@songsid/agend 2.1.12 → 2.2.0-alpha.1

package/dist/backend/kiro-agent.js

@@ -0,0 +1,302 @@
+/**
+ * One kiro agent per instance, and the shared workspace files it replaces (#906,
+ * docs/design/kiro-per-instance-agent.md §1 and §4).
+ *
+ * Every write and every removal here is decided by evidence that AgEnD — this fleet, this instance — wrote the
+ * thing, never by a name's shape: the user's agents, MCP servers and steering files, and another fleet's, are kept.
+ *  - The agent file is ours only on a positive, canonical match: our name, and `mcpServers` with exactly this
+ *    instance's keys, each run by this instance's own wrapper script.
+ *  - A shared `mcp.json` entry is ours only when its command is one of this fleet's wrapper scripts.
+ *  - A steering file is ours only when it carries this fleet's tag for this instance. Files written before the tag
+ *    existed name an instance and a working directory but no fleet, so they are ambiguous and are kept.
+ */
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, realpathSync, unlinkSync } from "node:fs";
+import { basename, dirname, isAbsolute, join, normalize, resolve } from "node:path";
+import { writeFileAtomic } from "./kiro-engine-ledger.js";
+/** An MCP server name AgEnD writes: one plain path component (no separators, no `..`). */
+const SERVER_NAME = /^(?!.*\.\.)[A-Za-z0-9_][A-Za-z0-9_.-]{0,99}$/;
+/** Instance names written as they are; any other name is hashed under a different prefix, so the two never meet. */
+const PLAIN_NAME = /^[A-Za-z0-9._-]{1,100}$/;
+/** This fleet, as 8 hex: two fleets (two AGEND_HOMEs) on one directory get different agents and tags. */
+export function kiroFleetTag(agendHome) {
+    let home = resolve(agendHome);
+    try {
+        home = realpathSync(home);
+    }
+    catch { /* not created yet: the resolved path */ }
+    return createHash("sha256").update(home).digest("hex").slice(0, 8);
+}
+/** `agend-<instance>-<fleet>`, or `agendx-<hash>-<fleet>` for a name outside PLAIN_NAME (they differ at char 6). */
+export function kiroAgentName(instance, fleet) {
+    return PLAIN_NAME.test(instance)
+        ? `agend-${instance}-${fleet}`
+        : `agendx-${createHash("sha256").update(instance).digest("hex").slice(0, 16)}-${fleet}`;
+}
+export const kiroAgentPath = (spec) => join(spec.workingDirectory, ".kiro", "agents", `${kiroAgentName(spec.instance, spec.fleet)}.json`);
+/** The shared-file key a server had before #906, and still has in the agent file (kiro keeps one of the two). */
+export const kiroServerKey = (server, instance) => `${server}-${instance}`;
+export const kiroWrapperPath = (instanceDir, server) => join(instanceDir, `mcp-wrapper-${server}.sh`);
+/** This instance's servers, key → wrapper: the only map an agent file of ours can have. */
+export function expectedKiroServers(spec) {
+    const map = {};
+    for (const server of spec.serverNames)
+        map[kiroServerKey(server, spec.instance)] = kiroWrapperPath(spec.instanceDir, server);
+    return map;
+}
+/**
+ * The same file, compared as written: an absolute path, normalized. A relative command means whatever kiro's own
+ * working directory makes of it, which is never evidence that it is one of AgEnD's wrappers (#1416 review).
+ */
+const samePath = (a, b) => typeof a === "string" && isAbsolute(a) && isAbsolute(b) && normalize(a) === normalize(b);
+/** The provenance line every agent file AgEnD writes carries: this fleet and this instance. */
+export const kiroAgentDescription = (spec) => `AgEnD fleet instance ${spec.instance} (agend-fleet:${spec.fleet})`;
+/**
+ * Ours only on positive evidence, never on absence: our name, our provenance line, and every MCP server in it one of
+ * THIS instance's own wrapper scripts under its own key (`<server>-<instance>` → `<instanceDir>/mcp-wrapper-<server>.sh`,
+ * absolute). Which servers, and how many, may differ — an instance in CLI agent mode has none, and a mode switch
+ * changes the set — but a sibling's wrapper, a relative command or any other entry is never ours.
