@synergenius/flow-weaver-pack-weaver 0.8.1

package/dist/bot/ai-client.js

@@ -0,0 +1,128 @@
+import { execSync, spawn } from 'node:child_process';
+import { parseStreamLine, extractTextFromChunks } from './cli-stream-parser.js';
+// Strip CLAUDECODE from child env so nested claude CLI invocations work.
+const childEnv = { ...process.env };
+delete childEnv.CLAUDECODE;
+export function callCli(provider, prompt, model) {
+    if (provider === 'claude-cli') {
+        const modelFlag = model ? ` --model ${model}` : '';
+        return execSync(`claude -p --output-format text${modelFlag}`, {
+            input: prompt, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'], timeout: 300_000, env: childEnv,
+        }).trim();
+    }
+    if (provider === 'copilot-cli') {
+        return execSync('copilot -p --silent --allow-all-tools', {
+            input: prompt, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'], timeout: 300_000, env: childEnv,
+        }).trim();
+    }
+    throw new Error(`Unknown CLI provider: ${provider}`);
+}
+export async function callCliAsync(provider, prompt, model) {
+    if (provider === 'copilot-cli') {
+        return callCli(provider, prompt, model);
+    }
+    if (provider !== 'claude-cli') {
+        throw new Error(`Unknown CLI provider: ${provider}`);
+    }
+    const args = ['-p', '--output-format', 'stream-json'];
+    if (model)
+        args.push('--model', model);
+    const child = spawn('claude', args, {
+        stdio: ['pipe', 'pipe', 'pipe'],
+        env: childEnv,
+    });
+    child.stdin.write(prompt);
+    child.stdin.end();
+    const timeout = setTimeout(() => child.kill('SIGTERM'), 300_000);
+    const chunks = [];
+    let buffer = '';
+    try {
+        for await (const data of child.stdout) {
+            buffer += data.toString();
+            const lines = buffer.split('\n');
+            buffer = lines.pop();
+            for (const line of lines) {
+                const chunk = parseStreamLine(line);
+                if (chunk)
+                    chunks.push(chunk);
+            }
+        }
+        if (buffer.trim()) {
+            const chunk = parseStreamLine(buffer);
+            if (chunk)
+                chunks.push(chunk);
+        }
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+    await new Promise((resolve, reject) => {
+        child.on('close', (code) => {
+            if (code && code !== 0)
+                reject(new Error(`claude CLI exited with code ${code}`));
+            else
+                resolve();
+        });
+        child.on('error', reject);
+    });
+    return extractTextFromChunks(chunks);
+}
+export async function callApi(apiKey, model, maxTokens, systemPrompt, userPrompt) {
+    const body = JSON.stringify({
+        model, max_tokens: maxTokens, system: systemPrompt,
+        messages: [{ role: 'user', content: userPrompt }],
+    });
+    const response = await fetch('https://api.anthropic.com/v1/messages', {
+        method: 'POST',
+        headers: { 'x-api-key': apiKey, 'anthropic-version': '2023-06-01', 'content-type': 'application/json' },
+        body,
+    });
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Anthropic API error ${response.status}: ${text.slice(0, 200)}`);
+    }
+    const json = await response.json();
+    return json.content[0]?.text ?? '';
+}
+/**
+ * Call the platform-injected AI proxy (routes through IPC to the host process).
+ * Available when running inside the Studio sandbox.
+ */
+export async function callPlatform(systemPrompt, userPrompt, model, maxTokens) {
+    const provider = globalThis.__fw_llm_provider__;
+    if (!provider)
+        throw new Error('Platform AI provider not available');
+    const messages = [
+        { role: 'system', content: systemPrompt },
+        { role: 'user', content: userPrompt },
+    ];
+    const response = await provider.chat(messages, { model, maxTokens });
+    return response.content ?? '';
+}
+/**
+ * Unified AI call that dispatches to the right backend based on provider type.
+ */
+export async function callAI(pInfo, systemPrompt, userPrompt, defaultMaxTokens = 4096) {
+    if (pInfo.type === 'platform') {
+        return callPlatform(systemPrompt, userPrompt, pInfo.model, pInfo.maxTokens ?? defaultMaxTokens);
+    }
+    if (pInfo.type === 'anthropic') {
+        return callApi(pInfo.apiKey, pInfo.model ?? 'claude-sonnet-4-6', pInfo.maxTokens ?? defaultMaxTokens, systemPrompt, userPrompt);
+    }
+    return callCli(pInfo.type, systemPrompt + '\n\n' + userPrompt, pInfo.model);
+}
+export function parseJsonResponse(text) {
+    let cleaned = text.trim();
+    if (cleaned.startsWith('```')) {
+        cleaned = cleaned.replace(/^```(?:json)?\s*\n?/, '').replace(/\n?```\s*$/, '');
+    }
+    try {
+        return JSON.parse(cleaned);
+    }
+    catch { /* fallthrough */ }
+    const match = cleaned.match(/\{[\s\S]*\}/);
+    if (match)
+        return JSON.parse(match[0]);
+    throw new Error(`Failed to parse AI response as JSON: ${text.slice(0, 200)}`);
+}
+//# sourceMappingURL=ai-client.js.map

