@sapiom/harness 0.0.0 → 0.1.1

package/dist/core/inject/claude-settings.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Generates the per-session Claude Code `--settings` file and the tiny
+ * hook-emitter script it points at.
+ *
+ * Nothing here touches the user's own `~/.claude` config — everything is
+ * written under the harness's generated-config directory and passed to
+ * `claude` via `--settings <path>` for the lifetime of one session.
+ */
+/** The six Claude Code hook events the harness listens for. */
+declare const HOOK_EVENTS: readonly ["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Stop", "SessionEnd"];
+export type ClaudeHookEvent = (typeof HOOK_EVENTS)[number];
+export interface GenerateClaudeSettingsOptions {
+    /** The harness session this config is generated for. */
+    harnessSessionId: string;
+    /**
+     * Root directory generated configs live under. Defaults to
+     * `HARNESS_PATHS.generated` (`~/.sapiom/harness/generated`). Override in
+     * tests to avoid touching the real home directory.
+     */
+    generatedRoot?: string;
+}
+export interface GeneratedClaudeSettings {
+    /** Absolute path to the generated settings.json (pass as `--settings`). */
+    settingsPath: string;
+    /** Absolute path to the generated emit.cjs hook script. */
+    emitScriptPath: string;
+}
+/**
+ * Write the generated settings.json + emit.cjs for one harness session.
+ * Returns the settings.json path — pass it as `claude --settings <path>`.
+ */
+export declare function generateClaudeSettings(options: GenerateClaudeSettingsOptions): Promise<GeneratedClaudeSettings>;
+export {};
+//# sourceMappingURL=claude-settings.d.ts.map

package/dist/core/inject/claude-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-settings.d.ts","sourceRoot":"","sources":["../../../src/core/inject/claude-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,+DAA+D;AAC/D,QAAA,MAAM,WAAW,kGAOP,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,MAAM,WAAW,6BAA6B;IAC5C,wDAAwD;IACxD,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,2EAA2E;IAC3E,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,cAAc,EAAE,MAAM,CAAC;CACxB;AA0GD;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,uBAAuB,CAAC,CA2BlC"}

