resolve(input.rootPath);
+    const issues = [];
+    let incorrectEntries = 0;
+    let repairedEntries = 0;
+    let scannedDirectories = 0;
+    let scannedFiles = 0;
+    let scannedOtherEntries = 0;
+    async function visit(currentPath) {
+        let stats;
+        try {
+            stats = await lstat(currentPath);
+        }
+        catch (error) {
+            if (error &&
+                typeof error === 'object' &&
+                'code' in error &&
+                error.code === 'ENOENT') {
+                return;
+            }
+            throw error;
+        }
+        if (stats.isDirectory()) {
+            scannedDirectories += 1;
+            const actualMode = stats.mode & 0o777;
+            const expectedMode = ASSISTANT_STATE_DIRECTORY_MODE;
+            let repaired = false;
+            if (actualMode !== expectedMode) {
+                incorrectEntries += 1;
+                if (input.repair) {
+                    await chmod(currentPath, expectedMode);
+                    repaired = true;
+                    repairedEntries += 1;
+                }
+                issues.push({
+                    actualMode,
+                    entryKind: 'directory',
+                    expectedMode,
+                    path: currentPath,
+                    repaired,
+                });
+            }
+            const entries = await readdir(currentPath, { withFileTypes: true });
+            for (const entry of entries) {
+                await visit(path.join(currentPath, entry.name));
+            }
+            return;
+        }
+        if (stats.isFile()) {
+            scannedFiles += 1;
+            const actualMode = stats.mode & 0o777;
+            const expectedMode = ASSISTANT_STATE_FILE_MODE;
+            let repaired = false;
+            if (actualMode !== expectedMode) {
+                incorrectEntries += 1;
+                if (input.repair) {
+                    await chmod(currentPath, expectedMode);
+                    repaired = true;
+                    repairedEntries += 1;
+                }
+                issues.push({
+                    actualMode,
+                    entryKind: 'file',
+                    expectedMode,
+                    path: currentPath,
+                    repaired,
+                });
+            }
+            return;
+        }
+        scannedOtherEntries += 1;
+        incorrectEntries += 1;
+        issues.push({
+            actualMode: null,
+            entryKind: 'other',
+            expectedMode: null,
+            path: currentPath,
+            repaired: false,
+        });
+    }
+    await visit(rootPath);
+    return {
+        incorrectEntries,
+        issues,
+        repairedEntries,
+        scannedDirectories,
+        scannedFiles,
+        scannedOtherEntries,
+    };
+}
+async function applyAssistantStateDirectoryModes(directoryPath) {
+    const absolutePath = path.resolve(directoryPath);
+    const { root } = path.parse(absolutePath);
+    const relativeSegments = path
+        .relative(root, absolutePath)
+        .split(path.sep)
+        .filter((segment) => segment.length > 0);
+    let currentPath = root;
+    const assistantRuntimeRootIndex = findAssistantRuntimeRootIndex(relativeSegments);
+    if (assistantRuntimeRootIndex < 0) {
+        return;
+    }
+    for (let index = 0; index < relativeSegments.length; index += 1) {
+        const segment = relativeSegments[index];
+        currentPath = currentPath ? path.join(currentPath, segment) : segment;
+        if (index < assistantRuntimeRootIndex) {
+            continue;
+        }
+        await chmod(currentPath, ASSISTANT_STATE_DIRECTORY_MODE);
+    }
+}
+function hasAssistantRuntimeRootSegments(segments) {
+    return findAssistantRuntimeRootIndex(segments) >= 0;
+}
+function findAssistantRuntimeRootIndex(segments) {
+    for (let index = 0; index <= segments.length - 3; index += 1) {
+        if (segments[index] === '.runtime' &&
+            segments[index + 1] === 'operations' &&
+            segments[index + 2] === ASSISTANT_RUNTIME_DIRECTORY_NAME) {
+            return index;
+        }
+    }
+    return -1;
+}
+//# sourceMappingURL=assistant-state-security.js.map