package/dist/bot/ai-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-client.js","sourceRoot":"","sources":["../../src/bot/ai-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAGhF,yEAAyE;AACzE,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AACpC,OAAO,QAAQ,CAAC,UAAU,CAAC;AAE3B,MAAM,UAAU,OAAO,CAAC,QAAgB,EAAE,MAAc,EAAE,KAAc;IACtE,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO,QAAQ,CAAC,iCAAiC,SAAS,EAAE,EAAE;YAC5D,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ;SACnG,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC,uCAAuC,EAAE;YACvD,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ;SACnG,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,MAAc,EAAE,KAAc;IACjF,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACtD,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAEvC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE;QAClC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,GAAG,EAAE,QAAQ;KACd,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAElB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;YAEtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,KAAK;oBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC,CAAC;;gBAC5E,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAc,EAAE,KAAa,EAAE,SAAiB,EAChD,YAAoB,EAAE,UAAkB;IAExC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY;QAClD,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;KAClD,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,uCAAuC,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE;QACvG,IAAI;KACL,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwD,CAAC;IACzF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,YAAoB,EACpB,UAAkB,EAClB,KAAc,EACd,SAAkB;IAElB,MAAM,QAAQ,GAAI,UAAkB,CAAC,mBAAmB,CAAC;IACzD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG;QACf,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;QACzC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;KACtC,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACrE,OAAO,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,KAAoE,EACpE,YAAoB,EACpB,UAAkB,EAClB,gBAAgB,GAAG,IAAI;IAEvB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/B,OAAO,OAAO,CACZ,KAAK,CAAC,MAAO,EACb,KAAK,CAAC,KAAK,IAAI,mBAAmB,EAClC,KAAK,CAAC,SAAS,IAAI,gBAAgB,EACnC,YAAY,EACZ,UAAU,CACX,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,GAAG,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC3C,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AAChF,CAAC"}

package/dist/bot/approvals.d.ts

@@ -0,0 +1,22 @@
+import type { ApprovalMode, NotificationEvent } from './types.js';
+import type { DashboardServer } from './dashboard.js';
+export interface ApprovalRequest {
+    context: Record<string, unknown>;
+    prompt: string;
+}
+export interface ApprovalResult {
+    approved: boolean;
+    reason: string;
+}
+export interface ApprovalHandler {
+    handle(request: ApprovalRequest, event: NotificationEvent): Promise<ApprovalResult>;
+}
+export interface ApprovalHandlerOptions {
+    timeoutSeconds: number;
+    webhookUrl?: string;
+    notifier: (event: NotificationEvent) => Promise<void>;
+    webOpen?: boolean;
+    dashboardServer?: DashboardServer;
+}
+export declare function createApprovalHandler(mode: ApprovalMode, options: ApprovalHandlerOptions): ApprovalHandler;
+//# sourceMappingURL=approvals.d.ts.map

package/dist/bot/approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../../src/bot/approvals.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,CACJ,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,sBAAsB,GAC9B,eAAe,CAiBjB"}

