@nac3/forge-cli 0.2.0-alpha.5 → 0.2.0-alpha.59z.119

package/dist/mcp/state.js

@@ -0,0 +1,144 @@
+/**
+ * F101 slice 5 sub-slice 1 -- persistent enabled-state for MCP bridges.
+ *
+ * Stores `{bridge_id: {enabled, updated_at}}` at
+ * ~/.yujin-forge/mcp-state.json. discoverBridges() merges the
+ * state into each discovered bridge so a bridge disabled here
+ * shows as `enabled: false` and the LLM stub omits its proxied
+ * tools on the next chat turn.
+ *
+ * Atomicity: writes go to mcp-state.json.tmp first then rename
+ * over the final path. Concurrent yf processes will not corrupt
+ * the file (the rename is atomic on POSIX + Windows >= 10).
+ *
+ * Per-process cache (5s) so a chat turn that calls
+ * getActiveBridges() multiple times pays the disk read only
+ * once.
+ *
+ * ASCII-only.
+ */
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { homedir } from 'node:os';
+const HOME_DIR = '.yujin-forge';
+const STATE_FILE = 'mcp-state.json';
+const STATE_VERSION = 1;
+function statePath() {
+    return path.join(homedir(), HOME_DIR, STATE_FILE);
+}
+function emptyState() {
+    return { version: STATE_VERSION, bridges: {} };
+}
+/* ====================================================================
+ * Read path
+ * ================================================================== */
+let _readCache = null;
+const READ_CACHE_TTL_MS = 5 * 1000;
+export async function readState(opts = {}) {
+    if (!opts.refresh && _readCache && Date.now() - _readCache.at < READ_CACHE_TTL_MS) {
+        return _readCache.state;
+    }
+    const p = statePath();
+    let raw;
+    try {
+        raw = await fs.readFile(p, 'utf-8');
+    }
+    catch {
+        /* File missing -> empty state. Not an error -- the first run
+         * has no state yet. */
+        _readCache = { state: emptyState(), at: Date.now() };
+        return _readCache.state;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+        if (typeof parsed.version !== 'number' || !parsed.bridges || typeof parsed.bridges !== 'object') {
+            parsed = emptyState();
+        }
+    }
+    catch {
+        /* Corrupt JSON -> empty state. The next write will rebuild
+         * the file. We do not surface the parse error here because
+         * MCP state is a soft setting; bridges still discover. */
+        parsed = emptyState();
+    }
+    _readCache = { state: parsed, at: Date.now() };
+    return parsed;
+}
+/** Returns whether a bridge is enabled per persisted state.
+ *  Default true when the bridge has no entry yet. */
+export async function isEnabled(bridge_id) {
+    const s = await readState();
+    const entry = s.bridges[bridge_id];
+    if (!entry)
+        return true;
+    return entry.enabled !== false;
+}
+/* ====================================================================
+ * Write path -- atomic via tmp + rename
+ * ================================================================== */
+async function ensureDir() {
+    const dir = path.join(homedir(), HOME_DIR);
+    await fs.mkdir(dir, { recursive: true });
+    return dir;
+}
+async function writeStateAtomic(state) {
+    await ensureDir();
+    const finalPath = statePath();
+    const tmpPath = finalPath + '.tmp';
+    const body = JSON.stringify(state, null, 2);
+    await fs.writeFile(tmpPath, body, 'utf-8');
+    /* fsync the data before rename so a power loss does not leave
+     * a half-written tmp + a missing final. */
+    try {
+        const fh = await fs.open(tmpPath, 'r');
+        await fh.sync();
+        await fh.close();
+    }
+    catch { /* sync best-effort; rename below still proceeds */ }
+    /* Cross-platform atomic replace. POSIX rename() handles overwrite
+     * natively. Windows EPERM/EEXIST when the destination exists and
+     * a file handle lingers; fall back to unlink + rename. */
+    try {
+        await fs.rename(tmpPath, finalPath);
+    }
+    catch (e) {
+        const code = e.code;
+        if (code === 'EPERM' || code === 'EEXIST') {
+            try {
+                await fs.unlink(finalPath);
+            }
+            catch { /* swallow ENOENT */ }
+            await fs.rename(tmpPath, finalPath);
+        }
+        else {
+            throw e;
+        }
+    }
+    /* Bust the read cache so the next isEnabled() reads the fresh
+     * state. */
+    _readCache = null;
+}
+export async function setBridgeEnabled(bridge_id, enabled) {
+    const state = await readState({ refresh: true });
+    state.bridges[bridge_id] = {
+        enabled,
+        updated_at: new Date().toISOString(),
+    };
+    await writeStateAtomic(state);
+}
+export async function removeBridge(bridge_id) {
+    const state = await readState({ refresh: true });
+    delete state.bridges[bridge_id];
+    await writeStateAtomic(state);
+}
+/* ====================================================================
+ * Test helpers
+ * ================================================================== */
+export function _resetStateCache() {
+    _readCache = null;
+}
+export function _statePathForTests() {
+    return statePath();
+}
+//# sourceMappingURL=state.js.map