package/dist/core/inject/claude-settings.js

@@ -0,0 +1,152 @@
+/**
+ * Generates the per-session Claude Code `--settings` file and the tiny
+ * hook-emitter script it points at.
+ *
+ * Nothing here touches the user's own `~/.claude` config — everything is
+ * written under the harness's generated-config directory and passed to
+ * `claude` via `--settings <path>` for the lifetime of one session.
+ */
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { HARNESS_PATHS } from "../../shared/types.js";
+import { expandHome } from "../paths.js";
+/** The six Claude Code hook events the harness listens for. */
+const HOOK_EVENTS = [
+    "SessionStart",
+    "UserPromptSubmit",
+    "PreToolUse",
+    "PostToolUse",
+    "Stop",
+    "SessionEnd",
+];
+/**
+ * The hook-emitter script. Self-contained CommonJS, node builtins only — it
+ * runs as a bare `node <path>` child process spawned by Claude Code itself,
+ * so it can't rely on the harness package (or any node_modules) being
+ * resolvable from wherever the user's project lives.
+ *
+ * Contract with the harness server: reads the hook's stdin JSON, wraps it
+ * with the hook event name and this session's id, and POSTs it to
+ * SAPIOM_HARNESS_INGEST_URL with a bearer token. A dead or slow harness
+ * server must never slow down or break the user's agent, so every failure
+ * mode here is swallowed and the process always exits 0 quickly.
+ */
+const EMIT_SCRIPT_SOURCE = `#!/usr/bin/env node
+"use strict";
+
+// Generated by @sapiom/harness — do not edit by hand, it is overwritten
+// every time a new session starts.
+
+const hookEvent = process.argv[2] || "unknown";
+
+// Absolute ceiling: whatever else happens, exit quickly so we never hang
+// the agent's hook pipeline.
+const hardStop = setTimeout(() => {
+  try {
+    process.exit(0);
+  } catch {
+    // ignore
+  }
+}, 1000);
+
+function readStdin() {
+  return new Promise((resolve) => {
+    if (process.stdin.isTTY) {
+      resolve("");
+      return;
+    }
+    let data = "";
+    const giveUp = setTimeout(() => resolve(data), 300);
+    process.stdin.setEncoding("utf8");
+    process.stdin.on("data", (chunk) => {
+      data += chunk;
+    });
+    process.stdin.on("end", () => {
+      clearTimeout(giveUp);
+      resolve(data);
+    });
+    process.stdin.on("error", () => {
+      clearTimeout(giveUp);
+      resolve(data);
+    });
+  });
+}
+
+async function main() {
+  let payload = {};
+  try {
+    const raw = await readStdin();
+    if (raw) payload = JSON.parse(raw);
+  } catch {
+    // Malformed stdin — still report that the hook fired, with no payload.
+  }
+
+  const ingestUrl = process.env.SAPIOM_HARNESS_INGEST_URL;
+  if (!ingestUrl) return;
+
+  const body = JSON.stringify({
+    hookEvent: hookEvent,
+    receivedAt: new Date().toISOString(),
+    harnessSessionId: process.env.SAPIOM_HARNESS_SESSION_ID || null,
+    payload: payload,
+  });
+
+  const controller = new AbortController();
+  const abortTimer = setTimeout(() => controller.abort(), 200);
+
+  try {
+    await fetch(ingestUrl, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        authorization: "Bearer " + (process.env.SAPIOM_HARNESS_INGEST_TOKEN || ""),
+      },
+      body: body,
+      signal: controller.signal,
+    });
+  } catch {
+    // Fire-and-forget: ingest being down/slow must never surface here.
+  } finally {
+    clearTimeout(abortTimer);
+  }
+}
+
+main()
+  .catch(() => {})
+  .finally(() => {
+    clearTimeout(hardStop);
+    process.exit(0);
+  });
+`;
+function settingsDirFor(root, harnessSessionId) {
+    return path.join(root, harnessSessionId);
+}
+/**
+ * Write the generated settings.json + emit.cjs for one harness session.
+ * Returns the settings.json path — pass it as `claude --settings <path>`.
+ */
+export async function generateClaudeSettings(options) {
+    const root = expandHome(options.generatedRoot ?? HARNESS_PATHS.generated);
+    const dir = settingsDirFor(root, options.harnessSessionId);
+    await fs.mkdir(dir, { recursive: true });
+    const emitScriptPath = path.join(dir, "emit.cjs");
+    await fs.writeFile(emitScriptPath, EMIT_SCRIPT_SOURCE, { mode: 0o755 });
+    const hooks = {};
+    for (const event of HOOK_EVENTS) {
+        hooks[event] = [
+            {
+                matcher: "",
+                hooks: [
+                    {
+                        type: "command",
+                        command: `node ${emitScriptPath} ${event}`,
+                    },
+                ],
+            },
+        ];
+    }
+    const settingsPath = path.join(dir, "settings.json");
+    await fs.writeFile(settingsPath, JSON.stringify({ hooks }, null, 2) + "\n", "utf8");
+    return { settingsPath, emitScriptPath };
+}
+//# sourceMappingURL=claude-settings.js.map

package/dist/core/inject/claude-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-settings.js","sourceRoot":"","sources":["../../../src/core/inject/claude-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,+DAA+D;AAC/D,MAAM,WAAW,GAAG;IAClB,cAAc;IACd,kBAAkB;IAClB,YAAY;IACZ,aAAa;IACb,MAAM;IACN,YAAY;CACJ,CAAC;AAsBX;;;;;;;;;;;GAWG;AACH,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsF1B,CAAC;AAEF,SAAS,cAAc,CAAC,IAAY,EAAE,gBAAwB;IAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAsC;IAEtC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAExE,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,KAAK,CAAC,KAAK,CAAC,GAAG;YACb;gBACE,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,QAAQ,cAAc,IAAI,KAAK,EAAE;qBAC3C;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAEpF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;AAC1C,CAAC"}

