@oscharko-dev/keiko-server 0.2.8 → 0.2.9

package/dist/chat-handlers.d.ts

@@ -1,4 +1,4 @@
-import type { ConversationDocumentContextWire } from "@oscharko-dev/keiko-contracts";
+import { type ConversationDocumentContextWire, type DiscussionMode } from "@oscharko-dev/keiko-contracts";
 import type { ConversationMemoryActionWire, ConversationMemoryResultWire } from "@oscharko-dev/keiko-contracts/bff-wire";
 import { type Chat, type ChatMessage } from "./store/index.js";
 import { type ConversationAttachment } from "./conversation-validation.js";
@@ -26,12 +26,14 @@ export interface SendDesktopChatRequest {
     readonly documentContext: readonly ConversationDocumentContextWire[];
     readonly attachments: readonly ConversationAttachment[];
     readonly memory: ParsedConversationMemoryRequest | undefined;
+    readonly discussionMode: DiscussionMode | undefined;
 }
-interface ParsedConversationMemoryRequest {
+export interface ParsedConversationMemoryRequest {
     readonly enabled: boolean;
     readonly budgetTokens?: number;
     readonly context: Record<string, unknown>;
 }
+export declare function parseMemoryRequest(value: unknown): ParsedConversationMemoryRequest | RouteResult | undefined;
 export declare function createUserMessage(deps: UiHandlerDeps, request: SendDesktopChatRequest): ChatMessage;
 export declare function createAssistantMessage(deps: UiHandlerDeps, request: SendDesktopChatRequest, content: string, modelId: string): ChatMessage;
 export declare function emptyMemoryResult(enabled: boolean): ConversationMemoryResultWire;
@@ -60,5 +62,19 @@ export interface PreparedDesktopChatSend {
 }
 export declare function prepareDesktopChatSend(ctx: RouteContext, deps: UiHandlerDeps): Promise<PreparedDesktopChatSend | RouteResult>;
 export declare function handleSendDesktopChat(ctx: RouteContext, deps: UiHandlerDeps): Promise<RouteResult>;
+type VoiceTurnMessageRole = "user" | "assistant";
+interface VoiceTurnAppendMessage {
+    readonly role: VoiceTurnMessageRole;
+    readonly content: string;
+    readonly timestamp?: number | undefined;
+}
+export interface VoiceTurnAppendRequest {
+    readonly chatId: string;
+    readonly projectPath: string;
+    readonly messages: readonly VoiceTurnAppendMessage[];
+    readonly memory: ParsedConversationMemoryRequest | undefined;
+}
+export declare function buildVoiceTurnMemoryResult(deps: UiHandlerDeps, request: VoiceTurnAppendRequest, chat: Chat, memoryContext: ConversationMemoryRuntimeContext | undefined): Promise<ConversationMemoryResultWire | undefined>;
+export declare function handleAppendDesktopVoiceTurn(ctx: RouteContext, deps: UiHandlerDeps): Promise<RouteResult>;
 export {};
 //# sourceMappingURL=chat-handlers.d.ts.map