package/dist/mcp/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/mcp/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,QAAQ,GAAI,cAAc,CAAC;AACjC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,aAAa,GAAG,CAAC,CAAC;AAYxB,SAAS,SAAS;IAChB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACjD,CAAC;AAED;;wEAEwE;AAExE,IAAI,UAAU,GAAkD,IAAI,CAAC;AACrE,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAC;AAEnC,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA8B,EAAE;IAC9D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,EAAE,GAAG,iBAAiB,EAAE,CAAC;QAClF,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IACD,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP;+BACuB;QACvB,UAAU,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACrD,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IACD,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAC5C,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChG,MAAM,GAAG,UAAU,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP;;kEAE0D;QAC1D,MAAM,GAAG,UAAU,EAAE,CAAC;IACxB,CAAC;IACD,UAAU,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;qDACqD;AACrD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,SAAiB;IAC/C,MAAM,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC;AACjC,CAAC;AAED;;wEAEwE;AAExE,KAAK,UAAU,SAAS;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAsB;IACpD,MAAM,SAAS,EAAE,CAAC;IAClB,MAAM,SAAS,GAAG,SAAS,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C;+CAC2C;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;IAC/D;;8DAE0D;IAC1D,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,CAAC;QAC3C,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC;gBAAC,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAClE,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD;gBACY;IACZ,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,OAAgB;IACxE,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG;QACzB,OAAO;QACP,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;;wEAEwE;AAExE,MAAM,UAAU,gBAAgB;IAC9B,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC"}

package/dist/migrate/ai-decorator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai-decorator.d.ts","sourceRoot":"","sources":["../../src/migrate/ai-decorator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAMH,MAAM,MAAM,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE3C,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB;wDACoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;wEACoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,EAAE,EAAE,MAAM,CAAC;IACX,sCAAsC;IACtC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,QAAQ,CAAC;IACjD,kDAAkD;IAClD,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,6BAA6B;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,aAAa,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,2BAA2B;IAC3B,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAwGD,wBAAsB,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2DjF;AAED;;;;;;;;GAQG;AACH;iEACiE;AACjE,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEhF,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuB5B"}
+{"version":3,"file":"ai-decorator.d.ts","sourceRoot":"","sources":["../../src/migrate/ai-decorator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,MAAM,MAAM,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE3C,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB;wDACoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;wEACoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,EAAE,EAAE,MAAM,CAAC;IACX,sCAAsC;IACtC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,QAAQ,CAAC;IACjD,kDAAkD;IAClD,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,6BAA6B;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,aAAa,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,2BAA2B;IAC3B,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAUD,wBAAsB,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAoCjF;AAED;;;;;;;;GAQG;AACH;iEACiE;AACjE,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEhF,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuB5B"}

