@sema-agent/core 1.279.0

package/dist/core/safety-merge-corpus.js

@@ -0,0 +1,195 @@
+export const SAFETY_MERGE_CONFORMANCE_CORPUS = [
+    {
+        name: "deny-removed",
+        intent: "removing an org-published toolDeny loosens (the tool becomes usable again)",
+        prior: { toolDeny: ["Bash"] },
+        next: {},
+        loosens: true,
+        reasons: ['removed toolDeny "Bash"'],
+    },
+    {
+        name: "command-deny-removed",
+        intent: "removing a commandDeny loosens",
+        prior: { commandDeny: ["rm -rf"] },
+        next: { commandDeny: [] },
+        loosens: true,
+        reasons: ['removed commandDeny "rm -rf"'],
+    },
+    {
+        name: "toolAllow-removed-all-allowed",
+        intent: "dropping an allowlist entirely = all-allowed = the maximal loosen",
+        prior: { toolAllow: ["Read"] },
+        next: {},
+        loosens: true,
+        reasons: ["removed toolAllow allowlist (all allowed)"],
+    },
+    {
+        name: "toolAllow-widened",
+        intent: "adding a tool outside the org allowlist loosens",
+        prior: { toolAllow: ["Read"] },
+        next: { toolAllow: ["Read", "Bash"] },
+        loosens: true,
+        reasons: ['widened toolAllow with "Bash"'],
+    },
+    {
+        name: "commandAllow-widened",
+        intent: "adding a command outside the org command allowlist loosens",
+        prior: { commandAllow: ["ls"] },
+        next: { commandAllow: ["ls", "curl"] },
+        loosens: true,
+        reasons: ['widened commandAllow with "curl"'],
+    },
+    {
+        name: "allowDirs-confinement-removed",
+        intent: "removing path confinement (next has none) loosens to the whole filesystem",
+        prior: { allowDirs: ["/repo"] },
+        next: {},
+        loosens: true,
+        reasons: ["removed allowDirs confinement"],
+    },
+    {
+        name: "allowDirs-widened-outside",
+        intent: "adding a dir not lexically within any org dir loosens",
+        prior: { allowDirs: ["/repo"] },
+        next: { allowDirs: ["/repo", "/etc"] },
+        loosens: true,
+        reasons: ['widened allowDirs with "/etc"'],
+    },
+    {
+        name: "multi-axis-loosen",
+        intent: "a single override can loosen on multiple axes — all reasons surface",
+        prior: { toolDeny: ["Bash"], allowDirs: ["/repo"] },
+        next: { allowDirs: ["/repo", "/x"] },
+        loosens: true,
+        reasons: ['removed toolDeny "Bash"', 'widened allowDirs with "/x"'],
+    },
+    {
+        name: "commandAllow-removed-all-allowed",
+        intent: "dropping the COMMAND allowlist (distinct field from toolAllow) re-permits every command — the max loosen on the command axis (review: this branch was unpinned)",
+        prior: { commandAllow: ["ls"] },
+        next: {},
+        loosens: true,
+        reasons: ["removed commandAllow allowlist (all allowed)"],
+    },
+    {
+        name: "allowDirs-confinement-removed-empty-array",
+        intent: "an EXPLICIT empty allowDirs [] removes confinement exactly like undefined (loosenReasons branches on .length===0) — center must treat [] and absent identically",
+        prior: { allowDirs: ["/repo"] },
+        next: { allowDirs: [] },
+        loosens: true,
+        reasons: ["removed allowDirs confinement"],
+    },
+    {
+        name: "allowDirs-prefix-not-boundary-loosen",
+        intent: "🔴 the classic path bug: /repository is NOT within /repo (containment is BOUNDARY-aware, not naive startsWith) → this LOOSENS; a forked center predicate using startsWith would wrongly accept it",
+        prior: { allowDirs: ["/repo"] },
+        next: { allowDirs: ["/repository"] },
+        loosens: true,
+        reasons: ['widened allowDirs with "/repository"'],
+    },
+    {
+        name: "allowDirs-relative-dir-loosen",
+        intent: "a relative dir is not within an absolute org dir → loosens (loosenReasons compares RAW inputs; normalization is the store's job, not the predicate's)",
+        prior: { allowDirs: ["/repo"] },
+        next: { allowDirs: ["repo"] },
+        loosens: true,
+        reasons: ['widened allowDirs with "repo"'],
+    },
+    {
+        name: "multi-entry-deny-removed",
+        intent: "removing multiple deny entries in one override emits one reason PER entry — pins that center must ACCUMULATE reasons, not short-circuit on the first",
+        prior: { toolDeny: ["A", "B", "C"] },
+        next: { toolDeny: ["B"] },
+        loosens: true,
+        reasons: ['removed toolDeny "A"', 'removed toolDeny "C"'],
+    },
+    {
+        name: "deny-added",
+        intent: "adding a deny only tightens",
+        prior: {},
+        next: { toolDeny: ["Bash"] },
+        loosens: false,
+        reasons: [],
+    },
+    {
+        name: "toolAllow-narrowed",
+        intent: "removing an entry from an allowlist only tightens",
+        prior: { toolAllow: ["Read", "Bash"] },
+        next: { toolAllow: ["Read"] },
+        loosens: false,
+        reasons: [],
+    },
+    {
+        name: "allowlist-added-from-all",
+        intent: "introducing an allowlist where there was none narrows from all-allowed (safe)",
+        prior: {},
+        next: { toolAllow: ["Read"] },
+        loosens: false,
+        reasons: [],
+    },
+    {
+        name: "allowDirs-narrowed-to-subdir",
+        intent: "narrowing confinement to a subdir within the org dir is safe",
+        prior: { allowDirs: ["/repo"] },
+        next: { allowDirs: ["/repo/src"] },
+        loosens: false,
+        reasons: [],
+    },
+    {
+        name: "allowDirs-added-confinement",
+        intent: "adding confinement where there was none (org had no allowDirs) only tightens",
+        prior: {},
+        next: { allowDirs: ["/repo"] },
+        loosens: false,
+        reasons: [],
+    },
+    {
+        name: "identical-noop",
+        intent: "an identical override is a no-op (safe)",
+        prior: { toolDeny: ["Bash"], allowDirs: ["/repo"] },
+        next: { toolDeny: ["Bash"], allowDirs: ["/repo"] },
+        loosens: false,
+        reasons: [],
+    },
+    {
+        name: "empty-empty",
+        intent: "no rules either side is safe",
+        prior: {},
+        next: {},
+        loosens: false,
+        reasons: [],
+    },
+    {
+        name: "allowDirs-prior-empty-array-safe",
+        intent: "an org-published EMPTY allowDirs [] imposes NO confinement (the .length>0 guard is false), so widening it is genuinely not a loosen — center must not treat [] as a confinement",
+        prior: { allowDirs: [] },
+        next: { allowDirs: ["/etc"] },
+        loosens: false,
+        reasons: [],
+    },
+    {
+        name: "allowDirs-trailing-slash-safe",
+        intent: "/repo/ is within /repo (trailing-slash boundary normalization in lexWithin) → safe",
+        prior: { allowDirs: ["/repo"] },
+        next: { allowDirs: ["/repo/"] },
+        loosens: false,
+        reasons: [],
+    },
+    {
+        name: "allowDirs-root-prior-safe",
+        intent: "an org dir of '/' contains everything (root special-case) → any narrower next is safe",
+        prior: { allowDirs: ["/"] },
+        next: { allowDirs: ["/anything"] },
+        loosens: false,
+        reasons: [],
+    },
+    {
+        name: "commandAllow-added-from-all",
+        intent: "introducing a command allowlist where there was none narrows from all-allowed (per-field symmetry with toolAllow)",
+        prior: {},
+        next: { commandAllow: ["ls"] },
+        loosens: false,
+        reasons: [],
+    },
+];
+//# sourceMappingURL=safety-merge-corpus.js.map