package/dist/bot/approvals.js

@@ -0,0 +1,187 @@
+import * as readline from 'node:readline';
+export function createApprovalHandler(mode, options) {
+    switch (mode) {
+        case 'auto':
+            return new AutoApproval(options.notifier);
+        case 'prompt':
+            return new PromptApproval(options.timeoutSeconds, options.notifier);
+        case 'webhook':
+            return new WebhookApproval(options.webhookUrl ?? '', options.timeoutSeconds, options.notifier);
+        case 'timeout-auto':
+            return new TimeoutAutoApproval(options.timeoutSeconds, options.notifier);
+        case 'web':
+            return new LazyWebApproval(options);
+    }
+}
+class AutoApproval {
+    notifier;
+    constructor(notifier) {
+        this.notifier = notifier;
+    }
+    async handle(_request, event) {
+        await this.notifier(event);
+        return { approved: true, reason: 'auto-approved by Weaver' };
+    }
+}
+class PromptApproval {
+    timeoutSeconds;
+    notifier;
+    constructor(timeoutSeconds, notifier) {
+        this.timeoutSeconds = timeoutSeconds;
+        this.notifier = notifier;
+    }
+    async handle(request, event) {
+        await this.notifier(event);
+        // Non-TTY: fall back to timeout-auto
+        if (!process.stdin.isTTY) {
+            console.log(`[weaver] No TTY available, auto-approving after ${this.timeoutSeconds}s`);
+            await new Promise((r) => setTimeout(r, this.timeoutSeconds * 1000));
+            return { approved: true, reason: 'auto-approved (no TTY)' };
+        }
+        const summary = typeof request.context === 'string'
+            ? request.context
+            : JSON.stringify(request.context, null, 2);
+        console.log('\n[weaver] Approval required:');
+        console.log(summary.slice(0, 500));
+        if (summary.length > 500)
+            console.log('  ... (truncated)');
+        const answer = await this.askWithTimeout(`\n[weaver] Approve? (y/n, auto-approves in ${this.timeoutSeconds}s): `, this.timeoutSeconds);
+        if (answer === null) {
+            return {
+                approved: true,
+                reason: `auto-approved after ${this.timeoutSeconds}s timeout`,
+            };
+        }
+        const approved = answer.trim().toLowerCase().startsWith('y');
+        return {
+            approved,
+            reason: approved ? 'approved by user' : 'rejected by user',
+        };
+    }
+    askWithTimeout(prompt, timeoutSeconds) {
+        return new Promise((resolve) => {
+            const rl = readline.createInterface({
+                input: process.stdin,
+                output: process.stdout,
+            });
+            const timer = setTimeout(() => {
+                console.log('\n[weaver] Timeout reached, auto-approving');
+                rl.close();
+                resolve(null);
+            }, timeoutSeconds * 1000);
+            rl.question(prompt, (answer) => {
+                clearTimeout(timer);
+                rl.close();
+                resolve(answer);
+            });
+        });
+    }
+}
+class WebhookApproval {
+    webhookUrl;
+    timeoutSeconds;
+    notifier;
+    constructor(webhookUrl, timeoutSeconds, notifier) {
+        this.webhookUrl = webhookUrl;
+        this.timeoutSeconds = timeoutSeconds;
+        this.notifier = notifier;
+    }
+    async handle(request, event) {
+        await this.notifier(event);
+        if (!this.webhookUrl) {
+            console.error('[weaver] Webhook approval requires webhookUrl in approval config, falling back to timeout-auto');
