@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/dist/native-instance-input.js

@@ -1,59 +0,0 @@
-/** Shared, side-effect-free validation for native creation and its settings confirmation. */
-import { z } from "zod";
-import { validCredentialProfileName } from "./runtime-credential-profiles.js";
-export const NativeInstanceCreateArgs = z.object({
-    runtime: z.literal("windows"), native_adapter: z.enum(["exec", "pane"]).optional(), channel_id: z.string().min(1).max(160).optional(), topic_name: z.string().max(64).optional(),
-    machineId: z.string().uuid().optional(), directory: z.string().max(1024).optional(),
-    backend: z.enum(["codex", "claude-code", "antigravity", "grok", "kiro-cli", "opencode", "muse"]).default("codex"),
-    model: z.string().max(160).optional(), description: z.string().max(512).optional(),
-    systemPrompt: z.string().max(8000).optional(), sandbox: z.enum(["read-only", "workspace-write"]).default("read-only"),
-    tags: z.array(z.string().min(1).max(64)).max(32).optional(),
-    /** A NAME only: a Claude sign-in kept on the chosen Runtime computer. The server never accepts, stores or sends a folder for it. */
-    credentialProfile: z.string().max(64).refine(validCredentialProfileName, "Invalid credential profile name").optional(),
-}).strict().superRefine((value, ctx) => {
-    if (value.credentialProfile && (!value.machineId || value.backend !== "claude-code"))
-        ctx.addIssue({ code: "custom", message: "A credential profile is a Claude Code sign-in kept on a paired Runtime computer" });
-    if (value.native_adapter === "pane" && !['codex', 'claude-code'].includes(value.backend))
-        ctx.addIssue({ code: "custom", message: "Persistent Windows panes support Codex and Claude Code only" });
-    if (value.channel_id && value.native_adapter !== "pane")
-        ctx.addIssue({ code: "custom", message: "Only persistent panes allocate topics" });
-});
-/** The web editor's Windows settings patch (PATCH /ui/instances/:name). The one parser for it: the web and #2942's pending MCP update. */
-export const NativeInstancePatch = z.object({
-    display_name: z.string().min(1).max(64).optional(), description: z.string().max(512).optional(),
-    working_directory: z.string().min(1).max(1024).optional(), model: z.string().max(160).optional(),
-    systemPrompt: z.string().max(8000).optional(), native_sandbox: z.enum(["read-only", "workspace-write"]).optional(),
-    tags: z.array(z.string().min(1).max(64)).max(32).optional(),
-}).strict().refine(value => Object.keys(value).length > 0, "Choose a setting to update");
-/** The Windows settings an agent may ask to change (#2942): the web editor's fields the MCP schema offers, nothing more. */
-export const NativeInstanceConfigEdit = z.object({
-    display_name: z.string().min(1).max(64).optional(), description: z.string().max(512).optional(), model: z.string().max(160).optional(),
-}).strict().refine(value => Object.keys(value).length > 0, "Choose a setting to update");
-/** Resolve before approval, then recheck this exact connection rather than substituting another world. */
-export function nativePaneTopicTarget(config, requested) {
-    const channels = config?.channels ?? (config?.channel ? [config.channel] : []);
-    if (!channels.length) {
-        if (requested)
-            throw Error("Topic connection is unavailable");
-        return null;
-    }
-    const selected = requested ? channels.filter(channel => (channel.id ?? channel.type) === requested) : channels.slice(0, 1);
-    if (selected.length !== 1 || !['telegram', 'discord'].includes(selected[0].type))
-        throw Error("Choose one configured chat connection for this pane");
-    const channel = selected[0];
-    return { id: channel.id ?? channel.type, type: channel.type, group_id: channel.group_id };
-}
-export function parseNativeInstanceCreate(body) {
-    const parsed = NativeInstanceCreateArgs.parse(body);
-    const name = parsed.topic_name?.trim() || parsed.directory?.trim().replace(/[\\/]+$/, "").split(/[\\/]/).pop() || "";
-    if (!name)
-        throw new Error("Enter an agent name");
-    const cwd = parsed.directory?.trim();
-    const input = { ...parsed, topic_name: name, directory: cwd || undefined };
-    const profile = { name, cli: input.backend, ...(cwd ? { cwd } : {}),
-        ...(input.machineId ? { machineId: input.machineId } : {}), model: input.model,
-        description: input.description ?? "", instructions: input.systemPrompt ?? "", sandbox: input.sandbox,
-        ...(input.tags ? { tags: input.tags } : {}), ...(input.credentialProfile ? { credentialProfile: input.credentialProfile } : {}) };
-    return { input, profile };
-}
-//# sourceMappingURL=native-instance-input.js.map

package/dist/native-instance-input.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"native-instance-input.js","sourceRoot":"","sources":["../src/native-instance-input.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAE9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,cAAc,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7K,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACnF,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACjH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IACrH,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,oIAAoI;IACpI,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,0BAA0B,EAAC,iCAAiC,CAAC,CAAC,QAAQ,EAAE;CACtH,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;IACnC,IAAG,KAAK,CAAC,iBAAiB,IAAE,CAAC,CAAC,KAAK,CAAC,SAAS,IAAE,KAAK,CAAC,OAAO,KAAG,aAAa,CAAC;QAAC,GAAG,CAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,iFAAiF,EAAC,CAAC,CAAC;IACtM,IAAG,KAAK,CAAC,cAAc,KAAG,MAAM,IAAE,CAAC,CAAC,OAAO,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAC,GAAG,CAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,6DAA6D,EAAC,CAAC,CAAC;IACvL,IAAG,KAAK,CAAC,UAAU,IAAE,KAAK,CAAC,cAAc,KAAG,MAAM;QAAC,GAAG,CAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,uCAAuC,EAAC,CAAC,CAAC;AACnI,CAAC,CAAC,CAAC;AACH,0IAA0I;AAC1I,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,YAAY,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC7F,iBAAiB,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC9F,YAAY,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/G,IAAI,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAA,EAAE,CAAA,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAC,CAAC,EAAC,4BAA4B,CAAC,CAAC;AACpF,4HAA4H;AAC5H,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,YAAY,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACpI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAA,EAAE,CAAA,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAC,CAAC,EAAC,4BAA4B,CAAC,CAAC;AACpF,0GAA0G;AAC1G,MAAM,UAAU,qBAAqB,CAAC,MAAuB,EAAC,SAAiB;IAC7E,MAAM,QAAQ,GAAC,MAAM,EAAE,QAAQ,IAAE,CAAC,MAAM,EAAE,OAAO,CAAA,CAAC,CAAA,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC;IACvE,IAAG,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC;QAAA,IAAG,SAAS;YAAC,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAC9F,MAAM,QAAQ,GAAC,SAAS,CAAA,CAAC,CAAA,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAA,EAAE,CAAA,CAAC,OAAO,CAAC,EAAE,IAAE,OAAO,CAAC,IAAI,CAAC,KAAG,SAAS,CAAC,CAAA,CAAC,CAAA,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC;IAC9G,IAAG,QAAQ,CAAC,MAAM,KAAG,CAAC,IAAE,CAAC,CAAC,UAAU,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC9I,MAAM,OAAO,GAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAAA,OAAM,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,IAAE,OAAO,CAAC,IAAI,EAAC,IAAI,EAAC,OAAO,CAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,EAAC,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAa;IACrD,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACrH,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,SAAS,EAAE,CAAC;IAC3E,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;QAC9E,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;QACpG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACpI,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC"}

