@nifrajs/coding-agent 3.2.0

package/EXTENSIONS.md

@@ -0,0 +1,25 @@
+# Nifra agent extensions
+
+Extensions are project-local TypeScript modules under `.nifra/extensions/`. They are discovered
+only when the host is configured for that project; no dependency or home-directory scan is implicit.
+
+```ts
+export const capabilities = ["filesystem.read"] as const
+
+export default ({ registerCommand, registerWorkflow }) => {
+  registerCommand("status", async (_args, context) => ({ cwd: context.cwd }))
+  registerWorkflow("verify", () => ({
+    type: "verify",
+    id: "check",
+    run: async () => true,
+  }))
+}
+```
+
+The host syntax-checks a changed module, stages a complete replacement graph, and only then
+disposes the previous graph. A failed load leaves the last known-good graph active. Extensions can
+declare capabilities, but untrusted capabilities are rejected before registration. Workflows run
+with bounded step and depth ceilings through `workflow.run`.
+
+Use `nifra-agent` `/reload` or the Workbench preview/activate controls after the file is saved.
+The stable Workbench shell, approval UX, and token boundary are not replaceable by an extension.

package/PERFORMANCE.md

@@ -0,0 +1,19 @@
+# Agent performance evidence
+
+Run the reproducible local measurements with:
+
+```sh
+bun run bench:agent -- --events=100000 --json
+bun run bench:agent:reload -- --runs=20 --json
+bun run bench:pi -- --turns=1000 --json
+bun run demo:agent-extension
+```
+
+The bounded event stream and context window stay constant-size under event growth. The Pi adapter
+benchmark compares the same no-model JSONL process against the protocol adapter; the result is
+machine-load sensitive, so record the full JSON output and hardware when publishing a comparison.
+
+Agent Platform checks additionally keep plan compilation, evidence projection, recovery schedules,
+gateway retries, and Workbench replay views payload-free. The Workbench reference check uses 2,000
+evidence rows, a 100-row visible window, and a 256-node graph; it enforces the recorded projection
+and render budgets without serializing content.