package/dist/core/inject/mcp-config.d.ts

@@ -0,0 +1,26 @@
+export interface McpConfigOptions {
+    /** SAPIOM_ENVIRONMENT to pass through to the sapiom-dev child process. */
+    environment?: string;
+    /**
+     * Cached Sapiom API key (from CLI auth), if signed in. Sent as
+     * `x-api-key` on the remote `sapiom` MCP — empirically verified against
+     * api.sapiom.ai/v1/mcp (both `x-api-key` and `Authorization: Bearer` are
+     * accepted for `sk_`-prefixed keys; `x-api-key` matches its CORS
+     * allow-list order and needs no prefix formatting). Omitted entirely when
+     * absent (`--no-auth`, or not yet signed in) — every remote tool call
+     * then 401s, same as today.
+     */
+    apiKey?: string | null;
+    /** Root directory generated configs live under. Defaults to
+     *  HARNESS_PATHS.generated. Override in tests to avoid the real home dir. */
+    generatedRoot?: string;
+}
+/**
+ * Writes the `--mcp-config` file for a harness session: the remote HTTP
+ * capability MCP (`sapiom`) and the local stdio authoring MCP (`sapiom-dev`).
+ * Written under `HARNESS_PATHS.generated/<harnessSessionId>/` so concurrent
+ * sessions never share (or race on) a config file. Returns the file's
+ * absolute path for the adapter to pass as `--mcp-config <path>`.
+ */
+export declare function generateMcpConfig(harnessSessionId: string, options?: McpConfigOptions): Promise<string>;
+//# sourceMappingURL=mcp-config.d.ts.map

package/dist/core/inject/mcp-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-config.d.ts","sourceRoot":"","sources":["../../../src/core/inject/mcp-config.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;iFAC6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,MAAM,CAAC,CA6BjB"}

package/dist/core/inject/mcp-config.js

@@ -0,0 +1,39 @@
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { HARNESS_PATHS } from "../../shared/types.js";
+import { expandHome } from "../../cli/paths.js";
+/**
+ * Writes the `--mcp-config` file for a harness session: the remote HTTP
+ * capability MCP (`sapiom`) and the local stdio authoring MCP (`sapiom-dev`).
+ * Written under `HARNESS_PATHS.generated/<harnessSessionId>/` so concurrent
+ * sessions never share (or race on) a config file. Returns the file's
+ * absolute path for the adapter to pass as `--mcp-config <path>`.
+ */
+export async function generateMcpConfig(harnessSessionId, options = {}) {
+    const dir = path.join(expandHome(options.generatedRoot ?? HARNESS_PATHS.generated), harnessSessionId);
+    await fs.mkdir(dir, { recursive: true });
+    const sapiomEnvironment = options.environment ?? process.env.SAPIOM_ENVIRONMENT;
+    const devEnv = sapiomEnvironment
+        ? { SAPIOM_ENVIRONMENT: sapiomEnvironment }
+        : undefined;
+    const config = {
+        mcpServers: {
+            sapiom: {
+                type: "http",
+                url: "https://api.sapiom.ai/v1/mcp",
+                ...(options.apiKey ? { headers: { "x-api-key": options.apiKey } } : {}),
+            },
+            "sapiom-dev": {
+                command: "npx",
+                args: ["-y", "@sapiom/mcp"],
+                ...(devEnv ? { env: devEnv } : {}),
+            },
+        },
+    };
+    const filePath = path.join(dir, "mcp-config.json");
+    // May now carry a live API key (the `sapiom` entry's headers) — restrict
+    // to the owner, matching how ~/.sapiom/credentials.json is written.
+    await fs.writeFile(filePath, JSON.stringify(config, null, 2) + "\n", { mode: 0o600 });
+    return filePath;
+}
+//# sourceMappingURL=mcp-config.js.map