+            await new Promise((r) => setTimeout(r, this.timeoutSeconds * 1000));
+            return { approved: true, reason: 'auto-approved (no webhookUrl)' };
+        }
+        // POST the proposal to the webhook
+        try {
+            const resp = await fetch(this.webhookUrl, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({
+                    type: 'approval-request',
+                    proposal: request.context,
+                    prompt: request.prompt,
+                    timeoutSeconds: this.timeoutSeconds,
+                }),
+            });
+            if (!resp.ok) {
+                console.error(`[weaver] Webhook POST failed: ${resp.status}, falling back to timeout-auto`);
+                await new Promise((r) => setTimeout(r, this.timeoutSeconds * 1000));
+                return { approved: true, reason: 'auto-approved (webhook error)' };
+            }
+            // Poll for response
+            const pollUrl = resp.headers.get('location') ?? this.webhookUrl + '/status';
+            return await this.pollForDecision(pollUrl);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(`[weaver] Webhook error: ${msg}, falling back to timeout-auto`);
+            await new Promise((r) => setTimeout(r, this.timeoutSeconds * 1000));
+            return { approved: true, reason: 'auto-approved (webhook error)' };
+        }
+    }
+    async pollForDecision(url) {
+        const deadline = Date.now() + this.timeoutSeconds * 1000;
+        const interval = 5000;
+        while (Date.now() < deadline) {
+            await new Promise((r) => setTimeout(r, interval));
+            try {
+                const resp = await fetch(url);
+                if (!resp.ok)
+                    continue;
+                const body = (await resp.json());
+                if (body.pending)
+                    continue;
+                return {
+                    approved: body.approved ?? true,
+                    reason: body.reason ?? (body.approved ? 'approved via webhook' : 'rejected via webhook'),
+                };
+            }
+            catch {
+                continue;
+            }
+        }
+        return {
+            approved: true,
+            reason: `auto-approved after ${this.timeoutSeconds}s webhook timeout`,
+        };
+    }
+}
+class TimeoutAutoApproval {
+    timeoutSeconds;
+    notifier;
+    constructor(timeoutSeconds, notifier) {
+        this.timeoutSeconds = timeoutSeconds;
+        this.notifier = notifier;
+    }
+    async handle(_request, event) {
+        await this.notifier(event);
+        console.log(`[weaver] Waiting ${this.timeoutSeconds}s before auto-approving...`);
+        await new Promise((r) => setTimeout(r, this.timeoutSeconds * 1000));
+        return {
+            approved: true,
+            reason: `auto-approved after ${this.timeoutSeconds}s timeout`,
+        };
+    }
+}
+class LazyWebApproval {
+    inner = null;
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async handle(request, event) {
+        if (!this.inner) {
+            const { WebApprovalHandler } = await import('./web-approval.js');
+            this.inner = new WebApprovalHandler({
+                timeoutSeconds: this.options.timeoutSeconds,
+                open: this.options.webOpen ?? true,
+                notifier: this.options.notifier,
+                dashboardServer: this.options.dashboardServer,
+            });
+        }
+        return this.inner.handle(request, event);
+    }
+}
+//# sourceMappingURL=approvals.js.map