package/README.md

@@ -0,0 +1,69 @@
+# @nifrajs/coding-agent
+
+Standalone, extensible Nifra coding-agent host and CLI.
+
+The package provides `nifra-agent` in interactive, one-shot, JSON, and local
+loopback RPC modes. It adds sessions, checkpoints, bounded compaction,
+transactional TypeScript extensions, self-healing repair stages, workflows,
+bounded subagents, and Nifra verification descriptors without changing Nifra's
+framework runtime.
+
+Extensions can register bounded workflows that are listed and run through the
+authenticated RPC surface. Capability manifests, project workspace policies,
+optional isolated-worktree leases, and a pre-activation syntax gate keep those
+customizations explicit and replaceable.
+
+```sh
+bunx nifra-agent --backend pi
+bunx nifra-agent --backend pi --message "run the checks and explain failures"
+bunx nifra-agent --backend pi --verify-after-turn check --max-repair-attempts 2
+bunx nifra-agent --backend replay --replay ./session-events.jsonl --json
+```
+
+When --verify-after-turn is enabled, a failed gate becomes a bounded repair turn: the host sends
+the failure diagnostics back to the agent, runs the gate again, and stops on success or after the
+configured attempt cap. Use --max-repair-attempts 0 for observe-only verification.
+
+For embedding, use `CodingAgentHost` or `CodingAgentRpcServer`. The host keeps
+live event queues bounded, filters verification subprocess environments, and
+requires explicit local RPC authorization. Install this package only when an
+application wants the agent product.
+
+RPC failures return actionable bounded error messages by default. For a trusted
+loopback debugger, set `exposeErrorStacks: true` (or pass
+`--expose-error-stacks` to `nifra-agent --rpc`) to include bounded exception
+stacks. This option is rejected for remote binding.
+
+`IsolatedExtensionWorker` is an opt-in process-backed crash-containment seam for
+extensions. It is not a hostile-code sandbox; use OS-level isolation before
+loading code you do not trust.
+
+`NifraBackend` is a small provider port for a future native backend. It accepts
+an injected model implementation and bounded tools without importing a provider
+SDK. `ReplayBackend` and `readReplayEvents` provide deterministic protocol
+replays for CI and Workbench regression tests.
+
+## At-least-once run dispatch
+
+`@nifrajs/coding-agent/orchestration` also exports an evidence-only run dispatch port and an adapter
+over `@nifrajs/jobs`. Dispatch is at-least-once: a lease may be delivered again after worker loss or
+lease expiry. Every logical node attempt receives a stable idempotency key derived from the plan,
+run, node, and attempt boundary. Effects must provide a matching proof before recovery can settle a
+completed boundary; an unproven post-effect failure is dead-lettered rather than guessed safe.
+
+`createMemoryRunDispatchStore()` is disposable single-process test infrastructure. It makes no
+durability, hosted-worker, retention, tenant-authorization, or exactly-once guarantee. Durable
+operated adapters implement the exported `RunDispatchStore` and `DurableDispatchAdapter` ports in
+their own data layer, including authorization, row policy, retention, reconciliation, and worker
+health. The public package does not store prompts, model output, tool arguments, or job payloads in
+its dispatch evidence.
+
+Legacy `FileSessionStore` files remain supported for explicit local compatibility. Use
+`nifra-agent --migrate-session <id> --migrate-from <legacy-dir> --migrate-to <evidence-dir>` to
+create a separately validated, evidence-only target. The source is left untouched and the command
+does not switch an active configuration pointer; see
+[`docs/agent-platform/protocol-and-session-migration.md`](../../docs/agent-platform/protocol-and-session-migration.md)
+for rollback and protocol compatibility details.
+
+For AI agents, see [`LLM.md`](./LLM.md) and the full corpus
+[`../../llms-full.txt`](../../llms-full.txt).

package/REGISTRY.md

@@ -0,0 +1,15 @@
+# Agent tool and workflow registry proposal
+
+The optional registry is intentionally a local seam in preview releases:
+
+1. An extension declares a stable tool or workflow id and a bounded capability list.
+2. The host validates and stages the extension graph.
+3. Authenticated clients query `workflow.list`, `ui.snapshot`, and session capabilities.
+4. Invocation stays in the local host, under the host's approval, workspace, and resource limits.
+
+A future public registry can distribute signed metadata and versioned manifests. It must not move
+credentials, tenant state, pricing, prompt IP, or operated execution into the public package.
+
+Agent Platform registry snapshots are canonical and digestable. Descriptor adapters expose identity,
+schema digest, capability tokens, and policy classes only. Invocation, credentials, signed
+distribution, retention, and organization policy remain host or caller responsibilities.

package/SECURITY.md

@@ -0,0 +1,32 @@
+# Nifra agent security model
+
+The preview is local-first and fail-closed:
+
+- RPC binds to loopback and requires a random bearer token; remote binding is opt-in.
+- RPC error stacks are omitted by default; `exposeErrorStacks` is an explicit loopback-only
+  diagnostics mode and is rejected when remote binding is enabled.
+- Project extensions are explicit, path-bounded, syntax-checked, capability-checked, and
+  transactionally reloaded.
+- Session evidence is bounded, redacted for secret-shaped keys, and written as append-only JSONL.
+- Tool approvals are host-owned and auditable. A workflow or subagent cannot raise its own limits.
+- Subagents can be restricted to project roots or a caller-provided isolated-worktree lease.
+- The isolated extension worker contains crashes but is not a hostile-code sandbox. Use OS-level
+  isolation before loading code that is not trusted.
+- No telemetry, hosted state, remote credentials, or model-provider SDK is required by the
+  framework packages.
+
+The capability manifest is a public declaration seam, not a sandbox by itself. Operators must pair
+it with OS policy, a sandbox, or an approval broker appropriate to the deployment.
+
+## Release regression coverage
+
+The security suite fails closed for the following named boundaries: strict plan and evidence parsing,
+capability and child-authority escalation, approval and handoff expiry, workspace and symlink escape,
+content-bearing evidence, unauthorised remote RPC binding, contradictory adapter capability claims,
+false hostile-code isolation claims, and credential-shaped values in logs. Stable failure codes are
+asserted at each boundary. Local process and replay deployment profiles explicitly report that they
+are not hostile-code sandboxes.
+
+Legacy session migration is a separate local operation. It validates source records, writes only
+structural evidence to a new target, rejects overlapping roots and existing targets, validates the
+committed file, and never rewrites the source. See the public migration guide for rollback.

