@pythonluvr/openwar 0.4.0

package/dist/roles/registry.js

@@ -0,0 +1,45 @@
+// Role registry. Built-in roles are registered at module-load time;
+// forkers add custom roles via `registerRole(def)`. The registry is the
+// authoritative source the brief validator consults when checking that a
+// brief's `roles:` field references known ids.
+import { plannerDefinition } from "./planner.js";
+import { executorDefinition } from "./executor.js";
+import { reviewerDefinition } from "./reviewer.js";
+import { criticDefinition } from "./critic.js";
+const registry = new Map();
+export function registerRole(def) {
+    if (!def.id || typeof def.id !== "string") {
+        throw new Error("Role definition requires a non-empty string id.");
+    }
+    registry.set(def.id, def);
+}
+export function getRole(id) {
+    return registry.get(id);
+}
+export function listRoles() {
+    return [...registry.values()];
+}
+export function listRoleIds() {
+    return [...registry.keys()];
+}
+// Replace a registered role. Mostly used in tests to swap built-ins for
+// deterministic prompts. Does not warn on missing prior registration.
+export function setRole(def) {
+    registry.set(def.id, def);
+}
+// Test/utility: clear non-builtin entries. Built-ins are re-registered at
+// the bottom of this module on first import; tests that need a clean slate
+// can call this and then re-import this module to reset.
+export function _resetRegistryToBuiltIns() {
+    registry.clear();
+    registerBuiltIns();
+}
+function registerBuiltIns() {
+    registerRole(plannerDefinition);
+    registerRole(executorDefinition);
+    registerRole(reviewerDefinition);
+    registerRole(criticDefinition);
+}
+// Side effect at load: every consumer of the registry sees built-ins.
+registerBuiltIns();
+//# sourceMappingURL=registry.js.map

package/dist/roles/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/roles/registry.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,wEAAwE;AACxE,yEAAyE;AACzE,+CAA+C;AAG/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEnD,MAAM,UAAU,YAAY,CAAC,GAAmB;IAC9C,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAU;IAChC,OAAO,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,wEAAwE;AACxE,sEAAsE;AACtE,MAAM,UAAU,OAAO,CAAC,GAAmB;IACzC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,yDAAyD;AACzD,MAAM,UAAU,wBAAwB;IACtC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjB,gBAAgB,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB;IACvB,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAChC,YAAY,CAAC,kBAAkB,CAAC,CAAC;IACjC,YAAY,CAAC,kBAAkB,CAAC,CAAC;IACjC,YAAY,CAAC,gBAAgB,CAAC,CAAC;AACjC,CAAC;AAED,sEAAsE;AACtE,gBAAgB,EAAE,CAAC"}

package/dist/roles/reviewer.d.ts

@@ -0,0 +1,3 @@
+import type { RoleDefinition } from "../types.js";
+export declare const reviewerDefinition: RoleDefinition;
+//# sourceMappingURL=reviewer.d.ts.map

package/dist/roles/reviewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer.d.ts","sourceRoot":"","sources":["../../src/roles/reviewer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,eAAO,MAAM,kBAAkB,EAAE,cA6ChC,CAAC"}

package/dist/roles/reviewer.js

@@ -0,0 +1,46 @@
+export const reviewerDefinition = {
+    id: "reviewer",
+    description: "Evaluates the executor's output against the sub-task's acceptance " +
+        "criteria. Read-only file access; no write or shell. Emits a pass/fail/" +
+        "needs_retry verdict.",
+    // No write categories. read_file allowed for verification reads.
+    tool_categories: ["filesystem_read"],
+    allow_read_file: true,
+    prompt_overlay: `
+You are the **reviewer** role under the OpenWar multi-agent coordinator.
+
+You evaluate the executor's output against a single sub-task's acceptance
+criteria. You are not the executor's friend; you are the quality gate.
+
+Your responsibilities:
+
+1. Read the executor's ExecutionHandoff carefully. Check every acceptance
+   criterion. If you need to verify a claim by reading a file, use read_file
+   (your only authorized tool category is filesystem_read).
+2. Produce one ReviewHandoff. Verdict is one of:
+   - "pass": every acceptance criterion is met, no qualifications.
+   - "fail": the executor's output is fundamentally wrong or unrecoverable.
+     Coordinator escalates this to the operator.
+   - "needs_retry": the executor's output is close but missing or mistaken
+     on specific points the executor can fix. Include a concrete
+     suggested_revision string the executor can act on.
+3. End your reply with a single fenced \`\`\`json block:
+   {
+     "kind": "review",
+     "subtask_id": "<the sub-task id>",
+     "verdict": "pass" | "fail" | "needs_retry",
+     "rationale": "<terse explanation, point-by-point against criteria>",
+     "suggested_revision": "<only when verdict is needs_retry>"
+   }
+4. Do not invent acceptance criteria the planner did not specify. Do not
+   downgrade the bar because the executor "tried hard."
+5. If you cannot evaluate (e.g. the executor referenced a file you cannot
+   read), return verdict "needs_retry" with a suggested_revision asking
+   the executor to surface the file's contents inline. Do not emit "fail"
+   for ambiguity.
+
+You do not have write or shell access. Trying to use them would halt the
+coordinator on a structural error.
+`.trim(),
+};
+//# sourceMappingURL=reviewer.js.map

