@origintrail-official/dkg-adapter-prime-agent 10.0.13

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018 OriginTrail
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,147 @@
+# `@origintrail-official/dkg-adapter-prime-agent`
+
+Collocates a **Prime Intellect Prime Agent** with a DKG V10 node, the way
+`adapter-hermes` collocates a Hermes agent.
+
+**Status: Stage 1 — transport.** The bridge, discovery, setup lifecycle and
+daemon plumbing are implemented and tested. Memory election hooks, the Python
+kernel skill and the Node UI panel are staged (see
+`agent-docs/adapters/prime-agent/IMPLEMENTATION-PLAN.md`).
+
+Design: [`agent-docs/adapters/prime-agent/DESIGN.md`](../../agent-docs/adapters/prime-agent/DESIGN.md) ·
+Transport decision: [`.ai/adr/0007`](../../.ai/adr/0007-prime-agent-adapter-transport.md) ·
+Risks: [`RISKS.md`](../../agent-docs/adapters/prime-agent/RISKS.md)
+
+## How it works
+
+Prime Agent has **no HTTP server** and its daemon socket protocol disclaims
+itself as *"not the final remote gateway protocol"*. What it does have is
+extensions: TypeScript modules `jiti`-imported **into the process that owns a
+running session**.
+
+So the adapter ships an extension that hosts a small loopback HTTP bridge
+speaking the contract the DKG daemon already speaks for Hermes:
+
+| Route | Purpose |
+| --- | --- |
+| `GET /health` | `{ ok: true, sessionId, pid }` — `ok === true` is required by the daemon's probe |
+| `POST /send` | injects via `pi.sendUserMessage`, returns `{ text, correlationId, sessionId }` |
+| `POST /stream` | SSE, `data: <json>\n\n` frames of `delta` then `final` |
+
+**`final` is terminal, and it is a contract.** The turn ends on that frame, not
+on socket EOF — the bridge may keep its connection open afterwards, and it does.
+Both the daemon proxy and the Node UI reader close on the frame; a client that
+waits for EOF will spin forever over an answer it has already rendered. The
+daemon also declares `Content-Type: text/event-stream; charset=utf-8` before the
+first byte, without which the browser misclassifies the body and fails with
+"The string did not match the expected pattern".
+
+All three require `x-dkg-bridge-token` and bind `127.0.0.1` only.
+
+Because the extension lives inside the session, a message from the Node UI lands
+in **the session the user is actually using** — that is the whole point, and it
+is what a spawned `--mode rpc` subprocess cannot do.
+
+## Per-session bridges
+
+Extensions load **per session**, and one worker hosts many concurrent sessions,
+so there is no single well-known endpoint. Each session publishes a descriptor:
+
+```
+~/.prime/agent/.dkg-adapter-prime-agent/sessions/<sessionId>.json
+{ "sessionId": "...", "bridgeUrl": "http://127.0.0.1:54123", "pid": 4242,
+  "startedAt": "...", "lastActiveAt": "..." }
+```
+
+written on `session_start` and removed on `session_shutdown`. Dead-pid
+descriptors are pruned twice: on every read by the daemon, and by each bridge
+at its own `session_start` — so a crashed worker converges without waiting for
+a daemon read.
+
+**Several live sessions is a normal, honest state**, not a cleanup failure:
+sessions belong to Prime Agent's daemon and are resumed across terminal
+restarts, so a restart legitimately leaves the resumed session alive next to a
+fresh one. Routing is therefore an **election**, not a uniqueness assumption:
+
+- `lastActiveAt` is re-stamped **per turn** (`agent_start` fires for
+  locally-typed and bridge-injected turns alike);
+- an unaddressed message routes to the **most recently active** session —
+  `lastActiveAt` falling back to `startedAt`, tiebroken by `startedAt` then
+  `sessionId` — so the operator's next turn settles which session wins;
+- an explicit `sessionId` always overrides the election, and a miss is an
+  error, never a fallback.
+
+Two details that are not incidental:
+
+- **Ephemeral ports (`listen(0)`) are mandatory.** On `/reload`, `/new`,
+  `/fork` and `/resume` the process survives and the extension is re-imported
+  with `moduleCache: false`, so the successor has no reference to the old
+  server. Nothing in the host closes extension-owned sockets, so a fixed port
+  would be held by an orphan until process exit.
+- **`/health` echoes its `sessionId`**, so the daemon can detect a descriptor
+  pointing at a port the OS has since recycled to another process.
+
+## Files it owns
+
+| Path | Owner | Note |
+| --- | --- | --- |
+| `~/.prime/agent/settings.json` | **Prime Agent** | we add exactly one entry to `extensions` |
+| `~/.prime/agent/settings.json.bak.<unix-ms>` | adapter | verbatim pre-change backup |
+| `~/.prime/agent/.dkg-adapter-prime-agent/setup-state.json` | adapter | state + `priorSettings` snapshot |
+| `~/.prime/agent/.dkg-adapter-prime-agent/dkg.json` | adapter | daemon URL, policy, and bridge token; mode `0600` |
+| `~/.prime/agent/.dkg-adapter-prime-agent/sessions/` | adapter | per-session bridge discovery |
+
+### Reversibility
+
+The write order is the contract, copied from `adapter-hermes` because it is the
+part that has to survive a SIGINT:
+
+1. `setup-state.json` with `priorSettings` — **before** any destructive write
+2. `settings.json.bak.<unix-ms>` — verbatim original bytes
+3. `settings.json` rewritten with our extension path
+
+`priorSettings` is **first-wins**: a re-run never overwrites the original truth.
+Restore is **surgical** — it removes exactly our entry, because unlike Hermes'
+scalar `memory.provider` this is an array the user may legitimately have edited;
+wholesale replacement would silently revert their work. Backup-rename is the
+fallback, and either path verifies the entry is really gone before reporting
+success.
+
+## Guards
+
+`allow_direct_publish` and `allow_context_graph_admin_tools` default to
+**false**, and `import_roots` defaults to empty. This is deliberately at least
+as strict as Hermes: Prime Agent executes model-authored Python in a persistent
+kernel with the user's own permissions and is explicitly **not a sandbox**, so a
+publish path must be opened by an operator, never inferred.
+
+The bridge verifies `x-dkg-bridge-token` with a **timing-safe** comparison, and
+returns `503` (not `401`) when no token has been provisioned at all — an
+unauthenticated bridge would let anything on loopback drive the agent.
+Setup sources that token from `DKG_API_TOKEN`, `DKG_AUTH_TOKEN`, or the selected
+DKG home's `auth.token`, then writes the private adapter config consumed by the
+extension.
+
+## Known limits (Stage 1)
+
+- Memory election hooks (`before_agent_start`, `turn_end`) are **not yet wired**
+  and the integration does not advertise primary-memory capability yet.
+- No Python kernel skill yet (Stage 3), so there is no model-facing `dkg` API.
+- The Node UI panel is live (Stage 5) but has **no session picker**: the node
+  routes to the most recently active live session unless a `sessionId` is
+  supplied.
+- One turn at a time per session: a concurrent `/send` gets `429`.
+- A UI message is sent as `deliverAs: "followUp"`. If a local Prime Agent turn
+  is already observed, the bridge returns `429`; the follow-up choice covers the
+  remaining race without interrupting local work.
+
+## Tests
+
+```bash
+pnpm --filter @origintrail-official/dkg-adapter-prime-agent test
+```
+
+`test/bridge-contract.test.ts` drives the bridge with a stub `pi` and **no Prime
+Agent running**, so it asserts our half of the wire independently of upstream —
+including the 401/503 auth split, the `ok === true` health shape, SSE frame
+format, and the 429 concurrency guard.