package/dist/approvals.d.ts

@@ -0,0 +1,70 @@
+import { type AgentApprovalRequiredEvent, type AgentApprovalResolvedEvent, type DecisionCoordinate } from "@nifrajs/agent-protocol";
+export interface ApprovalRequest {
+    readonly id: string;
+    readonly sessionId: string;
+    readonly turnId?: string;
+    readonly action: string;
+    readonly capability: string;
+    readonly reason?: string;
+    /**
+     * Optional decision-boundary coordinate. When present, {@link ApprovalManager.resolveMatched}
+     * admits a decision only if it names this exact run, node, capability, request id, and vector, and
+     * arrives before expiry. Coordinate-less approvals keep their original untyped {@link resolve} path.
+     */
+    readonly coordinate?: DecisionCoordinate;
+    readonly createdAt: number;
+    readonly expiresAt: number;
+}
+/** Stable, content-free reasons a coordinate-matched resolution is refused. */
+export type ApprovalMatchRejection = "unknown_boundary" | "identity_mismatch" | "stale_vector" | "expired" | "illegal_transition";
+export type ApprovalMatchResult = {
+    readonly ok: true;
+    readonly decision: ApprovalDecision;
+} | {
+    readonly ok: false;
+    readonly code: ApprovalMatchRejection;
+};
+export interface ApprovalDecision {
+    readonly approvalId: string;
+    readonly approved: boolean;
+    readonly reason?: string;
+    readonly at: number;
+}
+export interface ApprovalManagerOptions {
+    readonly maxPending?: number;
+    readonly timeoutMs?: number;
+    readonly onRequired?: (request: ApprovalRequest) => void | PromiseLike<void>;
+    readonly onResolved?: (decision: ApprovalDecision) => void | PromiseLike<void>;
+}
+/**
+ * Small approval broker shared by RPC, Workbench, and workflow extensions.
+ *
+ * Approval state is deliberately bounded and expires closed (denied) by default. It is a policy
+ * seam, not a security boundary: filesystem/process isolation still belongs to the host or OS.
+ */
+export declare class ApprovalManager {
+    private readonly options;
+    private readonly pendingApprovals;
+    constructor(options?: ApprovalManagerOptions);
+    get pending(): readonly ApprovalRequest[];
+    /** Convert a streamed backend approval event into a resolvable pending request. */
+    observe(event: AgentApprovalRequiredEvent): Promise<ApprovalRequest | undefined>;
+    /** Publish a pending approval without waiting for its decision (useful for transports). */
+    offer(input: Omit<ApprovalRequest, "createdAt" | "expiresAt">): Promise<ApprovalRequest | undefined>;
+    /** Create a host-owned approval that can be awaited by a workflow or extension. */
+    request(input: Omit<ApprovalRequest, "createdAt" | "expiresAt">): Promise<boolean>;
+    /**
+     * Resolve an approval that was opened with a {@link DecisionCoordinate}, admitting the decision only
+     * when it matches the live boundary and is still fresh. Every failure is content-free and fails
+     * closed: an unknown id, a coordinate-less approval, a mismatched or superseded coordinate, or an
+     * expired boundary resumes no work. This adds a typed path alongside the untyped {@link resolve}; it
+     * never loosens it.
+     */
+    resolveMatched(coordinate: DecisionCoordinate, approved: boolean, now?: number): ApprovalMatchResult;
+    resolve(approvalId: string, approved: boolean, reason?: string): ApprovalDecision | undefined;
+    close(): void;
+    private create;
+}
+export declare function approvalRequestFromEvent(event: AgentApprovalRequiredEvent): ApprovalRequest;
+export declare function approvalResolvedEvent(sessionId: string, seq: number, decision: ApprovalDecision, turnId?: string): AgentApprovalResolvedEvent;
+//# sourceMappingURL=approvals.d.ts.map