package/dist/roles/reviewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer.js","sourceRoot":"","sources":["../../src/roles/reviewer.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAAmB;IAChD,EAAE,EAAE,UAAU;IACd,WAAW,EACT,oEAAoE;QACpE,wEAAwE;QACxE,sBAAsB;IACxB,iEAAiE;IACjE,eAAe,EAAE,CAAC,iBAAiB,CAAC;IACpC,eAAe,EAAE,IAAI;IACrB,cAAc,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCjB,CAAC,IAAI,EAAE;CACP,CAAC"}

package/dist/roles/types.d.ts

@@ -0,0 +1,2 @@
+export type { RoleDefinition, RoleContext, RoleResult, RoleCost, RoleId, BuiltInRoleId, } from "../types.js";
+//# sourceMappingURL=types.d.ts.map

package/dist/roles/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/roles/types.ts"],"names":[],"mappings":"AAGA,YAAY,EACV,cAAc,EACd,WAAW,EACX,UAAU,EACV,QAAQ,EACR,MAAM,EACN,aAAa,GACd,MAAM,aAAa,CAAC"}

package/dist/roles/types.js

@@ -0,0 +1,4 @@
+// Re-export the v0.4 role-related types from the central types file so
+// consumers can import either path (`openwar/roles/types` or `openwar`).
+export {};
+//# sourceMappingURL=types.js.map

package/dist/roles/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/roles/types.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,yEAAyE"}

package/dist/runner.d.ts

@@ -0,0 +1,3 @@
+import type { RunOptions, RunResult } from "./types.js";
+export declare function run(opts: RunOptions): Promise<RunResult>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAIV,UAAU,EACV,SAAS,EAQV,MAAM,YAAY,CAAC;AAuBpB,wBAAsB,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAic9D"}