package/dist/chat-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chat-handlers.d.ts","sourceRoot":"","sources":["../src/chat-handlers.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,KAAK,EACV,4BAA4B,EAC5B,4BAA4B,EAC7B,MAAM,wCAAwC,CAAC;AAuBhD,OAAO,EAGL,KAAK,IAAI,EACT,KAAK,WAAW,EAEjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAS7D,OAAO,EAGL,KAAK,gCAAgC,EACtC,MAAM,kCAAkC,CAAC;AAU1C,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAOlF,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAyKD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,MAAM,CAE/E;AAOD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAWvF;AAkBD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,SAAS,WAAW,EAAE,GAC/B;IAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CAMnD;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,SAAS,WAAW,EAAE,GAC/B,0BAA0B,EAAE,CAS9B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAIrC,QAAQ,CAAC,eAAe,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAIrE,QAAQ,CAAC,WAAW,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACxD,QAAQ,CAAC,MAAM,EAAE,+BAA+B,GAAG,SAAS,CAAC;CAC9D;AAED,UAAU,+BAA+B;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAiPD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,GAC9B,WAAW,CAYb;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,WAAW,CAab;AA8BD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,4BAA4B,CAUhF;AA2GD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,sBAAsB,EAC/B,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,4BAA4B,CAAC,CAqCvC;AAiFD,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,EAC/B,aAAa,EAAE,gCAAgC,GAAG,SAAS,EAC3D,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,SAAS,4BAA4B,EAAE,CAAC,CAalD;AAID,wBAAgB,cAAc,CAC5B,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,GACd;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAI3C;AAUD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,GAC9B,6BAA6B,CAI/B;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,EAC/B,UAAU,EAAE,MAAM,GACjB,0BAA0B,EAAE,CAM9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAMD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,kBAAkB,GAAG,IAAI,CASxF;AAmFD,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAyBtB;AAiCD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,gCAAgC,GAAG,SAAS,CAAC;CACtE;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,uBAAuB,GAAG,WAAW,CAAC,CA8BhD;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAKtB"}
+{"version":3,"file":"chat-handlers.d.ts","sourceRoot":"","sources":["../src/chat-handlers.ts"],"names":[],"mappings":"AAgBA,OAAO,EAGL,KAAK,+BAA+B,EACpC,KAAK,cAAc,EACpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,4BAA4B,EAC5B,4BAA4B,EAC7B,MAAM,wCAAwC,CAAC;AAuBhD,OAAO,EAGL,KAAK,IAAI,EACT,KAAK,WAAW,EAEjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAS7D,OAAO,EAGL,KAAK,gCAAgC,EACtC,MAAM,kCAAkC,CAAC;AAU1C,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAOlF,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAyKD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,MAAM,CAE/E;AAOD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAWvF;AAkBD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,SAAS,WAAW,EAAE,GAC/B;IAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CAMnD;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,SAAS,WAAW,EAAE,GAC/B,0BAA0B,EAAE,CAS9B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAIrC,QAAQ,CAAC,eAAe,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAIrE,QAAQ,CAAC,WAAW,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACxD,QAAQ,CAAC,MAAM,EAAE,+BAA+B,GAAG,SAAS,CAAC;IAI7D,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;CACrD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AA0CD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,GACb,+BAA+B,GAAG,WAAW,GAAG,SAAS,CAgB3D;AA6LD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,GAC9B,WAAW,CAYb;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,WAAW,CAab;AAsCD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,4BAA4B,CAUhF;AA2GD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,sBAAsB,EAC/B,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,4BAA4B,CAAC,CAqCvC;AAiFD,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,EAC/B,aAAa,EAAE,gCAAgC,GAAG,SAAS,EAC3D,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,SAAS,4BAA4B,EAAE,CAAC,CAalD;AAID,wBAAgB,cAAc,CAC5B,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,GACd;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAI3C;AAUD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,GAC9B,6BAA6B,CAI/B;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,EAC/B,UAAU,EAAE,MAAM,GACjB,0BAA0B,EAAE,CAM9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAMD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,kBAAkB,GAAG,IAAI,CASxF;AAmFD,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAyBtB;AAiCD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,gCAAgC,GAAG,SAAS,CAAC;CACtE;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,uBAAuB,GAAG,WAAW,CAAC,CA8BhD;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAKtB;AAED,KAAK,oBAAoB,GAAG,MAAM,GAAG,WAAW,CAAC;AAEjD,UAAU,sBAAsB;IAC9B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,+BAA+B,GAAG,SAAS,CAAC;CAC9D;AAsHD,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,EAC/B,IAAI,EAAE,IAAI,EACV,aAAa,EAAE,gCAAgC,GAAG,SAAS,GAC1D,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAWnD;AAoCD,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CA+BtB"}