package/dist/core/inject/mcp-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-config.js","sourceRoot":"","sources":["../../../src/core/inject/mcp-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAoBhD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,gBAAwB,EACxB,UAA4B,EAAE;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACtG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAChF,MAAM,MAAM,GAAuC,iBAAiB;QAClE,CAAC,CAAC,EAAE,kBAAkB,EAAE,iBAAiB,EAAE;QAC3C,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,MAAM,GAAG;QACb,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,8BAA8B;gBACnC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC;gBAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnC;SACF;KACF,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACnD,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/inject/retention.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Retention policy for the per-session generated config dirs
+ * (`~/.sapiom/harness/generated/<harnessSessionId>/` — settings.json,
+ * emit.cjs, mcp-config.json, system-prompt.txt). Without it every session
+ * launch leaves a dir behind forever (real installs accumulate thousands).
+ *
+ * Lifecycle facts the policy rests on (see the generators in this directory
+ * and server/index.ts's createDefaultBuildLaunchOpts):
+ * - Most files are consumed at launch — `--settings`/`--mcp-config` are
+ *   parsed by the agent at startup, system-prompt.txt is inlined into argv
+ *   before spawn — EXCEPT emit.cjs, which the agent re-executes as a child
+ *   process on every hook event. A session's dir must therefore survive for
+ *   as long as its pty runs.
+ * - buildLaunchOpts regenerates every file on BOTH create() and resume(),
+ *   so nothing in the dir is needed once the session has exited: deleting
+ *   at exit can never break a later resume.
+ *
+ * Two mechanisms:
+ * - removeGeneratedSessionDir(): per-session delete, wired to the session's
+ *   "exited" status transition.
+ * - sweepGeneratedDirs(): boot-time sweep for dirs the exit-time delete
+ *   never reached (crashes, force-kills, pre-retention accumulation) —
+ *   age-gated so anything plausibly still in use is left alone.
+ *
+ * Safety: deletion only ever targets a plain directory that is a direct
+ * child of a root that itself looks like a dedicated generated-config dir
+ * (resolveGeneratedRoot / childPath). Symlinked entries are never
+ * followed and never deleted.
+ */
+/** Sweep threshold: a non-live dir must be at least this stale (mtime) to be
+ *  removed. Generous — the only cost of keeping a dead dir is disk clutter,
+ *  while a false positive on some unforeseen liveness signal is worse. */
+export declare const GENERATED_SWEEP_MAX_AGE_MS: number;
+export interface GeneratedRetentionOptions {
+    /** Root directory generated configs live under. Defaults to
+     *  HARNESS_PATHS.generated. Override in tests to avoid the real home dir. */
+    generatedRoot?: string;
+}
+export interface SweepGeneratedDirsOptions extends GeneratedRetentionOptions {
+    /** Dirs named after a live session id are never removed, whatever their
+     *  age. Defaults to treating nothing as live. */
+    isLiveSession?: (harnessSessionId: string) => boolean;
+    /** Minimum staleness before a dir is swept. Defaults to
+     *  GENERATED_SWEEP_MAX_AGE_MS. */
+    maxAgeMs?: number;
+    /** Injectable clock (epoch ms) for tests. */
+    now?: () => number;
+}
+/**
+ * Deletes one session's generated dir. Only call once the session's pty has
+ * exited — the agent re-executes emit.cjs from this dir on every hook event
+ * while it runs. Returns true if a directory was removed; a missing entry,
+ * an escaping/malformed id, or a symlink (never followed) is false.
+ */
+export declare function removeGeneratedSessionDir(harnessSessionId: string, options?: GeneratedRetentionOptions): Promise<boolean>;
+/**
+ * Removes every generated dir that (a) isn't a live session's and (b) has
+ * been stale for at least `maxAgeMs`. Covers everything the exit-time
+ * delete can't: sessions that crashed with the harness, force-killed
+ * processes, and accumulation from before retention existed. Only plain
+ * directories are candidates — symlinks and stray files are left untouched.
+ * Best-effort per entry: one undeletable dir doesn't abort the rest.
+ * Returns the names of the dirs it removed.
+ */
+export declare function sweepGeneratedDirs(options?: SweepGeneratedDirsOptions): Promise<string[]>;
+//# sourceMappingURL=retention.d.ts.map