package/dist/core/safety-merge-corpus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-merge-corpus.js","sourceRoot":"","sources":["../../src/core/safety-merge-corpus.ts"],"names":[],"mappings":"AAgDA,MAAM,CAAC,MAAM,+BAA+B,GAAiC;IAE3E;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,4EAA4E;QACpF,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;QAC7B,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,yBAAyB,CAAC;KACrC;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,gCAAgC;QACxC,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE;QAClC,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACzB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,8BAA8B,CAAC;KAC1C;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,MAAM,EAAE,mEAAmE;QAC3E,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;QAC9B,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,2CAA2C,CAAC;KACvD;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,iDAAiD;QACzD,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;QAC9B,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;QACrC,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,+BAA+B,CAAC;KAC3C;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,4DAA4D;QACpE,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE;QAC/B,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;QACtC,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,kCAAkC,CAAC;KAC9C;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,MAAM,EAAE,2EAA2E;QACnF,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;QAC/B,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,+BAA+B,CAAC;KAC3C;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,uDAAuD;QAC/D,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;QAC/B,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;QACtC,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,+BAA+B,CAAC;KAC3C;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,qEAAqE;QAC7E,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;QACnD,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;QACpC,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,yBAAyB,EAAE,6BAA6B,CAAC;KACpE;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,MAAM,EAAE,iKAAiK;QACzK,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE;QAC/B,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,8CAA8C,CAAC;KAC1D;IACD;QACE,IAAI,EAAE,2CAA2C;QACjD,MAAM,EAAE,iKAAiK;QACzK,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;QAC/B,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QACvB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,+BAA+B,CAAC;KAC3C;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,MAAM,EAAE,mMAAmM;QAC3M,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;QAC/B,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE;QACpC,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,sCAAsC,CAAC;KAClD;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,MAAM,EAAE,uJAAuJ;QAC/J,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;QAC/B,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;QAC7B,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,+BAA+B,CAAC;KAC3C;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,sJAAsJ;QAC9J,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE;QACpC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE;QACzB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;KAC1D;IAED;QACE,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,6BAA6B;QACrC,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;QAC5B,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,mDAAmD;QAC3D,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;QACtC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;QAC7B,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,+EAA+E;QACvF,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;QAC7B,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,MAAM,EAAE,8DAA8D;QACtE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;QAC/B,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;QAClC,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,MAAM,EAAE,8EAA8E;QACtF,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;QAC9B,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,yCAAyC;QACjD,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;QACnD,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;QAClD,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,8BAA8B;QACtC,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,MAAM,EAAE,iLAAiL;QACzL,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QACxB,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;QAC7B,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,MAAM,EAAE,oFAAoF;QAC5F,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;QAC/B,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE;QAC/B,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,uFAAuF;QAC/F,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE;QAC3B,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;QAClC,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,MAAM,EAAE,mHAAmH;QAC3H,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE;QAC9B,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;KACZ;CACF,CAAC"}