package/node_modules/@murphai/runtime-state/dist/assistant-state-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistant-state-security.js","sourceRoot":"","sources":["../src/assistant-state-security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC3E,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EACL,gCAAgC,GACjC,MAAM,aAAa,CAAA;AAEpB,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAA;AACnD,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAA;AAmB9C,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACrF,OAAO,+BAA+B,CAAC,QAAQ,CAAC,CAAA;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,aAAqB;IACvE,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE/C,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC;QACzC,OAAM;IACR,CAAC;IAED,MAAM,iCAAiC,CAAC,aAAa,CAAC,CAAA;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,QAAgB;IACxE,MAAM,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC7D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,QAAgB,EAChB,YAAqB;IAErB,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAA;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,KAAa,EACb,UAEI,EAAE;IAEN,MAAM,QAAQ,GAAG,6BAA6B,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtE,MAAM,mCAAmC,CAAC,QAAQ,CAAC,CAAA;IACnD,MAAM,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IAEzC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IACjC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAGpD;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAoC,EAAE,CAAA;IAClD,IAAI,gBAAgB,GAAG,CAAC,CAAA;IACxB,IAAI,eAAe,GAAG,CAAC,CAAA;IACvB,IAAI,kBAAkB,GAAG,CAAC,CAAA;IAC1B,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,IAAI,mBAAmB,GAAG,CAAC,CAAA;IAE3B,KAAK,UAAU,KAAK,CAAC,WAAmB;QACtC,IAAI,KAAK,CAAA;QACT,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAA;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK;gBACL,OAAO,KAAK,KAAK,QAAQ;gBACzB,MAAM,IAAI,KAAK;gBACd,KAA2B,CAAC,IAAI,KAAK,QAAQ,EAC9C,CAAC;gBACD,OAAM;YACR,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,kBAAkB,IAAI,CAAC,CAAA;YACvB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAA;YACrC,MAAM,YAAY,GAAG,8BAA8B,CAAA;YACnD,IAAI,QAAQ,GAAG,KAAK,CAAA;YACpB,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAChC,gBAAgB,IAAI,CAAC,CAAA;gBACrB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjB,MAAM,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;oBACtC,QAAQ,GAAG,IAAI,CAAA;oBACf,eAAe,IAAI,CAAC,CAAA;gBACtB,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,UAAU;oBACV,SAAS,EAAE,WAAW;oBACtB,YAAY;oBACZ,IAAI,EAAE,WAAW;oBACjB,QAAQ;iBACT,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;YACnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;YACjD,CAAC;YACD,OAAM;QACR,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,YAAY,IAAI,CAAC,CAAA;YACjB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAA;YACrC,MAAM,YAAY,GAAG,yBAAyB,CAAA;YAC9C,IAAI,QAAQ,GAAG,KAAK,CAAA;YACpB,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAChC,gBAAgB,IAAI,CAAC,CAAA;gBACrB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjB,MAAM,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;oBACtC,QAAQ,GAAG,IAAI,CAAA;oBACf,eAAe,IAAI,CAAC,CAAA;gBACtB,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,UAAU;oBACV,SAAS,EAAE,MAAM;oBACjB,YAAY;oBACZ,IAAI,EAAE,WAAW;oBACjB,QAAQ;iBACT,CAAC,CAAA;YACJ,CAAC;YACD,OAAM;QACR,CAAC;QAED,mBAAmB,IAAI,CAAC,CAAA;QACxB,gBAAgB,IAAI,CAAC,CAAA;QACrB,MAAM,CAAC,IAAI,CAAC;YACV,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,OAAO;YAClB,YAAY,EAAE,IAAI;YAClB,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAA;IAErB,OAAO;QACL,gBAAgB;QAChB,MAAM;QACN,eAAe;QACf,kBAAkB;QAClB,YAAY;QACZ,mBAAmB;KACpB,CAAA;AACH,CAAC;AAED,KAAK,UAAU,iCAAiC,CAAC,aAAqB;IACpE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAChD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACzC,MAAM,gBAAgB,GAAG,IAAI;SAC1B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;SAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;SACf,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAE1C,IAAI,WAAW,GAAG,IAAI,CAAA;IACtB,MAAM,yBAAyB,GAAG,6BAA6B,CAAC,gBAAgB,CAAC,CAAA;IACjF,IAAI,yBAAyB,GAAG,CAAC,EAAE,CAAC;QAClC,OAAM;IACR,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAE,CAAA;QACxC,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;QACrE,IAAI,KAAK,GAAG,yBAAyB,EAAE,CAAC;YACtC,SAAQ;QACV,CAAC;QACD,MAAM,KAAK,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAA;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,QAA2B;IAClE,OAAO,6BAA6B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AACrD,CAAC;AAED,SAAS,6BAA6B,CAAC,QAA2B;IAChE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,IACE,QAAQ,CAAC,KAAK,CAAC,KAAK,UAAU;YAC9B,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,YAAY;YACpC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,gCAAgC,EACxD,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,OAAO,CAAC,CAAC,CAAA;AACX,CAAC"}