package/dist/core/inject/retention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.d.ts","sourceRoot":"","sources":["../../../src/core/inject/retention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AASH;;0EAE0E;AAC1E,eAAO,MAAM,0BAA0B,QAA0B,CAAC;AAElE,MAAM,WAAW,yBAAyB;IACxC;iFAC6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,yBAA0B,SAAQ,yBAAyB;IAC1E;qDACiD;IACjD,aAAa,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC;IACtD;sCACkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAiBD;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,GAAE,yBAA8B,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAiCnG"}

package/dist/core/inject/retention.js

@@ -0,0 +1,119 @@
+/**
+ * Retention policy for the per-session generated config dirs
+ * (`~/.sapiom/harness/generated/<harnessSessionId>/` — settings.json,
+ * emit.cjs, mcp-config.json, system-prompt.txt). Without it every session
+ * launch leaves a dir behind forever (real installs accumulate thousands).
+ *
+ * Lifecycle facts the policy rests on (see the generators in this directory
+ * and server/index.ts's createDefaultBuildLaunchOpts):
+ * - Most files are consumed at launch — `--settings`/`--mcp-config` are
+ *   parsed by the agent at startup, system-prompt.txt is inlined into argv
+ *   before spawn — EXCEPT emit.cjs, which the agent re-executes as a child
+ *   process on every hook event. A session's dir must therefore survive for
+ *   as long as its pty runs.
+ * - buildLaunchOpts regenerates every file on BOTH create() and resume(),
+ *   so nothing in the dir is needed once the session has exited: deleting
+ *   at exit can never break a later resume.
+ *
+ * Two mechanisms:
+ * - removeGeneratedSessionDir(): per-session delete, wired to the session's
+ *   "exited" status transition.
+ * - sweepGeneratedDirs(): boot-time sweep for dirs the exit-time delete
+ *   never reached (crashes, force-kills, pre-retention accumulation) —
+ *   age-gated so anything plausibly still in use is left alone.
+ *
+ * Safety: deletion only ever targets a plain directory that is a direct
+ * child of a root that itself looks like a dedicated generated-config dir
+ * (resolveGeneratedRoot / childPath). Symlinked entries are never
+ * followed and never deleted.
+ */
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { HARNESS_PATHS } from "../../shared/types.js";
+import { expandHome } from "../paths.js";
+import { childPath } from "../path-safety.js";
+/** Sweep threshold: a non-live dir must be at least this stale (mtime) to be
+ *  removed. Generous — the only cost of keeping a dead dir is disk clutter,
+ *  while a false positive on some unforeseen liveness signal is worse. */
+export const GENERATED_SWEEP_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1000;
+/**
+ * A recursive delete under a misconfigured root would be catastrophic
+ * (imagine generatedRoot resolving to the home dir, or "/"). The generators
+ * will happily *write* wherever they're pointed, but deletion demands the
+ * root at least look like a dedicated generated-config directory: a
+ * non-root absolute path whose final segment is "generated".
+ */
+function resolveGeneratedRoot(generatedRoot) {
+    const root = expandHome(generatedRoot ?? HARNESS_PATHS.generated);
+    if (!path.isAbsolute(root) || path.basename(root) !== "generated" || path.dirname(root) === root) {
+        throw new Error(`refusing to delete under suspicious generated root "${root}"`);
+    }
+    return root;
+}
+/**
+ * Deletes one session's generated dir. Only call once the session's pty has
+ * exited — the agent re-executes emit.cjs from this dir on every hook event
+ * while it runs. Returns true if a directory was removed; a missing entry,
+ * an escaping/malformed id, or a symlink (never followed) is false.
+ */
+export async function removeGeneratedSessionDir(harnessSessionId, options = {}) {
+    const root = resolveGeneratedRoot(options.generatedRoot);
+    const dir = childPath(root, harnessSessionId);
+    if (!dir)
+        return false;
+    const stats = await fs.lstat(dir).catch(() => null);
+    if (!stats || stats.isSymbolicLink() || !stats.isDirectory())
+        return false;
+    await fs.rm(dir, { recursive: true, force: true });
+    return true;
+}
+/**
+ * Removes every generated dir that (a) isn't a live session's and (b) has
+ * been stale for at least `maxAgeMs`. Covers everything the exit-time
+ * delete can't: sessions that crashed with the harness, force-killed
+ * processes, and accumulation from before retention existed. Only plain
+ * directories are candidates — symlinks and stray files are left untouched.
+ * Best-effort per entry: one undeletable dir doesn't abort the rest.
+ * Returns the names of the dirs it removed.
+ */
+export async function sweepGeneratedDirs(options = {}) {
+    const root = resolveGeneratedRoot(options.generatedRoot);
+    const maxAgeMs = options.maxAgeMs ?? GENERATED_SWEEP_MAX_AGE_MS;
+    const now = options.now ? options.now() : Date.now();
+    let entries;
+    try {
+        entries = await fs.readdir(root, { withFileTypes: true });
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return [];
+        throw err;
+    }
+    const removed = [];
+    for (const entry of entries) {
+        // Dirent types come from lstat semantics: a symlink to a directory is
+        // isSymbolicLink(), not isDirectory() — so this both skips symlinks and
+        // guarantees rm below never follows one out of the root.
+        if (!entry.isDirectory())
+            continue;
+        const dir = childPath(root, entry.name);
+        if (!dir)
+            continue;
+        if (options.isLiveSession?.(entry.name))
+            continue;
+        const stats = await fs.lstat(dir).catch(() => null);
+        if (!stats || !stats.isDirectory())
+            continue;
+        if (now - stats.mtimeMs < maxAgeMs)
+            continue;
+        try {
+            await fs.rm(dir, { recursive: true, force: true });
+            removed.push(entry.name);
+        }
+        catch {
+            // Leave it for the next boot's sweep rather than aborting the rest.
+        }
+    }
+    return removed;
+}
+//# sourceMappingURL=retention.js.map