+ */
+export function isOwnKiroAgent(value, spec) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const v = value;
+    if (v.name !== kiroAgentName(spec.instance, spec.fleet) || v.description !== kiroAgentDescription(spec))
+        return false;
+    const servers = v.mcpServers;
+    if (!servers || typeof servers !== "object" || Array.isArray(servers))
+        return false;
+    const suffix = `-${spec.instance}`;
+    return Object.entries(servers).every(([key, entry]) => {
+        if (!key.endsWith(suffix) || key.length === suffix.length)
+            return false;
+        const server = key.slice(0, -suffix.length);
+        // A server name is one plain path component — no separator, no `..` — so its wrapper,
+        // `<instanceDir>/mcp-wrapper-<server>.sh`, is a direct child of THIS instance's directory. A key like
+        // `x/../../sibling/…` would otherwise aim it at another instance's wrapper (#1416 review).
+        if (!SERVER_NAME.test(server))
+            return false;
+        const command = entry?.command;
+        return samePath(command, kiroWrapperPath(spec.instanceDir, server));
+    });
+}
+function readJson(path) {
+    let text;
+    try {
+        text = readFileSync(path, "utf-8");
+    }
+    catch (err) {
+        return err.code === "ENOENT" ? { kind: "absent" } : { kind: "unreadable" };
+    }
+    try {
+        return { kind: "ok", value: JSON.parse(text) };
+    }
+    catch {
+        return { kind: "unreadable" };
+    }
+}
+/** A file at our agent path that is not ours: never overwritten, so the launch is refused. */
+export class KiroAgentConflictError extends Error {
+    constructor(path) {
+        super(`${path} exists and is not this AgEnD instance's agent; not overwriting it, so this kiro instance is not launched (#906)`);
+        this.name = "KiroAgentConflictError";
+    }
+}
+/** Write the instance's agent. Throws when it cannot, or when a file that is not ours is in the way. */
+export function writeKiroAgent(spec, instructions) {
+    const path = kiroAgentPath(spec);
+    const existing = readJson(path);
+    if (existing.kind === "unreadable" || (existing.kind === "ok" && !isOwnKiroAgent(existing.value, spec))) {
+        throw new KiroAgentConflictError(path);
+    }
+    const mcpServers = {};
+    for (const [key, command] of Object.entries(expectedKiroServers(spec)))
+        mcpServers[key] = { command, args: [] };
+    const agent = {
+        name: kiroAgentName(spec.instance, spec.fleet),
+        description: kiroAgentDescription(spec),
+        prompt: instructions ?? null,
+        mcpServers,
+        tools: ["*"],
+        allowedTools: [],
+        resources: [],
+        // The user's own MCP servers stay available; isolation comes from AgEnD's entries living only here (decided).
+        includeMcpJson: true,
+        // V3's own addition, so an auto-upgrading V3 has nothing to rewrite.
+        permissions: { rules: [] },
+    };
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileAtomic(path, JSON.stringify(agent, null, 2) + "\n");
+    return path;
+}
+/** Remove the agent file and V3's `.bak` of it, each only when it is ours. What was kept is returned, to be logged. */
+export function removeKiroAgent(spec) {
+    const out = { removed: [], kept: [] };
+    const path = kiroAgentPath(spec);
+    for (const p of [path, `${path}.bak`]) {
+        const file = readJson(p);
+        if (file.kind === "absent")
+            continue;
+        if (file.kind === "ok" && isOwnKiroAgent(file.value, spec)) {
+            try {
+                unlinkSync(p);
+                out.removed.push(p);
+            }
+            catch {
+                out.kept.push(p);
+            }
+        }
+        else {
+            out.kept.push(p);
+        }
+    }
+    return out;
+}
+const mcpJsonPath = (cwd) => join(cwd, ".kiro", "settings", "mcp.json");
+/**
+ * The transition's old setup (§3): this instance's entries in the shared mcp.json, so a resumed `kiro_default`
+ * conversation still has its AgEnD server until the switch to the agent is confirmed. A key is written only when it
+ * is free — absent, or already this instance's own wrapper. A key run by anything else is a conflict and is kept.