package/dist/PrimeAgentAdapterPlugin.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Daemon plugin registration.
+ *
+ * Mirrors HermesAdapterPlugin deliberately: the adapter package registers a
+ * package-local status route and a shutdown hook, and nothing else. The chat
+ * channel routes (`/api/prime-agent-channel/*`) are DAEMON-owned — the adapter
+ * does not serve them, exactly as adapter-hermes does not serve
+ * `/api/hermes-channel/*`. Keeping that boundary means the adapter never has to
+ * know about node config, auth tokens, or the chat memory manager.
+ */
+import type { DaemonPluginApi, PrimeAgentAdapterConfig } from './types.js';
+export declare class PrimeAgentAdapterPlugin {
+    #private;
+    constructor(config?: PrimeAgentAdapterConfig);
+    get config(): PrimeAgentAdapterConfig;
+    /** Idempotent: the daemon may load the entry more than once per process. */
+    register(api: DaemonPluginApi): void;
+}
+//# sourceMappingURL=PrimeAgentAdapterPlugin.d.ts.map

package/dist/PrimeAgentAdapterPlugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PrimeAgentAdapterPlugin.d.ts","sourceRoot":"","sources":["../src/PrimeAgentAdapterPlugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE3E,qBAAa,uBAAuB;;gBAItB,MAAM,GAAE,uBAA4B;IAIhD,IAAI,MAAM,IAAI,uBAAuB,CAEpC;IAED,4EAA4E;IAC5E,QAAQ,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI;CAmBrC"}