package/node_modules/@murphai/runtime-state/dist/assistant-state.d.ts

@@ -0,0 +1,33 @@
+export interface AssistantStatePaths {
+    absoluteVaultRoot: string;
+    assistantStateRoot: string;
+    automationStatePath: string;
+    cronDirectory: string;
+    cronAutomationStatePath: string;
+    cronJobsPath: string;
+    cronRunsDirectory: string;
+    diagnosticsDirectory: string;
+    diagnosticEventsPath: string;
+    diagnosticSnapshotPath: string;
+    failoverStatePath: string;
+    indexesPath: string;
+    journalsDirectory: string;
+    outboxDirectory: string;
+    outboxQuarantineDirectory: string;
+    providerRouteRecoveryDirectory: string;
+    providerRouteRecoverySecretsDirectory: string;
+    quarantineDirectory: string;
+    secretsDirectory: string;
+    sessionSecretsDirectory: string;
+    resourceBudgetPath: string;
+    runtimeEventsPath: string;
+    sessionsDirectory: string;
+    stateDirectory: string;
+    statusPath: string;
+    transcriptsDirectory: string;
+    turnsDirectory: string;
+    usageDirectory: string;
+    usagePendingDirectory: string;
+}
+export declare function resolveAssistantStatePaths(vaultRoot: string): AssistantStatePaths;
+//# sourceMappingURL=assistant-state.d.ts.map

package/node_modules/@murphai/runtime-state/dist/assistant-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistant-state.d.ts","sourceRoot":"","sources":["../src/assistant-state.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,uBAAuB,EAAE,MAAM,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,yBAAyB,EAAE,MAAM,CAAC;IAClC,8BAA8B,EAAE,MAAM,CAAC;IACvC,qCAAqC,EAAE,MAAM,CAAC;IAC9C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,uBAAuB,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,CA+CjF"}

package/node_modules/@murphai/runtime-state/dist/assistant-state.js

@@ -0,0 +1,47 @@
+import path from "node:path";
+import { resolveRuntimePaths, ASSISTANT_RUNTIME_DIRECTORY_RELATIVE_PATH } from "./runtime-paths.js";
+export function resolveAssistantStatePaths(vaultRoot) {
+    const { absoluteVaultRoot } = resolveRuntimePaths(vaultRoot);
+    const rootPath = path.join(absoluteVaultRoot, ASSISTANT_RUNTIME_DIRECTORY_RELATIVE_PATH);
+    const cronDirectory = path.join(rootPath, "cron");
+    const diagnosticsDirectory = path.join(rootPath, "diagnostics");
+    const journalsDirectory = path.join(rootPath, "journals");
+    const outboxDirectory = path.join(rootPath, "outbox");
+    const turnsDirectory = path.join(rootPath, "receipts");
+    const secretsDirectory = path.join(rootPath, "secrets");
+    const sessionSecretsDirectory = path.join(secretsDirectory, "sessions");
+    const providerRouteRecoverySecretsDirectory = path.join(secretsDirectory, "provider-route-recovery");
+    const usageDirectory = path.join(rootPath, "usage");
+    return {
+        absoluteVaultRoot,
+        assistantStateRoot: rootPath,
+        automationStatePath: path.join(rootPath, "automation-state.json"),
+        cronDirectory,
+        cronAutomationStatePath: path.join(cronDirectory, "automation-runtime.json"),
+        cronJobsPath: path.join(cronDirectory, "jobs.json"),
+        cronRunsDirectory: path.join(cronDirectory, "runs"),
+        diagnosticsDirectory,
+        diagnosticEventsPath: path.join(diagnosticsDirectory, "events.jsonl"),
+        diagnosticSnapshotPath: path.join(diagnosticsDirectory, "snapshot.json"),
+        failoverStatePath: path.join(rootPath, "failover.json"),
+        indexesPath: path.join(rootPath, "indexes.json"),
+        journalsDirectory,
+        outboxDirectory,
+        outboxQuarantineDirectory: path.join(outboxDirectory, ".quarantine"),
+        providerRouteRecoveryDirectory: path.join(rootPath, "provider-route-recovery"),
+        providerRouteRecoverySecretsDirectory,
+        quarantineDirectory: path.join(rootPath, "quarantine"),
+        secretsDirectory,
+        sessionSecretsDirectory,
+        resourceBudgetPath: path.join(rootPath, "runtime-budgets.json"),
+        runtimeEventsPath: path.join(journalsDirectory, "runtime-events.jsonl"),
+        sessionsDirectory: path.join(rootPath, "sessions"),
+        stateDirectory: path.join(rootPath, "state"),
+        statusPath: path.join(rootPath, "status.json"),
+        transcriptsDirectory: path.join(rootPath, "transcripts"),
+        turnsDirectory,
+        usageDirectory,
+        usagePendingDirectory: path.join(usageDirectory, "pending"),
+    };
+}
+//# sourceMappingURL=assistant-state.js.map