+ */
+export function writeSharedKiroMcpEntries(spec) {
+    const path = mcpJsonPath(spec.workingDirectory);
+    const file = readJson(path);
+    if (file.kind === "unreadable")
+        return "unreadable";
+    let config = {};
+    if (file.kind === "ok") {
+        if (!file.value || typeof file.value !== "object" || Array.isArray(file.value))
+            return "unreadable";
+        config = file.value;
+    }
+    const raw = config.mcpServers;
+    if (raw !== undefined && (!raw || typeof raw !== "object" || Array.isArray(raw)))
+        return "unreadable";
+    const servers = { ...raw };
+    let changed = false;
+    let conflict = false;
+    for (const [key, wrapper] of Object.entries(expectedKiroServers(spec))) {
+        const current = Object.hasOwn(servers, key) ? servers[key] : undefined;
+        if (current === undefined) {
+            servers[key] = { command: wrapper, args: [] };
+            changed = true;
+            continue;
+        }
+        if (!samePath(current?.command, wrapper))
+            conflict = true;
+    }
+    if (changed) {
+        try {
+            mkdirSync(dirname(path), { recursive: true });
+            writeFileAtomic(path, JSON.stringify({ ...config, mcpServers: servers }, null, 2));
+        }
+        catch {
+            return "failed";
+        }
+    }
+    return conflict ? "conflict" : changed ? "written" : "unchanged";
+}
+/** A wrapper script of this fleet: `<instancesRoot>/<some instance>/mcp-wrapper-<server>.sh`. */
+function fleetWrapperInstanceDir(command, instancesRoot) {
+    if (typeof command !== "string" || !isAbsolute(command))
+        return null;
+    if (!/^mcp-wrapper-[^/]+\.sh$/.test(basename(command)))
+        return null;
+    const dir = resolve(dirname(command));
+    return resolve(dirname(dir)) === resolve(instancesRoot) ? dir : null;
+}
+/**
+ * Remove AgEnD from the shared mcp.json, by provenance only:
+ *  - `own`: this instance's keys whose command is exactly its own wrapper (after a confirmed switch, and on cleanup);
+ *  - any entry run by a wrapper of this fleet whose instance directory is gone.
+ * Everything else — the user's servers, another fleet's — is kept. Written only when something changed.
+ */
+export function removeSharedKiroMcpEntries(spec, instancesRoot, own) {
+    const path = mcpJsonPath(spec.workingDirectory);
+    const file = readJson(path);
+    if (file.kind === "absent")
+        return "unchanged";
+    if (file.kind === "unreadable" || !file.value || typeof file.value !== "object" || Array.isArray(file.value))
+        return "unreadable";
+    const config = file.value;
+    const raw = config.mcpServers;
+    if (raw === undefined)
+        return "unchanged";
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return "unreadable";
+    const servers = { ...raw };
+    const expected = expectedKiroServers(spec);
+    let changed = false;
+    for (const [key, value] of Object.entries(servers)) {
+        const command = value?.command;
+        const mine = own && Object.hasOwn(expected, key) && samePath(command, expected[key]);
+        const gone = (() => { const dir = fleetWrapperInstanceDir(command, instancesRoot); return dir !== null && !existsSync(dir); })();
+        if (mine || gone) {
+            delete servers[key];
+            changed = true;
+        }
+    }
+    if (!changed)
+        return "unchanged";
+    try {
+        writeFileAtomic(path, JSON.stringify({ ...config, mcpServers: servers }, null, 2));
+    }
+    catch {
+        return "failed";
+    }
+    return "written";
+}
+// ── Steering (§4) ──
+export const kiroSteeringPath = (cwd, instance) => join(cwd, ".kiro", "steering", `agend-${instance}.md`);
+/** The first line of every steering file AgEnD writes from #906 on. */
+export const kiroSteeringTag = (spec) => `<!-- agend-agent:${kiroAgentName(spec.instance, spec.fleet)} -->`;
+/**
+ * Whose steering file this is. "untagged-legacy": written by AgEnD before the tag existed, for this instance and this
+ * directory (its `# AgEnD Fleet Context` header says so) — but by which fleet cannot be told, so it is never ours.