package/dist/approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAG/B,KAAK,kBAAkB,EAExB,MAAM,yBAAyB,CAAA;AAEhC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAA;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,+EAA+E;AAC/E,MAAM,MAAM,sBAAsB,GAC9B,kBAAkB,GAClB,mBAAmB,GACnB,cAAc,GACd,SAAS,GACT,oBAAoB,CAAA;AAExB,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAA;CAAE,CAAA;AAEjE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;CAC/E;AAQD;;;;;GAKG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CACA;IACxB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqC;gBAE1D,OAAO,GAAE,sBAA2B;IAgBhD,IAAI,OAAO,IAAI,SAAS,eAAe,EAAE,CAExC;IAED,mFAAmF;IAC7E,OAAO,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAatF,2FAA2F;IACrF,KAAK,CACT,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,WAAW,CAAC,GACtD,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAIvC,mFAAmF;IAC7E,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAcxF;;;;;;OAMG;IACH,cAAc,CACZ,UAAU,EAAE,kBAAkB,EAC9B,QAAQ,EAAE,OAAO,EACjB,GAAG,GAAE,MAAmB,GACvB,mBAAmB;IAqBtB,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAgB7F,KAAK,IAAI,IAAI;YAKC,MAAM;CAsCrB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,0BAA0B,GAAG,eAAe,CAW3F;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,CAAC,EAAE,MAAM,GACd,0BAA0B,CAY5B"}