package/dist/native-instance-registry.d.ts

@@ -1,38 +0,0 @@
-/** Runtime identity shared by Fleet, HTTP and the native Windows execution adapter. */
-import type { FleetConfig, InstanceConfig } from "./types.js";
-import type { WindowsAgent, WindowsAgents } from "./windows-agents.js";
-/** M-2239 P1-1: why create_instance (and every path through handleCreate) refuses a Windows agent. */
-export declare const WINDOWS_CREATE_REFUSED = "Windows agents can only be created by an administrator in the web dashboard (Fleet \u2192 New agent \u2192 Native Windows) or confirmed in General after an agent's create_instance request, not through a template or any other path";
-/** M-2239 P1-1: why another agent's MCP call may not reconfigure or replace a Windows agent. */
-export declare const WINDOWS_CONFIG_REFUSED = "A Windows agent's settings are changed by an administrator: in the web dashboard, or confirmed in General after an update_instance_config request (display_name, description and model only)";
-export type NativeInstanceConfig = InstanceConfig & {
-    runtime: "windows";
-    native_agent_id: string;
-    native_sandbox: "read-only" | "workspace-write";
-};
-export declare function nativeInstanceName(agentId: string): string;
-export declare function isWindowsInstance(config: Partial<InstanceConfig> | null | undefined): config is InstanceConfig & {
-    runtime: "windows";
-};
-export declare function isNativePaneInstance(config: Partial<InstanceConfig> | null | undefined): config is InstanceConfig & {
-    runtime: "windows";
-    native_adapter: "pane";
-};
-export declare function isNativeExecInstance(config: Partial<InstanceConfig> | null | undefined): config is InstanceConfig & {
-    runtime: "windows";
-    native_adapter?: "exec";
-};
-export declare function nativeAgentId(config: Partial<InstanceConfig> | null | undefined): string | null;
-/**
- * The credential profile NAME a Windows agent runs under, from `backend_options["claude-code"].credential_profile`; undefined means "the
- * computer's own sign-in". Only a name: the Runtime on that computer owns the folder it stands for. Fail closed: a malformed name, a
- * profile on a CLI other than Claude Code, or a profile on this PC's own (non-Runtime) Windows CLIs is an error, never ignored.
- */
-export declare function nativeCredentialProfile(config: Partial<InstanceConfig> | null | undefined): string | undefined;
-export declare function nativeInstanceConfig(agent: Omit<WindowsAgent, "turns" | "instructions"> & {
-    instructions?: string;
-}): NativeInstanceConfig;
-/** Import legacy native profiles once. Existing Fleet entries remain the source of settings. */
-export declare function registerWindowsProfiles(fleet: FleetConfig, store: WindowsAgents, save: () => void): boolean;
-export declare function previewWindowsProfile(config: InstanceConfig, store: WindowsAgents): WindowsAgent;
-export declare function syncWindowsProfile(config: InstanceConfig, store: WindowsAgents, authorized?: () => boolean): WindowsAgent;

package/dist/native-instance-registry.js

@@ -1,129 +0,0 @@
-import { DEFAULT_INSTANCE_CONFIG } from "./config.js";
-import { validWindowsAgentId } from "./windows-cli-worker.js";
-import { isNativeProviderId } from "./windows-cli-providers.js";
-import { assertCredentialProfileCli, assertCredentialProfileName } from "./runtime-credential-profiles.js";
-/** M-2239 P1-1: why create_instance (and every path through handleCreate) refuses a Windows agent. */
-export const WINDOWS_CREATE_REFUSED = "Windows agents can only be created by an administrator in the web dashboard (Fleet → New agent → Native Windows) or confirmed in General after an agent's create_instance request, not through a template or any other path";
-/** M-2239 P1-1: why another agent's MCP call may not reconfigure or replace a Windows agent. */
-export const WINDOWS_CONFIG_REFUSED = "A Windows agent's settings are changed by an administrator: in the web dashboard, or confirmed in General after an update_instance_config request (display_name, description and model only)";
-export function nativeInstanceName(agentId) {
-    if (!validWindowsAgentId(agentId))
-        throw new Error("Invalid Windows agent id");
-    return `windows-${agentId.toLowerCase()}`;
-}
-export function isWindowsInstance(config) {
-    return config?.runtime === "windows";
-}
-export function isNativePaneInstance(config) {
-    return isWindowsInstance(config) && config.native_adapter === "pane";
-}
-export function isNativeExecInstance(config) {
-    return isWindowsInstance(config) && config.native_adapter !== "pane";
-}
-export function nativeAgentId(config) {
-    return isWindowsInstance(config) && validWindowsAgentId(config.native_agent_id) ? config.native_agent_id.toLowerCase() : null;
-}
-/**
- * The credential profile NAME a Windows agent runs under, from `backend_options["claude-code"].credential_profile`; undefined means "the
- * computer's own sign-in". Only a name: the Runtime on that computer owns the folder it stands for. Fail closed: a malformed name, a
- * profile on a CLI other than Claude Code, or a profile on this PC's own (non-Runtime) Windows CLIs is an error, never ignored.
- */
-export function nativeCredentialProfile(config) {
-    const options = config?.backend_options;
-    if (!options || typeof options !== "object")
-        return undefined;
-    const raw = options["claude-code"]?.credential_profile;
-    const other = Object.entries(options).find(([backend, row]) => backend !== "claude-code" && row && typeof row === "object" && row.credential_profile !== undefined);
-    if (other)
-        throw new Error("A Windows agent can choose a credential profile for Claude Code only");
-    if (raw === undefined || raw === null || raw === "")
-        return undefined;
-    const name = assertCredentialProfileName(raw);
-    if (config?.backend !== "claude-code")
-        throw new Error("A Windows agent can choose a credential profile for Claude Code only");
-    if (!config?.machine_id)
-        throw new Error("A credential profile is a sign-in kept on a paired Runtime computer; choose that computer for this agent");
-    assertCredentialProfileCli(config.backend);
-    return name;
-}
-export function nativeInstanceConfig(agent) {
-    return {
-        ...structuredClone(DEFAULT_INSTANCE_CONFIG), runtime: "windows", native_agent_id: agent.id, native_sandbox: agent.sandbox,
-        ...(agent.machineId ? { machine_id: agent.machineId } : {}),
-        working_directory: agent.cwd, display_name: agent.name, description: agent.description, backend: agent.cli,
-        // Explicit empties prevent a Linux fleet's model/prompt from being inherited on config reload.