package/dist/chat-handlers.js

@@ -4,6 +4,7 @@
 import { randomUUID } from "node:crypto";
 import { basename } from "node:path";
 import { GatewayError, findCapability, findConfiguredCapability, listCapabilities, listConfiguredCapabilities, } from "@oscharko-dev/keiko-model-gateway";
+import { isDiscussionMode, stripUnsafeFormatChars, } from "@oscharko-dev/keiko-contracts";
 import { retrieveMemoryContext } from "@oscharko-dev/keiko-memory-retrieval";
 import { maybeRunAutoMaintenance, } from "./memory-maintenance-handlers.js";
 import { buildConversationRetrievalSignals, conversationFusionMode, } from "./memory-retrieval-signals.js";
@@ -264,7 +265,7 @@ function parseMemoryBudget(raw) {
         body: errorBody("BAD_REQUEST", "memory.budgetTokens must be a non-negative integer."),
     };
 }
-function parseMemoryRequest(value) {
+export function parseMemoryRequest(value) {
     if (value === undefined)
         return undefined;
     if (!isRecord(value)) {
@@ -429,8 +430,15 @@ function sendRequestFromBody(body) {
         documentContext: parseDocumentContext(body.documentContext),
         attachments: parseAttachments(body.attachments),
         memory,
+        discussionMode: parseDiscussionMode(body.discussionMode),
     };
 }
+// Issue #502 — accepts a known DiscussionMode, otherwise drops to `undefined`. An unknown or
+// missing value is NOT a request error (the field is optional and turn-local); it simply leaves
+// the turn in the default no-mode behaviour.
+function parseDiscussionMode(value) {
+    return isDiscussionMode(value) ? value : undefined;
+}
 function invalidChatModelResult(modelId, deps) {
     const capability = chatCapability(deps, modelId);
     if (capability?.kind === "chat") {
@@ -472,11 +480,14 @@ export function createAssistantMessage(deps, request, content, modelId) {
 // attached document blocks). Earlier history turns stay verbatim — the document context is a
 // per-send payload and never replayed across the conversation log.
 function applyDocumentContextToLatestUserTurn(history, request, memoryText) {
+    // Issue #502 — a selected discussion mode also requires composing the latest user turn (to
+    // prepend the additive directive block), even with no documents or memory.
     if (request.documentContext.length === 0 &&
-        (memoryText === undefined || memoryText.length === 0)) {
+        (memoryText === undefined || memoryText.length === 0) &&
+        request.discussionMode === undefined) {
         return Array.from(history);
     }
-    const composed = composeConversationPrompt(request.content, request.documentContext, memoryText);
+    const composed = composeConversationPrompt(request.content, request.documentContext, memoryText, request.discussionMode);
     // Replace ONLY the last user turn (the one we just persisted). System and assistant turns
     // are untouched. Walking from the end avoids rewriting a same-text earlier turn.
     const out = Array.from(history);
@@ -869,3 +880,174 @@ export async function handleSendDesktopChat(ctx, deps) {
     const { request, chat, modelId, memoryContext } = prepared;
     return persistModelChatTurn(deps, request, chat, modelId, memoryContext);
 }
+const MAX_VOICE_TURN_MESSAGES = 8;
+function parseVoiceTurnAppendMessage(value) {
+    if (!isRecord(value))
+        return undefined;
+    const role = value.role;
+    if (role !== "user" && role !== "assistant")
+        return undefined;
+    const content = typeof value.content === "string" ? value.content.trim() : "";
+    if (content.length === 0 || content.length > MAX_CHAT_INPUT_CHARS)
+        return undefined;
+    const timestamp = value.timestamp;
+    if (timestamp !== undefined) {
+        if (!Number.isInteger(timestamp) || timestamp < 0)
+            return undefined;
+        return { role, content, timestamp: timestamp };
+    }
+    return { role, content };
+}
+function voiceTurnAppendRequestFromBody(body) {
+    const chatId = typeof body.chatId === "string" ? body.chatId : "";
+    const projectPath = typeof body.projectPath === "string" ? body.projectPath : "";
+    if (chatId.length === 0 || projectPath.length === 0) {
+        return { status: 400, body: errorBody("BAD_REQUEST", "chatId and projectPath are required.") };
+    }
+    if (!Array.isArray(body.messages) || body.messages.length === 0) {
+        return { status: 400, body: errorBody("BAD_REQUEST", "messages must be a non-empty array.") };
+    }
+    if (body.messages.length > MAX_VOICE_TURN_MESSAGES) {
+        return { status: 400, body: errorBody("BAD_REQUEST", "messages contains too many entries.") };
+    }
+    const messages = body.messages.map(parseVoiceTurnAppendMessage);
+    if (messages.some((message) => message === undefined)) {
+        return {
+            status: 400,
+            body: errorBody("BAD_REQUEST", "messages must contain committed user or assistant text."),
+        };
+    }
+    const memory = parseMemoryRequest(body.memory);
+    if (isRouteResult(memory))
+        return memory;