package/dist/approvals.js

@@ -0,0 +1,174 @@
+import { coordinateIsFresh, coordinatesMatch, nextApprovalState, } from "@nifrajs/agent-protocol";
+/**
+ * Small approval broker shared by RPC, Workbench, and workflow extensions.
+ *
+ * Approval state is deliberately bounded and expires closed (denied) by default. It is a policy
+ * seam, not a security boundary: filesystem/process isolation still belongs to the host or OS.
+ */
+export class ApprovalManager {
+    options;
+    pendingApprovals = new Map();
+    constructor(options = {}) {
+        this.options = {
+            ...options,
+            maxPending: options.maxPending ?? 32,
+            timeoutMs: options.timeoutMs ?? 5 * 60_000,
+        };
+        if (!Number.isSafeInteger(this.options.maxPending) || this.options.maxPending < 1)
+            throw new RangeError("approvals: maxPending must be positive");
+        if (!Number.isSafeInteger(this.options.timeoutMs) ||
+            this.options.timeoutMs < 1 ||
+            this.options.timeoutMs > 24 * 60 * 60_000)
+            throw new RangeError("approvals: timeoutMs must be between 1ms and 24h");
+    }
+    get pending() {
+        return Object.freeze([...this.pendingApprovals.values()].map(({ request }) => request));
+    }
+    /** Convert a streamed backend approval event into a resolvable pending request. */
+    async observe(event) {
+        if (this.pendingApprovals.has(event.approvalId))
+            return this.pendingApprovals.get(event.approvalId)?.request;
+        return this.create({
+            id: event.approvalId,
+            sessionId: event.sessionId,
+            turnId: event.turnId,
+            action: event.action,
+            capability: event.capability,
+            ...(event.reason === undefined ? {} : { reason: event.reason }),
+        });
+    }
+    /** Publish a pending approval without waiting for its decision (useful for transports). */
+    async offer(input) {
+        return this.create(input);
+    }
+    /** Create a host-owned approval that can be awaited by a workflow or extension. */
+    async request(input) {
+        const request = await this.offer(input);
+        if (request === undefined)
+            return false;
+        const pending = this.pendingApprovals.get(request.id);
+        if (pending === undefined)
+            return false;
+        return new Promise((resolve) => {
+            // Replace the resolver only for this host-owned request; observed backend requests are
+            // intentionally notification-only and are resolved through `resolve`.
+            const current = this.pendingApprovals.get(request.id);
+            if (current === undefined)
+                return resolve(false);
+            this.pendingApprovals.set(request.id, { ...current, resolve });
+        });
+    }
+    /**
+     * Resolve an approval that was opened with a {@link DecisionCoordinate}, admitting the decision only
+     * when it matches the live boundary and is still fresh. Every failure is content-free and fails
+     * closed: an unknown id, a coordinate-less approval, a mismatched or superseded coordinate, or an
+     * expired boundary resumes no work. This adds a typed path alongside the untyped {@link resolve}; it
+     * never loosens it.
+     */
+    resolveMatched(coordinate, approved, now = Date.now()) {
+        const pending = this.pendingApprovals.get(coordinate.requestId);
+        if (pending === undefined)
+            return { ok: false, code: "unknown_boundary" };
+        const bound = pending.request.coordinate;
+        if (bound === undefined)
+            return { ok: false, code: "identity_mismatch" };
+        if (!coordinatesMatch(bound, coordinate))
+            return {
+                ok: false,
+                code: bound.vector !== coordinate.vector ? "stale_vector" : "identity_mismatch",
+            };
+        if (!coordinateIsFresh(bound, now)) {
+            this.resolve(coordinate.requestId, false, "approval expired");
+            return { ok: false, code: "expired" };
+        }
+        if (nextApprovalState("pending", approved ? "approve" : "deny") === undefined)
+            return { ok: false, code: "illegal_transition" };
+        const decision = this.resolve(coordinate.requestId, approved);
+        if (decision === undefined)
+            return { ok: false, code: "unknown_boundary" };
+        return { ok: true, decision };
+    }
+    resolve(approvalId, approved, reason) {
+        const pending = this.pendingApprovals.get(approvalId);
+        if (pending === undefined)
+            return undefined;
+        clearTimeout(pending.timer);
+        this.pendingApprovals.delete(approvalId);
+        pending.resolve(approved === true);
+        const decision = {
+            approvalId,
+            approved: approved === true,
+            ...(reason === undefined ? {} : { reason: reason.slice(0, 512) }),
+            at: Date.now(),
+        };
+        void this.options.onResolved?.(decision);
+        return decision;
+    }
+    close() {
+        for (const approvalId of this.pendingApprovals.keys())
+            this.resolve(approvalId, false, "approval manager closed");
+    }
+    async create(input) {
+        if (this.pendingApprovals.size >= this.options.maxPending)
+            return undefined;
+        if (!/^[A-Za-z0-9._:-]{1,128}$/.test(input.id))
+            throw new TypeError("approvals: approval id is invalid");
+        if (!/^[A-Za-z0-9._:-]{1,128}$/.test(input.sessionId))
+            throw new TypeError("approvals: session id is invalid");
+        if (!input.action || input.action.length > 512)
+            throw new TypeError("approvals: action is empty or too long");
+        if (!input.capability || input.capability.length > 128)
+            throw new TypeError("approvals: capability is empty or too long");
+        const createdAt = Date.now();
+        const request = Object.freeze({
+            ...input,
+            ...(input.turnId === undefined ? {} : { turnId: input.turnId }),
+            ...(input.reason === undefined ? {} : { reason: input.reason.slice(0, 512) }),
+            ...(input.coordinate === undefined ? {} : { coordinate: input.coordinate }),
+            createdAt,
+            expiresAt: createdAt + this.options.timeoutMs,
+        });
+        let resolveApproval = (_approved) => { };
+        const timer = setTimeout(() => {
+            this.resolve(request.id, false, "approval timed out");
+        }, this.options.timeoutMs);
+        timer.unref?.();
+        const pending = {
+            request,
+            resolve: (approved) => resolveApproval(approved),
+            timer,
+        };
+        this.pendingApprovals.set(request.id, pending);
+        await this.options.onRequired?.(request);
+        // A backend-observed request is resolved through `resolve`; a host request swaps this closure
+        // from the promise below before returning to the workflow.
+        resolveApproval = (_approved) => { };
+        return request;
+    }
+}
+export function approvalRequestFromEvent(event) {
+    return Object.freeze({
+        id: event.approvalId,
+        sessionId: event.sessionId,
+        turnId: event.turnId,
+        action: event.action,
+        capability: event.capability,
+        ...(event.reason === undefined ? {} : { reason: event.reason }),
+        createdAt: event.at,
+        expiresAt: event.at + 5 * 60_000,
+    });
+}
+export function approvalResolvedEvent(sessionId, seq, decision, turnId) {
+    return Object.freeze({
+        version: 1,
+        sessionId,
+        seq,
+        at: decision.at,
+        type: "approval.resolved",
+        ...(turnId === undefined ? {} : { turnId }),
+        approvalId: decision.approvalId,
+        approved: decision.approved,
+        ...(decision.reason === undefined ? {} : { reason: decision.reason }),
+    });
+}
+//# sourceMappingURL=approvals.js.map