+ */
+export function kiroSteeringOwnership(spec) {
+    let text;
+    try {
+        text = readFileSync(kiroSteeringPath(spec.workingDirectory, spec.instance), "utf-8");
+    }
+    catch (err) {
+        return err.code === "ENOENT" ? "absent" : "unreadable";
+    }
+    if (text.split("\n", 1)[0] === kiroSteeringTag(spec))
+        return "ours";
+    const header = `# AgEnD Fleet Context\nYou are **${spec.instance}**, an instance in an AgEnD fleet.\nYour working directory is \`${spec.workingDirectory}\`.`;
+    return text.startsWith(header) ? "untagged-legacy" : "foreign";
+}
+/** The transition's steering (§3): written only when absent or already ours. An untagged one serves as it is. */
+export function writeTaggedKiroSteering(spec, instructions) {
+    const ownership = kiroSteeringOwnership(spec);
+    if (ownership === "unreadable")
+        return "unreadable";
+    if (ownership === "foreign")
+        return "conflict";
+    if (ownership === "untagged-legacy")
+        return "untagged-legacy";
+    const path = kiroSteeringPath(spec.workingDirectory, spec.instance);
+    try {
+        mkdirSync(dirname(path), { recursive: true });
+        writeFileAtomic(path, `${kiroSteeringTag(spec)}\n${instructions}`);
+    }
+    catch {
+        return "failed";
+    }
+    return "written";
+}
+/** Remove this instance's steering file only when it carries this fleet's tag. */
+export function removeTaggedKiroSteering(spec) {
+    const ownership = kiroSteeringOwnership(spec);
+    if (ownership !== "ours")
+        return ownership;
+    try {
+        unlinkSync(kiroSteeringPath(spec.workingDirectory, spec.instance));
+    }
+    catch {
+        return "failed";
+    }
+    return "removed";
+}
+//# sourceMappingURL=kiro-agent.js.map

package/dist/backend/kiro-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kiro-agent.js","sourceRoot":"","sources":["../../src/backend/kiro-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,0FAA0F;AAC1F,MAAM,WAAW,GAAG,8CAA8C,CAAC;AAEnE,oHAAoH;AACpH,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAE7C,yGAAyG;AACzG,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,IAAI,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC;QAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;IACrF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,oHAAoH;AACpH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,KAAa;IAC3D,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9B,CAAC,CAAC,SAAS,QAAQ,IAAI,KAAK,EAAE;QAC9B,CAAC,CAAC,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;AAC5F,CAAC;AAYD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAmB,EAAU,EAAE,CAC3D,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAErG,iHAAiH;AACjH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,QAAgB,EAAU,EAAE,CAAC,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC;AAEnG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAmB,EAAE,MAAc,EAAU,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,MAAM,KAAK,CAAC,CAAC;AAE9H,2FAA2F;AAC3F,MAAM,UAAU,mBAAmB,CAAC,IAAmB;IACrD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW;QAAE,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7H,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAE,CAAS,EAAW,EAAE,CAClD,OAAO,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC;AAE3F,+FAA+F;AAC/F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAmB,EAAU,EAAE,CAClE,wBAAwB,IAAI,CAAC,QAAQ,iBAAiB,IAAI,CAAC,KAAK,GAAG,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,IAAmB;IAChE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,oBAAoB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtH,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC;IAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;IACnC,OAAO,MAAM,CAAC,OAAO,CAAC,OAAkC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAC/E,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,sFAAsF;QACtF,sGAAsG;QACtG,2FAA2F;QAC3F,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,OAAO,GAAI,KAAwC,EAAE,OAAO,CAAC;QACnE,OAAO,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACvD,OAAQ,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IACxG,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAAC,CAAC;AAClG,CAAC;AAED,8FAA8F;AAC9F,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,IAAY;QACtB,KAAK,CAAC,GAAG,IAAI,kHAAkH,CAAC,CAAC;QACjI,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,wGAAwG;AACxG,MAAM,UAAU,cAAc,CAAC,IAAmB,EAAE,YAAgC;IAClF,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACxG,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