@openape/apes 1.28.13 → 1.29.0

package/dist/index.d.ts

@@ -1,163 +1,6 @@
-import { OpenApeGrantRequest, ScopeRiskLevel, OpenApeCliAuthorizationDetail, OpenApeExecutionContext } from '@openape/core';
-
-interface ShapesAdapter {
-    schema: string;
-    cli: {
-        id: string;
-        executable: string;
-        audience?: string;
-        version?: string;
-    };
-    operations: ShapesOperation[];
-}
-interface ShapesOperation {
-    id: string;
-    command: string[];
-    /**
-     * Positional argument names. Entries prefixed with `=` are literal matchers:
-     * the corresponding argv token must equal the suffix (not bound as a variable).
-     * Enables interleaved-literal command shapes like
-     * `iurio project <id> workspace <id> task <id> archive`.
-     */
-    positionals?: string[];
-    required_options?: string[];
-    display: string;
-    action: string;
-    risk: ScopeRiskLevel;
-    resource_chain: string[];
-    exact_command?: boolean;
-}
-interface LoadedAdapter {
-    adapter: ShapesAdapter;
-    source: string;
-    digest: string;
-    /**
-     * True when this adapter was synthesized in-memory for a CLI that has no
-     * registered shape. Synthetic adapters bypass `resolveCommand()` and are
-     * fed into the grant pipeline via `buildGenericResolved()` directly.
-     * See `shapes/generic.ts`.
-     */
-    synthetic?: boolean;
-}
-interface ResolvedCommand {
-    adapter: ShapesAdapter;
-    source: string;
-    digest: string;
-    executable: string;
-    commandArgv: string[];
-    bindings: Record<string, string>;
-    detail: OpenApeCliAuthorizationDetail;
-    executionContext: OpenApeExecutionContext;
-    permission: string;
-}
-interface ResolvedCapability {
-    adapter: ShapesAdapter;
-    source: string;
-    digest: string;
-    executable: string;
-    details: OpenApeCliAuthorizationDetail[];
-    executionContext: OpenApeExecutionContext;
-    permissions: string[];
-    summary: string;
-}
-interface GrantRequestOptions {
-    requester: string;
-    target_host: string;
-    grant_type: 'once' | 'timed' | 'always';
-    reason?: string;
-    run_as?: string;
-}
-interface BuiltGrantRequest {
-    request: OpenApeGrantRequest;
-}
-interface RegistryEntry {
-    id: string;
-    name: string;
-    description: string;
-    category: string;
-    tags: string[];
-    author: string;
-    executable: string;
-    min_shapes_version: string;
-    digest: string;
-    download_url: string;
-}
-interface RegistryIndex {
-    version: number;
-    generated_at: string;
-    adapters: RegistryEntry[];
-}
-interface AdapterMeta {
-    id: string;
-    name: string;
-    description: string;
-    author: string;
-    category: string;
-    tags: string[];
-    executable: string;
-    risk_summary?: string;
-    homepage?: string;
-    min_shapes_version: string;
-}
-
-declare function resolveAdapterPath(cliId: string, explicitPath?: string): string;
-declare function loadAdapter(cliId: string, explicitPath?: string): LoadedAdapter;
-/** Try to load an adapter locally, return null instead of throwing when not found. */