+    return {
+        chatId,
+        projectPath,
+        messages: messages,
+        memory,
+    };
+}
+function sanitizeVoiceTurnText(text, deps) {
+    return deps.redactor(stripUnsafeFormatChars(text));
+}
+function voiceTurnCombinedText(messages) {
+    return messages.map((message) => message.content).join("\n").trim();
+}
+function voiceTurnAsSendRequest(request, content) {
+    return {
+        chatId: request.chatId,
+        projectPath: request.projectPath,
+        content,
+        modelId: undefined,
+        documentContext: [],
+        attachments: [],
+        memory: request.memory,
+        discussionMode: undefined,
+    };
+}
+async function collectVoiceTurnMemoryActions(deps, request, context, modelId) {
+    if (context === undefined || request.memory?.enabled !== true) {
+        return [];
+    }
+    if (deps.memoryVault === undefined) {
+        return [];
+    }
+    const actions = [];
+    for (const message of request.messages) {
+        const outcomes = extractCandidatesFromUserText(message.content, buildCaptureContext(context), {
+            ...memoryCapturePolicyForDeps(deps, {
+                resolver: createMemoryTargetResolver(deps.memoryVault),
+            }),
+        });
+        for (const outcome of outcomes) {
+            const action = await captureActionFromOutcome(outcome, deps);
+            if (action !== null)
+                actions.push(action);
+        }
+    }
+    const userText = request.messages
+        .filter((message) => message.role === "user")
+        .map((message) => message.content)
+        .join("\n")
+        .trim();
+    const assistantText = request.messages
+        .filter((message) => message.role === "assistant")
+        .map((message) => message.content)
+        .join("\n")
+        .trim();
+    const salientActions = await captureSalientFromTurn(deps, {
+        content: userText.length > 0 ? userText : voiceTurnCombinedText(request.messages),
+        memory: request.memory,
+    }, context, modelId, assistantText);
+    actions.push(...salientActions);
+    return actions;
+}
+export async function buildVoiceTurnMemoryResult(deps, request, chat, memoryContext) {
+    if (request.memory === undefined) {
+        return undefined;
+    }
+    if (memoryContext === undefined) {
+        return emptyMemoryResult(false);
+    }
+    const content = voiceTurnCombinedText(request.messages);
+    const memory = await buildMemoryResult(voiceTurnAsSendRequest(request, content), deps, memoryContext);
+    const actions = await collectVoiceTurnMemoryActions(deps, request, memoryContext, chat.selectedModel);
+    return { ...memory, actions };
+}
+function persistVoiceTurnMessages(deps, request) {
+    const baseNow = Date.now();
+    return deps.store.createMessages(request.messages.map((message, index) => ({
+        chatId: request.chatId,
+        role: message.role,
+        content: sanitizeVoiceTurnText(message.content, deps),
+        timestamp: message.timestamp ?? baseNow + index,
+        runId: undefined,
+        workflowId: undefined,
+        workflowStatus: undefined,
+        shortResult: undefined,
+        taskType: undefined,
+    })));
+}
+function updateChatAfterVoiceTurn(deps, request, chat, created) {
+    const firstUser = created.find((message) => message.role === "user");
+    const chatPatch = chat.title === DEFAULT_CHAT_TITLE && firstUser !== undefined
+        ? { title: firstUser.content.slice(0, 60) }
+        : {};
+    return deps.store.updateChat(request.chatId, chatPatch);
+}
+export async function handleAppendDesktopVoiceTurn(ctx, deps) {
+    const body = await readJsonObject(ctx.req);
+    if (isRouteResult(body))
+        return body;
+    const request = voiceTurnAppendRequestFromBody(body);
+    if (isRouteResult(request))
+        return request;
+    const normalizedProjectPath = normalizeDesktopProjectPath(request.projectPath, deps);
+    if (isRouteResult(normalizedProjectPath))
+        return normalizedProjectPath;
+    const chat = findChat(deps, normalizedProjectPath, request.chatId);
+    if (chat === undefined) {
+        return { status: 404, body: errorBody("NOT_FOUND", "Chat not found.") };
+    }
+    const memoryContext = request.memory === undefined
+        ? undefined
+        : resolveConversationMemoryContext(deps, normalizedProjectPath, request.chatId);
+    if (isRouteResult(memoryContext))
+        return memoryContext;
+    try {
+        const created = persistVoiceTurnMessages(deps, request);
+        const updatedChat = updateChatAfterVoiceTurn(deps, request, chat, created);
+        const memory = await buildVoiceTurnMemoryResult(deps, request, updatedChat, memoryContext);
+        return {
+            status: 200,
+            body: {
+                chat: updatedChat,
+                messages: created,
+                ...(memory === undefined ? {} : { memory }),
+            },
+        };
+    }
+    catch (error) {
+        return desktopChatErrorResult(error, deps);
+    }
+}