package/dist/migrate/ai-decorator.js

@@ -20,157 +20,45 @@
  */
 import { promises as fs } from 'node:fs';
 import path from 'node:path';
-import Anthropic from '@anthropic-ai/sdk';
-const DEFAULT_MODEL = 'claude-sonnet-4-6';
-/* Pricing per million tokens, mirrored from the benchmark pricing.ts. */
-const PRICING = {
-    'claude-sonnet-4-6': { in: 3.00, out: 15.00 },
-    'claude-haiku-4-5': { in: 0.80, out: 4.00 },
-    'claude-opus-4-7': { in: 15.00, out: 75.00 },
-    'claude-haiku-4-5-20251001': { in: 0.80, out: 4.00 },
-};
-function resolveAnthropicModelId(id) {
-    if (id === 'claude-haiku-4-5')
-        return 'claude-haiku-4-5-20251001';
-    return id;
-}
-function computeCost(model, usage) {
-    const p = PRICING[model] || PRICING['claude-sonnet-4-6'];
-    return (usage.input * p.in + usage.output * p.out) / 1_000_000;
-}
-const SYSTEM_PROMPT_SILENT = `You are a NAC-3 (Native Agent Contract) decorator. Given an HTML page and an optional companion JS source, you produce a fully NAC-3-decorated version of the page plus a manifest JSON.
-
-NAC-3 attributes to add to interactive elements:
-- data-nac-id: a stable dotted identifier, e.g. "calc.action.digit_7" or "calc.action.equals".
-- data-nac-role: one of: action, field, option, tab, navigation, region.
-- data-nac-action: the verb name when role=action, e.g. "digit_7", "add", "subtract", "clear", "equals".
-
-ROOT PLUGIN ANCHOR (mandatory): the top-level container (preferably <body>) MUST receive data-nac-plugin="<plugin_slug>". This is what NAC.click_by_verb's DOM fallback uses to scope the search. Without it the runtime cannot resolve verbs.
-
-ROLE TAXONOMY (critical -- get this right):
-- action: anything the user CLICKS to make something happen (buttons, links that do something).
-- field: an element that HOLDS a VALUE the user can read or write. Examples: a calculator display, an output area, an input. NEVER classify a value-holding element as region.
-- region: a CONTAINER that groups other elements. A region holds children; it does not hold a value.
-- option: a single choice inside a select / radio group.
-- tab: a tab-bar entry.
-- navigation: nav link.
-
-VERB NAMING: prefer short imperative verbs (add, subtract, multiply, divide, clear, submit, save). Avoid redundant prefixes like "set_op_" when "add" already communicates intent.
-
-Plugin slug: choose a short snake_case identifier for the page (e.g. "calc", "invoice_app").
-
-Manifest JSON shape:
-{
-  "plugin_slug": "<slug>",
-  "version": "1.0.0",
-  "nac_version": "1.0",
-  "label_i18n": { "es": "<label>", "en": "<label>" },
-  "elements": [
-    { "id": "<dotted id>", "role": "action|field|option|tab|region", "actions": [{ "verb": "<verb>", "label_i18n": { "es":"...", "en":"..." } }] }
-  ]
-}
-
-OUTPUT FORMAT -- you reply with a single JSON object, no prose, no Markdown fences:
-{
-  "decorated_html": "<full decorated HTML source as a single string>",
-  "plugin_slug": "<slug>",
-  "manifest_json": "<the manifest object stringified>",
-  "ambiguities": []
-}
-
-Rules:
-1. Decorate ALL interactive elements (buttons, inputs, selects, links that do something, tabs). Skip pure layout.
-2. Use semantic verbs from the JS (onclick handlers reveal intent). For "onclick=clearAll()" use verb "clear". For "onclick=digit('7')" use verb "digit_7" and id "<slug>.action.digit_7".
-3. Keep IDs stable, dotted, lowercase, snake_case. Pattern: "<slug>.<role>.<thing>".
-4. The manifest_json field is the JSON manifest as a STRING (escape inner quotes).
-5. In SILENT mode, do not ask questions. Make your best guess. ambiguities = [].
-6. Preserve all existing HTML attributes; only ADD nac-3 attributes.
-7. Do not change the visible text or layout. Only decoration.
-8. The <body> tag MUST have data-nac-plugin="<plugin_slug>" exactly.`;
-const SYSTEM_PROMPT_ASSISTED = SYSTEM_PROMPT_SILENT + `
-
-ASSISTED MODE OVERRIDE: if more than one verb / role / id is plausible, populate the "ambiguities" array with concrete questions. Each ambiguity has:
-{
-  "id": "<stable handle>",
-  "kind": "role|verb|plugin_slug|nac_id",
-  "element_excerpt": "<the offending HTML tag, single line, max 120 chars>",
-  "question": "<one-sentence question for the user>",
-  "options": ["option_a", "option_b", "option_c"]
-}
-Still produce decorated_html with your best guess; the caller will re-issue if the user picks something different.`;
-const _client = {};
-function client() {
-    if (!_client.c)
-        _client.c = new Anthropic();
-    return _client.c;
-}
-function extractJsonObject(text) {
-    /* Models sometimes wrap output in markdown despite instructions.
-       Be liberal in what we accept. */