-declare function tryLoadAdapter(cliId: string, explicitPath?: string): LoadedAdapter | null;
-
-/**
- * Append a single entry to the audit log at ~/.config/apes/audit.jsonl.
- * Failures are swallowed — the audit log should never break the actual flow.
- */
-declare function appendAuditLog(entry: {
-    action: string;
-    timestamp?: number;
-} & Record<string, unknown>): void;
-
-/** A parsed shell command string with the executable and its argv extracted. */
-interface ParsedShellCommand {
-    /** The program to run (first token, e.g. "rm") */
-    executable: string;
-    /** Remaining tokens after the executable (e.g. ["-f", "/tmp/foo.txt"]) */
-    argv: string[];
-    /**
-     * true if the command contains compound operators (&&, ||, ;, |),
-     * subshells ($(...)), or backticks. These cannot be safely handled
-     * by the adapter mode and must fall back to the generic shell grant flow.
-     */
-    isCompound: boolean;
-    /** The original command string for display/logging */
-    raw: string;
-}
-/**
- * Parse a shell command string like `rm /tmp/foo.txt` or `git commit -m "hello"` into
- * its executable and argv. Uses `shell-quote` to handle quoting correctly.
- *
- * Returns null for empty/whitespace-only input.
- */
-declare function parseShellCommand(raw: string): ParsedShellCommand | null;
-/**
- * Extract the command string from an `apes run --shell -- bash -c "…"` argv.
- * Returns null if the argv does not follow that shape.
- */
-declare function extractShellCommandString(command: string[]): string | null;
-/**
- * Load an adapter for the given CLI id. If the adapter is not installed locally,
- * try to fetch it from the shapes registry and auto-install it.
- *
- * Returns null when no adapter exists in either location, or when any step fails.
- * Failures are logged but never thrown — callers should fall back to the generic flow.
- */
-declare function loadOrInstallAdapter(cliId: string): Promise<LoadedAdapter | null>;
-
-declare function resolveCapabilityRequest(loaded: LoadedAdapter, params: {
-    resources: string[];
-    selectors?: string[];
-    actions: string[];
-}): ResolvedCapability;
-
-declare function extractWrappedCommand(args: string[]): string[];
-declare function extractOption(args: string[], name: string): string | undefined;
+import { ResolvedCommand } from '@openape/shapes';
+export { AdapterMeta, BuiltGrantRequest, GrantRequestOptions, LoadedAdapter, RegistryEntry, RegistryIndex, ResolvedCapability, ResolvedCommand, ShapesAdapter, ShapesOperation, appendAuditLog, buildExactCommandGrantRequest, buildStructuredCliGrantRequest, extractShellCommandString, fetchRegistry, findAdapter, findConflictingAdapters, getInstalledDigest, installAdapter, isInstalled, loadAdapter, loadOrInstallAdapter, parseShellCommand, removeAdapter, resolveAdapterPath, resolveCapabilityRequest, resolveCommand, searchAdapters, tryLoadAdapter } from '@openape/shapes';
+export { ApeShellResult, ChatMessage, RpcSessionMap, RunOptions, RunResult, RunStreamHandlers, RuntimeConfig, TOOLS, ToolDefinition, TraceEntry, runApeShell, runLoop, taskTools } from '@openape/agent-runtime';
 