package/dist/bot/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../../src/bot/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AA6B1C,MAAM,UAAU,qBAAqB,CACnC,IAAkB,EAClB,OAA+B;IAE/B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM;YACT,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,KAAK,QAAQ;YACX,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtE,KAAK,SAAS;YACZ,OAAO,IAAI,eAAe,CACxB,OAAO,CAAC,UAAU,IAAI,EAAE,EACxB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,QAAQ,CACjB,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3E,KAAK,KAAK;YACR,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,MAAM,YAAY;IACI;IAApB,YAAoB,QAAqD;QAArD,aAAQ,GAAR,QAAQ,CAA6C;IAAG,CAAC;IAE7E,KAAK,CAAC,MAAM,CACV,QAAyB,EACzB,KAAwB;QAExB,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC/D,CAAC;CACF;AAED,MAAM,cAAc;IAER;IACA;IAFV,YACU,cAAsB,EACtB,QAAqD;QADrD,mBAAc,GAAd,cAAc,CAAQ;QACtB,aAAQ,GAAR,QAAQ,CAA6C;IAC5D,CAAC;IAEJ,KAAK,CAAC,MAAM,CACV,OAAwB,EACxB,KAAwB;QAExB,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE3B,qCAAqC;QACrC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CACT,mDAAmD,IAAI,CAAC,cAAc,GAAG,CAC1E,CAAC;YACF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC;YACpE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;YACjC,CAAC,CAAC,OAAO,CAAC,OAAO;YACjB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAE/C,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACnC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CACtC,8CAA8C,IAAI,CAAC,cAAc,MAAM,EACvE,IAAI,CAAC,cAAc,CACpB,CAAC;QAEF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,uBAAuB,IAAI,CAAC,cAAc,WAAW;aAC9D,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO;YACL,QAAQ;YACR,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB;SAC3D,CAAC;IACJ,CAAC;IAEO,cAAc,CACpB,MAAc,EACd,cAAsB;QAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;gBAClC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;gBAC1D,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC,CAAC;YAE1B,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;gBAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,eAAe;IAET;IACA;IACA;IAHV,YACU,UAAkB,EAClB,cAAsB,EACtB,QAAqD;QAFrD,eAAU,GAAV,UAAU,CAAQ;QAClB,mBAAc,GAAd,cAAc,CAAQ;QACtB,aAAQ,GAAR,QAAQ,CAA6C;IAC5D,CAAC;IAEJ,KAAK,CAAC,MAAM,CACV,OAAwB,EACxB,KAAwB;QAExB,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE3B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CACX,gGAAgG,CACjG,CAAC;YACF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC;YACpE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QACrE,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE;gBACxC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,kBAAkB;oBACxB,QAAQ,EAAE,OAAO,CAAC,OAAO;oBACzB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,cAAc,EAAE,IAAI,CAAC,cAAc;iBACpC,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CACX,iCAAiC,IAAI,CAAC,MAAM,gCAAgC,CAC7E,CAAC;gBACF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC;gBACpE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;YACrE,CAAC;YAED,oBAAoB;YACpB,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC9D,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CACX,2BAA2B,GAAG,gCAAgC,CAC/D,CAAC;YACF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC;YACpE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,GAAW;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC;QAEtB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;YAElD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,SAAS;gBAEvB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAI9B,CAAC;gBACF,IAAI,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAE3B,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;oBAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC;iBACzF,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,uBAAuB,IAAI,CAAC,cAAc,mBAAmB;SACtE,CAAC;IACJ,CAAC;CACF;AAED,MAAM,mBAAmB;IAEb;IACA;IAFV,YACU,cAAsB,EACtB,QAAqD;QADrD,mBAAc,GAAd,cAAc,CAAQ;QACtB,aAAQ,GAAR,QAAQ,CAA6C;IAC5D,CAAC;IAEJ,KAAK,CAAC,MAAM,CACV,QAAyB,EACzB,KAAwB;QAExB,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CACT,oBAAoB,IAAI,CAAC,cAAc,4BAA4B,CACpE,CAAC;QACF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC;QACpE,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,uBAAuB,IAAI,CAAC,cAAc,WAAW;SAC9D,CAAC;IACJ,CAAC;CACF;AAED,MAAM,eAAe;IACX,KAAK,GAA2B,IAAI,CAAC;IACrC,OAAO,CAAyB;IAExC,YAAY,OAA+B;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAwB,EACxB,KAAwB;QAExB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,GAAG,IAAI,kBAAkB,CAAC;gBAClC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;gBAC3C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI;gBAClC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAC/B,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;aAC9C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/bot/audit-logger.d.ts