package/dist/runner.js

@@ -0,0 +1,473 @@
+import { parseBrief, validateBrief, generateBriefId } from "./brief.js";
+import { loadFrameworkDoc } from "./framework.js";
+import { runIntake } from "./phases/intake.js";
+import { runExecute } from "./phases/execute.js";
+import { reportBlocker } from "./phases/blocker.js";
+import { awaitOperatorYes, approvalMessage, denialMessage, } from "./phases/destructive.js";
+import { runCompletion } from "./phases/completion.js";
+import { createTerminalIO } from "./io.js";
+import { writeSession, readSession } from "./state/persist.js";
+import { appendTranscript } from "./state/transcript.js";
+import { NATIVE_TOOLS } from "./tools/native/index.js";
+import { SandboxContext } from "./sandbox/types.js";
+import { loadHostAllowlist } from "./sandbox/host-allowlist.js";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { MCPClient, StdioTransport, loadGlobalMcpConfig, splitCommand } from "./mcp/index.js";
+export async function run(opts) {
+    if (!opts.briefPath && !opts.briefSource) {
+        throw new Error("run() requires either briefPath or briefSource.");
+    }
+    const briefInput = opts.briefSource ?? opts.briefPath;
+    const brief = parseBrief(briefInput);
+    const validation = validateBrief(brief);
+    const errors = validation.issues.filter((i) => i.severity === "error");
+    if (errors.length > 0) {
+        throw new Error(`Brief is invalid: ${errors.map((e) => `${e.field}: ${e.message}`).join("; ")}`);
+    }
+    const io = opts.io ?? createTerminalIO();
+    const adapter = opts.adapter;
+    if (!adapter.isConfigured()) {
+        throw new Error(`Adapter "${adapter.id}" is not configured. Check API key environment variable.`);
+    }
+    // Compose the system prompt: framework doc verbatim, no inlining.
+    const framework = loadFrameworkDoc();
+    const system = framework;
+    // Resolve / open session.
+    const briefId = opts.sessionId ?? brief.frontmatter.brief_id ?? generateBriefId();
+    let session;
+    let isResumed = false;
+    if (!opts.ephemeral && opts.resume) {
+        const prior = readSession(briefId);
+        if (prior) {
+            session = prior;
+            isResumed = true;
+            io.banner(`Resuming session ${briefId} (phase: ${session.meta.phase})`);
+        }
+        else {
+            session = createSession(brief, briefId);
+        }
+    }
+    else {
+        session = createSession(brief, briefId);
+    }
+    const persist = () => {
+        if (opts.ephemeral)
+            return;
+        session.meta.updated_at = new Date().toISOString();
+        writeSession(session);
+    };
+    const recordMessage = (m) => {
+        session.messages.push(m);
+        if (!opts.ephemeral)
+            appendTranscript(session.meta.brief_id, m);
+    };
+    const transition = (to, reason) => {
+        const t = {
+            from: session.meta.phase,
+            to,
+            at: new Date().toISOString(),
+            reason,
+        };
+        session.meta.phase = to;
+        session.meta.transitions.push(t);
+    };
+    // ------------------- Phase 0 -------------------
+    let mode;
+    let historyForExecute;
+    if (!isResumed || session.meta.phase === "intake") {
+        transition("intake", "starting");
+        persist();
+        const intake = await runIntake({ brief, adapter, system, io });
+        recordMessage(intake.brief_prompt);
+        recordMessage(intake.assistant_message);
+        persist();
+        if (!intake.accepted) {
+            // Operator did not accept. Persist their correction as the next user
+            // turn so a future `resume` can pick it up.
+            if (intake.operator_reply.trim()) {
+                recordMessage({
+                    role: "user",
+                    content: intake.operator_reply,
+                    at: new Date().toISOString(),
+                    meta: { phase: "intake", step_index: 2 },
+                });
+            }
+            persist();
+            io.write("\nConfirmation Summary not accepted. Session paused at Phase 0. Resume with adjustments or restart.\n");
+            return {
+                session_id: session.meta.brief_id,
+                final_phase: "intake",
+                completed: false,
+                halted: true,
+                halt_reason: "intake_not_accepted",
+                messages: session.messages,
+            };
+        }
+        mode = await resolveMode(brief, opts, io, intake.operator_reply);
+        session.meta.mode = mode;
+        historyForExecute = [intake.brief_prompt, intake.assistant_message];
+    }
+    else {
+        mode = session.meta.mode ?? (await resolveMode(brief, opts, io, ""));
+        session.meta.mode = mode;
+        historyForExecute = session.messages.slice();
+    }
+    // ------------------- Set up tools + sandbox + MCP -------------------
+    const workdir = opts.workdir ?? brief.frontmatter.workdir ?? process.cwd();
+    const httpAllowPath = join(homedir(), ".openwar", "http-allow.json");
+    let httpAllowlist;
+    try {
+        httpAllowlist = await loadHostAllowlist(httpAllowPath);
+    }
+    catch {
+        httpAllowlist = null;
+    }
+    const sandbox = SandboxContext._create({
+        workdir,
+        defaultTimeoutMs: 30_000,
+        defaultMaxOutputBytes: 1_000_000,
+        httpAllowlist,
+        shellEnabled: !opts.disableShell,
+    });
+    const toolDefinitions = [];
+    const toolExecutors = new Map();
+    if (!opts.disableNativeTools) {
+        for (const [name, t] of NATIVE_TOOLS.entries()) {
+            toolDefinitions.push(t.definition);
+            toolExecutors.set(name, t.executor);
+        }