package/dist/command-runner-errors.d.ts

@@ -0,0 +1,17 @@
+export declare const COMMAND_RUNNER_ERROR_CODES: {
+    readonly PROJECT_NOT_FOUND: "PROJECT_NOT_FOUND";
+    readonly TASK_NOT_FOUND: "TASK_NOT_FOUND";
+    readonly RUN_LIMIT_EXCEEDED: "RUN_LIMIT_EXCEEDED";
+    readonly RUN_NOT_FOUND: "RUN_NOT_FOUND";
+    readonly BAD_REQUEST: "BAD_REQUEST";
+    readonly PAYLOAD_TOO_LARGE: "PAYLOAD_TOO_LARGE";
+    readonly COMMAND_RUNNER_UNAVAILABLE: "COMMAND_RUNNER_UNAVAILABLE";
+    readonly INTERNAL: "INTERNAL";
+};
+export type CommandRunnerErrorCode = (typeof COMMAND_RUNNER_ERROR_CODES)[keyof typeof COMMAND_RUNNER_ERROR_CODES];
+export declare class CommandRunnerError extends Error {
+    readonly code: CommandRunnerErrorCode;
+    readonly status: number;
+    constructor(code: CommandRunnerErrorCode, message: string);
+}
+//# sourceMappingURL=command-runner-errors.d.ts.map

package/dist/command-runner-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-runner-errors.d.ts","sourceRoot":"","sources":["../src/command-runner-errors.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,0BAA0B;;;;;;;;;CAS7B,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,OAAO,0BAA0B,CAAC,CAAC;AAa/E,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,SAAgB,IAAI,EAAE,sBAAsB,CAAC;IAC7C,SAAgB,MAAM,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM;CAMjE"}

package/dist/command-runner-errors.js

@@ -0,0 +1,37 @@
+// Issue #1387 — typed failure modes for the controlled command runner. Callers switch on `code`;
+// messages are static strings that never leak filesystem paths or raw Node/OS error text into the
+// HTTP response or SSE event payload. Mirrors the ADR-0018 terminal error model.
+//
+// Only PRE-spawn governance failures surface as a thrown CommandRunnerError (the route maps them to a
+// 4xx/5xx envelope). Every actual EXECUTION outcome — non-zero exit, timeout, cancellation, denied
+// spawn — is reported as a `CommandTaskRunResult` with a `failureReason`, never as an error.
+export const COMMAND_RUNNER_ERROR_CODES = {
+    PROJECT_NOT_FOUND: "PROJECT_NOT_FOUND",
+    TASK_NOT_FOUND: "TASK_NOT_FOUND",
+    RUN_LIMIT_EXCEEDED: "RUN_LIMIT_EXCEEDED",
+    RUN_NOT_FOUND: "RUN_NOT_FOUND",
+    BAD_REQUEST: "BAD_REQUEST",
+    PAYLOAD_TOO_LARGE: "PAYLOAD_TOO_LARGE",
+    COMMAND_RUNNER_UNAVAILABLE: "COMMAND_RUNNER_UNAVAILABLE",
+    INTERNAL: "INTERNAL",
+};
+const STATUS_MAP = {
+    PROJECT_NOT_FOUND: 404,
+    TASK_NOT_FOUND: 404,
+    RUN_LIMIT_EXCEEDED: 429,
+    RUN_NOT_FOUND: 404,
+    BAD_REQUEST: 400,
+    PAYLOAD_TOO_LARGE: 413,
+    COMMAND_RUNNER_UNAVAILABLE: 503,
+    INTERNAL: 500,
+};
+export class CommandRunnerError extends Error {
+    code;
+    status;
+    constructor(code, message) {
+        super(message);
+        this.name = "CommandRunnerError";
+        this.code = code;
+        this.status = STATUS_MAP[code];
+    }
+}

package/dist/command-runner-evidence.d.ts

@@ -0,0 +1,23 @@
+import type { EvidenceManifest, EvidenceStore } from "@oscharko-dev/keiko-evidence";
+import type { CommandFailureReason, CommandTaskKind } from "@oscharko-dev/keiko-contracts";
+export declare const COMMAND_RUN_EVIDENCE_KIND: "command-run";
+export type CommandRunEvidenceEntry = EvidenceManifest;
+export interface CommandRunEvidenceInput {
+    readonly runId: string;
+    readonly projectId: string;
+    readonly taskId: string;
+    readonly kind: CommandTaskKind;
+    readonly executable: string;
+    readonly argCount: number;
+    readonly exitCode: number | null;
+    readonly durationMs: number;
+    readonly timedOut: boolean;
+    readonly truncated: boolean;
+    readonly failureReason: CommandFailureReason;
+    readonly stdoutBytes: number;
+    readonly stderrBytes: number;
+    readonly startedAt: number;
+}
+export declare function buildCommandRunEvidenceEntry(input: CommandRunEvidenceInput): CommandRunEvidenceEntry;
+export declare function appendCommandRunEvidence(store: EvidenceStore, entry: CommandRunEvidenceEntry, redact: (input: string) => string): string;
+//# sourceMappingURL=command-runner-evidence.d.ts.map