package/node_modules/@murphai/runtime-state/dist/assistant-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistant-state.js","sourceRoot":"","sources":["../src/assistant-state.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,yCAAyC,EAAE,MAAM,oBAAoB,CAAC;AAkCpG,MAAM,UAAU,0BAA0B,CAAC,SAAiB;IAC1D,MAAM,EAAE,iBAAiB,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;IACzF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAChE,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACvD,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,uBAAuB,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;IACxE,MAAM,qCAAqC,GAAG,IAAI,CAAC,IAAI,CACrD,gBAAgB,EAChB,yBAAyB,CAC1B,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEpD,OAAO;QACL,iBAAiB;QACjB,kBAAkB,EAAE,QAAQ;QAC5B,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,uBAAuB,CAAC;QACjE,aAAa;QACb,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,yBAAyB,CAAC;QAC5E,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC;QACnD,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC;QACnD,oBAAoB;QACpB,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC;QACrE,sBAAsB,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,eAAe,CAAC;QACxE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC;QACvD,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC;QAChD,iBAAiB;QACjB,eAAe;QACf,yBAAyB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC;QACpE,8BAA8B,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC;QAC9E,qCAAqC;QACrC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC;QACtD,gBAAgB;QAChB,uBAAuB;QACvB,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC;QAC/D,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;QACvE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC;QAClD,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC5C,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC9C,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC;QACxD,cAAc;QACd,cAAc;QACd,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC;KAC5D,CAAC;AACJ,CAAC"}

package/node_modules/@murphai/runtime-state/dist/assistant-usage.d.ts

@@ -0,0 +1,56 @@
+import { type AssistantStatePaths } from "./assistant-state.ts";
+export declare const ASSISTANT_USAGE_SCHEMA = "murph.assistant-usage.v1";
+export type AssistantUsageCredentialSource = "member" | "platform" | "unknown";
+export interface AssistantUsageRecord {
+    apiKeyEnv: string | null;
+    attemptCount: number;
+    baseUrl: string | null;
+    cacheWriteTokens: number | null;
+    cachedInputTokens: number | null;
+    credentialSource: AssistantUsageCredentialSource;
+    inputTokens: number | null;
+    memberId: string | null;
+    occurredAt: string;
+    outputTokens: number | null;
+    provider: string;
+    providerMetadataJson: unknown | null;
+    providerName: string | null;
+    providerRequestId: string | null;
+    providerSessionId: string | null;
+    rawUsageJson: unknown | null;
+    reasoningTokens: number | null;
+    requestedModel: string | null;
+    routeId: string | null;
+    schema: typeof ASSISTANT_USAGE_SCHEMA;
+    servedModel: string | null;
+    sessionId: string;
+    totalTokens: number | null;
+    turnId: string;
+    usageId: string;
+}
+export declare function createAssistantUsageId(input: {
+    attemptCount: number;
+    turnId: string;
+}): string;
+export declare function resolvePendingAssistantUsagePath(paths: AssistantStatePaths, usageId: string): string;
+export declare function writePendingAssistantUsageRecord(input: {
+    paths?: AssistantStatePaths;
+    record: AssistantUsageRecord;
+    vault?: string;
+}): Promise<void>;
+export declare function listPendingAssistantUsageRecords(input: {
+    paths?: AssistantStatePaths;
+    vault?: string;
+}): Promise<AssistantUsageRecord[]>;
+export declare function deletePendingAssistantUsageRecord(input: {
+    paths?: AssistantStatePaths;
+    usageId: string;
+    vault?: string;
+}): Promise<void>;
+export declare function parseAssistantUsageRecord(value: unknown): AssistantUsageRecord;
+export declare function resolveAssistantUsageCredentialSource(input: {
+    apiKeyEnv: string | null;
+    provider: string;
+    userEnvKeys: Iterable<string>;
+}): AssistantUsageCredentialSource;
+//# sourceMappingURL=assistant-usage.d.ts.map

package/node_modules/@murphai/runtime-state/dist/assistant-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistant-usage.d.ts","sourceRoot":"","sources":["../src/assistant-usage.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,sBAAsB,CAAC;AAE9B,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AAwBjE,MAAM,MAAM,8BAA8B,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAE/E,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,8BAA8B,CAAC;IACjD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAC;IACrC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,OAAO,sBAAsB,CAAC;IACtC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAKT;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,MAAM,GACd,MAAM,CAER;AAED,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhB;AAED,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAgClC;AAED,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAgC9E;AAED,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC/B,GAAG,8BAA8B,CAcjC"}