package/dist/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,iBAAiB,EACjB,gBAAgB,EAEhB,iBAAiB,GAClB,MAAM,yBAAyB,CAAA;AAmDhC;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IACT,OAAO,CACA;IACP,gBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAA;IAEtE,YAAY,UAAkC,EAAE;QAC9C,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,OAAO;YACV,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE;YACpC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,CAAC,GAAG,MAAM;SAC3C,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,CAAC;YAC/E,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAA;QAChE,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM;YAEzC,MAAM,IAAI,UAAU,CAAC,kDAAkD,CAAC,CAAA;IAC5E,CAAC;IAED,IAAI,OAAO;QACT,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IACzF,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,OAAO,CAAC,KAAiC;QAC7C,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YAC7C,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;QAC7D,OAAO,IAAI,CAAC,MAAM,CAAC;YACjB,EAAE,EAAE,KAAK,CAAC,UAAU;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAChE,CAAC,CAAA;IACJ,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,KAAK,CACT,KAAuD;QAEvD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,OAAO,CAAC,KAAuD;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACrD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACvC,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACtC,uFAAuF;YACvF,sEAAsE;YACtE,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACrD,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAA;YAChD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;QAChE,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CACZ,UAA8B,EAC9B,QAAiB,EACjB,MAAc,IAAI,CAAC,GAAG,EAAE;QAExB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAC/D,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAA;QACzE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAA;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAA;QACxE,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC;YACtC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,mBAAmB;aAChF,CAAA;QACH,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAA;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;QACvC,CAAC;QACD,IAAI,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS;YAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAA;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QAC7D,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAA;QAC1E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAC/B,CAAC;IAED,OAAO,CAAC,UAAkB,EAAE,QAAiB,EAAE,MAAe;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACrD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QAC3C,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC3B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACxC,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAA;QAClC,MAAM,QAAQ,GAAqB;YACjC,UAAU;YACV,QAAQ,EAAE,QAAQ,KAAK,IAAI;YAC3B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACjE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;SACf,CAAA;QACD,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAA;QACxC,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK;QACH,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE;YACnD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,yBAAyB,CAAC,CAAA;IAC9D,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAAuD;QAEvD,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,OAAO,SAAS,CAAA;QAC3E,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;QAC1D,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YACnD,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAA;QACzD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG;YAC5C,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;QAC/D,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;YACpD,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAA;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,OAAO,GAAoB,MAAM,CAAC,MAAM,CAAC;YAC7C,GAAG,KAAK;YACR,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YAC3E,SAAS;YACT,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS;SAC9C,CAAC,CAAA;QACF,IAAI,eAAe,GAAG,CAAC,SAAkB,EAAQ,EAAE,GAAE,CAAC,CAAA;QACtD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAA;QACvD,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CACzB;QAAC,KAA2C,CAAC,KAAK,EAAE,EAAE,CAAA;QACvD,MAAM,OAAO,GAAoB;YAC/B,OAAO;YACP,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC;YAChD,KAAK;SACN,CAAA;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QAC9C,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAA;QACxC,8FAA8F;QAC9F,2DAA2D;QAC3D,eAAe,GAAG,CAAC,SAAkB,EAAQ,EAAE,GAAE,CAAC,CAAA;QAClD,OAAO,OAAO,CAAA;IAChB,CAAC;CACF;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAiC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,KAAK,CAAC,UAAU;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/D,SAAS,EAAE,KAAK,CAAC,EAAE;QACnB,SAAS,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM;KACjC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,GAAW,EACX,QAA0B,EAC1B,MAAe;IAEf,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,CAAU;QACnB,SAAS;QACT,GAAG;QACH,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,mBAA4B;QAClC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;KACtE,CAAC,CAAA;AACJ,CAAC"}