,UAAU,GAAwD,EAAE,CAAC;IAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAAE,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAChH,MAAM,KAAK,GAAG;QACZ,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC;QAC9C,WAAW,EAAE,oBAAoB,CAAC,IAAI,CAAC;QACvC,MAAM,EAAE,YAAY,IAAI,IAAI;QAC5B,UAAU;QACV,KAAK,EAAE,CAAC,GAAG,CAAC;QACZ,YAAY,EAAE,EAAE;QAChB,SAAS,EAAE,EAAE;QACb,8GAA8G;QAC9G,cAAc,EAAE,IAAI;QACpB,qEAAqE;QACrE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;KAC3B,CAAC;IACF,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,eAAe,CAAC,IAAmB;IACjD,MAAM,GAAG,GAAG,EAAE,OAAO,EAAE,EAAc,EAAE,IAAI,EAAE,EAAc,EAAE,CAAC;IAC9D,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACrC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC;gBAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAMD,MAAM,WAAW,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AAExF;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAmB;IAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IACpD,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC;QACpG,MAAM,GAAG,IAAI,CAAC,KAAgC,CAAC;IACjD,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,YAAY,CAAC;IACtG,MAAM,OAAO,GAAG,EAAE,GAAI,GAA2C,EAAE,CAAC;IACpE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAwC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9G,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QACvG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;YAAE,QAAQ,GAAG,IAAI,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,QAAQ,CAAC;QAAC,CAAC;IAC9B,CAAC;IACD,OAAO,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;AACnE,CAAC;AAED,iGAAiG;AACjG,SAAS,uBAAuB,CAAC,OAAgB,EAAE,aAAqB;IACtE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAmB,EAAE,aAAqB,EAAE,GAAY;IACjG,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAClI,MAAM,MAAM,GAAG,IAAI,CAAC,KAAgC,CAAC;IACrD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC1C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC;IAC/E,MAAM,OAAO,GAAG,EAAE,GAAI,GAA+B,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,MAAM,OAAO,GAAI,KAAwC,EAAE,OAAO,CAAC;QACnE,MAAM,IAAI,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAE,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,GAAG,uBAAuB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjI,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YAAC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;QAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC;IACjC,IAAI,CAAC;QAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,QAAQ,CAAC;IAAC,CAAC;IACtH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,sBAAsB;AAEtB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,QAAQ,KAAK,CAAC,CAAC;AAElI,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAmB,EAAU,EAAE,CAAC,oBAAoB,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;AAInI;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAmB;IACvD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACzG,OAAQ,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;IACpF,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACpE,MAAM,MAAM,GAAG,oCAAoC,IAAI,CAAC,QAAQ,mEAAmE,IAAI,CAAC,gBAAgB,KAAK,CAAC;IAC9J,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,uBAAuB,CAAC,IAAmB,EAAE,YAAoB;IAC/E,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IACpD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC/C,IAAI,SAAS,KAAK,iBAAiB;QAAE,OAAO,iBAAiB,CAAC;IAC9D,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,eAAe,CAAC,IAAI,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,YAAY,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,QAAQ,CAAC;IAAC,CAAC;IAC5B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,IAAmB;IAC1D,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,CAAC;QAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,QAAQ,CAAC;IAAC,CAAC;IACtG,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/backend/kiro-identity.d.ts

@@ -0,0 +1,80 @@
+export type KiroClassicEngine = "v1" | "v2";
+/** v3 has its own identity (kiro-v3-identity.ts); its records here only say whether it runs as the agent. */
+type RecordEngine = KiroClassicEngine | "v3";
+export interface KiroStoreSession {
+    id: string;
+    updatedAt: number;
+}
+export type KiroStoreRead = {
+    kind: "ok";
+    sessions: KiroStoreSession[];
+    /**
+     * When `id` was created (epoch ms); null when the store has no such time for it; "unreadable" when the store could
+     * not be asked (a lock, an I/O error) — which defers a take-up rather than ruling the conversation out.