package/node_modules/@murphai/runtime-state/dist/assistant-usage.js

@@ -0,0 +1,189 @@
+import { readdir, readFile, rm } from "node:fs/promises";
+import path from "node:path";
+import { writeJsonFileAtomic } from "./atomic-write.js";
+import { ensureAssistantStateDirectory } from "./assistant-state-security.js";
+import { resolveAssistantStatePaths, } from "./assistant-state.js";
+export const ASSISTANT_USAGE_SCHEMA = "murph.assistant-usage.v1";
+const HOSTED_MEMBER_AI_CREDENTIAL_ENV_KEYS = new Set([
+    "ANTHROPIC_API_KEY",
+    "CEREBRAS_API_KEY",
+    "DEEPSEEK_API_KEY",
+    "FIREWORKS_API_KEY",
+    "GOOGLE_GENERATIVE_AI_API_KEY",
+    "GROQ_API_KEY",
+    "HF_TOKEN",
+    "HUGGINGFACEHUB_API_TOKEN",
+    "HUGGINGFACE_API_KEY",
+    "HUGGING_FACE_HUB_TOKEN",
+    "LITELLM_PROXY_API_KEY",
+    "MISTRAL_API_KEY",
+    "NVIDIA_API_KEY",
+    "NGC_API_KEY",
+    "OPENAI_API_KEY",
+    "OPENROUTER_API_KEY",
+    "PERPLEXITY_API_KEY",
+    "TOGETHER_API_KEY",
+    "VENICE_API_KEY",
+    "XAI_API_KEY",
+]);
+export function createAssistantUsageId(input) {
+    const attemptCount = normalizeRequiredInteger(input.attemptCount, "attemptCount");
+    const turnId = normalizeRequiredString(input.turnId, "turnId");
+    return `${turnId}.attempt-${attemptCount}`;
+}
+export function resolvePendingAssistantUsagePath(paths, usageId) {
+    return path.join(paths.usagePendingDirectory, `${normalizeRequiredString(usageId, "usageId")}.json`);
+}
+export async function writePendingAssistantUsageRecord(input) {
+    const paths = resolveAssistantUsagePaths(input.vault, input.paths);
+    const record = parseAssistantUsageRecord(input.record);
+    await ensureAssistantStateDirectory(paths.usagePendingDirectory);
+    await writeJsonFileAtomic(resolvePendingAssistantUsagePath(paths, record.usageId), record);
+}
+export async function listPendingAssistantUsageRecords(input) {
+    const paths = resolveAssistantUsagePaths(input.vault, input.paths);
+    try {
+        const entries = await readdir(paths.usagePendingDirectory, {
+            withFileTypes: true,
+        });
+        const records = await Promise.all(entries
+            .filter((entry) => entry.isFile() && entry.name.endsWith(".json"))
+            .map(async (entry) => {
+            const raw = await readFile(path.join(paths.usagePendingDirectory, entry.name), "utf8");
+            return parseAssistantUsageRecord(JSON.parse(raw));
+        }));
+        return records.sort((left, right) => {
+            const occurredAtOrder = left.occurredAt.localeCompare(right.occurredAt);
+            if (occurredAtOrder !== 0) {
+                return occurredAtOrder;
+            }
+            return left.usageId.localeCompare(right.usageId);
+        });
+    }
+    catch (error) {
+        if (isMissingFileError(error)) {
+            return [];
+        }
+        throw error;
+    }
+}
+export async function deletePendingAssistantUsageRecord(input) {
+    const paths = resolveAssistantUsagePaths(input.vault, input.paths);
+    await rm(resolvePendingAssistantUsagePath(paths, input.usageId), {
+        force: true,
+    });
+}
+export function parseAssistantUsageRecord(value) {
+    const record = requireRecord(value, "assistant usage record");
+    const inputTokens = normalizeOptionalInteger(record.inputTokens, "inputTokens");
+    const outputTokens = normalizeOptionalInteger(record.outputTokens, "outputTokens");
+    return {
+        apiKeyEnv: normalizeOptionalString(record.apiKeyEnv, "apiKeyEnv"),
+        attemptCount: normalizeRequiredInteger(record.attemptCount, "attemptCount"),
+        baseUrl: normalizeOptionalString(record.baseUrl, "baseUrl"),
+        cacheWriteTokens: normalizeOptionalInteger(record.cacheWriteTokens, "cacheWriteTokens"),
+        cachedInputTokens: normalizeOptionalInteger(record.cachedInputTokens, "cachedInputTokens"),
+        credentialSource: normalizeCredentialSource(record.credentialSource),
+        inputTokens,
+        memberId: normalizeOptionalString(record.memberId, "memberId"),
+        occurredAt: normalizeRequiredString(record.occurredAt, "occurredAt"),
+        outputTokens,
+        provider: normalizeRequiredString(record.provider, "provider"),
+        providerMetadataJson: record.providerMetadataJson ?? null,
+        providerName: normalizeOptionalString(record.providerName, "providerName"),
+        providerRequestId: normalizeOptionalString(record.providerRequestId, "providerRequestId"),
+        providerSessionId: normalizeOptionalString(record.providerSessionId, "providerSessionId"),
+        rawUsageJson: record.rawUsageJson ?? null,
+        reasoningTokens: normalizeOptionalInteger(record.reasoningTokens, "reasoningTokens"),
+        requestedModel: normalizeOptionalString(record.requestedModel, "requestedModel"),
+        routeId: normalizeOptionalString(record.routeId, "routeId"),
+        schema: normalizeUsageSchema(record.schema),
+        servedModel: normalizeOptionalString(record.servedModel, "servedModel"),
+        sessionId: normalizeRequiredString(record.sessionId, "sessionId"),
+        totalTokens: normalizeOptionalInteger(record.totalTokens, "totalTokens"),
+        turnId: normalizeRequiredString(record.turnId, "turnId"),
+        usageId: normalizeRequiredString(record.usageId, "usageId"),
+    };
+}
+export function resolveAssistantUsageCredentialSource(input) {
+    const userEnvKeys = new Set([...input.userEnvKeys].map((key) => normalizeRequiredString(key, "userEnvKey")));
+    if (!input.apiKeyEnv) {
+        if (input.provider === "codex-cli" && hasHostedMemberAiCredential(userEnvKeys)) {
+            return "unknown";
+        }
+        return "platform";
+    }
+    return userEnvKeys.has(input.apiKeyEnv) ? "member" : "platform";
+}
+function resolveAssistantUsagePaths(vault, paths) {
+    if (paths) {
+        return paths;
+    }
+    if (!vault) {
+        throw new TypeError("vault or paths is required when resolving assistant usage state.");
+    }
+    return resolveAssistantStatePaths(vault);
+}
+function requireRecord(value, label) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new TypeError(`${label} must be a JSON object.`);
+    }
+    return value;
+}
+function normalizeUsageSchema(value) {
+    const schema = normalizeRequiredString(value, "schema");
+    if (schema !== ASSISTANT_USAGE_SCHEMA) {
+        throw new TypeError(`assistant usage record schema must be ${ASSISTANT_USAGE_SCHEMA}.`);
+    }
+    return ASSISTANT_USAGE_SCHEMA;
+}
+function normalizeCredentialSource(value) {
+    const normalized = normalizeRequiredString(value, "credentialSource");
+    if (normalized !== "member" && normalized !== "platform" && normalized !== "unknown") {
+        throw new TypeError("credentialSource must be 'member', 'platform', or 'unknown'.");
+    }
+    return normalized;
+}
+function normalizeRequiredString(value, label) {
+    const normalized = normalizeOptionalString(value, label);
+    if (!normalized) {
+        throw new TypeError(`${label} must be a non-empty string.`);
+    }
+    return normalized;
+}
+function normalizeOptionalString(value, label) {
+    if (value === null || value === undefined) {
+        return null;
+    }
+    if (typeof value !== "string") {
+        throw new TypeError(`${label} must be a string when provided.`);
+    }
+    const normalized = value.trim();
+    return normalized.length > 0 ? normalized : null;
+}
+function normalizeRequiredInteger(value, label) {
+    const normalized = normalizeOptionalInteger(value, label);
+    if (normalized === null) {
+        throw new TypeError(`${label} must be a whole number.`);
+    }
+    return normalized;
+}
+function normalizeOptionalInteger(value, label) {
+    if (value === null || value === undefined) {
+        return null;
+    }
+    if (typeof value !== "number" || !Number.isInteger(value) || value < 0) {
+        throw new TypeError(`${label} must be a non-negative integer when provided.`);
+    }
+    return value;
+}
+function isMissingFileError(error) {
+    return Boolean(error
+        && typeof error === "object"
+        && "code" in error
+        && error.code === "ENOENT");
+}
+function hasHostedMemberAiCredential(userEnvKeys) {
+    return [...userEnvKeys].some((key) => HOSTED_MEMBER_AI_CREDENTIAL_ENV_KEYS.has(key));
+}
+//# sourceMappingURL=assistant-usage.js.map