package/dist/core/scheduler.d.ts

@@ -0,0 +1,55 @@
+import type { ExecutionEnv, Result } from "../internal/harness.js";
+export type ScheduledTaskId = string & {
+    readonly __brand: "ScheduledTaskId";
+};
+export type SchedulerErrorCode = "unsupported" | "not_found" | "limit_exceeded" | "invalid_schedule" | "io";
+export declare class SchedulerError extends Error {
+    readonly code: SchedulerErrorCode;
+    readonly cause?: unknown | undefined;
+    constructor(code: SchedulerErrorCode, message: string, cause?: unknown | undefined);
+}
+export interface ScheduledIntent {
+    prompt: string;
+    when: {
+        kind: "cron";
+        expr: string;
+    } | {
+        kind: "at";
+        atMs: number;
+    } | {
+        kind: "delay";
+        delaySec: number;
+    };
+    label?: string;
+    mode?: "task" | "session-wakeup";
+}
+export interface SchedulerContext {
+    scope: string;
+    principal?: string;
+    sessionId?: string;
+    taskConfig?: unknown;
+}
+export interface ScheduledTaskSummary {
+    id: ScheduledTaskId;
+    when: string;
+    label?: string;
+    nextRunMs?: number;
+    mode?: "task" | "session-wakeup";
+}
+export interface SchedulerCapability {
+    readonly schedulerCapabilities: {
+        readonly supported: boolean;
+        readonly maxScheduledPerScope: number;
+        readonly minDelaySec: number;
+        readonly minCronIntervalSec: number;
+        readonly maxScheduledHorizonSec: number;
+    };
+    schedule(intent: ScheduledIntent, ctx: SchedulerContext): Promise<Result<{
+        id: ScheduledTaskId;
+    }, SchedulerError>>;
+    cancel(id: ScheduledTaskId, ctx: SchedulerContext): Promise<Result<void, SchedulerError>>;
+    list(ctx: SchedulerContext): Promise<Result<ScheduledTaskSummary[], SchedulerError>>;
+}
+export declare function hasScheduler(env: ExecutionEnv): env is ExecutionEnv & SchedulerCapability;
+export declare function isValidCronExpr(expr: string): boolean;
+//# sourceMappingURL=scheduler.d.ts.map