package/dist/core/inject/retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.js","sourceRoot":"","sources":["../../../src/core/inject/retention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C;;0EAE0E;AAC1E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAmBlE;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,aAAsB;IAClD,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACjG,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,gBAAwB,EACxB,UAAqC,EAAE;IAEvC,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAqC,EAAE;IAC9E,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,0BAA0B,CAAC;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAErD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,sEAAsE;QACtE,wEAAwE;QACxE,yDAAyD;QACzD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAClD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QAC7C,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,GAAG,QAAQ;YAAE,SAAS;QAC7C,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/inject/system-prompt.d.ts

@@ -0,0 +1,11 @@
+export interface GenerateSystemPromptFileOptions {
+    /** Root directory generated configs live under. Defaults to
+     *  HARNESS_PATHS.generated. Override in tests to avoid the real home dir. */
+    generatedRoot?: string;
+    /** Defaults to the harness's default profile (DEFAULT_SYSTEM_PROMPT). */
+    prompt?: string;
+}
+/** Writes `<generated>/<harnessSessionId>/system-prompt.txt`. Returns its
+ *  absolute path (LaunchOpts.systemPromptFile). */
+export declare function generateSystemPromptFile(harnessSessionId: string, options?: GenerateSystemPromptFileOptions): Promise<string>;
+//# sourceMappingURL=system-prompt.d.ts.map

package/dist/core/inject/system-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-prompt.d.ts","sourceRoot":"","sources":["../../../src/core/inject/system-prompt.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,+BAA+B;IAC9C;iFAC6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;mDACmD;AACnD,wBAAsB,wBAAwB,CAC5C,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,+BAAoC,GAC5C,OAAO,CAAC,MAAM,CAAC,CAQjB"}