-    const fenced = text.match(/```(?:json)?\s*([\s\S]*?)\s*```/);
-    if (fenced && fenced[1])
-        return fenced[1].trim();
-    const trimmed = text.trim();
-    if (trimmed.startsWith('{') && trimmed.endsWith('}'))
-        return trimmed;
-    /* Find first '{' and last '}'. */
-    const i = trimmed.indexOf('{');
-    const j = trimmed.lastIndexOf('}');
-    if (i >= 0 && j > i)
-        return trimmed.slice(i, j + 1);
-    return trimmed;
-}
+/* HITO 4 -- alpha.59z.112.
+ *
+ * The bundled SYSTEM_PROMPT_SILENT/ASSISTED prompts + the direct
+ * Anthropic SDK code path were removed in alpha.59z.112. The
+ * hito4 worker is now the ONLY path. Users no longer need
+ * ANTHROPIC_API_KEY in their env -- the worker uses their BYOK
+ * brain key forwarded via HMAC headers (see callFlow). */
 export async function aiDecorate(opts) {
-    if (!process.env.ANTHROPIC_API_KEY) {
-        throw new Error('ANTHROPIC_API_KEY env variable missing -- set it before running --ai-silent or --ai-assisted.');
-    }
-    const model = opts.model || DEFAULT_MODEL;
-    const sys = opts.mode === 'assisted' ? SYSTEM_PROMPT_ASSISTED : SYSTEM_PROMPT_SILENT;
-    let userPrompt = '<HTML>\n' + opts.htmlSource + '\n</HTML>';
-    if (opts.jsSource) {
-        userPrompt += '\n\n<JS companion>\n' + opts.jsSource + '\n</JS companion>';
-    }
-    if (opts.pluginHint) {
-        userPrompt += '\n\nPage hint: ' + opts.pluginHint;
-    }
-    userPrompt += '\n\nDecorate this page per the rules above. Output a single JSON object only.';
     const t0 = Date.now();
-    const skipTemp = /^claude-opus-4-7/.test(model);
-    const payload = {
-        model: resolveAnthropicModelId(model),
-        max_tokens: 8192,
-        system: sys,
-        messages: [{ role: 'user', content: userPrompt }],
-    };
-    if (!skipTemp)
-        payload.temperature = 0;
-    const resp = await client().messages.create(payload);
-    const latency_ms = Date.now() - t0;
-    const block = resp.content.find((b) => b.type === 'text');
-    const raw = block?.text || '';
-    const jsonText = extractJsonObject(raw);
-    let parsed;
-    try {
-        parsed = JSON.parse(jsonText);
-    }
-    catch (e) {
-        throw new Error('Claude returned non-parseable JSON. First 400 chars: ' + (jsonText || '').slice(0, 400));
-    }
-    if (!parsed || typeof parsed !== 'object') {
-        throw new Error('Claude response did not parse to an object.');
+    const { callFlow } = await import('../license/hito4_client.js');
+    const r = await callFlow('ai-decorate', {
+        html_source: opts.htmlSource,
+        js_source: opts.jsSource,
+        plugin_hint: opts.pluginHint,
+        mode: opts.mode,
+    });
+    if (!r.ok) {
+        throw new Error('ai-decorate via hito4 worker failed: HTTP ' + r.status
+            + ' -- ' + (typeof r.body?.error === 'string' ? r.body.error : 'no error message'));
     }
-    const ambiguities = Array.isArray(parsed.ambiguities) ? parsed.ambiguities : [];
+    const out = r.body.output ?? r.body;
+    const decorated_html = typeof out.decorated_html === 'string' ? out.decorated_html : opts.htmlSource;
+    const plugin_slug = typeof out.plugin_slug === 'string' ? out.plugin_slug : 'unknown';
+    const manifest_json = typeof out.manifest_json === 'string'
+        ? out.manifest_json
+        : JSON.stringify({ plugin_slug, version: '1.0.0', nac_version: '1.0', elements: [] });
+    const ambiguities = Array.isArray(out.ambiguities) ? out.ambiguities : [];
+    const usage = (out.usage ?? r.body.usage);
     return {
-        decorated_html: parsed.decorated_html || opts.htmlSource,
-        plugin_slug: parsed.plugin_slug || 'unknown',
-        manifest_json: parsed.manifest_json || JSON.stringify({ plugin_slug: parsed.plugin_slug || 'unknown', version: '1.0.0', nac_version: '1.0', elements: [] }),
+        decorated_html,
+        plugin_slug,
+        manifest_json,
         ambiguities,
         meta: {
-            model,
-            input_tokens: resp.usage.input_tokens || 0,
-            output_tokens: resp.usage.output_tokens || 0,
-            cost_usd: computeCost(model, { input: resp.usage.input_tokens || 0, output: resp.usage.output_tokens || 0 }),
-            latency_ms,
+            model: typeof out.model === 'string' ? out.model : 'worker-managed',
+            input_tokens: typeof usage?.input_tokens === 'number' ? usage.input_tokens : 0,
+            output_tokens: typeof usage?.output_tokens === 'number' ? usage.output_tokens : 0,
+            cost_usd: typeof out.cost_usd === 'number' ? out.cost_usd : 0,
+            latency_ms: Date.now() - t0,
         },
     };
 }