package/node_modules/@murphai/runtime-state/dist/assistant-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistant-usage.js","sourceRoot":"","sources":["../src/assistant-usage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EACL,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AACjE,MAAM,oCAAoC,GAAG,IAAI,GAAG,CAAC;IACnD,mBAAmB;IACnB,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,8BAA8B;IAC9B,cAAc;IACd,UAAU;IACV,0BAA0B;IAC1B,qBAAqB;IACrB,wBAAwB;IACxB,uBAAuB;IACvB,iBAAiB;IACjB,gBAAgB;IAChB,aAAa;IACb,gBAAgB;IAChB,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,gBAAgB;IAChB,aAAa;CACd,CAAC,CAAC;AAgCH,MAAM,UAAU,sBAAsB,CAAC,KAGtC;IACC,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE/D,OAAO,GAAG,MAAM,YAAY,YAAY,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAA0B,EAC1B,OAAe;IAEf,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,GAAG,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KAItD;IACC,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,6BAA6B,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACjE,MAAM,mBAAmB,CAAC,gCAAgC,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KAGtD;IACC,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE;YACzD,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,OAAO;aACJ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aACjE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACnB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YACvF,OAAO,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC,CAAC;QAC/D,CAAC,CAAC,CACL,CAAC;QAEF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAExE,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,eAAe,CAAC;YACzB,CAAC;YAED,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAIvD;IACC,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAEnE,MAAM,EAAE,CAAC,gCAAgC,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QAC/D,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,wBAAwB,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAChF,MAAM,YAAY,GAAG,wBAAwB,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAEnF,OAAO;QACL,SAAS,EAAE,uBAAuB,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;QACjE,YAAY,EAAE,wBAAwB,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC;QAC3E,OAAO,EAAE,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC;QAC3D,gBAAgB,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QACvF,iBAAiB,EAAE,wBAAwB,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QAC1F,gBAAgB,EAAE,yBAAyB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACpE,WAAW;QACX,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC9D,UAAU,EAAE,uBAAuB,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC;QACpE,YAAY;QACZ,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC9D,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,IAAI;QACzD,YAAY,EAAE,uBAAuB,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC;QAC1E,iBAAiB,EAAE,uBAAuB,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QACzF,iBAAiB,EAAE,uBAAuB,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QACzF,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;QACzC,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACpF,cAAc,EAAE,uBAAuB,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAChF,OAAO,EAAE,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC;QAC3D,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,WAAW,EAAE,uBAAuB,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC;QACvE,SAAS,EAAE,uBAAuB,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;QACjE,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC;QACxE,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;QACxD,OAAO,EAAE,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAIrD;IACC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAChF,CAAC;IAEF,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,IAAI,2BAA2B,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/E,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;AAClE,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAyB,EACzB,KAAsC;IAEtC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,SAAS,CAAC,kEAAkE,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAExD,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;QACtC,MAAM,IAAI,SAAS,CAAC,yCAAyC,sBAAsB,GAAG,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAEtE,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACrF,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,KAAa;IAC5D,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAEzD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,KAAa;IAC5D,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc,EAAE,KAAa;IAC7D,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAE1D,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc,EAAE,KAAa;IAC7D,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,gDAAgD,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,OAAO,CACZ,KAAK;WACA,OAAO,KAAK,KAAK,QAAQ;WACzB,MAAM,IAAI,KAAK;WACf,KAAK,CAAC,IAAI,KAAK,QAAQ,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,WAAgC;IACnE,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oCAAoC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACvF,CAAC"}