-        model: agent.model || "", systemPrompt: agent.instructions || "", agent_mode: "cli",
-    };
-}
-/** Import legacy native profiles once. Existing Fleet entries remain the source of settings. */
-export function registerWindowsProfiles(fleet, store, save) {
-    const before = { ...fleet.instances };
-    let changed = false, saved = false;
-    const bindings = [];
-    try {
-        const claimed = new Set(Object.values(fleet.instances).map(nativeAgentId).filter((id) => id !== null));
-        for (const profile of store.list()) {
-            if (claimed.has(profile.id.toLowerCase())) {
-                const entry = Object.entries(fleet.instances).find(([, config]) => nativeAgentId(config) === profile.id.toLowerCase());
-                if (entry)
-                    bindings.push({ id: profile.id, name: entry[0] });
-                continue;
-            }
-            if (profile.fleet_instance)
-                continue;
-            const name = nativeInstanceName(profile.id);
-            if (Object.hasOwn(fleet.instances, name))
-                throw new Error(`Cannot register Windows agent over existing instance ${name}`);
-            fleet.instances[name] = nativeInstanceConfig(store.get(profile.id));
-            claimed.add(profile.id.toLowerCase());
-            changed = true;
-            bindings.push({ id: profile.id, name });
-        }
-        if (changed) {
-            save();
-            saved = true;
-        }
-        for (const binding of bindings)
-            store.bindInstance(binding.id, binding.name);
-        return changed;
-    }
-    catch (error) {
-        if (!saved)
-            fleet.instances = before;
-        throw error;
-    }
-}
-/** Copy common instance settings into provider state before use, keeping session/history untouched. */
-function windowsProfilePatch(config, store) {
-    const id = nativeAgentId(config);
-    if (!id)
-        throw new Error("Instance does not name a Windows runtime agent");
-    const current = store.get(id);
-    if (config.machine_id !== current.machineId)
-        throw new Error("This conversation belongs to a different runtime machine; create a new agent to move it");
-    const patch = {};
-    const desired = {
-        name: config.display_name ?? current.name, cwd: config.working_directory,
-        description: config.description ?? "", instructions: config.systemPrompt ?? "",
-        model: config.model ?? "", sandbox: config.native_sandbox ?? current.sandbox,
-    };
-    if (config.backend !== undefined) {
-        if (!isNativeProviderId(config.backend))
-            throw new Error("Choose a supported Windows CLI");
-        desired.cli = config.backend;
-    }
-    for (const key of Object.keys(desired)) {
-        if ((desired[key] ?? "") !== (current[key] ?? ""))
-            patch[key] = desired[key];
-    }
-    return { id, current, patch };
-}
-export function previewWindowsProfile(config, store) {
-    const { id, current, patch } = windowsProfilePatch(config, store);
-    return Object.keys(patch).length ? store.previewUpdate(id, patch) : current;
-}
-export function syncWindowsProfile(config, store, authorized = () => true) {
-    const { id, current, patch } = windowsProfilePatch(config, store);
-    return Object.keys(patch).length ? store.update(id, patch, authorized) : current;
-}
-//# sourceMappingURL=native-instance-registry.js.map

package/dist/native-instance-registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"native-instance-registry.js","sourceRoot":"","sources":["../src/native-instance-registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAG3G,sGAAsG;AACtG,MAAM,CAAC,MAAM,sBAAsB,GAAG,6NAA6N,CAAC;AACpQ,gGAAgG;AAChG,MAAM,CAAC,MAAM,sBAAsB,GAAG,8LAA8L,CAAC;AAGrO,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC/E,OAAO,WAAW,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;AAC5C,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,MAAkD;IAClF,OAAO,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC;AACvC,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,MAAkD;IACrF,OAAO,iBAAiB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC;AACvE,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,MAAkD;IACrF,OAAO,iBAAiB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC;AACvE,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,MAAkD;IAC9E,OAAO,iBAAiB,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChI,CAAC;AACD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAkD;IACxF,MAAM,OAAO,GAAG,MAAM,EAAE,eAAe,CAAC;IACxC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,aAAa,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAK,GAA+B,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC;IACjM,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IACnG,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtE,MAAM,IAAI,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM,EAAE,OAAO,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC/H,IAAI,CAAC,MAAM,EAAE,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,0GAA0G,CAAC,CAAC;IACrJ,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,KAAyE;IAC5G,OAAO;QACL,GAAG,eAAe,CAAC,uBAAuB,CAAC,EAAE,OAAO,EAAC,SAAS,EAAC,eAAe,EAAC,KAAK,CAAC,EAAE,EAAC,cAAc,EAAC,KAAK,CAAC,OAAO;QACpH,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAC,UAAU,EAAC,KAAK,CAAC,SAAS,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,iBAAiB,EAAC,KAAK,CAAC,GAAG,EAAC,YAAY,EAAC,KAAK,CAAC,IAAI,EAAC,WAAW,EAAC,KAAK,CAAC,WAAW,EAAC,OAAO,EAAC,KAAK,CAAC,GAAG;QACnG,+FAA+F;QAC/F,KAAK,EAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAC,YAAY,EAAC,KAAK,CAAC,YAAY,IAAI,EAAE,EAAC,UAAU,EAAC,KAAK;KAC/E,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,uBAAuB,CAAC,KAAkB,EAAE,KAAoB,EAAE,IAAgB;IAChG,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC;IACnC,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;QACrH,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC1C,MAAM,KAAK,GAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,MAAM,CAAC,EAAC,EAAE,CAAA,aAAa,CAAC,MAAM,CAAC,KAAG,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;gBAChH,IAAG,KAAK;oBAAC,QAAQ,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,IAAI,EAAC,KAAK,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC;gBACtD,SAAS;YACX,CAAC;YACD,IAAG,OAAO,CAAC,cAAc;gBAAC,SAAS;YACnC,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,EAAE,CAAC,CAAC;YACzH,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAAA,OAAO,GAAG,IAAI,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YAAC,IAAI,EAAE,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;QACtC,KAAI,MAAM,OAAO,IAAI,QAAQ;YAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAM,KAAK,EAAE,CAAC;QAAC,IAAG,CAAC,KAAK;YAAC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACrE,CAAC;AAED,uGAAuG;AACvG,SAAS,mBAAmB,CAAC,MAAsB,EAAE,KAAoB;IACvE,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAG,MAAM,CAAC,UAAU,KAAG,OAAO,CAAC,SAAS;QAAC,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IACpJ,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAsB;QACjC,IAAI,EAAC,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,IAAI,EAAC,GAAG,EAAC,MAAM,CAAC,iBAAiB;QACrE,WAAW,EAAC,MAAM,CAAC,WAAW,IAAI,EAAE,EAAC,YAAY,EAAC,MAAM,CAAC,YAAY,IAAI,EAAE;QAC3E,KAAK,EAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAC,OAAO,EAAC,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,OAAO;KAC1E,CAAC;IACF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAmC,EAAE,CAAC;QACzE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAAG,KAAgC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,CAAC;AAC5B,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,MAAsB,EAAE,KAAoB;IAChF,MAAM,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,GAAC,mBAAmB,CAAC,MAAM,EAAC,KAAK,CAAC,CAAC;IAAA,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACxI,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,MAAsB,EAAE,KAAoB,EAAE,UAAU,GAAkB,GAAG,EAAE,CAAC,IAAI;IACrH,MAAM,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,GAAC,mBAAmB,CAAC,MAAM,EAAC,KAAK,CAAC,CAAC;IAAA,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAC,KAAK,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC5I,CAAC"}

package/dist/native-mcp.d.ts

@@ -1,43 +0,0 @@
-import type { IncomingMessage, ServerResponse } from "node:http";
-import { type AgentEndpointContext } from "./agent-endpoint.js";
-import type { NativeMcpConnection, NativeSandbox } from "./windows-cli-providers.js";
-export interface NativeMcpGrant {
-    instance: string;
-    requestId: string;
-    sandbox: NativeSandbox;
-    endpoint: string;
-    stillCurrent: () => boolean;
-}
-export interface NativeMcpLease {
-    connection: NativeMcpConnection;
-    close(): void;
-    reportedCorrelations(targetInstance?: string): string[];
-}
-export declare class NativeMcpSessions {
-    private readonly ctx;
-    private readonly sessions;
-    constructor(ctx: AgentEndpointContext);
-    grant(input: NativeMcpGrant): NativeMcpLease;
-    hasActive(instance: string): boolean;
-    closeInstance(instance: string): void;
-    closeAll(): void;
-    private closeToken;
-    /** Publication retires a generation before later lifecycle/configuration work can run. */
-    observePolicies(): void;
-    private policy;
-    private current;
-    private prune;
-    private readOnly;
-    private allowed;
-    private canCall;
-    /**
-     * A handler may await before it commits a delivery or a task change. Keep the original turn's capability at
-     * those commit points, even if another turn for this instance has started in the same Fleet process meanwhile.
-     * Bind other methods to the real context so FleetManager's private state and getters keep their owner.
-     */
-    private dispatcherContext;
-    private menu;
-    /** Consumes native-token requests even when invalid; they must never fall through to legacy credentials. */
-    handleRequest(req: IncomingMessage, res: ServerResponse): boolean;
-    private readRequest;
-}

package/dist/native-mcp.js

@@ -1,291 +0,0 @@
-/** Per-turn, instance-bound MCP capabilities for native Windows CLI children. */
-import { agentCredentialPolicy } from "./agent-credentials.js";
-import { nativeAgentAdmissionContext } from "./native-agent-admission.js";
-import { windowsCliEnabled } from "./windows-cli.js";
-import { createHash, randomBytes } from "node:crypto";
-import { dispatchAgentOperation } from "./agent-endpoint.js";
-import { TOOLS, OUTBOUND_TOOL_SCHEMAS } from "./channel/mcp-tools.js";
-import { dashboardRefusalIn } from "./dashboard-permissions.js";
-import { gatewayRequestContext } from "./web-request-context.js";
-import { readBoundedWebBody } from "./web-body.js";
-import { mayUseTool, resolveToolSet } from "./tool-permissions.js";
-const HEADER = "x-agend-native-token";
-const UUID = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i;
-const TTL_MS = 6 * 60_000;
-const MAX_BYTES = 64 * 1024;
-const MAX_CALLS = 64;
-const OPS = Object.freeze({
-    list_instances: "list", describe_instance: "describe", task: "task", send_to_instance: "send",
-    delegate_task: "delegate", request_information: "ask", report_result: "report", delivery_status: "delivery-status",
-});
-const READ_TOOLS = new Set(["list_instances", "describe_instance", "task", "delivery_status"]);
-const READ_TASK_ACTIONS = ["list", "get", "mine", "projects"];
-function object(value) {
-    return !!value && typeof value === "object" && !Array.isArray(value);
-}
-function endpoint(value) {
-    const url = new URL(value);
-    if (url.protocol !== "http:" || !["127.0.0.1", "localhost", "[::1]"].includes(url.hostname)
-        || url.pathname !== "/agent" || url.search || url.hash || url.username || url.password)
-        throw Error("Native MCP requires the local agent endpoint");
-    return url.href;
-}
-function loopback(address) {
-    return address === "127.0.0.1" || address === "::1" || address === "::ffff:127.0.0.1";
-}
-function canonical(value, depth = 0) {
-    if (depth > 64)
-        throw Error("Native MCP arguments are too deeply nested");
-    if (Array.isArray(value))
-        return `[${value.map(item => canonical(item, depth + 1)).join(",")}]`;
-    if (object(value))
-        return `{${Object.keys(value).sort().map(key => `${JSON.stringify(key)}:${canonical(value[key], depth + 1)}`).join(",")}}`;
-    return JSON.stringify(value) ?? "null";
-}
-function toolError(message) { return { content: [{ type: "text", text: message.slice(0, 4000) }], isError: true }; }