package/dist/core/scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../src/core/scheduler.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGnE,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAK/E,MAAM,MAAM,kBAAkB,GAC1B,aAAa,GACb,WAAW,GACX,gBAAgB,GAChB,kBAAkB,GAClB,IAAI,CAAC;AAGT,qBAAa,cAAe,SAAQ,KAAK;IAErC,QAAQ,CAAC,IAAI,EAAE,kBAAkB;IAEjC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;gBAFf,IAAI,EAAE,kBAAkB,EACjC,OAAO,EAAE,MAAM,EACN,KAAK,CAAC,EAAE,OAAO,YAAA;CAK3B;AAMD,MAAM,WAAW,eAAe;IAE9B,MAAM,EAAE,MAAM,CAAC;IAEf,IAAI,EACA;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC9B;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC5B;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAExC,KAAK,CAAC,EAAE,MAAM,CAAC;IAUf,IAAI,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAAC;CAClC;AAOD,MAAM,WAAW,gBAAgB;IAE/B,KAAK,EAAE,MAAM,CAAC;IAEd,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,SAAS,CAAC,EAAE,MAAM,CAAC;IAKnB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAGD,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,eAAe,CAAC;IAEpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,IAAI,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAAC;CAClC;AAMD,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,qBAAqB,EAAE;QAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;QAE5B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QAEtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAE7B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QAEpC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;KACzC,CAAC;IAOF,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,EAAE,EAAE,eAAe,CAAA;KAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IAGnH,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAG1F,IAAI,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;CACtF;AAKD,wBAAgB,YAAY,CAAC,GAAG,EAAE,YAAY,GAAG,GAAG,IAAI,YAAY,GAAG,mBAAmB,CAUzF;AAQD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOrD"}

package/dist/core/scheduler.js

@@ -0,0 +1,32 @@
+export class SchedulerError extends Error {
+    code;
+    cause;
+    constructor(code, message, cause) {
+        super(message);
+        this.code = code;
+        this.cause = cause;
+        this.name = "SchedulerError";
+    }
+}
+export function hasScheduler(env) {
+    const e = env;
+    return (typeof e.schedule === "function" &&
+        typeof e.cancel === "function" &&
+        typeof e.list === "function" &&
+        typeof e.schedulerCapabilities === "object" &&
+        e.schedulerCapabilities !== null &&
+        e.schedulerCapabilities.supported === true);
+}
+const CRON_EXPR_RE = /^[0-9*/,\-\s]+$/;
+export function isValidCronExpr(expr) {
+    if (typeof expr !== "string")
+        return false;
+    const trimmed = expr.trim();
+    if (trimmed.length === 0 || trimmed.length > 100)
+        return false;
+    if (!CRON_EXPR_RE.test(trimmed))
+        return false;
+    const fields = trimmed.split(/\s+/);
+    return fields.length === 5 || fields.length === 6;
+}
+//# sourceMappingURL=scheduler.js.map

package/dist/core/scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/core/scheduler.ts"],"names":[],"mappings":"AA8BA,MAAM,OAAO,cAAe,SAAQ,KAAK;IAE5B;IAEA;IAHX,YACW,IAAwB,EACjC,OAAe,EACN,KAAe;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,SAAI,GAAJ,IAAI,CAAoB;QAExB,UAAK,GAAL,KAAK,CAAU;QAGxB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAgGD,MAAM,UAAU,YAAY,CAAC,GAAiB;IAC5C,MAAM,CAAC,GAAG,GAAmC,CAAC;IAC9C,OAAO,CACL,OAAO,CAAC,CAAC,QAAQ,KAAK,UAAU;QAChC,OAAO,CAAC,CAAC,MAAM,KAAK,UAAU;QAC9B,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU;QAC5B,OAAO,CAAC,CAAC,qBAAqB,KAAK,QAAQ;QAC3C,CAAC,CAAC,qBAAqB,KAAK,IAAI;QAChC,CAAC,CAAC,qBAAqB,CAAC,SAAS,KAAK,IAAI,CAC3C,CAAC;AACJ,CAAC;AAOD,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AACpD,CAAC"}

package/dist/core/secret-env.d.ts

@@ -0,0 +1,3 @@
+export declare function isSecretEnvKey(key: string): boolean;
+export declare function scrubSecretEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+//# sourceMappingURL=secret-env.d.ts.map