@@ -0,0 +1,5 @@
+import type { AuditEventType, AuditEventCallback } from './types.js';
+export declare function initAuditLogger(runId: string, callback?: AuditEventCallback): void;
+export declare function auditEmit(type: AuditEventType, data?: Record<string, unknown>): void;
+export declare function teardownAuditLogger(): void;
+//# sourceMappingURL=audit-logger.d.ts.map

package/dist/bot/audit-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logger.d.ts","sourceRoot":"","sources":["../../src/bot/audit-logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAOrE,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAQlF;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAqBpF;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAI1C"}

package/dist/bot/audit-logger.js

@@ -0,0 +1,42 @@
+import { AuditStore } from './audit-store.js';
+let store = null;
+let currentRunId = null;
+let onEvent;
+export function initAuditLogger(runId, callback) {
+    try {
+        store = new AuditStore();
+    }
+    catch {
+        store = null;
+    }
+    currentRunId = runId;
+    onEvent = callback;
+}
+export function auditEmit(type, data) {
+    if (!currentRunId)
+        return;
+    const event = {
+        type,
+        timestamp: new Date().toISOString(),
+        runId: currentRunId,
+        data,
+    };
+    try {
+        store?.emit(event);
+    }
+    catch {
+        // non-fatal
+    }
+    try {
+        onEvent?.(event);
+    }
+    catch {
+        // non-fatal
+    }
+}
+export function teardownAuditLogger() {
+    store = null;
+    currentRunId = null;
+    onEvent = undefined;
+}
+//# sourceMappingURL=audit-logger.js.map

package/dist/bot/audit-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logger.js","sourceRoot":"","sources":["../../src/bot/audit-logger.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,IAAI,KAAK,GAAsB,IAAI,CAAC;AACpC,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,IAAI,OAAuC,CAAC;AAE5C,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,QAA6B;IAC1E,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,UAAU,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,YAAY,GAAG,KAAK,CAAC;IACrB,OAAO,GAAG,QAAQ,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAoB,EAAE,IAA8B;IAC5E,IAAI,CAAC,YAAY;QAAE,OAAO;IAE1B,MAAM,KAAK,GAAG;QACZ,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,YAAY;QACnB,IAAI;KACL,CAAC;IAEF,IAAI,CAAC;QACH,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IAED,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,KAAK,GAAG,IAAI,CAAC;IACb,YAAY,GAAG,IAAI,CAAC;IACpB,OAAO,GAAG,SAAS,CAAC;AACtB,CAAC"}

package/dist/bot/audit-store.d.ts

@@ -0,0 +1,13 @@
+import type { AuditEvent } from './types.js';
+export declare class AuditStore {
+    private readonly dir;
+    private readonly filePath;
+    constructor(storeDir?: string);
+    emit(event: AuditEvent): void;
+    queryByRun(runId: string): AuditEvent[];
+    queryRecent(limit?: number): AuditEvent[];
+    prune(maxAgeDays: number): number;
+    clear(): boolean;
+    private readAll;
+}
+//# sourceMappingURL=audit-store.d.ts.map

package/dist/bot/audit-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-store.d.ts","sourceRoot":"","sources":["../../src/bot/audit-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,QAAQ,CAAC,EAAE,MAAM;IAM7B,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAI7B,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE;IAIvC,WAAW,CAAC,KAAK,SAAK,GAAG,UAAU,EAAE;IAKrC,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAiBjC,KAAK,IAAI,OAAO;IAMhB,OAAO,CAAC,OAAO;CAiBhB"}

package/dist/bot/audit-store.js

@@ -0,0 +1,59 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+export class AuditStore {
+    dir;
+    filePath;
+    constructor(storeDir) {
+        this.dir = storeDir ?? process.env.WEAVER_HISTORY_DIR ?? path.join(os.homedir(), '.weaver');
+        fs.mkdirSync(this.dir, { recursive: true });
+        this.filePath = path.join(this.dir, 'audit.ndjson');
+    }
+    emit(event) {
+        fs.appendFileSync(this.filePath, JSON.stringify(event) + '\n', 'utf-8');
+    }
+    queryByRun(runId) {
+        return this.readAll().filter((e) => e.runId === runId);
+    }
+    queryRecent(limit = 50) {
+        const all = this.readAll();
+        return all.slice(-limit);
+    }
+    prune(maxAgeDays) {
+        const all = this.readAll();
+        if (all.length === 0)
+            return 0;
+        const cutoff = new Date(Date.now() - maxAgeDays * 86_400_000).toISOString();
+        const kept = all.filter((e) => e.timestamp >= cutoff);
+        const pruned = all.length - kept.length;
+        if (pruned === 0)
+            return 0;
+        const tmpPath = this.filePath + '.tmp';
+        fs.writeFileSync(tmpPath, kept.map((e) => JSON.stringify(e)).join('\n') + '\n', 'utf-8');
+        fs.renameSync(tmpPath, this.filePath);
+        return pruned;
+    }
+    clear() {
+        if (!fs.existsSync(this.filePath))
+            return false;
+        fs.unlinkSync(this.filePath);
+        return true;
+    }
+    readAll() {
+        if (!fs.existsSync(this.filePath))
+            return [];
+        const content = fs.readFileSync(this.filePath, 'utf-8');
+        const lines = content.split('\n').filter((line) => line.trim().length > 0);
+        const events = [];
+        for (const line of lines) {
+            try {
+                events.push(JSON.parse(line));
+            }
+            catch {
+                // skip corrupt line
+            }
+        }
+        return events;
+    }
+}
+//# sourceMappingURL=audit-store.js.map