-function failed(value) { return object(value) && value.error !== undefined; }
-function result(value) {
-    const text = typeof value === "string" ? value : JSON.stringify(value);
-    if (text === undefined)
-        return toolError("AgEnD returned no tool result");
-    const response = { content: [{ type: "text", text }], ...(failed(value) ? { isError: true } : {}) };
-    if (Buffer.byteLength(JSON.stringify(response)) > MAX_BYTES) {
-        const operation = object(value) && typeof value.operation_id === "string" ? ` Operation ID: ${value.operation_id}.` : "";
-        return toolError(`Tool result exceeds the native MCP response limit.${operation} Use a narrower query; do not repeat a mutation whose outcome is unknown.`);
-    }
-    return response;
-}
-function json(res, status, value) {
-    if (res.destroyed || res.writableEnded)
-        return;
-    res.writeHead(status, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-store" });
-    res.end(JSON.stringify(value));
-}
-function refuse(req, res, status, message) {
-    if (!res.destroyed && !res.writableEnded) {
-        res.writeHead(status, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-store", "Connection": "close" });
-        res.end(JSON.stringify({ error: message }));
-    }
-    req.resume();
-}
-export class NativeMcpSessions {
-    ctx;
-    sessions = new Map();
-    constructor(ctx) {
-        this.ctx = ctx;
-    }
-    grant(input) {
-        this.prune();
-        const config = this.ctx.fleetConfig?.instances[input.instance];
-        if (!windowsCliEnabled() || config?.runtime !== "windows" || !UUID.test(config.native_agent_id ?? "")
-            || !["codex", "claude-code"].includes(config.backend ?? "") || !UUID.test(input.requestId)
-            || !["read-only", "workspace-write"].includes(input.sandbox) || typeof input.stillCurrent !== "function")
-            throw Error("Native MCP requires an active supported Windows instance");
-        if (this.sessions.size >= 16 || [...this.sessions.values()].some(session => session.instance === input.instance))
-            throw Error("A native MCP session is already active or the session limit was reached");
-        const policy = this.policy(input.instance);
-        if (policy === null)
-            throw Error("Native MCP issuing policy is unavailable");
-        const address = endpoint(input.endpoint), token = randomBytes(32).toString("hex");
-        const session = { token, instance: input.instance, requestId: input.requestId, agentId: config.native_agent_id, backend: config.backend, sandbox: input.sandbox, policy,
-            expires: Date.now() + TTL_MS, stillCurrent: input.stillCurrent, closed: false, calls: new Map(), reported: new Map(),
-            timer: setTimeout(() => this.closeToken(token), TTL_MS) };
-        session.timer.unref?.();
-        this.sessions.set(token, session);
-        return { connection: { endpoint: address, token, tools: this.menu(session).map(tool => tool.name) }, close: () => this.closeToken(token),
-            reportedCorrelations: target => target === undefined ? [...new Set([...session.reported.values()].flatMap(ids => [...ids]))] : [...(session.reported.get(target) ?? [])] };
-    }
-    hasActive(instance) {
-        this.prune();
-        return [...this.sessions.values()].some(session => session.instance === instance);
-    }
-    closeInstance(instance) { for (const session of this.sessions.values())
-        if (session.instance === instance)
-            this.closeToken(session.token); }
-    closeAll() { for (const token of this.sessions.keys())
-        this.closeToken(token); }
-    closeToken(token) {
-        const session = this.sessions.get(token);
-        if (!session)
-            return;
-        session.closed = true;
-        clearTimeout(session.timer);
-        session.calls.clear();
-        this.sessions.delete(token);
-    }
-    /** Publication retires a generation before later lifecycle/configuration work can run. */
-    observePolicies() { this.prune(); }
-    policy(instance) {
-        const fleet = this.ctx.fleetConfig, config = fleet?.instances[instance], base = agentCredentialPolicy(fleet, instance);
-        if (base === null || config?.runtime !== "windows")
-            return null;
-        return JSON.stringify([base, config.native_agent_id, config.backend, config.native_sandbox,
-            config.native_adapter ?? "exec", config.machine_id ?? null, config.native_general_binding ?? null]);
-    }
-    current(session) {
-        const config = this.ctx.fleetConfig?.instances[session.instance];
-        let current = false;
-        try {
-            current = session.stillCurrent();
-        }
-        catch { /* a revoked owner is unavailable */ }
-        return !session.closed && Date.now() < session.expires && windowsCliEnabled() && current
-            && this.policy(session.instance) === session.policy && config?.runtime === "windows" && config.native_agent_id === session.agentId && config.backend === session.backend;
-    }
-    prune() { for (const session of this.sessions.values())
-        if (!this.current(session))
-            this.closeToken(session.token); }
-    readOnly(session) {
-        return session.sandbox === "read-only" || this.ctx.fleetConfig?.instances[session.instance]?.native_sandbox !== "workspace-write";
-    }
-    allowed(session, name) {
-        const config = this.ctx.fleetConfig?.instances[session.instance];
-        return Object.hasOwn(OPS, name) && (!this.readOnly(session) || READ_TOOLS.has(name))
-            && mayUseTool(resolveToolSet(config, session.instance), name) && !dashboardRefusalIn(this.ctx.fleetConfig, session.instance, name);
-    }
-    canCall(session, name, args) {
-        return this.allowed(session, name) && !(name === "task" && this.readOnly(session) && !READ_TASK_ACTIONS.includes(String(args.action)));
-    }
-    /**
-     * A handler may await before it commits a delivery or a task change. Keep the original turn's capability at
-     * those commit points, even if another turn for this instance has started in the same Fleet process meanwhile.
-     * Bind other methods to the real context so FleetManager's private state and getters keep their owner.