+    }
+    // MCP servers from brief + global + opts.
+    const mcpClients = [];
+    const briefMcp = brief.frontmatter.mcp_servers ?? [];
+    const globalMcp = await loadGlobalMcpConfig().catch(() => []);
+    const mcpConfigs = [...globalMcp, ...briefMcp, ...(opts.mcpServers ?? [])];
+    for (const cfg of mcpConfigs) {
+        try {
+            const { bin, args } = splitCommand(cfg.command);
+            const transport = new StdioTransport({ command: bin, args, ...(cfg.cwd && { cwd: cfg.cwd }) });
+            const client = new MCPClient({ transport });
+            await client.connect();
+            const tools = await client.listTools();
+            for (const t of tools) {
+                const fqName = `${cfg.name}:${t.name}`;
+                toolDefinitions.push({
+                    name: fqName,
+                    description: t.description ?? `MCP tool ${fqName}`,
+                    input_schema: t.inputSchema,
+                    origin: "mcp",
+                    mcp_server_name: cfg.name,
+                    authorization_categories: [`mcp_tool:${cfg.name}:${t.name}`],
+                });
+                toolExecutors.set(fqName, async (call) => {
+                    const result = await client.callTool({ name: t.name, arguments: call.arguments });
+                    const text = result.content.map(c => c.text ?? "").join("\n");
+                    return {
+                        call_id: call.id,
+                        success: !result.isError,
+                        content: text,
+                        ...(result.isError && { error: { code: "MCP_ERROR", message: text } }),
+                    };
+                });
+            }
+            mcpClients.push(client);
+            io.write(`MCP connected: ${cfg.name} (${tools.length} tools)\n`);
+        }
+        catch (err) {
+            io.warn(`MCP server "${cfg.name}" failed to connect: ${err.message}`);
+        }
+    }
+    const cleanupMcp = async () => {
+        for (const c of mcpClients)
+            await c.disconnect().catch(() => { });
+    };
+    // ------------------- v0.4 multi-agent branch -------------------
+    // When the brief opts into multi-agent (roles: [planner, executor, reviewer, ...]),
+    // the coordinator drives the rest of the run. Single-agent mode (roles
+    // unset or roles: []) falls through to the v0.3 phase loop below.
+    const roleIds = (opts.runtimeRoles ?? brief.frontmatter.roles ?? []).filter((r) => typeof r === "string" && r.length > 0);
+    if (roleIds.length > 0) {
+        const { runCoordinator, resolveBudgets } = await import("./coordinator/index.js");
+        const budgets = { ...resolveBudgets(brief), ...(opts.runtimeBudgets ?? {}) };
+        transition("execute", "intake accepted (multi-agent)");
+        persist();
+        const coordResult = await runCoordinator({
+            brief,
+            framework: system,
+            adapter,
+            io,
+            roleIds,
+            budgets,
+            toolDefinitions,
+            toolExecutors,
+            sandbox,
+            sessionApproved: session.meta.session_approved_categories ?? [],
+            sessionId: session.meta.brief_id,
+            onSnapshot: (snap, events) => {
+                // Project coordinator snapshot into SessionMeta (schema v3 fields).
+                const metaV3 = session.meta;
+                metaV3.coordinator_state = snap.state;
+                metaV3.plan = snap.plan;
+                metaV3.subtask_states = snap.subtask_states;
+                metaV3.active_roles = snap.active_roles;
+                metaV3.budgets = snap.budgets;
+                metaV3.coordinator_events = events;
+                if (!metaV3.cost)
+                    metaV3.cost = { tokens_used: 0, wall_clock_ms: 0, tool_calls: 0, tool_calls_by_subtask: {}, started_at: new Date().toISOString() };
+                metaV3.cost.tokens_used = snap.cost.tokens_used;
+                metaV3.cost.wall_clock_ms = snap.cost.wall_clock_ms;
+                metaV3.cost.tool_calls_by_subtask = { ...snap.cost.tool_calls_by_subtask };
+                persist();
+            },
+            onMessage: (m) => {
+                recordMessage(m);
+            },
+            onApproval: (a) => {
+                session.meta.destructive_approvals.push({
+                    at: new Date().toISOString(),
+                    action: a.action,
+                    approved: a.approved,
+                    ...(a.session_categories ? { session_categories: a.session_categories } : {}),
+                });
+                if (a.approved && a.session_categories) {
+                    const existing = session.meta.session_approved_categories ?? [];
+                    for (const c of a.session_categories)
+                        if (!existing.includes(c))
+                            existing.push(c);
+                    session.meta.session_approved_categories = existing;
+                }
+                persist();
+            },
+        });
+        transition(coordResult.completed ? "done" : "blocker", `coordinator final_state=${coordResult.final_state}`);
+        persist();
+        await cleanupMcp();
+        return {
+            session_id: session.meta.brief_id,
+            final_phase: coordResult.final_phase,
+            completed: coordResult.completed,
+            halted: coordResult.halted,
+            ...(coordResult.halt_reason ? { halt_reason: coordResult.halt_reason } : {}),
+            messages: session.messages,
+        };
+    }
+    // ------------------- Phase 1 (single-agent, v0.3) -------------------
+    transition("execute", "intake accepted");