package/dist/command-runner-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-runner-evidence.d.ts","sourceRoot":"","sources":["../src/command-runner-evidence.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAIpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAE3F,eAAO,MAAM,yBAAyB,EAAG,aAAsB,CAAC;AAEhE,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAEvD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAiBD,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,uBAAuB,GAC7B,uBAAuB,CAsCzB;AAKD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,uBAAuB,EAC9B,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAChC,MAAM,CAGR"}

package/dist/command-runner-evidence.js

@@ -0,0 +1,69 @@
+// Issue #1387 — command-run evidence. Each finished run writes a standard EvidenceManifest via the
+// existing EvidenceStore.put port so the shared evidence list/detail APIs can parse it. The runner
+// data lives in the standard run identity plus one commandExecutions record. It carries COUNTS and
+// ENUMS ONLY — never the task argv, never output bytes, never absolute paths (ADR-0048 content-free
+// invariant). Mirrors terminal-evidence.ts.
+import { deepRedactStrings } from "@oscharko-dev/keiko-evidence";
+import { EVIDENCE_SCHEMA_VERSION } from "@oscharko-dev/keiko-evidence";
+import { HARNESS_VERSION } from "@oscharko-dev/keiko-harness";
+export const COMMAND_RUN_EVIDENCE_KIND = "command-run";
+function commandRunOutcome(input) {
+    switch (input.failureReason) {
+        case "none":
+            return "completed";
+        case "timed-out":
+            return "limit-exceeded";
+        case "cancelled":
+            return "cancelled";
+        default:
+            return "failed";
+    }
+}
+// PURE. Builds the on-disk manifest from a finished run. Identifiers only; args and output excluded.
+// The caller supplies runId/startedAt (no clock, no randomness here) so evidence stays deterministic.
+export function buildCommandRunEvidenceEntry(input) {
+    const runId = input.runId;
+    return {
+        evidenceSchemaVersion: EVIDENCE_SCHEMA_VERSION,
+        run: {
+            runId,
+            fingerprint: runId,
+            harnessVersion: HARNESS_VERSION,
+            taskType: COMMAND_RUN_EVIDENCE_KIND,
+            outcome: commandRunOutcome(input),
+            startedAt: input.startedAt,
+            finishedAt: input.startedAt + input.durationMs,
+            durationMs: input.durationMs,
+        },
+        model: { modelId: "command-runner", costClass: "unknown" },
+        usageTotals: { promptTokens: 0, completionTokens: 0, requestCount: 0, totalLatencyMs: 0 },
+        context: {
+            workspaceRoot: input.projectId,
+            totalCandidates: 0,
+            usedBytes: 0,
+            budgetBytes: 0,
+            droppedForBudget: 0,
+            entries: [],
+        },
+        stateTransitions: [],
+        toolCalls: [],
+        commandExecutions: [
+            {
+                seq: 1,
+                ts: input.startedAt,
+                executable: input.executable,
+                argCount: input.argCount,
+                exitCode: input.exitCode,
+                timedOut: input.timedOut,
+                durationMs: input.durationMs,
+            },
+        ],
+    };
+}
+// Defense in depth: applies the live redactor to every string leaf before serializing. All known
+// leaves (executable, projectId, runId, taskId) are structurally safe today; a future schema
+// addition inherits the redaction automatically. Mirrors appendTerminalEvidence.
+export function appendCommandRunEvidence(store, entry, redact) {
+    const safe = deepRedactStrings(entry, redact);
+    return store.put(safe.run.runId, JSON.stringify(safe, null, 2));
+}

package/dist/command-runner-routes.d.ts

@@ -0,0 +1,7 @@
+import type { UiHandlerDeps } from "./deps.js";
+import { type HandlerOutcome, type RouteContext, type RouteResult } from "./routes.js";
+export declare function handleCommandCatalog(ctx: RouteContext, deps: UiHandlerDeps): Promise<RouteResult>;
+export declare function handleCreateCommandRun(ctx: RouteContext, deps: UiHandlerDeps): Promise<RouteResult>;
+export declare function handleDeleteCommandRun(ctx: RouteContext, deps: UiHandlerDeps): RouteResult;
+export declare function handleCommandEvents(ctx: RouteContext, deps: UiHandlerDeps): HandlerOutcome;
+//# sourceMappingURL=command-runner-routes.d.ts.map