package/dist/migrate/ai-decorator.js.map

@@ -1 +1 @@
-{"version":3,"file":"ai-decorator.js","sourceRoot":"","sources":["../../src/migrate/ai-decorator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAgD1C,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAE1C,yEAAyE;AACzE,MAAM,OAAO,GAAG;IACd,mBAAmB,EAAQ,EAAE,EAAE,EAAG,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;IACpD,kBAAkB,EAAS,EAAE,EAAE,EAAG,IAAI,EAAE,GAAG,EAAG,IAAI,EAAE;IACpD,iBAAiB,EAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE;IACpD,2BAA2B,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE;CACrD,CAAC;AAEF,SAAS,uBAAuB,CAAC,EAAU;IACzC,IAAI,EAAE,KAAK,kBAAkB;QAAE,OAAO,2BAA2B,CAAC;IAClE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,KAAwC;IAC1E,MAAM,CAAC,GAAG,OAAO,CAAC,KAA6B,CAAC,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjF,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;AACjE,CAAC;AAED,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qEAgDwC,CAAC;AAEtE,MAAM,sBAAsB,GAAG,oBAAoB,GAAG;;;;;;;;;;mHAU6D,CAAC;AAEpH,MAAM,OAAO,GAAsB,EAAE,CAAC;AACtC,SAAS,MAAM;IACb,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,IAAI,SAAS,EAAE,CAAC;IAC5C,OAAO,OAAO,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC;uCACmC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC7D,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACrE,kCAAkC;IAClC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAqB;IACpD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IAErF,IAAI,UAAU,GAAG,UAAU,GAAG,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC;IAC5D,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,UAAU,IAAI,sBAAsB,GAAG,IAAI,CAAC,QAAQ,GAAG,mBAAmB,CAAC;IAC7E,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,UAAU,IAAI,iBAAiB,GAAG,IAAI,CAAC,UAAU,CAAC;IACpD,CAAC;IACD,UAAU,IAAI,+EAA+E,CAAC;IAE9F,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,OAAO,GAAQ;QACnB,KAAK,EAAE,uBAAuB,CAAC,KAAK,CAAC;QACrC,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,GAAG;QACX,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;KAClD,CAAC;IACF,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;IAEvC,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAQ,CAAC;IACtE,MAAM,GAAG,GAAG,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAExC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,uDAAuD,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhF,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,UAAU;QACxD,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,SAAS;QAC5C,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC3J,WAAW;QACX,IAAI,EAAE;YACJ,KAAK;YACL,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC;YAC1C,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC;YAC5C,QAAQ,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,EAAE,CAAC;YAC5G,UAAU;SACX;KACF,CAAC;AACJ,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAUpC;IACC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,QAA4B,CAAC;IACjC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,QAAQ,GAAG,SAAS,CAAC;QAAC,CAAC;IACtG,CAAC;IAED,MAAM,SAAS,GAAiB,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;QAC7B,UAAU;QACV,QAAQ;QACR,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"ai-decorator.js","sourceRoot":"","sources":["../../src/migrate/ai-decorator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAgD7B;;;;;;0DAM0D;AAE1D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAqB;IACpD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAChE,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE;QACtC,WAAW,EAAE,IAAI,CAAC,UAAU;QAC5B,SAAS,EAAI,IAAI,CAAC,QAAQ;QAC1B,WAAW,EAAE,IAAI,CAAC,UAAU;QAC5B,IAAI,EAAS,IAAI,CAAC,IAAI;KACvB,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,4CAA4C,GAAG,CAAC,CAAC,MAAM;cACrD,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAI,CAAC,CAAC,IAAI,CAAC,MAA8C,IAAI,CAAC,CAAC,IAAI,CAAC;IAC7E,MAAM,cAAc,GAAG,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACrG,MAAM,WAAW,GAAM,OAAO,GAAG,CAAC,WAAW,KAAQ,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAI,CAAC,CAAC,SAAS,CAAC;IAC/F,MAAM,aAAa,GAAI,OAAO,GAAG,CAAC,aAAa,KAAM,QAAQ;QAC3D,CAAC,CAAC,GAAG,CAAC,aAAa;QACnB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACxF,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,WAAqC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrG,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAwC,CAAC;IACjF,OAAO;QACL,cAAc;QACd,WAAW;QACX,aAAa;QACb,WAAW;QACX,IAAI,EAAE;YACJ,KAAK,EAAU,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB;YAC3E,YAAY,EAAG,OAAO,KAAK,EAAE,YAAY,KAAM,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAE,CAAC,CAAC,CAAC;YACjF,aAAa,EAAE,OAAO,KAAK,EAAE,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACjF,QAAQ,EAAO,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAClE,UAAU,EAAK,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;SAC/B;KACF,CAAC;AACJ,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAUpC;IACC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,QAA4B,CAAC;IACjC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,QAAQ,GAAG,SAAS,CAAC;QAAC,CAAC;IACtG,CAAC;IAED,MAAM,SAAS,GAAiB,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;QAC7B,UAAU;QACV,QAAQ;QACR,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/nac3/approval_queue.d.ts