 interface SimilarGrantsInfo {
     similar_grants: Array<{
@@ -201,41 +44,8 @@ declare function fetchGrantToken(idp: string, grantId: string): Promise<string>;
 declare function verifyAndExecute(token: string, resolved: ResolvedCommand, grantId?: string): Promise<void>;
 declare function findExistingGrant(resolved: ResolvedCommand, idp: string): Promise<string | null>;
 
-declare function resolveCommand(loaded: LoadedAdapter, fullArgv: string[]): Promise<ResolvedCommand>;
-
-declare function buildExactCommandGrantRequest(command: string[], options: GrantRequestOptions & {
-    audience: string;
-}): Promise<BuiltGrantRequest>;
-declare function buildStructuredCliGrantRequest(resolved: ResolvedCommand | ResolvedCapability, options: GrantRequestOptions): Promise<BuiltGrantRequest>;
-
-declare function fetchRegistry(forceRefresh?: boolean): Promise<RegistryIndex>;
-declare function searchAdapters(index: RegistryIndex, query: string): RegistryEntry[];
-/**
- * Look up a registry entry by its id or its executable field. This lets callers
- * pass either the registry id ("o365") or the binary name ("o365-cli"); most
- * adapters have id === executable, but the two can diverge.
- */
-declare function findAdapter(index: RegistryIndex, idOrExecutable: string): RegistryEntry | undefined;
-
-interface InstallResult {
-    id: string;
-    path: string;
-    digest: string;
-    updated: boolean;
-}
-declare function installAdapter(entry: RegistryEntry, options?: {
-    local?: boolean;
-}): Promise<InstallResult>;
-declare function getInstalledDigest(id: string, local: boolean): string | null;
-declare function isInstalled(id: string, local: boolean): boolean;
-declare function removeAdapter(id: string, local: boolean): boolean;
-interface ConflictingAdapter {
-    file: string;
-    path: string;
-    adapterId: string;
-    executable: string;
-}
-declare function findConflictingAdapters(executable: string, excludeId: string): ConflictingAdapter[];
+declare function extractWrappedCommand(args: string[]): string[];
+declare function extractOption(args: string[], name: string): string | undefined;
 