-     */
-    dispatcherContext(session, name, args) {
-        return nativeAgentAdmissionContext(this.ctx, {
-            instance: session.instance,
-            current: () => this.current(session) && this.canCall(session, name, args),
-            taskAllowed: value => this.canCall(session, "task", value),
-        });
-    }
-    menu(session) {
-        return TOOLS.filter(tool => this.allowed(session, tool.name)).map(tool => {
-            const readTask = tool.name === "task" && this.readOnly(session);
-            const scoped = readTask
-                ? { ...tool, description: `Read-only task lookup. Allowed actions: ${READ_TASK_ACTIONS.join(", ")}.`, inputSchema: { ...tool.inputSchema, properties: { ...tool.inputSchema.properties, action: { type: "string", enum: READ_TASK_ACTIONS } } } }
-                : tool;
-            return { ...scoped, annotations: { readOnlyHint: tool.name === "list_instances" || tool.name === "describe_instance" || tool.name === "delivery_status" || readTask } };
-        });
-    }
-    /** Consumes native-token requests even when invalid; they must never fall through to legacy credentials. */
-    handleRequest(req, res) {
-        const header = req.headers[HEADER];
-        if (header === undefined)
-            return false;
-        if (req.method !== "POST" || req.url !== "/agent") {
-            refuse(req, res, 405, "Native MCP requires POST /agent");
-            return true;
-        }
-        if (gatewayRequestContext(req) || req.headers.origin !== undefined || req.headers.cookie !== undefined || !loopback(req.socket?.remoteAddress)) {
-            refuse(req, res, 403, "Native MCP is available only to its local CLI child");
-            return true;
-        }
-        const session = typeof header === "string" && /^[a-f0-9]{64}$/.test(header) ? this.sessions.get(header) : undefined;
-        if (!session || !this.current(session)) {
-            if (session)
-                this.closeToken(session.token);
-            refuse(req, res, 401, "Native MCP capability is invalid or expired");
-            return true;
-        }
-        const declared = Number(req.headers["content-length"]);
-        if (Number.isFinite(declared) && declared > MAX_BYTES) {
-            refuse(req, res, 413, "Native MCP request is too large");
-            return true;
-        }
-        void this.readRequest(req, res, session);
-        return true;
-    }
-    async readRequest(req, res, session) {
-        try {
-            let raw;
-            try {
-                raw = await readBoundedWebBody(req, MAX_BYTES);
-            }
-            catch {
-                json(res, 413, { error: "Native MCP request could not be read within its limit" });
-                return;
-            }
-            if (!this.current(session)) {
-                json(res, 401, { error: "Native MCP capability is invalid or expired" });
-                return;
-            }
-            const body = JSON.parse(raw.toString("utf8"));
-            if (!object(body) || Object.keys(body).some(key => !["op", "method", "params", "callId"].includes(key)) || body.op !== "native-mcp"
-                || !["tools/list", "tools/call"].includes(String(body.method)) || !object(body.params)) {
-                json(res, 400, { error: "Invalid native MCP operation" });
-                return;
-            }
-            if (body.method === "tools/list") {
-                if (Object.keys(body.params).length || body.callId !== undefined) {
-                    json(res, 400, { error: "Invalid native MCP tool listing" });
-                    return;
-                }
-                json(res, 200, { tools: this.menu(session) });
-                return;
-            }
-            const params = body.params, name = params.name;
-            if (typeof body.callId !== "string" || !/^[A-Za-z0-9._:-]{1,128}$/.test(body.callId)
-                || Object.keys(params).some(key => !["name", "arguments"].includes(key)) || typeof name !== "string" || !object(params.arguments)) {
-                json(res, 400, { error: "Invalid native MCP tool call" });
-                return;
-            }
-            if (!this.allowed(session, name)) {
-                json(res, 403, { error: "This native MCP tool is not available to this instance or access mode" });
-                return;
-            }
-            const parsed = OUTBOUND_TOOL_SCHEMAS.get(name)?.safeParse(params.arguments);
-            if (!parsed?.success) {
-                json(res, 200, toolError("Invalid tool arguments"));
-                return;
-            }
-            const args = parsed.data;
-            if (name === "task" && this.readOnly(session) && !READ_TASK_ACTIONS.includes(String(args.action))) {
-                json(res, 403, { error: "Read-only native MCP permits task lookup only" });
-                return;
-            }
-            const digest = createHash("sha256").update(canonical([name, args])).digest("hex");
-            const old = session.calls.get(body.callId);
-            if (old && old.digest !== digest) {
-                json(res, 409, { error: "Native MCP callId belongs to different arguments" });
-                return;
-            }
-            if (!old && session.calls.size >= MAX_CALLS) {
-                json(res, 429, { error: "Native MCP turn call limit reached" });
-                return;
-            }
-            const call = old ?? { digest, result: Promise.resolve().then(async () => {
-                    if (!this.current(session) || !this.canCall(session, name, args))
-                        return toolError("Native MCP capability or tool access was revoked");
-                    try {
-                        const value = await dispatchAgentOperation(this.dispatcherContext(session, name, args), session.instance, OPS[name], args);
-                        if (name === "report_result" && !failed(value) && value !== undefined && typeof args.target_instance === "string" && args.target_instance
-                            && typeof args.correlation_id === "string" && args.correlation_id) {
-                            const reported = session.reported.get(args.target_instance) ?? new Set();
-                            reported.add(args.correlation_id);
-                            session.reported.set(args.target_instance, reported);
-                        }
-                        return result(value);
-                    }
-                    catch (error) {
-                        return toolError(error instanceof Error ? error.message : "AgEnD tool failed");
-                    }
-                }) };
-            if (!old)
-                session.calls.set(body.callId, call);
-            const response = await call.result;
-            if (!this.current(session)) {
-                json(res, 401, { error: "Native MCP capability is invalid or expired" });
-                return;
-            }
-            if (!this.canCall(session, name, args)) {
-                json(res, 403, { error: "Native MCP tool access was revoked" });
-                return;
-            }
-            json(res, 200, response);
-        }
-        catch (error) {
-            json(res, 400, { error: error instanceof SyntaxError ? "Invalid native MCP JSON" : "Invalid native MCP request" });
-        }
-    }
-}
-//# sourceMappingURL=native-mcp.js.map