@@ -0,0 +1,36 @@
+import type { ToolContext, ToolResult } from '../chat/tools.js';
+import type { Nac3Verb } from './internal_manifest.js';
+export interface PendingApproval {
+    trace_id: string;
+    verb: Nac3Verb;
+    args: Record<string, unknown>;
+    ctx: ToolContext;
+    /** Bound at enqueue time -- captures which legacy alias to
+     *  invoke on approve. Decoupled so the runner does not need
+     *  the dispatcher again. */
+    legacy_alias: string | null;
+    /** Reused dispatcher reference so the executor on approve can
+     *  re-enter runNac3Invoke / runForgeTool from the endpoint. */
+    legacy_run: (n: string, a: Record<string, unknown>, c: ToolContext) => Promise<ToolResult>;
+    created_at: number;
+}
+/** Push a pending approval and return the trace_id. */
+export declare function enqueueApproval(p: PendingApproval): void;
+/** Pop a pending row. Returns null when missing or expired. */
+export declare function popPending(trace_id: string): PendingApproval | null;
+/** Read without removing -- used by tests / debug. */
+export declare function peekPending(trace_id: string): PendingApproval | null;
+/** Force-clear (tests). */
+export declare function clearAllPending(): void;
+export interface ApprovalLogEntry {
+    ts: string;
+    trace_id: string;
+    verb_id: string;
+    decision: 'approve' | 'reject' | 'expired';
+    args_sample: Record<string, unknown>;
+    policy: string;
+    reason?: string;
+}
+/** Append-only audit row. Never throws. */
+export declare function logApproval(entry: ApprovalLogEntry): Promise<void>;
+//# sourceMappingURL=approval_queue.d.ts.map

package/dist/nac3/approval_queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval_queue.d.ts","sourceRoot":"","sources":["../../src/nac3/approval_queue.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAEvD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,GAAG,EAAE,WAAW,CAAC;IACjB;;gCAE4B;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;mEAC+D;IAC/D,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3F,UAAU,EAAE,MAAM,CAAC;CACpB;AAKD,uDAAuD;AACvD,wBAAgB,eAAe,CAAC,CAAC,EAAE,eAAe,GAAG,IAAI,CAGxD;AAED,+DAA+D;AAC/D,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CASnE;AAED,sDAAsD;AACtD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAQpE;AAED,2BAA2B;AAC3B,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AA0BD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,2CAA2C;AAC3C,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQxE"}