package/node_modules/@murphai/runtime-state/dist/atomic-write.d.ts

@@ -0,0 +1,7 @@
+export interface AtomicWriteOptions {
+    mode?: number;
+    trailingNewline?: boolean;
+}
+export declare function writeTextFileAtomic(filePath: string, value: string, options?: AtomicWriteOptions): Promise<void>;
+export declare function writeJsonFileAtomic(filePath: string, value: unknown, options?: AtomicWriteOptions): Promise<void>;
+//# sourceMappingURL=atomic-write.d.ts.map

package/node_modules/@murphai/runtime-state/dist/atomic-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-write.d.ts","sourceRoot":"","sources":["../src/atomic-write.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAKf"}

package/node_modules/@murphai/runtime-state/dist/atomic-write.js

@@ -0,0 +1,27 @@
+import { randomUUID } from "node:crypto";
+import { chmod, rename, rm, writeFile } from "node:fs/promises";
+import { ensureAssistantStateParentDirectory, resolveAssistantStateFileMode, } from "./assistant-state-security.js";
+export async function writeTextFileAtomic(filePath, value, options = {}) {
+    const normalizedValue = options.trailingNewline && !value.endsWith("\n") ? `${value}\n` : value;
+    const tempPath = `${filePath}.${randomUUID().replace(/-/g, "")}.tmp`;
+    const mode = resolveAssistantStateFileMode(filePath, options.mode);
+    await ensureAssistantStateParentDirectory(filePath);
+    try {
+        await writeFile(tempPath, normalizedValue, "utf8");
+        if (typeof mode === "number") {
+            await chmod(tempPath, mode);
+        }
+        await rename(tempPath, filePath);
+    }
+    catch (error) {
+        await rm(tempPath, { force: true });
+        throw error;
+    }
+}
+export async function writeJsonFileAtomic(filePath, value, options = {}) {
+    await writeTextFileAtomic(filePath, JSON.stringify(value, null, 2), {
+        ...options,
+        trailingNewline: options.trailingNewline ?? true,
+    });
+}
+//# sourceMappingURL=atomic-write.js.map

package/node_modules/@murphai/runtime-state/dist/atomic-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-write.js","sourceRoot":"","sources":["../src/atomic-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EACL,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AAOvC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,KAAa,EACb,UAA8B,EAAE;IAEhC,MAAM,eAAe,GACnB,OAAO,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1E,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC;IACrE,MAAM,IAAI,GAAG,6BAA6B,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE,MAAM,mCAAmC,CAAC,QAAQ,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;QAEnD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,KAAc,EACd,UAA8B,EAAE;IAEhC,MAAM,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QAClE,GAAG,OAAO;QACV,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI;KACjD,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@murphai/runtime-state/dist/device-sync-local-state-descriptors.d.ts