+     * Asked only of take-up candidates.
+     */
+    createdAt(id: string): number | null | "unreadable";
+} | {
+    kind: "unreadable";
+    detail: string;
+};
+/** The directory as kiro may have keyed it: as configured, resolved, and with symlinks resolved. */
+export declare function kiroDirectoryKeys(workingDirectory: string): string[];
+/** One identity per directory: symlinks resolved, else the absolute path. */
+export declare function kiroCanonicalDirectory(workingDirectory: string): string;
+/**
+ * v1: `conversations_v2` in the store the instance launches with, read-only, through the (key, updated_at) index —
+ * forced with INDEXED BY, so a missing index is an error (unreadable), never a silent scan of the table. The row
+ * itself is touched only for `conversation_id`, which precedes `value`. `created_at` follows `value`, so it is read
+ * only for the few take-up candidates. A missing database is an empty store.
+ */
+export declare function listKiroV1Sessions(workingDirectory: string, dbPath: string): KiroStoreRead;
+/** Full v2 files are read/parsed in a bounded worker, never on the fleet loop. */
+export declare function listKiroV2Sessions(workingDirectory: string, sessionsDir: string): Promise<KiroStoreRead>;
+export declare class KiroIdentityError extends Error {
+    constructor(detail: string);
+}
+export type KiroIdentityDecision = 
+/** Not isolated: the old command, nothing recorded. */
+{
+    mode: "legacy";
+    reason: string;
+} | {
+    mode: "resume";
+    id: string;
+    agentConfirmed: boolean;
+} | {
+    mode: "fresh";
+};
+export interface ResolveKiroIdentityOptions {
+    instance: string;
+    engine: KiroClassicEngine;
+    workingDirectory: string;
+    credentialProfile: string | null;
+    skipResume?: boolean;
+    agendHome: string;
+    /** The engine's store, read only when needed (adoption, take-up, a fresh mark's list). */
+    readStore: () => KiroStoreRead;
+    /** Whether this instance launched in this directory, with this profile and engine, before #906. */
+    launchedBefore: () => boolean;
+    now?: () => number;
+}
+/** Whether launch preparation needs a store snapshot. Only reads the small
+ * identity/claim files; never claims or writes. The final resolver rereads this
+ * state synchronously AFTER preparation/admission, so an async result cannot
+ * overwrite a newer identity. Pending unclaimed adoption is conservative:
+ * claiming may fail, in which case a fresh baseline will need the store.
+ */
+export declare function kiroIdentityNeedsStore(opts: Omit<ResolveKiroIdentityOptions, "readStore" | "launchedBefore">): boolean;
+export declare function resolveKiroIdentity(opts: ResolveKiroIdentityOptions): KiroIdentityDecision;
+/** Whether `id` is recorded as already running as the instance's agent. */
+export declare function kiroAgentConfirmed(agendHome: string, instance: string, engine: RecordEngine, workingDirectory: string, credentialProfile: string | null, id: string): boolean;
+/**
+ * Record that `id` now runs as the instance's agent (the switch was confirmed on screen). For v1/v2 the record must
+ * already own `id`; a v3 conversation (owned per kiro-v3-identity.ts) gets a record here if it has none. An
+ * unreadable state file is never overwritten: false.
+ */
+export declare function confirmKiroAgentSwitch(agendHome: string, instance: string, engine: RecordEngine, workingDirectory: string, credentialProfile: string | null, id: string): boolean;
+/** Delete or replace: drop the instance's records and every claim it holds (active or given up). Conversations stay. */
+export declare function forgetKiroIdentity(agendHome: string, instance: string): void;
+export {};