 interface AuthData {
     idp: string;
@@ -348,114 +158,4 @@ declare class CliExit extends Error {
     constructor(exitCode?: number);
 }
 
-interface ToolDefinition {
-    name: string;
-    description: string;
-    parameters: Record<string, unknown>;
-    execute: (args: unknown) => Promise<unknown>;
-}
-declare const TOOLS: Record<string, ToolDefinition>;
-/**
- * Resolve a task spec's tool name list to ToolDefinitions. Throws on
- * unknown names — callers must surface that as a run-failure with a
- * clear "unknown tool: foo" final_message so the owner can see what
- * went wrong in the SP UI.
- */
-declare function taskTools(names: string[]): ToolDefinition[];
-
-interface ChatMessage {
-    role: 'system' | 'user' | 'assistant' | 'tool';
-    content: string | null;
-    tool_calls?: Array<{
-        id: string;
-        type: 'function';
-        function: {
-            name: string;
-            arguments: string;
-        };
-    }>;
-    tool_call_id?: string;
-    name?: string;
-}
-interface RuntimeConfig {
-    apiBase: string;
-    apiKey: string;
-    model: string;
-}
-interface TraceEntry {
-    step: number;
-    type: 'assistant' | 'tool_call' | 'tool_result' | 'tool_error';
-    preview: string;
-    tool?: string;
-}
-interface RunResult {
-    status: 'ok' | 'error';
-    finalMessage: string | null;
-    stepCount: number;
-    trace: TraceEntry[];
-}
-interface RunStreamHandlers {
-    onTextDelta?: (delta: string) => void;
-    onToolCall?: (call: {
-        name: string;
-        args: unknown;
-    }) => void;
-    onToolResult?: (result: {
-        name: string;
-        result: unknown;
-    }) => void;
-    onToolError?: (err: {
-        name: string;
-        error: string;
-    }) => void;
-    onDone?: (result: RunResult) => void;
-}
-interface RunOptions {
-    config: RuntimeConfig;
-    systemPrompt: string;
-    userMessage: string;
-    tools: ToolDefinition[];
-    maxSteps: number;
-    history?: ChatMessage[];
-    handlers?: RunStreamHandlers;
-    fetchImpl?: typeof fetch;
-    /**
-     * Send `stream: true` to the LiteLLM proxy and aggregate the SSE
-     * chunks locally into a single non-stream response. Workaround for
-     * LiteLLM's chatgpt-OAuth provider whose non-stream `/v1/chat/
-     * completions` returns an empty body (the chatgpt upstream only
-     * emits content via the responses-API streaming path; the bridge
-     * back to chat/completions fails to aggregate). Streaming + local
-     * aggregation produces a correct response with every provider
-     * LiteLLM ships, so this flag is safe to enable globally — it
-     * defaults off only to keep existing JSON-fixture tests intact.
-     */
-    streamAggregate?: boolean;
-}
-declare function runLoop(opts: RunOptions): Promise<RunResult>;
-interface RpcSession {
-    messages: ChatMessage[];
-    systemPrompt: string;
-    tools: ToolDefinition[];
-    maxSteps: number;
-    lastTouched: number;
-}
-declare class RpcSessionMap {
-    private sessions;
-    get(id: string): RpcSession | undefined;
-    put(id: string, s: RpcSession): void;
-    evictStale(): void;
-    size(): number;
-}
-
-interface ApeShellResult {
-    stdout: string;
-    stderr: string;
-    exit_code: number;
-    timed_out?: boolean;
-    error?: string;
-    hint?: string;
-}
-declare function runApeShell(cmd: string, timeoutMs?: number): Promise<ApeShellResult>;
-
-export { type AdapterMeta, type ApeShellResult, type ApesConfig, ApiError, type AuthData, type BuiltGrantRequest, type ChatMessage, CliError, CliExit, type GrantRequestOptions, type LoadedAdapter, type RegistryEntry, type RegistryIndex, type ResolvedCapability, type ResolvedCommand, RpcSessionMap, type RunOptions, type RunResult, type RunStreamHandlers, type RuntimeConfig, type ShapesAdapter, type ShapesOperation, TOOLS, type ToolDefinition, type TraceEntry, apiFetch, appendAuditLog, buildExactCommandGrantRequest, buildStructuredCliGrantRequest, clearAuth, createShapesGrant, discoverEndpoints, extractOption, extractShellCommandString, extractWrappedCommand, fetchGrantToken, fetchRegistry, findAdapter, findConflictingAdapters, findExistingGrant, getAuthToken, getIdpUrl, getInstalledDigest, getRequesterIdentity, installAdapter, isInstalled, loadAdapter, loadAuth, loadConfig, loadOrInstallAdapter, parseDuration, parseShellCommand, removeAdapter, resolveAdapterPath, resolveCapabilityRequest, resolveCommand, runApeShell, runLoop, saveAuth, saveConfig, searchAdapters, taskTools, tryLoadAdapter, verifyAndExecute, waitForGrantStatus };
+export { type ApesConfig, ApiError, type AuthData, CliError, CliExit, apiFetch, clearAuth, createShapesGrant, discoverEndpoints, extractOption, extractWrappedCommand, fetchGrantToken, findExistingGrant, getAuthToken, getIdpUrl, getRequesterIdentity, loadAuth, loadConfig, parseDuration, saveAuth, saveConfig, verifyAndExecute, waitForGrantStatus };