@@ -0,0 +1,3 @@
+import { type VaultLocalStatePathDescriptor } from "./local-state-descriptor-helpers.ts";
+export declare const deviceSyncLocalStateDescriptors: readonly VaultLocalStatePathDescriptor[];
+//# sourceMappingURL=device-sync-local-state-descriptors.d.ts.map

package/node_modules/@murphai/runtime-state/dist/device-sync-local-state-descriptors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-sync-local-state-descriptors.d.ts","sourceRoot":"","sources":["../src/device-sync-local-state-descriptors.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,qCAAqC,CAAC;AAE7C,eAAO,MAAM,+BAA+B,EAAE,SAAS,6BAA6B,EAU1E,CAAC"}

package/node_modules/@murphai/runtime-state/dist/device-sync-local-state-descriptors.js

@@ -0,0 +1,12 @@
+import { defineLocalStateSubtreeDescriptor, } from "./local-state-descriptor-helpers.js";
+export const deviceSyncLocalStateDescriptors = [
+    defineLocalStateSubtreeDescriptor({
+        classification: "operational",
+        description: "Device-sync runtime state, credentials, launcher metadata, and logs are machine-local operational state.",
+        owner: "device-sync-runtime",
+        portability: "machine_local",
+        rebuildable: false,
+        relativePath: ".runtime/operations/device-sync",
+    }),
+];
+//# sourceMappingURL=device-sync-local-state-descriptors.js.map

package/node_modules/@murphai/runtime-state/dist/device-sync-local-state-descriptors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-sync-local-state-descriptors.js","sourceRoot":"","sources":["../src/device-sync-local-state-descriptors.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,GAElC,MAAM,qCAAqC,CAAC;AAE7C,MAAM,CAAC,MAAM,+BAA+B,GAA6C;IACvF,iCAAiC,CAAC;QAChC,cAAc,EAAE,aAAa;QAC7B,WAAW,EACT,0GAA0G;QAC5G,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,KAAK;QAClB,YAAY,EAAE,iCAAiC;KAChD,CAAC;CACM,CAAC"}

package/node_modules/@murphai/runtime-state/dist/gateway-local-state-descriptors.d.ts

@@ -0,0 +1,3 @@
+import { type VaultLocalStatePathDescriptor } from "./local-state-descriptor-helpers.ts";
+export declare const gatewayLocalStateDescriptors: readonly VaultLocalStatePathDescriptor[];
+//# sourceMappingURL=gateway-local-state-descriptors.d.ts.map

package/node_modules/@murphai/runtime-state/dist/gateway-local-state-descriptors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-local-state-descriptors.d.ts","sourceRoot":"","sources":["../src/gateway-local-state-descriptors.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,qCAAqC,CAAC;AAI7C,eAAO,MAAM,4BAA4B,EAAE,SAAS,6BAA6B,EAUvE,CAAC"}

package/node_modules/@murphai/runtime-state/dist/gateway-local-state-descriptors.js

@@ -0,0 +1,13 @@
+import { defineLocalStateFileDescriptor, } from "./local-state-descriptor-helpers.js";
+const GATEWAY_LOCAL_OWNER = "gateway-local";
+export const gatewayLocalStateDescriptors = [
+    defineLocalStateFileDescriptor({
+        classification: "projection",
+        description: "Gateway-local owns the rebuildable local gateway projection store derived from canonical vault evidence plus local gateway runtime inputs.",
+        owner: GATEWAY_LOCAL_OWNER,
+        portability: "machine_local",
+        rebuildable: true,
+        relativePath: ".runtime/projections/gateway.sqlite",
+    }),
+];
+//# sourceMappingURL=gateway-local-state-descriptors.js.map

package/node_modules/@murphai/runtime-state/dist/gateway-local-state-descriptors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-local-state-descriptors.js","sourceRoot":"","sources":["../src/gateway-local-state-descriptors.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,GAE/B,MAAM,qCAAqC,CAAC;AAE7C,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAE5C,MAAM,CAAC,MAAM,4BAA4B,GAA6C;IACpF,8BAA8B,CAAC;QAC7B,cAAc,EAAE,YAAY;QAC5B,WAAW,EACT,4IAA4I;QAC9I,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,qCAAqC;KACpD,CAAC;CACM,CAAC"}