package/dist/capabilities.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Small, backend-neutral capability manifest.
+ *
+ * The manifest is deliberately descriptive: an operator still decides which capabilities are
+ * trusted, and implementations remain free to enforce them with a sandbox, OS policy, or approval
+ * broker. Keeping this seam in the optional agent package avoids putting process/filesystem policy
+ * into Nifra's framework runtime.
+ */
+export declare const AGENT_CAPABILITY_MANIFEST_VERSION: 1;
+export type AgentCapability = "filesystem.read" | "filesystem.write" | "process.exec" | "network.request" | "credentials.read";
+export interface AgentCapabilityManifest {
+    readonly version: typeof AGENT_CAPABILITY_MANIFEST_VERSION;
+    readonly requested: readonly AgentCapability[];
+    readonly trusted: readonly AgentCapability[];
+    readonly reason?: string;
+}
+export declare function createCapabilityManifest(requested: readonly AgentCapability[], trusted?: readonly AgentCapability[], reason?: string): AgentCapabilityManifest;
+export declare function deniedCapabilities(manifest: AgentCapabilityManifest): readonly AgentCapability[];
+export declare function parseCapabilityManifest(value: unknown): AgentCapabilityManifest;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,EAAG,CAAU,CAAA;AAE3D,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,kBAAkB,GAClB,cAAc,GACd,iBAAiB,GACjB,kBAAkB,CAAA;AAEtB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,iCAAiC,CAAA;IAC1D,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAA;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAA;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,SAAS,eAAe,EAAE,EACrC,OAAO,GAAE,SAAS,eAAe,EAAO,EACxC,MAAM,CAAC,EAAE,MAAM,GACd,uBAAuB,CASzB;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,uBAAuB,GAAG,SAAS,eAAe,EAAE,CAGhG;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAe/E"}