+    persist();
+    let executeResult = await runExecute({
+        brief,
+        adapter,
+        system,
+        io,
+        mode,
+        history: historyForExecute,
+        toolDefinitions,
+        toolExecutors,
+        sandbox,
+        sessionApproved: session.meta.session_approved_categories ?? [],
+        onMessage: (m) => {
+            recordMessage(m);
+            persist();
+        },
+    });
+    // ------------------- Phase 3 (loop) -------------------
+    while (executeResult.outcome === "destructive_denied") {
+        transition("destructive", "destructive intent detected");
+        persist();
+        // Two variants of Phase 3:
+        //   (a) Tool-call gate: the runner detected an unauthorized tool call.
+        //       Prompt y / Y / n. Y promotes the missing categories session-wide.
+        //   (b) Text-based gate: detector matched a destructive verb in the
+        //       assistant text. Original v0.2 behavior, one-shot y/n.
+        if (executeResult.destructive_tool_call) {
+            const call = executeResult.destructive_tool_call;
+            const missing = executeResult.destructive_missing_categories ?? [];
+            io.banner("Phase 3: Tool authorization required");
+            io.write(`Tool:        ${call.name}\n` +
+                `Arguments:   ${JSON.stringify(call.arguments)}\n` +
+                `Categories:  ${missing.join(", ")}\n`);
+            io.write(`Approve? y = this call only, Y = approve "${missing.join(", ")}" for the rest of the session, n = deny\n`);
+            const reply = (await io.prompt("> ")).trim();
+            const approveOnce = reply === "y" || reply === "yes";
+            const approveSession = reply === "Y";
+            const approved = approveOnce || approveSession;
+            session.meta.destructive_approvals.push({
+                at: new Date().toISOString(),
+                action: `tool:${call.name}`,
+                approved,
+                ...(approveSession && { session_categories: missing }),
+            });
+            if (approveSession) {
+                session.meta.session_approved_categories = [
+                    ...(session.meta.session_approved_categories ?? []),
+                    ...missing,
+                ];
+            }
+            persist();
+            if (!approved) {
+                // Inject a synthetic tool result expressing denial, then continue.
+                const denialMsg = {
+                    role: "user",
+                    content: `[tool_result ${call.id} (denied by operator)]\nThe operator did not approve "${call.name}". Pick a different path or stop.`,
+                    at: new Date().toISOString(),
+                    meta: { phase: "execute" },
+                };
+                recordMessage(denialMsg);
+                transition("execute", "tool call denied");
+                persist();
+                executeResult = await runExecute({
+                    brief, adapter, system, io, mode,
+                    history: [...executeResult.history, denialMsg],
+                    toolDefinitions, toolExecutors, sandbox,
+                    sessionApproved: session.meta.session_approved_categories ?? [],
+                    onMessage: (m) => { recordMessage(m); persist(); },
+                });
+                continue;
+            }
+            transition("execute", approveSession ? "tool approved (session)" : "tool approved (once)");
+            persist();
+            executeResult = await runExecute({
+                brief, adapter, system, io, mode,
+                history: executeResult.history,
+                toolDefinitions, toolExecutors, sandbox,
+                sessionApproved: session.meta.session_approved_categories ?? [],
+                onMessage: (m) => { recordMessage(m); persist(); },
+            });
+            continue;
+        }
+        // Variant (b): text-based destructive gate (v0.2 path).
+        const last = lastAssistant(executeResult.history);
+        const detection = executeResult.blocking_detectors?.destructive;
+        if (!detection || !detection.destructive)
+            break;
+        const approved = await awaitOperatorYes({
+            io,
+            detection,
+            ...(last ? { lastAssistant: last } : {}),
+        });
+        session.meta.destructive_approvals.push({
+            at: new Date().toISOString(),
+            action: detection.action ?? "unspecified",
+            approved,
+        });
+        persist();
+        const followUp = approved ? approvalMessage(detection) : denialMessage(detection);
+        recordMessage(followUp);
+        transition("execute", approved ? "destructive approved" : "destructive denied");
+        persist();
+        executeResult = await runExecute({
+            brief, adapter, system, io, mode,
+            history: [...executeResult.history, followUp],
+            toolDefinitions, toolExecutors, sandbox,
+            sessionApproved: session.meta.session_approved_categories ?? [],
+            onMessage: (m) => { recordMessage(m); persist(); },
+        });
+    }
+    // ------------------- Phase 2 -------------------
+    if (executeResult.outcome === "blocker") {
+        transition("blocker", executeResult.reason ?? "blocker");
+        persist();
+        reportBlocker({
+            io,
+            reason: executeResult.reason ?? "unspecified",
+            ...(lastAssistant(executeResult.history) ? { lastAssistant: lastAssistant(executeResult.history) } : {}),
+        });
+        await cleanupMcp();
+        return {
+            session_id: session.meta.brief_id,
+            final_phase: "blocker",