package/dist/command-runner-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-runner-routes.d.ts","sourceRoot":"","sources":["../src/command-runner-routes.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AAyFrB,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAUtB;AAKD,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAuBtB;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAQ1F;AAID,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,cAAc,CAQ1F"}

package/dist/command-runner-routes.js

@@ -0,0 +1,175 @@
+// Issue #1387 — four /api/commands/* BFF route handlers for the controlled command runner. CSRF is
+// enforced by the server's state-changing-request gate (POST/DELETE flow through it); GET routes are
+// read-only and exempt. SSE framing mirrors /api/terminal/*/events and /api/browser/*/events.
+//
+//   GET    /api/commands/catalog?projectId=…   discovered task catalog (no runner deps required)
+//   POST   /api/commands/runs                  run a catalog task → structured result (redacted)
+//   DELETE /api/commands/runs/:runId           cancel an in-flight run
+//   GET    /api/commands/events                SSE stream of run lifecycle events
+import { parseCommandTaskRunRequest } from "@oscharko-dev/keiko-contracts";
+import { CommandRunnerError } from "./command-runner-errors.js";
+import { SSE_HEADERS, readyMessage } from "./sse.js";
+import { errorBody, STREAMING, } from "./routes.js";
+const MAX_COMMAND_BODY_BYTES = 16_000;
+class BodyTooLargeError extends Error {
+    constructor() {
+        super("command runner request body too large");
+        this.name = "BodyTooLargeError";
+    }
+}
+function noRunnerDeps() {
+    return {
+        status: 503,
+        body: errorBody("COMMAND_RUNNER_UNAVAILABLE", "Command runner is not configured for this BFF."),
+    };
+}
+function requireRunner(deps) {
+    return deps.commandRunner ?? noRunnerDeps();
+}
+function isRouteResult(value) {
+    return typeof value.status === "number";
+}
+function toRouteResult(error) {
+    return { status: error.status, body: errorBody(error.code, error.message) };
+}
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let total = 0;
+        let capped = false;
+        req.on("data", (chunk) => {
+            total += chunk.length;
+            if (total > MAX_COMMAND_BODY_BYTES) {
+                if (!capped) {
+                    capped = true;
+                    chunks.length = 0;
+                    reject(new BodyTooLargeError());
+                    req.resume();
+                }
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("end", () => {
+            if (!capped)
+                resolve(Buffer.concat(chunks).toString("utf8"));
+        });
+        req.on("error", reject);
+    });
+}
+async function readJsonObject(req) {
+    const raw = await readBody(req);
+    if (raw.length === 0)
+        return {};
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new CommandRunnerError("BAD_REQUEST", "Request body is not valid JSON.");
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        throw new CommandRunnerError("BAD_REQUEST", "Request body must be a JSON object.");
+    }
+    return parsed;
+}
+async function runHandler(work) {
+    try {
+        return await work();
+    }
+    catch (error) {
+        if (error instanceof BodyTooLargeError) {
+            return {
+                status: 413,
+                body: errorBody("PAYLOAD_TOO_LARGE", "Request body exceeds the size limit."),
+            };
+        }
+        if (error instanceof CommandRunnerError)
+            return toRouteResult(error);
+        throw error;
+    }
+}
+// GET /api/commands/catalog — the discovered, vetted task list for a project. Requires the runner so
+// discovery uses the same workspace containment as execution.
+export async function handleCommandCatalog(ctx, deps) {
+    const guard = requireRunner(deps);
+    if (isRouteResult(guard))
+        return guard;
+    return runHandler(() => {
+        const projectId = ctx.url.searchParams.get("projectId");
+        if (projectId === null || projectId.length === 0) {
+            throw new CommandRunnerError("BAD_REQUEST", "Query parameter 'projectId' is required.");
+        }
+        return { status: 200, body: guard.discover(projectId) };
+    });
+}
+// POST /api/commands/runs — run a catalog task. The result carries the structured outcome (exit code,
+// duration, truncation, failure reason). Layer-2 redaction is applied to stdout/stderr before the
+// body reaches the browser; runCommand already applied Layer-1 env-value redaction.
+export async function handleCreateCommandRun(ctx, deps) {
+    const guard = requireRunner(deps);
+    if (isRouteResult(guard))
+        return guard;
+    return runHandler(async () => {
+        const body = await readJsonObject(ctx.req);
+        const parsed = parseCommandTaskRunRequest(body);
+        if (!parsed.ok) {
+            throw new CommandRunnerError("BAD_REQUEST", parsed.errors.join("; "));
+        }
+        const input = {
+            projectId: parsed.value.projectId,
+            taskId: parsed.value.taskId,
+            ...(parsed.value.timeoutMs === undefined ? {} : { timeoutMs: parsed.value.timeoutMs }),
+            ...(parsed.value.requestId === undefined ? {} : { requestId: parsed.value.requestId }),
+        };
+        const raw = await guard.execute(input);
+        const redactStr = (value) => {
+            const redacted = deps.redactor(value);
+            return typeof redacted === "string" ? redacted : value;
+        };
+        const result = { ...raw, stdout: redactStr(raw.stdout), stderr: redactStr(raw.stderr) };
+        return { status: 200, body: result };
+    });
+}
+export function handleDeleteCommandRun(ctx, deps) {
+    const guard = requireRunner(deps);
+    if (isRouteResult(guard))
+        return guard;
+    const runId = ctx.params.runId ?? "";
+    if (!guard.abort(runId)) {
+        return { status: 404, body: errorBody("RUN_NOT_FOUND", "Command run not found.") };
+    }
+    return { status: 200, body: { ok: true } };
+}
+// SSE — one runner event becomes one message with `event: command:<kind>` and a JSON payload. A
+// synthetic `ready` is emitted first so the client can transition from connecting to live.
+export function handleCommandEvents(ctx, deps) {
+    const guard = requireRunner(deps);
+    if (isRouteResult(guard))
+        return guard;
+    openCommandSseStream(ctx.res, guard, deps.redactor);
+    ctx.req.on("close", () => {
+        ctx.res.end();
+    });
+    return STREAMING;
+}
+function openCommandSseStream(res, manager, redactor) {
+    res.writeHead(200, SSE_HEADERS);
+    let seq = 0;
+    const unsubscribe = manager.subscribe((event) => {
+        seq += 1;
+        writeCommandEvent(res, event, seq, redactor);
+    });
+    res.write(readyMessage());
+    res.on("close", () => {
+        unsubscribe();
+    });
+}
+function writeCommandEvent(res, event, seq, redactor) {
+    const redacted = redactor(event);
+    const data = JSON.stringify(redacted);
+    const frame = `id: ${String(seq)}\nevent: command:${event.kind}\ndata: ${data}\n\n`;
+    if (!res.write(frame)) {
+        res.destroy();
+    }
+}