package/dist/index.js

@@ -2,41 +2,17 @@
 import {
   CliError,
   CliExit,
-  RpcSessionMap,
-  TOOLS,
-  parseDuration,
-  runApeShell,
-  runLoop,
-  taskTools
-} from "./chunk-ZEUSCNCH.js";
+  parseDuration
+} from "./chunk-QMMRZPD2.js";
 import {
-  appendAuditLog,
-  buildExactCommandGrantRequest,
-  buildStructuredCliGrantRequest,
   createShapesGrant,
   extractOption,
-  extractShellCommandString,
   extractWrappedCommand,
   fetchGrantToken,
-  fetchRegistry,
-  findAdapter,
-  findConflictingAdapters,
   findExistingGrant,
-  getInstalledDigest,
-  installAdapter,
-  isInstalled,
-  loadAdapter,
-  loadOrInstallAdapter,
-  parseShellCommand,
-  removeAdapter,
-  resolveAdapterPath,
-  resolveCapabilityRequest,
-  resolveCommand,
-  searchAdapters,
-  tryLoadAdapter,
   verifyAndExecute,
   waitForGrantStatus
-} from "./chunk-PEA2RDWK.js";
+} from "./chunk-BA2V3BBO.js";
 import {
   ApiError,
   apiFetch,
@@ -52,6 +28,30 @@ import {
   saveAuth,
   saveConfig
 } from "./chunk-OBF7IMQ2.js";
+
+// src/index.ts
+import {
+  appendAuditLog,
+  buildExactCommandGrantRequest,
+  buildStructuredCliGrantRequest,
+  extractShellCommandString,
+  fetchRegistry,
+  findAdapter,
+  findConflictingAdapters,
+  getInstalledDigest,
+  installAdapter,
+  isInstalled,
+  loadAdapter,
+  loadOrInstallAdapter,
+  parseShellCommand,
+  removeAdapter,
+  resolveAdapterPath,
+  resolveCapabilityRequest,
+  resolveCommand,
+  searchAdapters,
+  tryLoadAdapter
+} from "@openape/shapes";
+import { runLoop, RpcSessionMap, taskTools, TOOLS, runApeShell } from "@openape/agent-runtime";
 export {
   ApiError,
   CliError,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// Pure shapes library — re-exported from @openape/shapes\nexport {\n  appendAuditLog,\n  buildExactCommandGrantRequest,\n  buildStructuredCliGrantRequest,\n  extractShellCommandString,\n  fetchRegistry,\n  findAdapter,\n  findConflictingAdapters,\n  getInstalledDigest,\n  installAdapter,\n  isInstalled,\n  loadAdapter,\n  loadOrInstallAdapter,\n  parseShellCommand,\n  removeAdapter,\n  resolveAdapterPath,\n  resolveCapabilityRequest,\n  resolveCommand,\n  searchAdapters,\n  tryLoadAdapter,\n} from '@openape/shapes'\n\nexport type {\n  AdapterMeta,\n  BuiltGrantRequest,\n  GrantRequestOptions,\n  LoadedAdapter,\n  RegistryEntry,\n  RegistryIndex,\n  ResolvedCapability,\n  ResolvedCommand,\n  ShapesAdapter,\n  ShapesOperation,\n} from '@openape/shapes'\n\n// Grant-orchestration + CLI glue — stayed in apes\nexport { createShapesGrant, fetchGrantToken, findExistingGrant, verifyAndExecute, waitForGrantStatus } from './shapes/grants.js'\nexport { extractOption, extractWrappedCommand } from './shapes/commands/explain.js'\n\n// Apes-specific exports\nexport { loadAuth, saveAuth, clearAuth, loadConfig, saveConfig, getIdpUrl, getAuthToken, getRequesterIdentity } from './config'\nexport type { AuthData, ApesConfig } from './config'\nexport { apiFetch, discoverEndpoints, ApiError } from './http'\nexport { parseDuration } from './duration'\nexport { CliError, CliExit } from './errors'\n\n// Agent-runtime: callable in-process from the chat-bridge so it doesn't\n// need to spawn `apes agents serve --rpc` per turn. Same loop the\n// stdio-RPC server runs internally — see commands/agents/serve.ts.\nexport { runLoop, RpcSessionMap, taskTools, TOOLS, runApeShell } from '@openape/agent-runtime'\nexport type {\n  ChatMessage,\n  RunOptions,\n  RunResult,\n  RuntimeConfig,\n  RunStreamHandlers,\n  TraceEntry,\n  ToolDefinition,\n  ApeShellResult,\n} from '@openape/agent-runtime'\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA6BP,SAAS,SAAS,eAAe,WAAW,OAAO,mBAAmB;","names":[]}

package/dist/{orchestrator-REICEX3F.js → orchestrator-P7QFDBBK.js}

@@ -3,18 +3,20 @@ import {
   checkSudoRejection,
   isApesSelfDispatch,
   notifyGrantPending
-} from "./chunk-3COOEDPF.js";
+} from "./chunk-RVAXRDC2.js";
 import {
   appendAuditLog,
+  loadOrInstallAdapter,
+  parseShellCommand,
+  resolveCommand
+} from "./chunk-JXS3KLJ5.js";
+import {
   createShapesGrant,
   fetchGrantToken,
   findExistingGrant,
-  loadOrInstallAdapter,
-  parseShellCommand,
-  resolveCommand,
   verifyAndConsume,
   waitForGrantStatus
-} from "./chunk-PEA2RDWK.js";
+} from "./chunk-BA2V3BBO.js";
 import {
   apiFetch,
   getGrantsEndpoint
@@ -777,4 +779,4 @@ async function runInteractiveShell() {
 export {
   runInteractiveShell
 };
-//# sourceMappingURL=orchestrator-REICEX3F.js.map
+//# sourceMappingURL=orchestrator-P7QFDBBK.js.map