package/dist/nac3/approval_queue.js

@@ -0,0 +1,105 @@
+/**
+ * In-memory approval queue for NAC3 destructive / approval-required
+ * verbs.
+ *
+ * The dispatcher (`runNac3Invoke`) intercepts a destructive or
+ * approval-required verb BEFORE executing it. The intercept:
+ *
+ *   1. Pushes a `PendingApproval` row keyed by trace_id.
+ *   2. Returns an envelope `{nac3_panel_approval_required: true,
+ *      trace_id, verb, args}` so the LLM does NOT consider the
+ *      action done. The panel intercepts the same envelope and
+ *      opens a modal.
+ *   3. The user clicks Approve / Reject in the modal. The panel
+ *      POSTs to /api/forge/nac3-approve or /nac3-reject with the
+ *      trace_id.
+ *   4. The endpoint resolves the pending row. On approve, the
+ *      action runs; on reject, it logs and stays unexecuted.
+ *
+ * Queue lifetime:
+ *   - Pendings older than the TTL (default 5 min) are GC'd. They
+ *     stay in the audit log but cannot be approved any more.
+ *   - The dispatcher does not block waiting for approval -- it
+ *     returns immediately with the envelope. Approval comes in a
+ *     SEPARATE HTTP request from the panel.
+ *
+ * Concurrency model:
+ *   - Local single-process. Forge chat is a 127.0.0.1 server with
+ *     one listening tab. No race with siblings.
+ *
+ * ASCII-only.
+ */
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+const TTL_MS = 5 * 60 * 1000;
+const PENDING = new Map();
+/** Push a pending approval and return the trace_id. */
+export function enqueueApproval(p) {
+    PENDING.set(p.trace_id, p);
+    scheduleGc();
+}
+/** Pop a pending row. Returns null when missing or expired. */
+export function popPending(trace_id) {
+    const row = PENDING.get(trace_id);
+    if (!row)
+        return null;
+    if (Date.now() - row.created_at > TTL_MS) {
+        PENDING.delete(trace_id);
+        return null;
+    }
+    PENDING.delete(trace_id);
+    return row;
+}
+/** Read without removing -- used by tests / debug. */
+export function peekPending(trace_id) {
+    const row = PENDING.get(trace_id);
+    if (!row)
+        return null;
+    if (Date.now() - row.created_at > TTL_MS) {
+        PENDING.delete(trace_id);
+        return null;
+    }
+    return row;
+}
+/** Force-clear (tests). */
+export function clearAllPending() {
+    PENDING.clear();
+}
+/** Periodic GC for expired entries. */
+let gcTimer = null;
+function scheduleGc() {
+    if (gcTimer)
+        return;
+    gcTimer = setTimeout(() => {
+        gcTimer = null;
+        const now = Date.now();
+        for (const [k, v] of PENDING.entries()) {
+            if (now - v.created_at > TTL_MS)
+                PENDING.delete(k);
+        }
+        if (PENDING.size > 0)
+            scheduleGc();
+    }, 60_000);
+    /* Allow the process to exit even with the GC timer pending. */
+    if (typeof gcTimer.unref === 'function') {
+        gcTimer.unref();
+    }
+}
+/** Audit log path for approval decisions. Same dir as nac3_log. */
+function approvalLogPath() {
+    const dir = process.env.YF_CONFIG_DIR || path.join(os.homedir(), '.yujin-forge');
+    return path.join(dir, 'nac3_approvals.jsonl');
+}
+/** Append-only audit row. Never throws. */
+export async function logApproval(entry) {
+    try {
+        const dir = path.dirname(approvalLogPath());
+        await fs.mkdir(dir, { recursive: true });
+        await fs.appendFile(approvalLogPath(), JSON.stringify(entry) + '\n', 'utf-8');
+    }
+    catch {
+        /* swallow */
+    }
+}
+//# sourceMappingURL=approval_queue.js.map

package/dist/nac3/approval_queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval_queue.js","sourceRoot":"","sources":["../../src/nac3/approval_queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAmBzB,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7B,MAAM,OAAO,GAAiC,IAAI,GAAG,EAAE,CAAC;AAExD,uDAAuD;AACvD,MAAM,UAAU,eAAe,CAAC,CAAkB;IAChD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC;AACf,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,GAAG,MAAM,EAAE,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,GAAG,MAAM,EAAE,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2BAA2B;AAC3B,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED,uCAAuC;AACvC,IAAI,OAAO,GAA0B,IAAI,CAAC;AAC1C,SAAS,UAAU;IACjB,IAAI,OAAO;QAAE,OAAO;IACpB,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;QACxB,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACvC,IAAI,GAAG,GAAG,CAAC,CAAC,UAAU,GAAG,MAAM;gBAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC;YAAE,UAAU,EAAE,CAAC;IACrC,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,+DAA+D;IAC/D,IAAI,OAAQ,OAA0B,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAC3D,OAA0B,CAAC,KAAK,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IACjF,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;AAChD,CAAC;AAYD,2CAA2C;AAC3C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAuB;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,UAAU,CAAC,eAAe,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,aAAa;IACf,CAAC;AACH,CAAC"}