package/dist/core/inject/system-prompt.js

@@ -0,0 +1,22 @@
+/**
+ * Writes the per-session system-prompt file the claude-code adapter reads
+ * and inlines via `--append-system-prompt` (see LaunchOpts.systemPromptFile
+ * — the adapter wants file contents, not the profile text itself, so the
+ * server layer materializes it once per session here).
+ */
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { HARNESS_PATHS } from "../../shared/types.js";
+import { expandHome } from "../paths.js";
+import { DEFAULT_SYSTEM_PROMPT } from "../../profiles/default.js";
+/** Writes `<generated>/<harnessSessionId>/system-prompt.txt`. Returns its
+ *  absolute path (LaunchOpts.systemPromptFile). */
+export async function generateSystemPromptFile(harnessSessionId, options = {}) {
+    const root = expandHome(options.generatedRoot ?? HARNESS_PATHS.generated);
+    const dir = path.join(root, harnessSessionId);
+    await fs.mkdir(dir, { recursive: true });
+    const filePath = path.join(dir, "system-prompt.txt");
+    await fs.writeFile(filePath, options.prompt ?? DEFAULT_SYSTEM_PROMPT, "utf8");
+    return filePath;
+}
+//# sourceMappingURL=system-prompt.js.map

package/dist/core/inject/system-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-prompt.js","sourceRoot":"","sources":["../../../src/core/inject/system-prompt.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAUlE;mDACmD;AACnD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,gBAAwB,EACxB,UAA2C,EAAE;IAE7C,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC9C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,IAAI,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC9E,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/macro-runner.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Macro resolution (workstream W5's backend slice): substitutes the
+ * `{{...}}` placeholders documented on MacroDef (shared/types.ts) into a
+ * macro's action, given the run-time context (selected workflow, session,
+ * canvas path, free-text subject). Pure and side-effect free — the caller
+ * (src/server/macros.ts) executes the resolved action.
+ */
+import type { MacroDef, WorkflowInfo } from "../shared/types.js";
+export interface MacroContext {
+    workflow: WorkflowInfo | null;
+    sessionCwd: string;
+    /** Absolute path to the session's canvas index file ({{canvas.path}}). */
+    canvasPath: string;
+    /** Free-text subject for the Visualize macro ({{subject}}). */
+    subject?: string;
+}
+export type ResolvedMacroAction = {
+    kind: "inject";
+    text: string;
+    submit: boolean;
+} | {
+    kind: "open-url";
+    url: string;
+} | {
+    kind: "render-canvas";
+};
+export declare class MacroValidationError extends Error {
+    constructor(message: string);
+}
+/**
+ * Resolves a macro's action for execution against `ctx`.
+ * Throws `MacroValidationError` when `macro.requiresWorkflow` and `ctx.workflow`
+ * is null — the caller (the REST handler) turns that into a 400.
+ */
+export declare function resolveMacro(macro: MacroDef, ctx: MacroContext): ResolvedMacroAction;
+//# sourceMappingURL=macro-runner.d.ts.map

package/dist/core/macro-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"macro-runner.d.ts","sourceRoot":"","sources":["../../src/core/macro-runner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEjE,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAE9B,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAoDD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,GAAG,mBAAmB,CAiBpF"}