package/dist/bot/audit-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-store.js","sourceRoot":"","sources":["../../src/bot/audit-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,MAAM,OAAO,UAAU;IACJ,GAAG,CAAS;IACZ,QAAQ,CAAS;IAElC,YAAY,QAAiB;QAC3B,IAAI,CAAC,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;QAC5F,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,KAAiB;QACpB,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED,UAAU,CAAC,KAAa;QACtB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACzD,CAAC;IAED,WAAW,CAAC,KAAK,GAAG,EAAE;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,UAAkB;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAExC,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;QACvC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QACzF,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAChD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAE7C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAiB,EAAE,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/bot/bot-agent-channel.d.ts

@@ -0,0 +1,46 @@
+import type { BotAgentProvider } from './agent-provider.js';
+import type { ApprovalMode, NotificationEvent, StreamChunk, ToolDefinition, ToolUseResult } from './types.js';
+import type { DashboardServer } from './dashboard.js';
+export interface BotChannelContext {
+    projectDir: string;
+    workflowFile?: string;
+    cycle?: number;
+}
+export declare class BotAgentChannel {
+    private provider;
+    private approvalHandler;
+    private notifier;
+    private context;
+    constructor(provider: BotAgentProvider, options: {
+        approvalMode: ApprovalMode;
+        approvalTimeoutSeconds: number;
+        approvalWebhookUrl?: string;
+        approvalWebOpen?: boolean;
+        dashboardServer?: DashboardServer;
+        notifier: (event: NotificationEvent) => Promise<void>;
+        context: BotChannelContext;
+    });
+    request(agentRequest: {
+        agentId: string;
+        context: Record<string, unknown>;
+        prompt: string;
+    }): Promise<object>;
+    private handleApproval;
+    requestWithTools(agentRequest: {
+        agentId: string;
+        context: Record<string, unknown>;
+        prompt: string;
+    }, tools: ToolDefinition[]): Promise<{
+        result: Record<string, unknown>;
+        toolCalls?: ToolUseResult[];
+    }>;
+    streamRequest(agentRequest: {
+        agentId: string;
+        context: Record<string, unknown>;
+        prompt: string;
+    }): AsyncIterable<StreamChunk>;
+    onPause(): Promise<object>;
+    resume(_result: object): void;
+    fail(_reason: string): void;
+}
+//# sourceMappingURL=bot-agent-channel.d.ts.map

package/dist/bot/bot-agent-channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot-agent-channel.d.ts","sourceRoot":"","sources":["../../src/bot/bot-agent-channel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE9G,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAmB;IACnC,OAAO,CAAC,eAAe,CAA2C;IAClE,OAAO,CAAC,QAAQ,CAA8C;IAC9D,OAAO,CAAC,OAAO,CAAoB;gBAGjC,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE;QACP,YAAY,EAAE,YAAY,CAAC;QAC3B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,eAAe,CAAC,EAAE,eAAe,CAAC;QAClC,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO,EAAE,iBAAiB,CAAC;KAC5B;IAcG,OAAO,CAAC,YAAY,EAAE;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,MAAM,CAAC;YAOL,cAAc;IAetB,gBAAgB,CACpB,YAAY,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EACnF,KAAK,EAAE,cAAc,EAAE,GACtB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;IAQrE,aAAa,CAAC,YAAY,EAAE;QACjC,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,aAAa,CAAC,WAAW,CAAC;IAW9B,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;IAG1B,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAC7B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAC5B"}