package/dist/nac3/backend_tools.d.ts

@@ -0,0 +1,89 @@
+/**
+ * NAC-3 v3.x backend tools (task #23 -- design in
+ * docs/NAC3_SPEC_V3_BACKEND_TOOLS.md).
+ *
+ * Slice 1: parse the `nac3_backend.tools[]` section from
+ * yujin.forge.json + expose the parsed catalogue. Dispatcher
+ * routing + auth header + audit log ship in slice 2.
+ *
+ * Surface principle: like the F101 MCP bridge invariants, the
+ * backend-tool verbs only appear in the LLM-visible stub when
+ * the adopter app declares them. No declaration -> identical
+ * prompt to v3.0.
+ *
+ * ASCII-only.
+ */
+export type BackendAuthKind = 'none' | 'bearer' | 'header_key' | 'basic' | 'oauth2_token';
+export interface BackendAuth {
+    kind: BackendAuthKind;
+    /** Vault slot holding the token (for bearer / header_key / oauth2_token). */
+    vault_slot?: string;
+    /** Vault slot for the username portion of basic auth. */
+    vault_slot_user?: string;
+    /** Vault slot for the password portion of basic auth. */
+    vault_slot_pass?: string;
+    /** Header name when kind === 'header_key'. e.g. "X-API-Key". */
+    header_name?: string;
+}
+export type BackendPolicy = 'unrestricted' | 'confirm' | 'approval-required' | 'destructive';
+export type BackendSideEffect = 'none' | 'external-api' | 'filesystem' | 'network';
+export interface BackendEndpoint {
+    method: 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH';
+    path: string;
+}
+export interface BackendToolSchema {
+    type: 'object';
+    properties: Record<string, {
+        type: 'string' | 'number' | 'boolean' | 'object' | 'array';
+        description?: string;
+        enum?: readonly string[];
+        minLength?: number;
+        maxLength?: number;
+        pattern?: string;
+    }>;
+    required: readonly string[];
+}
+export interface BackendTool {
+    /** Tool id (kebab-case or snake_case). Becomes `app.<id>` in the
+     *  synthetic NAC-3 verb namespace. */
+    id: string;
+    /** Short user-facing label for stub + audit log. */
+    label: string;
+    /** Free-text description. */
+    description?: string;
+    /** HTTP method + path appended to base_url. */
+    endpoint: BackendEndpoint;
+    /** Policy controls R8 modal behaviour. */
+    policy: BackendPolicy;
+    /** Declared side effects (for audit + policy reasoning). */
+    side_effects: readonly BackendSideEffect[];
+    /** Args schema (validated like native nac3 verbs). */
+    params_schema: BackendToolSchema;
+    /** Optional response shape declaration -- informational only in slice 1. */
+    result_shape?: Record<string, unknown>;
+}
+export interface BackendCatalogue {
+    base_url: string;
+    auth: BackendAuth;
+    tools: BackendTool[];
+}
+export interface ParseResult {
+    /** When the manifest has no nac3_backend, returns null. When it
+     *  has malformed shape, returns the parsed-best-effort + error
+     *  diagnostics. When it parses clean, returns the catalogue. */
+    catalogue: BackendCatalogue | null;
+    errors: string[];
+    warnings: string[];
+}
+/** Parse a yujin.forge.json content + extract the nac3_backend
+ *  catalogue. Returns null when the manifest does not declare the
+ *  section (the v3.0 default; no behaviour change). Returns a
+ *  catalogue + errors[] when the section is malformed. */
+export declare function parseBackendCatalogue(manifest: unknown): ParseResult;
+/** Read yujin.forge.json from the project root and parse its
+ *  nac3_backend section. Returns null catalogue when the file is
+ *  missing OR no nac3_backend declared OR malformed. */
+export declare function loadBackendCatalogue(projectRoot: string): Promise<ParseResult>;
+export declare function buildBackendToolStub(tool: BackendTool): string;
+export declare function buildBackendToolsSection(catalogue: BackendCatalogue): string;
+//# sourceMappingURL=backend_tools.d.ts.map

package/dist/nac3/backend_tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend_tools.d.ts","sourceRoot":"","sources":["../../src/nac3/backend_tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,cAAc,CAAC;AAE1F,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,eAAe,CAAC;IACtB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yDAAyD;IACzD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,SAAS,GACT,mBAAmB,GACnB,aAAa,CAAC;AAElB,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,cAAc,GACd,YAAY,GACZ,SAAS,CAAC;AAEd,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;QACzB,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;QAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B;0CACsC;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,QAAQ,EAAE,eAAe,CAAC;IAC1B,0CAA0C;IAC1C,MAAM,EAAE,aAAa,CAAC;IACtB,4DAA4D;IAC5D,YAAY,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC3C,sDAAsD;IACtD,aAAa,EAAE,iBAAiB,CAAC;IACjC,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAMD,MAAM,WAAW,WAAW;IAC1B;;oEAEgE;IAChE,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAoHD;;;0DAG0D;AAC1D,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,OAAO,GAAG,WAAW,CA+CpE;AAED;;wDAEwD;AACxD,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAmBpF;AA2CD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAM9D;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,CAU5E"}