package/dist/native-mcp.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"native-mcp.js","sourceRoot":"","sources":["../src/native-mcp.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAA6B,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGnE,MAAM,MAAM,GAAG,sBAAsB,CAAC;AACtC,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAC/E,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;AAC1B,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5B,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,GAAG,GAAoC,MAAM,CAAC,MAAM,CAAC;IACzD,cAAc,EAAC,MAAM,EAAE,iBAAiB,EAAC,UAAU,EAAE,IAAI,EAAC,MAAM,EAAE,gBAAgB,EAAC,MAAM;IACzF,aAAa,EAAC,UAAU,EAAE,mBAAmB,EAAC,KAAK,EAAE,aAAa,EAAC,QAAQ,EAAE,eAAe,EAAC,iBAAiB;CAC/G,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAC,mBAAmB,EAAC,MAAM,EAAC,iBAAiB,CAAC,CAAC,CAAC;AAC5F,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,UAAU,CAAC,CAAC;AAiB3D,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AACD,SAAS,QAAQ,CAAC,KAAY;IAC5B,MAAM,GAAG,GAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,IAAG,GAAG,CAAC,QAAQ,KAAG,OAAO,IAAI,CAAC,CAAC,WAAW,EAAC,WAAW,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;WACjF,GAAG,CAAC,QAAQ,KAAG,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACpJ,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AACD,SAAS,QAAQ,CAAC,OAAwB;IACxC,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,kBAAkB,CAAC;AACxF,CAAC;AACD,SAAS,SAAS,CAAC,KAAa,EAAC,KAAK,GAAC,CAAC;IACtC,IAAG,KAAK,GAAC,EAAE;QAAC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACtE,IAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAC,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE,CAAA,SAAS,CAAC,IAAI,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACzF,IAAG,MAAM,CAAC,KAAK,CAAC;QAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAA,EAAE,CAAA,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAC,KAAK,GAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvI,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;AACzC,CAAC;AACD,SAAS,SAAS,CAAC,OAAc,IAAe,OAAO,EAAC,OAAO,EAAC,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAC,IAAI,CAAC,EAAC,CAAC,EAAC,OAAO,EAAC,IAAI,EAAC,CAAC,CAAC,CAAC;AAC3H,SAAS,MAAM,CAAC,KAAa,IAAY,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAG,SAAS,CAAC,CAAC,CAAC;AAC3F,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,IAAI,GAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrE,IAAG,IAAI,KAAG,SAAS;QAAC,OAAO,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAY,EAAC,OAAO,EAAC,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,EAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,EAAC,OAAO,EAAC,IAAI,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC;IAC9F,IAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAC,SAAS,EAAE,CAAC;QACzD,MAAM,SAAS,GAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvH,OAAO,SAAS,CAAC,qDAAqD,SAAS,2EAA2E,CAAC,CAAC;IAC9J,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,SAAS,IAAI,CAAC,GAAkB,EAAC,MAAa,EAAC,KAAa;IAC1D,IAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa;QAAC,OAAO;IAC7C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAC,EAAC,cAAc,EAAC,iCAAiC,EAAC,eAAe,EAAC,UAAU,EAAC,CAAC,CAAC;IACpG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACjC,CAAC;AACD,SAAS,MAAM,CAAC,GAAmB,EAAC,GAAkB,EAAC,MAAa,EAAC,OAAc;IACjF,IAAG,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,aAAa,EAAC,CAAC;QAAA,GAAG,CAAC,SAAS,CAAC,MAAM,EAAC,EAAC,cAAc,EAAC,iCAAiC,EAAC,eAAe,EAAC,UAAU,EAAC,YAAY,EAAC,OAAO,EAAC,CAAC,CAAC;QAAA,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,KAAK,EAAC,OAAO,EAAC,CAAC,CAAC,CAAC;IAAA,CAAC;IAC5M,GAAG,CAAC,MAAM,EAAE,CAAC;AACf,CAAC;AAED,MAAM,OAAO,iBAAiB;IAEC,GAAG;IADf,QAAQ,GAAC,IAAI,GAAG,EAAkB,CAAC;IACpD,YAA6B,GAAwB;mBAAxB,GAAG;IAAwB,CAAC;IAEzD,KAAK,CAAC,KAAoB;QACxB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,MAAM,GAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAG,CAAC,iBAAiB,EAAE,IAAI,MAAM,EAAE,OAAO,KAAG,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;eAC7F,CAAC,CAAC,OAAO,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;eACtF,CAAC,CAAC,WAAW,EAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,YAAY,KAAG,UAAU;YAAE,MAAM,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACjL,IAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAE,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAA,EAAE,CAAA,OAAO,CAAC,QAAQ,KAAG,KAAK,CAAC,QAAQ,CAAC;YAAE,MAAM,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAClM,MAAM,MAAM,GAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAG,MAAM,KAAG,IAAI;YAAC,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACzE,MAAM,OAAO,GAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAS,EAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,SAAS,EAAC,KAAK,CAAC,SAAS,EAAC,OAAO,EAAC,MAAM,CAAC,eAAgB,EAAC,OAAO,EAAC,MAAM,CAAC,OAAQ,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,MAAM;YACjK,OAAO,EAAC,IAAI,CAAC,GAAG,EAAE,GAAC,MAAM,EAAC,YAAY,EAAC,KAAK,CAAC,YAAY,EAAC,MAAM,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,GAAG,EAAE,EAAC,QAAQ,EAAC,IAAI,GAAG,EAAE;YACzG,KAAK,EAAC,UAAU,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAC,MAAM,CAAC,EAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAC,OAAO,CAAC,CAAC;QACzD,OAAO,EAAC,UAAU,EAAC,EAAC,QAAQ,EAAC,OAAO,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,CAAC,EAAC,EAAC,KAAK,EAAC,GAAE,EAAE,CAAA,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACxH,oBAAoB,EAAC,MAAM,CAAA,EAAE,CAAA,MAAM,KAAG,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,EAAC,CAAC;IACvK,CAAC;IACD,SAAS,CAAC,QAAe;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;QAAA,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAA,EAAE,CAAA,OAAO,CAAC,QAAQ,KAAG,QAAQ,CAAC,CAAC;IAC7F,CAAC;IACD,aAAa,CAAC,QAAe,IAAS,KAAI,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QAAC,IAAG,OAAO,CAAC,QAAQ,KAAG,QAAQ;YAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClJ,QAAQ,KAAU,KAAI,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;QAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,UAAU,CAAC,KAAY;QAC7B,MAAM,OAAO,GAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAA,IAAG,CAAC,OAAO;YAAC,OAAO;QAC1D,OAAO,CAAC,MAAM,GAAC,IAAI,CAAC;QAAA,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAA,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpG,CAAC;IACD,0FAA0F;IAC1F,eAAe,KAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,QAAe;QAC5B,MAAM,KAAK,GAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAC,MAAM,GAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAC,IAAI,GAAC,qBAAqB,CAAC,KAAK,EAAC,QAAQ,CAAC,CAAC;QAC9G,IAAG,IAAI,KAAG,IAAI,IAAI,MAAM,EAAE,OAAO,KAAG,SAAS;YAAC,OAAO,IAAI,CAAC;QAC1D,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAC,MAAM,CAAC,eAAe,EAAC,MAAM,CAAC,OAAO,EAAC,MAAM,CAAC,cAAc;YACrF,MAAM,CAAC,cAAc,IAAE,MAAM,EAAC,MAAM,CAAC,UAAU,IAAE,IAAI,EAAC,MAAM,CAAC,sBAAsB,IAAE,IAAI,CAAC,CAAC,CAAC;IAChG,CAAC;IACO,OAAO,CAAC,OAAe;QAC7B,MAAM,MAAM,GAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,OAAO,GAAC,KAAK,CAAC;QAAA,IAAG,CAAC;YAAA,OAAO,GAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC,CAAA,oCAAoC,CAAA,CAAC;QACjG,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAC,OAAO,CAAC,OAAO,IAAI,iBAAiB,EAAE,IAAI,OAAO;eACjF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAG,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE,OAAO,KAAG,SAAS,IAAI,MAAM,CAAC,eAAe,KAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAG,OAAO,CAAC,OAAO,CAAC;IACrK,CAAC;IACO,KAAK,KAAU,KAAI,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QAAC,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtH,QAAQ,CAAC,OAAe;QAC9B,OAAO,OAAO,CAAC,OAAO,KAAG,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,KAAG,iBAAiB,CAAC;IAChI,CAAC;IACO,OAAO,CAAC,OAAe,EAAC,IAAW;QACzC,MAAM,MAAM,GAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;eAC9E,UAAU,CAAC,cAAc,CAAC,MAAM,EAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAC,OAAO,CAAC,QAAQ,EAAC,IAAI,CAAC,CAAC;IACnI,CAAC;IACO,OAAO,CAAC,OAAe,EAAC,IAAW,EAAC,IAA2B;QACrE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtI,CAAC;IACD;;;;OAIG;IACK,iBAAiB,CAAC,OAAe,EAAC,IAAW,EAAC,IAA2B;QAC/E,OAAO,2BAA2B,CAAC,IAAI,CAAC,GAAG,EAAE;YAC3C,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;YACzE,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC;IAEO,IAAI,CAAC,OAAe;QAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE;YACnE,MAAM,QAAQ,GAAC,IAAI,CAAC,IAAI,KAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAC,QAAQ;gBACnB,CAAC,CAAC,EAAC,GAAG,IAAI,EAAC,WAAW,EAAC,2CAA2C,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,WAAW,EAAC,EAAC,GAAG,IAAI,CAAC,WAAW,EAAC,UAAU,EAAC,EAAC,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,iBAAiB,EAAC,EAAC,EAAC,EAAC;gBAC9N,CAAC,CAAC,IAAI,CAAC;YACT,OAAO,EAAC,GAAG,MAAM,EAAC,WAAW,EAAC,EAAC,YAAY,EAAC,IAAI,CAAC,IAAI,KAAG,gBAAgB,IAAI,IAAI,CAAC,IAAI,KAAG,mBAAmB,IAAI,IAAI,CAAC,IAAI,KAAG,iBAAiB,IAAI,QAAQ,EAAC,EAAC,CAAC;QAC7J,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4GAA4G;IAC5G,aAAa,CAAC,GAAmB,EAAC,GAAkB;QAClD,MAAM,MAAM,GAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAA,IAAG,MAAM,KAAG,SAAS;YAAC,OAAO,KAAK,CAAC;QACpE,IAAG,GAAG,CAAC,MAAM,KAAG,MAAM,IAAI,GAAG,CAAC,GAAG,KAAG,QAAQ,EAAC,CAAC;YAAA,MAAM,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,EAAC,iCAAiC,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QACjH,IAAG,qBAAqB,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAG,SAAS,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAG,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;YAC1I,MAAM,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,EAAC,qDAAqD,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QACxF,CAAC;QACD,MAAM,OAAO,GAAC,OAAO,MAAM,KAAG,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChH,IAAG,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,CAAC;YAAA,IAAG,OAAO;gBAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAA,MAAM,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,EAAC,6CAA6C,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QAChK,MAAM,QAAQ,GAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACrD,IAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAC,SAAS,EAAC,CAAC;YAAA,MAAM,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,EAAC,iCAAiC,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QACvH,KAAK,IAAI,CAAC,WAAW,CAAC,GAAG,EAAC,GAAG,EAAC,OAAO,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACO,KAAK,CAAC,WAAW,CAAC,GAAmB,EAAC,GAAkB,EAAC,OAAe;QAC9E,IAAI,CAAC;YACH,IAAI,GAAU,CAAC;YAAA,IAAG,CAAC;gBAAA,GAAG,GAAC,MAAM,kBAAkB,CAAC,GAAG,EAAC,SAAS,CAAC,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,uDAAuD,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC5J,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,6CAA6C,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YACvG,MAAM,IAAI,GAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACpD,IAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,KAAG,YAAY;mBACtH,CAAC,CAAC,YAAY,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,8BAA8B,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YACvJ,IAAG,IAAI,CAAC,MAAM,KAAG,YAAY,EAAE,CAAC;gBAC9B,IAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAG,SAAS,EAAC,CAAC;oBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,iCAAiC,EAAC,CAAC,CAAC;oBAAA,OAAO;gBAAA,CAAC;gBAC/H,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAC,CAAC,CAAC;gBAAA,OAAO;YAClD,CAAC;YACD,MAAM,MAAM,GAAC,IAAI,CAAC,MAAM,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC;YAC1C,IAAG,OAAO,IAAI,CAAC,MAAM,KAAG,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;mBAC5E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,IAAI,KAAG,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/H,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,8BAA8B,EAAC,CAAC,CAAC;gBAAA,OAAO;YAC9D,CAAC;YACD,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,IAAI,CAAC,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,uEAAuE,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YACtI,MAAM,MAAM,GAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1E,IAAG,CAAC,MAAM,EAAE,OAAO,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC/E,MAAM,IAAI,GAAC,MAAM,CAAC,IAA8B,CAAC;YACjD,IAAG,IAAI,KAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC/F,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,+CAA+C,EAAC,CAAC,CAAC;gBAAA,OAAO;YAC/E,CAAC;YACD,MAAM,MAAM,GAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,IAAG,GAAG,IAAI,GAAG,CAAC,MAAM,KAAG,MAAM,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,kDAAkD,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAChH,IAAG,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,IAAE,SAAS,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,oCAAoC,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC7G,MAAM,IAAI,GAAC,GAAG,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAE,EAAE;oBAC/D,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,IAAI,EAAC,IAAI,CAAC;wBAAC,OAAO,SAAS,CAAC,kDAAkD,CAAC,CAAC;oBACnI,IAAI,CAAC;wBACH,MAAM,KAAK,GAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAC,IAAI,EAAC,IAAI,CAAC,EAAC,OAAO,CAAC,QAAQ,EAAC,GAAG,CAAC,IAAI,CAAE,EAAC,IAAI,CAAC,CAAC;wBACrH,IAAG,IAAI,KAAG,eAAe,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,KAAG,SAAS,IAAI,OAAO,IAAI,CAAC,eAAe,KAAG,QAAQ,IAAI,IAAI,CAAC,eAAe;+BAC7H,OAAO,IAAI,CAAC,cAAc,KAAG,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;4BAClE,MAAM,QAAQ,GAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;4BAC/E,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;4BAAA,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,EAAC,QAAQ,CAAC,CAAC;wBACxF,CAAC;wBACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;oBACvB,CAAC;oBAAC,OAAM,KAAK,EAAC,CAAC;wBAAA,OAAO,SAAS,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;oBAAA,CAAC;gBACjG,CAAC,CAAC,EAAC,CAAC;YACJ,IAAG,CAAC,GAAG;gBAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC;YACjC,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,6CAA6C,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YACvG,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,IAAI,EAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,oCAAoC,EAAC,CAAC,CAAC;gBAAA,OAAO;YACpE,CAAC;YACD,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,OAAM,KAAK,EAAE,CAAC;YAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,4BAA4B,EAAC,CAAC,CAAC;QAAA,CAAC;IACjI,CAAC;CACF"}

package/dist/native-model-catalog.d.ts

@@ -1,5 +0,0 @@
-import type { IncomingMessage, ServerResponse } from "node:http";
-import type { WebApiContext } from "./web-api.js";
-import { type WindowsCliBridge } from "./windows-cli.js";
-/** Caller validates the ordinary dashboard gate and the query shape first. */
-export declare function handleNativeModelCatalog(req: IncomingMessage, res: ServerResponse, url: URL, ctx: WebApiContext, bridge?: WindowsCliBridge): boolean;