package/dist/capabilities.js

@@ -0,0 +1,49 @@
+/**
+ * Small, backend-neutral capability manifest.
+ *
+ * The manifest is deliberately descriptive: an operator still decides which capabilities are
+ * trusted, and implementations remain free to enforce them with a sandbox, OS policy, or approval
+ * broker. Keeping this seam in the optional agent package avoids putting process/filesystem policy
+ * into Nifra's framework runtime.
+ */
+export const AGENT_CAPABILITY_MANIFEST_VERSION = 1;
+export function createCapabilityManifest(requested, trusted = [], reason) {
+    const unique = (values) => Object.freeze([...new Set(values)]);
+    return Object.freeze({
+        version: AGENT_CAPABILITY_MANIFEST_VERSION,
+        requested: unique(requested),
+        trusted: unique(trusted),
+        ...(reason === undefined ? {} : { reason: reason.slice(0, 512) }),
+    });
+}
+export function deniedCapabilities(manifest) {
+    const trusted = new Set(manifest.trusted);
+    return Object.freeze(manifest.requested.filter((capability) => !trusted.has(capability)));
+}
+export function parseCapabilityManifest(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError("capability manifest must be an object");
+    const record = value;
+    if (record.version !== AGENT_CAPABILITY_MANIFEST_VERSION)
+        throw new TypeError("unsupported capability manifest version");
+    const requested = parseCapabilities(record.requested, "requested");
+    const trusted = parseCapabilities(record.trusted, "trusted");
+    if (record.reason !== undefined && typeof record.reason !== "string")
+        throw new TypeError("capability manifest reason must be a string");
+    return createCapabilityManifest(requested, trusted, typeof record.reason === "string" ? record.reason : undefined);
+}
+function parseCapabilities(value, name) {
+    if (!Array.isArray(value))
+        throw new TypeError(`capability manifest ${name} must be an array`);
+    const allowed = new Set([
+        "filesystem.read",
+        "filesystem.write",
+        "process.exec",
+        "network.request",
+        "credentials.read",
+    ]);
+    if (value.some((item) => typeof item !== "string" || !allowed.has(item)))
+        throw new TypeError(`capability manifest ${name} contains an unknown capability`);
+    return value;
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAU,CAAA;AAgB3D,MAAM,UAAU,wBAAwB,CACtC,SAAqC,EACrC,UAAsC,EAAE,EACxC,MAAe;IAEf,MAAM,MAAM,GAAG,CAAC,MAAkC,EAA8B,EAAE,CAChF,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,iCAAiC;QAC1C,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;QAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;QACxB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;KAClE,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAiC;IAClE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;AAC3F,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,IAAI,MAAM,CAAC,OAAO,KAAK,iCAAiC;QACtD,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAA;IAChE,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IAClE,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAClE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAA;IACpE,OAAO,wBAAwB,CAC7B,SAAS,EACT,OAAO,EACP,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,IAAY;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,IAAI,mBAAmB,CAAC,CAAA;IAC9F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAkB;QACvC,iBAAiB;QACjB,kBAAkB;QAClB,cAAc;QACd,iBAAiB;QACjB,kBAAkB;KACnB,CAAC,CAAA;IACF,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAuB,CAAC,CAAC;QACzF,MAAM,IAAI,SAAS,CAAC,uBAAuB,IAAI,iCAAiC,CAAC,CAAA;IACnF,OAAO,KAA0B,CAAA;AACnC,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,24 @@
+#!/usr/bin/env bun
+export interface CliOptions {
+    readonly backend: string;
+    readonly cwd: string;
+    readonly once?: string;
+    readonly json: boolean;
+    readonly noSession: boolean;
+    readonly piCommand: string;
+    readonly replayFile?: string;
+    readonly sessionDir?: string;
+    readonly rpc: boolean;
+    readonly host: string;
+    readonly port: number;
+    readonly authToken?: string;
+    readonly exposeErrorStacks: boolean;
+    readonly sessionId?: string;
+    readonly migrateSession?: string;
+    readonly migrationSource?: string;
+    readonly migrationTarget?: string;
+    readonly verifyAfterTurn: readonly ("check" | "assure" | "test")[];
+    readonly maxRepairAttempts: number;
+}
+export declare function parseArgs(args: readonly string[]): CliOptions;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AA8CA,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAA;IAClE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CACnC;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CA2F7D"}