package/dist/core/secret-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-env.d.ts","sourceRoot":"","sources":["../../src/core/secret-env.ts"],"names":[],"mappings":"AAyBA,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AAGD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAMxE"}

package/dist/core/secret-env.js

@@ -0,0 +1,13 @@
+const SECRET_ENV_RE = /(^|_)(KEY|TOKEN|SECRET|SECRETS|PASSWORD|PASSWD|CREDENTIAL|CREDENTIALS|PRIVATEKEY|APIKEY|ACCESS_KEY|SESSION_TOKEN)$/i;
+export function isSecretEnvKey(key) {
+    return SECRET_ENV_RE.test(key);
+}
+export function scrubSecretEnv(env) {
+    const out = {};
+    for (const k of Object.keys(env)) {
+        if (!isSecretEnvKey(k))
+            out[k] = env[k];
+    }
+    return out;
+}
+//# sourceMappingURL=secret-env.js.map

package/dist/core/secret-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-env.js","sourceRoot":"","sources":["../../src/core/secret-env.ts"],"names":[],"mappings":"AAqBA,MAAM,aAAa,GACjB,qHAAqH,CAAC;AAGxH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAGD,MAAM,UAAU,cAAc,CAAC,GAAsB;IACnD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/select-model.d.ts

@@ -0,0 +1,11 @@
+import type { Model } from "../internal/llm.js";
+export type ModelTier = "cheap" | "standard" | "premium";
+export interface ModelCriteria {
+    needs?: Array<"vision" | "reasoning">;
+    minContext?: number;
+    tier?: ModelTier;
+    prefer?: "cheapest" | "premium";
+}
+export declare function selectModel(models: Record<string, Model> | Model[], criteria?: ModelCriteria): Model | undefined;
+export declare function selectModelOrThrow(models: Record<string, Model> | Model[], criteria?: ModelCriteria): Model;
+//# sourceMappingURL=select-model.d.ts.map

package/dist/core/select-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"select-model.d.ts","sourceRoot":"","sources":["../../src/core/select-model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAGhD,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;AAGzD,MAAM,WAAW,aAAa;IAE5B,KAAK,CAAC,EAAE,KAAK,CAAC,QAAQ,GAAG,WAAW,CAAC,CAAC;IAEtC,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,IAAI,CAAC,EAAE,SAAS,CAAC;IAEjB,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACjC;AAwCD,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,KAAK,EAAE,EACvC,QAAQ,GAAE,aAAkB,GAC3B,KAAK,GAAG,SAAS,CAWnB;AAGD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,KAAK,EAAE,EACvC,QAAQ,GAAE,aAAkB,GAC3B,KAAK,CAMP"}

package/dist/core/select-model.js

@@ -0,0 +1,44 @@
+function asList(models) {
+    return Array.isArray(models) ? models : Object.values(models);
+}
+function costOf(m) {
+    if (!m.cost) {
+        return Number.POSITIVE_INFINITY;
+    }
+    return (m.cost.input ?? 0) + (m.cost.output ?? 0);
+}
+function matches(m, c) {
+    for (const need of c.needs ?? []) {
+        if (need === "vision" && !m.input?.includes("image"))
+            return false;
+        if (need === "reasoning" && !m.reasoning)
+            return false;
+    }
+    if (c.minContext != null && (m.contextTokens ?? m.contextWindow ?? 0) < c.minContext) {
+        return false;
+    }
+    if (c.tier != null && m.params?.tier !== c.tier) {
+        return false;
+    }
+    return true;
+}
+export function selectModel(models, criteria = {}) {
+    const candidates = asList(models).filter((m) => matches(m, criteria));
+    if (candidates.length === 0) {
+        return undefined;
+    }
+    const premium = criteria.prefer === "premium";
+    return candidates.reduce((best, m) => {
+        const c = costOf(m);
+        const b = costOf(best);
+        return premium ? (c > b ? m : best) : c < b ? m : best;
+    });
+}
+export function selectModelOrThrow(models, criteria = {}) {
+    const m = selectModel(models, criteria);
+    if (!m) {
+        throw new Error(`selectModel: no model in the catalog matches ${JSON.stringify(criteria)}`);
+    }
+    return m;
+}
+//# sourceMappingURL=select-model.js.map