+            completed: false,
+            halted: true,
+            halt_reason: executeResult.reason ?? "blocker",
+            messages: session.messages,
+        };
+    }
+    if (executeResult.outcome === "max_steps") {
+        transition("blocker", "max_steps");
+        persist();
+        io.banner("Phase 2: Blocker (max_steps reached)");
+        io.write(`Stopping: ${executeResult.reason}\n`);
+        await cleanupMcp();
+        return {
+            session_id: session.meta.brief_id,
+            final_phase: "blocker",
+            completed: false,
+            halted: true,
+            halt_reason: "max_steps",
+            messages: session.messages,
+        };
+    }
+    if (executeResult.outcome === "operator_done") {
+        transition("completion", "operator ended");
+        persist();
+        await cleanupMcp();
+        return {
+            session_id: session.meta.brief_id,
+            final_phase: "completion",
+            completed: true,
+            halted: false,
+            messages: session.messages,
+        };
+    }
+    // ------------------- Phase 4 -------------------
+    transition("completion", "completion detected");
+    persist();
+    const finalReport = await runCompletion({
+        adapter,
+        system,
+        io,
+        history: executeResult.history,
+    });
+    recordMessage(finalReport);
+    transition("done", "completion report delivered");
+    persist();
+    await cleanupMcp();
+    return {
+        session_id: session.meta.brief_id,
+        final_phase: "done",
+        completed: true,
+        halted: false,
+        messages: session.messages,
+    };
+}
+function createSession(brief, briefId) {
+    const now = new Date().toISOString();
+    const meta = {
+        brief_id: briefId,
+        project: brief.frontmatter.project,
+        started_at: now,
+        updated_at: now,
+        phase: "intake",
+        mode: null,
+        destructive_approvals: [],
+        transitions: [],
+        schema_version: 2,
+        session_approved_categories: [],
+        tool_calls: [],
+    };
+    return { meta, brief, messages: [] };
+}
+function lastAssistant(messages) {
+    for (let i = messages.length - 1; i >= 0; i--) {
+        const m = messages[i];
+        if (m && m.role === "assistant")
+            return m;
+    }
+    return undefined;
+}
+async function resolveMode(brief, opts, io, operatorReply) {
+    // Precedence: CLI override > brief frontmatter > operator-typed > prompt.
+    if (opts.mode)
+        return opts.mode;
+    if (brief.frontmatter.mode)
+        return brief.frontmatter.mode;
+    const reply = operatorReply.toLowerCase();
+    if (/\bauto(?:-?pilot)?\b/.test(reply))
+        return "auto";
+    if (/\b(gated|per[-\s]?step|step)\b/.test(reply))
+        return "gated";
+    const picked = await io.prompt('Execution mode? Type "gated" or "auto":');
+    return picked.trim().toLowerCase() === "auto" ? "auto" : "gated";
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9F,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAgB;IACxC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,SAAU,CAAC;IACvD,MAAM,KAAK,GAAU,UAAU,CAAC,UAAU,CAAC,CAAC;IAE5C,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,qBAAqB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,gBAAgB,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,YAAY,OAAO,CAAC,EAAE,0DAA0D,CACjF,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,SAAS,CAAC;IAEzB,0BAA0B;IAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAC;IAClF,IAAI,OAAqB,CAAC;IAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS,GAAG,IAAI,CAAC;YACjB,EAAE,CAAC,MAAM,CAAC,oBAAoB,OAAO,YAAY,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,OAAO,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnD,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,CAAU,EAAE,EAAE;QACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,EAAS,EAAE,MAAc,EAAE,EAAE;QAC/C,MAAM,CAAC,GAAoB;YACzB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;YACxB,EAAE;YACF,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,MAAM;SACP,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,kDAAkD;IAClD,IAAI,IAAmB,CAAC;IACxB,IAAI,iBAA4B,CAAC;IAEjC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAClD,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjC,OAAO,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACnC,aAAa,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACxC,OAAO,EAAE,CAAC;QAEV,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,qEAAqE;YACrE,4CAA4C;YAC5C,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjC,aAAa,CAAC;oBACZ,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,MAAM,CAAC,cAAc;oBAC9B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE;iBACzC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,CAAC;YACV,EAAE,CAAC,KAAK,CACN,uGAAuG,CACxG,CAAC;YACF,OAAO;gBACL,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;gBACjC,WAAW,EAAE,QAAQ;gBACrB,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,qBAAqB;gBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACzB,iBAAiB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACzB,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC/C,CAAC;IAED,uEAAuE;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACrE,IAAI,aAAa,CAAC;IAClB,IAAI,CAAC;QAAC,aAAa,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,aAAa,GAAG,IAAI,CAAC;IAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC;QACrC,OAAO;QACP,gBAAgB,EAAE,MAAM;QACxB,qBAAqB,EAAE,SAAS;QAChC,aAAa;QACb,YAAY,EAAE,CAAC,IAAI,CAAC,YAAY;KACjC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAqB,EAAE,CAAC;IAC7C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAwB,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/C,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACnC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAI,KAAK,CAAC,WAAmF,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9H,MAAM,SAAS,GAAG,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/F,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5C,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACvC,eAAe,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,MAAM;oBACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,YAAY,MAAM,EAAE;oBAClD,YAAY,EAAE,CAAC,CAAC,WAAW;oBAC3B,MAAM,EAAE,KAAK;oBACb,eAAe,EAAE,GAAG,CAAC,IAAI;oBACzB,wBAAwB,EAAE,CAAC,YAAY,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;iBAC7D,CAAC,CAAC;gBACH,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;oBACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAoC,EAAE,CAAC,CAAC;oBAC7G,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC9D,OAAO;wBACL,OAAO,EAAE,IAAI,CAAC,EAAE;wBAChB,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO;wBACxB,OAAO,EAAE,IAAI;wBACb,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;qBACvE,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,EAAE,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,IAAI,wBAAyB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC;IAEF,kEAAkE;IAClE,oFAAoF;IACpF,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CACzE,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1D,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7E,UAAU,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;QACvD,OAAO,EAAE,CAAC;QACV,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC;YACvC,KAAK;YACL,SAAS,EAAE,MAAM;YACjB,OAAO;YACP,EAAE;YACF,OAAO;YACP,OAAO;YACP,eAAe;YACf,aAAa;YACb,OAAO;YACP,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,IAAI,EAAE;YAC/D,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YAChC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBAC3B,oEAAoE;gBACpE,MAAM,MAAM,GAAG,OAAO,CAAC,IAQtB,CAAC;gBACF,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC;gBACtC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;gBACxB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;gBAC5C,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;gBACxC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC9B,MAAM,CAAC,kBAAkB,GAAG,MAAM,CAAC;gBACnC,IAAI,CAAC,MAAM,CAAC,IAAI;oBAAE,MAAM,CAAC,IAAI,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,qBAAqB,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrJ,MAAM,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC3E,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;gBACf,aAAa,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;YACD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;oBACtC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9E,CAAC,CAAC;gBACH,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,kBAAkB,EAAE,CAAC;oBACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,2BAA2B,IAAI,EAAE,CAAC;oBAChE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,kBAAkB;wBAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;4BAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClF,OAAO,CAAC,IAAI,CAAC,2BAA2B,GAAG,QAAQ,CAAC;gBACtD,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;SACF,CAAC,CAAC;QACH,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,2BAA2B,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7G,OAAO,EAAE,CAAC;QACV,MAAM,UAAU,EAAE,CAAC;QACnB,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YACjC,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,UAAU,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACzC,OAAO,EAAE,CAAC;IACV,IAAI,aAAa,GAAG,MAAM,UAAU,CAAC;QACnC,KAAK;QACL,OAAO;QACP,MAAM;QACN,EAAE;QACF,IAAI;QACJ,OAAO,EAAE,iBAAiB;QAC1B,eAAe;QACf,aAAa;QACb,OAAO;QACP,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,IAAI,EAAE;QAC/D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;YACf,aAAa,CAAC,CAAC,CAAC,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;KACF,CAAC,CAAC;IAEH,yDAAyD;IACzD,OAAO,aAAa,CAAC,OAAO,KAAK,oBAAoB,EAAE,CAAC;QACtD,UAAU,CAAC,aAAa,EAAE,6BAA6B,CAAC,CAAC;QACzD,OAAO,EAAE,CAAC;QAEV,2BAA2B;QAC3B,uEAAuE;QACvE,0EAA0E;QAC1E,oEAAoE;QACpE,8DAA8D;QAC9D,IAAI,aAAa,CAAC,qBAAqB,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,aAAa,CAAC,qBAAqB,CAAC;YACjD,MAAM,OAAO,GAAG,aAAa,CAAC,8BAA8B,IAAI,EAAE,CAAC;YACnE,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC;YAClD,EAAE,CAAC,KAAK,CACN,gBAAgB,IAAI,CAAC,IAAI,IAAI;gBAC7B,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI;gBAClD,gBAAgB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACvC,CAAC;YACF,EAAE,CAAC,KAAK,CAAC,6CAA6C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YACrH,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,CAAC;YACrD,MAAM,cAAc,GAAG,KAAK,KAAK,GAAG,CAAC;YACrC,MAAM,QAAQ,GAAG,WAAW,IAAI,cAAc,CAAC;YAE/C,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;gBACtC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,MAAM,EAAE,QAAQ,IAAI,CAAC,IAAI,EAAE;gBAC3B,QAAQ;gBACR,GAAG,CAAC,cAAc,IAAI,EAAE,kBAAkB,EAAE,OAAmB,EAAE,CAAC;aACnE,CAAC,CAAC;YACH,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,2BAA2B,GAAG;oBACzC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,IAAI,EAAE,CAAC;oBACnD,GAAG,OAAO;iBACX,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,CAAC;YAEV,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,mEAAmE;gBACnE,MAAM,SAAS,GAAY;oBACzB,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,gBAAgB,IAAI,CAAC,EAAE,yDAAyD,IAAI,CAAC,IAAI,mCAAmC;oBACrI,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;iBAC3B,CAAC;gBACF,aAAa,CAAC,SAAS,CAAC,CAAC;gBACzB,UAAU,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;gBAC1C,OAAO,EAAE,CAAC;gBACV,aAAa,GAAG,MAAM,UAAU,CAAC;oBAC/B,