package/dist/core/macro-runner.js

@@ -0,0 +1,66 @@
+export class MacroValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "MacroValidationError";
+    }
+}
+const PLACEHOLDER_PATTERN = /\{\{[a-zA-Z.]+\}\}/g;
+function placeholderTable(ctx) {
+    return {
+        "{{workflow.path}}": { available: ctx.workflow != null, value: ctx.workflow?.path ?? "" },
+        "{{workflow.name}}": { available: ctx.workflow != null, value: ctx.workflow?.name ?? "" },
+        "{{workflow.definitionId}}": {
+            available: ctx.workflow?.definitionId != null,
+            value: ctx.workflow?.definitionId != null ? String(ctx.workflow.definitionId) : "",
+        },
+        "{{session.cwd}}": { available: true, value: ctx.sessionCwd },
+        "{{canvas.path}}": { available: true, value: ctx.canvasPath },
+        "{{subject}}": { available: Boolean(ctx.subject), value: ctx.subject ?? "" },
+    };
+}
+/**
+ * Substitutes every known `{{...}}` placeholder found in `template`. Throws
+ * `MacroValidationError` listing every placeholder that's present in the
+ * template but has no value in `ctx` — instead of silently injecting text
+ * with a hole in it (e.g. "visualize  to .sapiom/canvas/index.html" with no
+ * subject). An unrecognized `{{...}}`-shaped token is left verbatim; it's not
+ * a placeholder this engine knows about.
+ */
+function substitute(template, ctx) {
+    const table = placeholderTable(ctx);
+    const missing = [];
+    const result = template.replace(PLACEHOLDER_PATTERN, (token) => {
+        const entry = table[token];
+        if (!entry)
+            return token;
+        if (!entry.available)
+            missing.push(token);
+        return entry.value;
+    });
+    if (missing.length > 0) {
+        throw new MacroValidationError(`Missing values for: ${missing.join(", ")}`);
+    }
+    return result;
+}
+/**
+ * Resolves a macro's action for execution against `ctx`.
+ * Throws `MacroValidationError` when `macro.requiresWorkflow` and `ctx.workflow`
+ * is null — the caller (the REST handler) turns that into a 400.
+ */
+export function resolveMacro(macro, ctx) {
+    if (macro.requiresWorkflow && !ctx.workflow) {
+        throw new MacroValidationError(`Macro '${macro.id}' requires a selected workflow.`);
+    }
+    if (macro.action.kind === "open-url") {
+        return { kind: "open-url", url: substitute(macro.action.url, ctx) };
+    }
+    if (macro.action.kind === "render-canvas") {
+        return { kind: "render-canvas" };
+    }
+    return {
+        kind: "inject",
+        text: substitute(macro.action.text, ctx),
+        submit: macro.action.submit ?? true,
+    };
+}
+//# sourceMappingURL=macro-runner.js.map

package/dist/core/macro-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"macro-runner.js","sourceRoot":"","sources":["../../src/core/macro-runner.ts"],"names":[],"mappings":"AAuBA,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAUlD,SAAS,gBAAgB,CAAC,GAAiB;IACzC,OAAO;QACL,mBAAmB,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE;QACzF,mBAAmB,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE;QACzF,2BAA2B,EAAE;YAC3B,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY,IAAI,IAAI;YAC7C,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;SACnF;QACD,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE;QAC7D,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE;QAC7D,aAAa,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE;KAC7E,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,QAAgB,EAAE,GAAiB;IACrD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;QAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,oBAAoB,CAAC,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAe,EAAE,GAAiB;IAC7D,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,oBAAoB,CAAC,UAAU,KAAK,CAAC,EAAE,iCAAiC,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACnC,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC;QACxC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI;KACpC,CAAC;AACJ,CAAC"}

package/dist/core/macros.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Default action-rail macros. Pure data — no execution wiring. The server
+ * resolves `{{...}}` placeholders (see MacroDef in shared/types.ts) and
+ * either injects the text into the session pty or opens the URL. Matches the
+ * SPA's MOCK_MACROS fixture (web/src/lib/mock-data.ts) so mock and real mode
+ * present the same action rail.
+ */
+import type { MacroDef } from "../shared/types.js";
+export declare const DEFAULT_MACROS: MacroDef[];
+//# sourceMappingURL=macros.d.ts.map

package/dist/core/macros.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"macros.d.ts","sourceRoot":"","sources":["../../src/core/macros.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,eAAO,MAAM,cAAc,EAAE,QAAQ,EAyDpC,CAAC"}