package/dist/core/select-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"select-model.js","sourceRoot":"","sources":["../../src/core/select-model.ts"],"names":[],"mappings":"AAiBA,SAAS,MAAM,CAAC,MAAuC;IACrD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAChE,CAAC;AAOD,SAAS,MAAM,CAAC,CAAQ;IACtB,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAClC,CAAC;IACD,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,OAAO,CAAC,CAAQ,EAAE,CAAgB;IACzC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACjC,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACnE,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,IAAK,CAAC,CAAC,MAAwC,EAAE,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD,MAAM,UAAU,WAAW,CACzB,MAAuC,EACvC,WAA0B,EAAE;IAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC;IAC9C,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC;AAGD,MAAM,UAAU,kBAAkB,CAChC,MAAuC,EACvC,WAA0B,EAAE;IAE5B,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/core/sensitive-path-policy.d.ts

@@ -0,0 +1,9 @@
+import type { ExecutionEnv } from "../internal/harness.js";
+import type { ToolPolicy } from "./tool-policy.js";
+export declare function createSensitivePathPolicy(opts: {
+    env: ExecutionEnv;
+    patterns: string[];
+    rootPath?: string;
+    tools?: string[];
+}): ToolPolicy;
+//# sourceMappingURL=sensitive-path-policy.d.ts.map

package/dist/core/sensitive-path-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive-path-policy.d.ts","sourceRoot":"","sources":["../../src/core/sensitive-path-policy.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,KAAK,EAAqC,UAAU,EAAE,MAAM,kBAAkB,CAAC;AA2DtF,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,GAAG,EAAE,YAAY,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB,GAAG,UAAU,CA2Cb"}

package/dist/core/sensitive-path-policy.js

@@ -0,0 +1,61 @@
+import { canonicalizeTarget, fileArgPath } from "../tools/fs/safety.js";
+import { canonicalToolName } from "./tool-name-aliases.js";
+const DEFAULT_GUARDED_TOOLS = ["Write", "Edit", "MultiEdit"];
+function segmentGlobToRegExp(segment) {
+    const escaped = segment.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, "[^/]*");
+    return new RegExp(`^${escaped}$`);
+}
+function compilePatterns(patterns) {
+    const out = [];
+    for (const raw of patterns) {
+        const segments = raw.split("/").filter(Boolean).map(segmentGlobToRegExp);
+        if (segments.length > 0)
+            out.push({ raw, segments });
+    }
+    return out;
+}
+function matchSensitive(canonicalKey, compiled) {
+    const segs = canonicalKey.split(/[\\/]/).filter(Boolean);
+    for (const pat of compiled) {
+        const n = pat.segments.length;
+        for (let i = 0; i + n <= segs.length; i++) {
+            if (pat.segments.every((re, j) => re.test(segs[i + j])))
+                return pat.raw;
+        }
+    }
+    return null;
+}
+export function createSensitivePathPolicy(opts) {
+    const compiled = compilePatterns(opts.patterns);
+    const guarded = new Set((opts.tools ?? DEFAULT_GUARDED_TOOLS).map(canonicalToolName));
+    return {
+        async check(req, signal) {
+            if (compiled.length === 0 || !guarded.has(canonicalToolName(req.toolName)))
+                return { action: "allow" };
+            const path = fileArgPath(req.args);
+            if (typeof path !== "string" || path.length === 0)
+                return { action: "allow" };
+            const canon = await canonicalizeTarget(opts.env, path, signal, opts.rootPath);
+            if (!canon.ok) {
+                if (canon.unresolvedSymlink) {
+                    return {
+                        action: "deny",
+                        reason: `write to "${path}" is blocked: it is a symlink whose real target could not be resolved (it could point onto a guarded sensitive path)`,
+                        decisionReason: "safety",
+                    };
+                }
+                return { action: "allow" };
+            }
+            const hit = matchSensitive(canon.key, compiled);
+            if (hit) {
+                return {
+                    action: "deny",
+                    reason: `write to "${path}" is blocked: its real target resolves onto the guarded sensitive path "${hit}"`,
+                    decisionReason: "safety",
+                };
+            }
+            return { action: "allow" };
+        },
+    };
+}
+//# sourceMappingURL=sensitive-path-policy.js.map