package/dist/PrimeAgentAdapterPlugin.js

@@ -0,0 +1,35 @@
+/**
+ * Daemon plugin registration.
+ *
+ * Mirrors HermesAdapterPlugin deliberately: the adapter package registers a
+ * package-local status route and a shutdown hook, and nothing else. The chat
+ * channel routes (`/api/prime-agent-channel/*`) are DAEMON-owned — the adapter
+ * does not serve them, exactly as adapter-hermes does not serve
+ * `/api/hermes-channel/*`. Keeping that boundary means the adapter never has to
+ * know about node config, auth tokens, or the chat memory manager.
+ */
+import { registerPrimeAgentRoutes } from './prime-agent-routes.js';
+export class PrimeAgentAdapterPlugin {
+    #config;
+    #registered = false;
+    constructor(config = {}) {
+        this.#config = config;
+    }
+    get config() {
+        return this.#config;
+    }
+    /** Idempotent: the daemon may load the entry more than once per process. */
+    register(api) {
+        if (this.#registered) {
+            api.logger?.debug?.('[dkg-adapter-prime-agent] already registered; skipping');
+            return;
+        }
+        this.#registered = true;
+        registerPrimeAgentRoutes(api);
+        api.registerHook('session_end', () => {
+            api.logger?.debug?.('[dkg-adapter-prime-agent] session_end');
+        }, { name: 'prime-agent-adapter-stop' });
+        api.logger?.info?.('[dkg-adapter-prime-agent] registered');
+    }
+}
+//# sourceMappingURL=PrimeAgentAdapterPlugin.js.map

package/dist/PrimeAgentAdapterPlugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PrimeAgentAdapterPlugin.js","sourceRoot":"","sources":["../src/PrimeAgentAdapterPlugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAGnE,MAAM,OAAO,uBAAuB;IACzB,OAAO,CAA0B;IAC1C,WAAW,GAAG,KAAK,CAAC;IAEpB,YAAY,SAAkC,EAAE;QAC9C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,4EAA4E;IAC5E,QAAQ,CAAC,GAAoB;QAC3B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,wDAAwD,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAE9B,GAAG,CAAC,YAAY,CACd,aAAa,EACb,GAAG,EAAE;YACH,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,uCAAuC,CAAC,CAAC;QAC/D,CAAC,EACD,EAAE,IAAI,EAAE,0BAA0B,EAAE,CACrC,CAAC;QAEF,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,sCAAsC,CAAC,CAAC;IAC7D,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Public surface of the Prime Agent adapter.
+ *
+ * Value exports are the daemon plugin plus every setup verb the CLI and the
+ * Node UI call. Type exports are the contract surface daemon-side code needs.
+ */
+export { PrimeAgentAdapterPlugin } from './PrimeAgentAdapterPlugin.js';
+export { registerPrimeAgentRoutes } from './prime-agent-routes.js';
+export { PRIME_AGENT_ADAPTER_VERSION } from './version.js';
+export { ADAPTER_CONFIG_FILENAME, ADAPTER_STATE_DIRNAME, DEFAULT_CONTEXT_GRAPH, DEFAULT_DAEMON_URL, DEFAULT_MEMORY_ASSERTION, DEFAULT_PUBLISH_GUARD, MANAGED_BY, SETUP_STATE_FILENAME, defaultExtensionPath, disconnect, disconnectPrimeAgentProfile, doctor, loadDkgAuthToken, planPrimeAgentSetup, readSettings, readSetupState, reconnect, resolveAgentDir, resolvePrimeAgentProfile, restorePrimeAgentProfile, runDisconnect, runDoctor, runPrimeAgentSetup, runReconnect, runSetup, runStatus, runUninstall, runVerify, setup, setupPrimeAgentProfile, status, uninstall, verify, verifyPrimeAgentProfile, } from './setup.js';
+export { isLoopbackBridgeUrl, isProcessAlive, isSafeSessionId, readLiveSessions, removeSessionDescriptor, selectSession, sessionDescriptorPath, writeSessionDescriptor, } from './session-registry.js';
+export type { PrimeAgentSetupOptions } from './setup.js';
+export type { DaemonPluginApi, PrimeAgentAdapterConfig, PrimeAgentChannelHealthResponse, PrimeAgentChannelMessage, PrimeAgentChannelSendPayload, PrimeAgentChannelSendResponse, PrimeAgentChannelStreamEvent, PrimeAgentLocalAgentIntegrationPayload, PrimeAgentMemoryMode, PrimeAgentPriorSettings, PrimeAgentProfileMetadata, PrimeAgentPublishGuardPolicy, PrimeAgentRestoreRequest, PrimeAgentRestoreResult, PrimeAgentRuntimeStatus, PrimeAgentSessionDescriptor, PrimeAgentSetupPlan, PrimeAgentSetupPlanAction, PrimeAgentSetupRequest, PrimeAgentSetupResult, PrimeAgentSetupState, PrimeAgentVerifyResult, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAE3D,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EACxB,qBAAqB,EACrB,UAAU,EACV,oBAAoB,EACpB,oBAAoB,EACpB,UAAU,EACV,2BAA2B,EAC3B,MAAM,EACN,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,EACZ,cAAc,EACd,SAAS,EACT,eAAe,EACf,wBAAwB,EACxB,wBAAwB,EACxB,aAAa,EACb,SAAS,EACT,kBAAkB,EAClB,YAAY,EACZ,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,SAAS,EACT,KAAK,EACL,sBAAsB,EACtB,MAAM,EACN,SAAS,EACT,MAAM,EACN,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACzD,YAAY,EACV,eAAe,EACf,uBAAuB,EACvB,+BAA+B,EAC/B,wBAAwB,EACxB,4BAA4B,EAC5B,6BAA6B,EAC7B,4BAA4B,EAC5B,sCAAsC,EACtC,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,4BAA4B,EAC5B,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,2BAA2B,EAC3B,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,12 @@
+/**
+ * Public surface of the Prime Agent adapter.
+ *
+ * Value exports are the daemon plugin plus every setup verb the CLI and the
+ * Node UI call. Type exports are the contract surface daemon-side code needs.
+ */
+export { PrimeAgentAdapterPlugin } from './PrimeAgentAdapterPlugin.js';
+export { registerPrimeAgentRoutes } from './prime-agent-routes.js';
+export { PRIME_AGENT_ADAPTER_VERSION } from './version.js';
+export { ADAPTER_CONFIG_FILENAME, ADAPTER_STATE_DIRNAME, DEFAULT_CONTEXT_GRAPH, DEFAULT_DAEMON_URL, DEFAULT_MEMORY_ASSERTION, DEFAULT_PUBLISH_GUARD, MANAGED_BY, SETUP_STATE_FILENAME, defaultExtensionPath, disconnect, disconnectPrimeAgentProfile, doctor, loadDkgAuthToken, planPrimeAgentSetup, readSettings, readSetupState, reconnect, resolveAgentDir, resolvePrimeAgentProfile, restorePrimeAgentProfile, runDisconnect, runDoctor, runPrimeAgentSetup, runReconnect, runSetup, runStatus, runUninstall, runVerify, setup, setupPrimeAgentProfile, status, uninstall, verify, verifyPrimeAgentProfile, } from './setup.js';
+export { isLoopbackBridgeUrl, isProcessAlive, isSafeSessionId, readLiveSessions, removeSessionDescriptor, selectSession, sessionDescriptorPath, writeSessionDescriptor, } from './session-registry.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAE3D,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EACxB,qBAAqB,EACrB,UAAU,EACV,oBAAoB,EACpB,oBAAoB,EACpB,UAAU,EACV,2BAA2B,EAC3B,MAAM,EACN,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,EACZ,cAAc,EACd,SAAS,EACT,eAAe,EACf,wBAAwB,EACxB,wBAAwB,EACxB,aAAa,EACb,SAAS,EACT,kBAAkB,EAClB,YAAY,EACZ,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,SAAS,EACT,KAAK,EACL,sBAAsB,EACtB,MAAM,EACN,SAAS,EACT,MAAM,EACN,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC"}

package/dist/prime-agent-routes.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Package-local routes. Exactly one, matching adapter-hermes' 18-line
+ * `hermes-routes.ts`: a status probe so an operator can confirm the adapter
+ * loaded inside the daemon. Everything user-facing lives on daemon-owned
+ * routes.
+ */
+import type { DaemonPluginApi } from './types.js';
+export declare function registerPrimeAgentRoutes(api: DaemonPluginApi): void;
+//# sourceMappingURL=prime-agent-routes.d.ts.map

package/dist/prime-agent-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prime-agent-routes.d.ts","sourceRoot":"","sources":["../src/prime-agent-routes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAgBnE"}