package/dist/command-runner.d.ts

@@ -0,0 +1,29 @@
+import { type RunCommandDeps, type SandboxPolicy } from "@oscharko-dev/keiko-tools";
+import { type CommandRunnerEvent, type CommandTaskCatalog, type CommandTaskRunResult } from "@oscharko-dev/keiko-contracts";
+import type { EvidenceStore } from "@oscharko-dev/keiko-evidence";
+import type { UiStore } from "./store/index.js";
+export interface CommandRunInput {
+    readonly projectId: string;
+    readonly taskId: string;
+    readonly timeoutMs?: number | undefined;
+    readonly requestId?: string | undefined;
+}
+export type CommandRunnerEventEmitter = (event: CommandRunnerEvent) => void;
+export interface CommandRunnerManager {
+    readonly discover: (projectId: string) => CommandTaskCatalog;
+    readonly execute: (input: CommandRunInput) => Promise<CommandTaskRunResult>;
+    readonly abort: (runId: string) => boolean;
+    readonly subscribe: (listener: CommandRunnerEventEmitter) => () => void;
+    readonly inFlightCount: () => number;
+}
+export interface CommandRunnerManagerOptions {
+    readonly store: UiStore;
+    readonly evidenceStore?: EvidenceStore | undefined;
+    readonly policy?: SandboxPolicy | undefined;
+    readonly processEnv?: NodeJS.ProcessEnv | undefined;
+    readonly redactor?: ((input: string) => string) | undefined;
+    readonly runDeps?: Partial<RunCommandDeps> | undefined;
+    readonly now?: (() => number) | undefined;
+}
+export declare function createCommandRunnerManager(opts: CommandRunnerManagerOptions): CommandRunnerManager;
+//# sourceMappingURL=command-runner.d.ts.map