package/dist/core/sensitive-path-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive-path-policy.js","sourceRoot":"","sources":["../../src/core/sensitive-path-policy.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAG3D,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAG7D,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrF,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;AACpC,CAAC;AAOD,SAAS,eAAe,CAAC,QAAkB;IACzC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACzE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,SAAS,cAAc,CAAC,YAAoB,EAAE,QAA2B;IAIvE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC,GAAG,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAgBD,MAAM,UAAU,yBAAyB,CAAC,IAMzC;IACC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAIhD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,qBAAqB,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACtF,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,GAAoB,EAAE,MAAoB;YACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACvG,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAKnC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAE9E,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9E,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBAKd,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;oBAC5B,OAAO;wBACL,MAAM,EAAE,MAAM;wBACd,MAAM,EAAE,aAAa,IAAI,sHAAsH;wBAC/I,cAAc,EAAE,QAAQ;qBACzB,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC7B,CAAC;YAED,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAChD,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO;oBACL,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,aAAa,IAAI,2EAA2E,GAAG,GAAG;oBAC1G,cAAc,EAAE,QAAQ;iBACzB,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/session-policy-store.d.ts

@@ -0,0 +1,38 @@
+export interface SessionPermissionRules {
+    toolAllow?: string[];
+    toolDeny?: string[];
+    allowDirs?: string[];
+    commandAllow?: string[];
+    commandDeny?: string[];
+}
+export interface StoredSessionRules extends SessionPermissionRules {
+    rev: number;
+}
+export interface PutRulesOptions {
+    expectedRev?: number;
+    operator?: boolean;
+}
+export declare class SessionPolicyError extends Error {
+    readonly code: "conflict" | "loosen_forbidden";
+    constructor(code: "conflict" | "loosen_forbidden", message: string);
+}
+export interface SessionRulesRecord {
+    principal: string | undefined;
+    rules: StoredSessionRules;
+}
+export interface SessionPolicyStore {
+    getRules(sessionId: string, principal?: string): Promise<StoredSessionRules | null>;
+    putRules(sessionId: string, principal: string | undefined, rules: SessionPermissionRules, opts?: PutRulesOptions): Promise<StoredSessionRules>;
+    listBySession?(sessionId: string): Promise<SessionRulesRecord[]>;
+}
+export declare function normalizeRules(rules: SessionPermissionRules): SessionPermissionRules;
+export declare function loosenReasons(prior: SessionPermissionRules, next: SessionPermissionRules): string[];
+export declare function stripRev(rules: SessionPermissionRules): SessionPermissionRules;
+export declare class InMemorySessionPolicyStore implements SessionPolicyStore {
+    private readonly map;
+    private key;
+    getRules(sessionId: string, principal?: string): Promise<StoredSessionRules | null>;
+    putRules(sessionId: string, principal: string | undefined, rules: SessionPermissionRules, opts?: PutRulesOptions): Promise<StoredSessionRules>;
+    listBySession(sessionId: string): Promise<SessionRulesRecord[]>;
+}
+//# sourceMappingURL=session-policy-store.d.ts.map

package/dist/core/session-policy-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-policy-store.d.ts","sourceRoot":"","sources":["../../src/core/session-policy-store.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,sBAAsB;IAErC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAErB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAGpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAErB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAGD,MAAM,WAAW,kBAAmB,SAAQ,sBAAsB;IAChE,GAAG,EAAE,MAAM,CAAC;CACb;AAGD,MAAM,WAAW,eAAe;IAE9B,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAID,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,kBAAkB;gBAArC,IAAI,EAAE,UAAU,GAAG,kBAAkB,EAC9C,OAAO,EAAE,MAAM;CAKlB;AASD,MAAM,WAAW,kBAAkB;IAEjC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,EAAE,kBAAkB,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACpF,QAAQ,CACN,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,EAAE,sBAAsB,EAC7B,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAO/B,aAAa,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;CAClE;AAoCD,wBAAgB,cAAc,CAAC,KAAK,EAAE,sBAAsB,GAAG,sBAAsB,CAcpF;AAQD,wBAAgB,aAAa,CAAC,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,sBAAsB,GAAG,MAAM,EAAE,CAwBnG;AAGD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,sBAAsB,GAAG,sBAAsB,CAI9E;AAOD,qBAAa,0BAA2B,YAAW,kBAAkB;IACnE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAyC;IAE7D,OAAO,CAAC,GAAG;IAIL,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAKnF,QAAQ,CACZ,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,EAAE,sBAAsB,EAC7B,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,kBAAkB,CAAC;IAkBxB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;CAUtE"}