package/dist/prime-agent-routes.js

@@ -0,0 +1,25 @@
+/**
+ * Package-local routes. Exactly one, matching adapter-hermes' 18-line
+ * `hermes-routes.ts`: a status probe so an operator can confirm the adapter
+ * loaded inside the daemon. Everything user-facing lives on daemon-owned
+ * routes.
+ */
+import { PRIME_AGENT_ADAPTER_VERSION } from './version.js';
+export function registerPrimeAgentRoutes(api) {
+    api.registerHttpRoute({
+        method: 'GET',
+        path: '/api/prime-agent/status',
+        handler: (_req, res) => {
+            const response = res;
+            const body = JSON.stringify({
+                adapter: 'prime-agent',
+                framework: 'prime-intellect-prime-agent',
+                status: 'connected',
+                version: PRIME_AGENT_ADAPTER_VERSION,
+            });
+            response.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
+            response.end(body);
+        },
+    });
+}
+//# sourceMappingURL=prime-agent-routes.js.map

package/dist/prime-agent-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prime-agent-routes.js","sourceRoot":"","sources":["../src/prime-agent-routes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAE3D,MAAM,UAAU,wBAAwB,CAAC,GAAoB;IAC3D,GAAG,CAAC,iBAAiB,CAAC;QACpB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,CAAC,IAAa,EAAE,GAAY,EAAE,EAAE;YACvC,MAAM,QAAQ,GAAG,GAA8F,CAAC;YAChH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC1B,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,6BAA6B;gBACxC,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,2BAA2B;aACrC,CAAC,CAAC;YACH,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC/E,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/session-registry.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Bridge discovery.
+ *
+ * Prime Agent loads extensions per session, into the worker process that owns
+ * that session, so each live session binds its own loopback port. There is no
+ * single well-known endpoint to point the daemon at. The extension therefore
+ * publishes a descriptor file per session and removes it on shutdown; the
+ * daemon reads the directory and picks a live bridge.
+ *
+ * The staleness problem is real: a crashed worker never removes its file, and
+ * an OS may later hand the same port to an unrelated process. Two defences:
+ *  1. `pid` is recorded and checked with signal 0 before a descriptor is used;
+ *  2. `/health` echoes its `sessionId`, so the daemon can detect a descriptor
+ *     that points at the wrong process even when the pid happens to be alive.
+ */
+import type { PrimeAgentSessionDescriptor } from './types.js';
+export declare function isSafeSessionId(sessionId: string): boolean;
+export declare function sessionDescriptorPath(sessionsDir: string, sessionId: string): string;
+/** Called by the extension when its bridge is listening. */
+export declare function writeSessionDescriptor(sessionsDir: string, descriptor: PrimeAgentSessionDescriptor): string;
+/** Called by the extension on session shutdown. Never throws. */
+export declare function removeSessionDescriptor(sessionsDir: string, sessionId: string): void;
+export declare function isProcessAlive(pid: number): boolean;
+/**
+ * Loopback-only, mirroring the daemon's own rule for Hermes bridge targets. A
+ * descriptor is data written by another process; treat it as untrusted input.
+ */
+export declare function isLoopbackBridgeUrl(value: string | undefined): boolean;
+/**
+ * Every descriptor currently on disk whose owning process is still alive.
+ * Stale files are pruned as a side effect so the directory cannot grow
+ * unbounded across crashes.
+ *
+ * Ordered most recently ACTIVE first, not most recently started: Prime Agent's
+ * daemon resumes sessions across terminal restarts, so a resumed session's
+ * descriptor can be newer than the fresh one the operator is actually using.
+ * Routing follows the session whose `lastActiveAt` moved last — that stamp is
+ * written per turn, so the operator's next turn settles the election.
+ */
+export declare function readLiveSessions(sessionsDir: string, opts?: {
+    prune?: boolean;
+}): PrimeAgentSessionDescriptor[];
+/**
+ * Resolve which session a request should go to.
+ * - explicit id wins, and a miss is an error rather than a silent fallback;
+ * - exactly one live session is unambiguous;
+ * - several live sessions with no id selected is ambiguous by construction, so
+ *   return the most recently active one but report it, letting the caller
+ *   surface a choice.
+ */
+export declare function selectSession(sessions: PrimeAgentSessionDescriptor[], requestedSessionId?: string): {
+    session?: PrimeAgentSessionDescriptor;
+    ambiguous: boolean;
+    error?: string;
+};
+//# sourceMappingURL=session-registry.d.ts.map

package/dist/session-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-registry.d.ts","sourceRoot":"","sources":["../src/session-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAU9D,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAKpF;AAED,4DAA4D;AAC5D,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,2BAA2B,GACtC,MAAM,CAmBR;AAED,iEAAiE;AACjE,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAMpF;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUnD;AAkCD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CActE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7B,2BAA2B,EAAE,CA2C/B;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,2BAA2B,EAAE,EACvC,kBAAkB,CAAC,EAAE,MAAM,GAC1B;IAAE,OAAO,CAAC,EAAE,2BAA2B,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAY/E"}