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI;oBAChC,OAAO,EAAE,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC;oBAC9C,eAAe,EAAE,aAAa,EAAE,OAAO;oBACvC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,IAAI,EAAE;oBAC/D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;iBACnD,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,UAAU,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;YAC3F,OAAO,EAAE,CAAC;YACV,aAAa,GAAG,MAAM,UAAU,CAAC;gBAC/B,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI;gBAChC,OAAO,EAAE,aAAa,CAAC,OAAO;gBAC9B,eAAe,EAAE,aAAa,EAAE,OAAO;gBACvC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,IAAI,EAAE;gBAC/D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;aACnD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,wDAAwD;QACxD,MAAM,IAAI,GAAG,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,aAAa,CAAC,kBAAkB,EAAE,WAAW,CAAC;QAChE,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,WAAW;YAAE,MAAM;QAEhD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC;YACtC,EAAE;YACF,SAAS;YACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;YACtC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,aAAa;YACzC,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;QAEV,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAClF,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxB,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAChF,OAAO,EAAE,CAAC;QAEV,aAAa,GAAG,MAAM,UAAU,CAAC;YAC/B,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI;YAChC,OAAO,EAAE,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC;YAC7C,eAAe,EAAE,aAAa,EAAE,OAAO;YACvC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,IAAI,EAAE;YAC/D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;IAED,kDAAkD;IAClD,IAAI,aAAa,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACxC,UAAU,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;QACzD,OAAO,EAAE,CAAC;QACV,aAAa,CAAC;YACZ,EAAE;YACF,MAAM,EAAE,aAAa,CAAC,MAAM,IAAI,aAAa;YAC7C,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,aAAa,CAAC,aAAa,CAAC,OAAO,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1G,CAAC,CAAC;QACH,MAAM,UAAU,EAAE,CAAC;QACnB,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YACjC,WAAW,EAAE,SAAS;YACtB,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,aAAa,CAAC,MAAM,IAAI,SAAS;YAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;QAC1C,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACnC,OAAO,EAAE,CAAC;QACV,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC;QAClD,EAAE,CAAC,KAAK,CAAC,aAAa,aAAa,CAAC,MAAM,IAAI,CAAC,CAAC;QAChD,MAAM,UAAU,EAAE,CAAC;QACnB,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YACjC,WAAW,EAAE,SAAS;YACtB,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,WAAW;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QAC9C,UAAU,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAC3C,OAAO,EAAE,CAAC;QACV,MAAM,UAAU,EAAE,CAAC;QACnB,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YACjC,WAAW,EAAE,YAAY;YACzB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,UAAU,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IAChD,OAAO,EAAE,CAAC;IACV,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC;QACtC,OAAO;QACP,MAAM;QACN,EAAE;QACF,OAAO,EAAE,aAAa,CAAC,OAAO;KAC/B,CAAC,CAAC;IACH,aAAa,CAAC,WAAW,CAAC,CAAC;IAC3B,UAAU,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;IAClD,OAAO,EAAE,CAAC;IACV,MAAM,UAAU,EAAE,CAAC;IAEnB,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;QACjC,WAAW,EAAE,MAAM;QACnB,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAY,EAAE,OAAe;IAClD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAgB;QACxB,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,OAAO;QAClC,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,GAAG;QACf,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,IAAI;QACV,qBAAqB,EAAE,EAAE;QACzB,WAAW,EAAE,EAAE;QACf,cAAc,EAAE,CAAC;QACjB,2BAA2B,EAAE,EAAE;QAC/B,UAAU,EAAE,EAAE;KACf,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,aAAa,CAAC,QAAmB;IACxC,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,KAAY,EACZ,IAAgB,EAChB,EAAY,EACZ,aAAqB;IAErB,0EAA0E;IAC1E,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IAChC,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;IAC1D,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACtD,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC"}

package/dist/sandbox/host-allowlist.d.ts

@@ -0,0 +1,13 @@
+export interface HostAllowlist {
+    hosts: ReadonlySet<string>;
+    wildcardSuffixes: readonly string[];
+    wildcardBases: ReadonlySet<string>;
+}
+export declare class HostAllowlistError extends Error {
+    readonly code: "HOST_ALLOWLIST_MALFORMED";
+    constructor(message: string);
+}
+export declare function loadHostAllowlist(path: string): Promise<HostAllowlist | null>;
+export declare function buildAllowlist(entries: unknown[]): HostAllowlist;
+export declare function isHostAllowed(allowlist: HostAllowlist | null, hostname: string): boolean;
+//# sourceMappingURL=host-allowlist.d.ts.map

package/dist/sandbox/host-allowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-allowlist.d.ts","sourceRoot":"","sources":["../../src/sandbox/host-allowlist.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,aAAa;IAE5B,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAE3B,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAEpC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACpC;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAG,0BAA0B,CAAU;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAKD,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAmBnF;AAID,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,aAAa,CAsBhE;AAID,wBAAgB,aAAa,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CASxF"}