package/dist/core/session-policy-store.js

@@ -0,0 +1,112 @@
+import { posix } from "node:path";
+export class SessionPolicyError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "SessionPolicyError";
+    }
+}
+function lexWithin(root, p) {
+    const fold = (x) => {
+        let n = x.replace(/\\/g, "/");
+        if (/^[A-Za-z]:(\/|$)/.test(n))
+            n = n[0].toLowerCase() + n.slice(1);
+        return n;
+    };
+    const nr = posix.normalize(fold(root)).replace(/\/+$/, "") || "/";
+    const np = posix.normalize(fold(p)).replace(/\/+$/, "") || "/";
+    if (nr === "/")
+        return true;
+    return np === nr || np.startsWith(nr + "/");
+}
+export function normalizeRules(rules) {
+    const out = {};
+    if (rules.toolAllow !== undefined)
+        out.toolAllow = [...rules.toolAllow];
+    if (rules.toolDeny !== undefined)
+        out.toolDeny = [...rules.toolDeny];
+    if (rules.commandAllow !== undefined)
+        out.commandAllow = [...rules.commandAllow];
+    if (rules.commandDeny !== undefined)
+        out.commandDeny = [...rules.commandDeny];
+    if (rules.allowDirs !== undefined)
+        out.allowDirs = rules.allowDirs.map((d) => posix.normalize(d).replace(/\/+$/, "") || "/");
+    return out;
+}
+export function loosenReasons(prior, next) {
+    const reasons = [];
+    for (const field of ["toolDeny", "commandDeny"]) {
+        const n = new Set(next[field] ?? []);
+        for (const x of prior[field] ?? [])
+            if (!n.has(x))
+                reasons.push(`removed ${field} "${x}"`);
+    }
+    for (const field of ["toolAllow", "commandAllow"]) {
+        const p = prior[field];
+        if (p === undefined)
+            continue;
+        const n = next[field];
+        if (n === undefined) {
+            reasons.push(`removed ${field} allowlist (all allowed)`);
+            continue;
+        }
+        const ps = new Set(p);
+        for (const x of n)
+            if (!ps.has(x))
+                reasons.push(`widened ${field} with "${x}"`);
+    }
+    const pd = prior.allowDirs;
+    if (pd !== undefined && pd.length > 0) {
+        const nd = next.allowDirs;
+        if (nd === undefined || nd.length === 0)
+            reasons.push("removed allowDirs confinement");
+        else
+            for (const dir of nd)
+                if (!pd.some((d) => lexWithin(d, dir)))
+                    reasons.push(`widened allowDirs with "${dir}"`);
+    }
+    return reasons;
+}
+export function stripRev(rules) {
+    const { ...rest } = rules;
+    delete rest.rev;
+    return rest;
+}
+export class InMemorySessionPolicyStore {
+    map = new Map();
+    key(sessionId, principal) {
+        return JSON.stringify([sessionId, principal ?? null]);
+    }
+    async getRules(sessionId, principal) {
+        const r = this.map.get(this.key(sessionId, principal));
+        return r ? structuredClone(r) : null;
+    }
+    async putRules(sessionId, principal, rules, opts) {
+        const key = this.key(sessionId, principal);
+        const prior = this.map.get(key);
+        if (opts?.expectedRev !== undefined && (prior?.rev ?? 0) !== opts.expectedRev) {
+            throw new SessionPolicyError("conflict", `session rules rev mismatch (expected ${opts.expectedRev}, have ${prior?.rev ?? 0})`);
+        }
+        const clean = normalizeRules(stripRev(rules));
+        if (prior && opts?.operator !== true) {
+            const loosens = loosenReasons(prior, clean);
+            if (loosens.length > 0) {
+                throw new SessionPolicyError("loosen_forbidden", `a non-operator session-rule write may only tighten; refused: ${loosens.join("; ")}`);
+            }
+        }
+        const next = { ...structuredClone(clean), rev: (prior?.rev ?? 0) + 1 };
+        this.map.set(key, next);
+        return structuredClone(next);
+    }
+    async listBySession(sessionId) {
+        const out = [];
+        for (const [k, rules] of this.map) {
+            const [sid, principal] = JSON.parse(k);
+            if (sid === sessionId)
+                out.push({ principal: principal ?? undefined, rules: structuredClone(rules) });
+        }
+        return out;
+    }
+}
+//# sourceMappingURL=session-policy-store.js.map