package/dist/bot/bot-agent-channel.js

@@ -0,0 +1,58 @@
+import { createApprovalHandler } from './approvals.js';
+export class BotAgentChannel {
+    provider;
+    approvalHandler;
+    notifier;
+    context;
+    constructor(provider, options) {
+        this.provider = provider;
+        this.notifier = options.notifier;
+        this.context = options.context;
+        this.approvalHandler = createApprovalHandler(options.approvalMode, {
+            timeoutSeconds: options.approvalTimeoutSeconds,
+            webhookUrl: options.approvalWebhookUrl,
+            notifier: options.notifier,
+            webOpen: options.approvalWebOpen,
+            dashboardServer: options.dashboardServer,
+        });
+    }
+    async request(agentRequest) {
+        if (agentRequest.agentId.includes('approval')) {
+            return this.handleApproval(agentRequest);
+        }
+        return this.provider.decide(agentRequest);
+    }
+    async handleApproval(request) {
+        const event = {
+            type: 'approval-needed',
+            cycle: this.context.cycle,
+            projectDir: this.context.projectDir,
+            workflowFile: this.context.workflowFile,
+            proposal: request.context,
+        };
+        return this.approvalHandler.handle(request, event);
+    }
+    async requestWithTools(agentRequest, tools) {
+        if (this.provider.decideWithTools) {
+            return this.provider.decideWithTools({ ...agentRequest, tools });
+        }
+        const result = await this.provider.decide(agentRequest);
+        return { result };
+    }
+    async *streamRequest(agentRequest) {
+        if (this.provider.stream) {
+            yield* this.provider.stream(agentRequest);
+            return;
+        }
+        const result = await this.provider.decide(agentRequest);
+        yield { type: 'text', text: JSON.stringify(result) };
+        yield { type: 'done' };
+    }
+    // Compat stubs for AgentChannel interface (used by executor, not by nodes)
+    onPause() {
+        return new Promise(() => { });
+    }
+    resume(_result) { }
+    fail(_reason) { }
+}
+//# sourceMappingURL=bot-agent-channel.js.map

package/dist/bot/bot-agent-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot-agent-channel.js","sourceRoot":"","sources":["../../src/bot/bot-agent-channel.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AASvD,MAAM,OAAO,eAAe;IAClB,QAAQ,CAAmB;IAC3B,eAAe,CAA2C;IAC1D,QAAQ,CAA8C;IACtD,OAAO,CAAoB;IAEnC,YACE,QAA0B,EAC1B,OAQC;QAED,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,eAAe,GAAG,qBAAqB,CAAC,OAAO,CAAC,YAAY,EAAE;YACjE,cAAc,EAAE,OAAO,CAAC,sBAAsB;YAC9C,UAAU,EAAE,OAAO,CAAC,kBAAkB;YACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,eAAe;YAChC,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAIb;QACC,IAAI,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAG5B;QACC,MAAM,KAAK,GAAsB;YAC/B,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YACnC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,QAAQ,EAAE,OAAO,CAAC,OAAO;SAC1B,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,YAAmF,EACnF,KAAuB;QAEvB,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,GAAG,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,CAAC,aAAa,CAAC,YAIpB;QACC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzB,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzB,CAAC;IAED,2EAA2E;IAC3E,OAAO;QACL,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,CAAC,OAAe,IAAS,CAAC;IAChC,IAAI,CAAC,OAAe,IAAS,CAAC;CAC/B"}

package/dist/bot/cli-provider.d.ts

@@ -0,0 +1,29 @@
+import type { BotAgentProvider, OnUsageCallback, StreamChunk, ToolDefinition, ToolUseResult } from './types.js';
+export declare class CliAgentProvider implements BotAgentProvider {
+    private cli;
+    private model?;
+    onUsage?: OnUsageCallback;
+    constructor(cli: 'claude-cli' | 'copilot-cli', model?: string);
+    decide(request: {
+        agentId: string;
+        context: Record<string, unknown>;
+        prompt: string;
+    }): Promise<Record<string, unknown>>;
+    stream(request: {
+        agentId: string;
+        context: Record<string, unknown>;
+        prompt: string;
+    }): AsyncIterable<StreamChunk>;
+    decideWithTools(request: {
+        agentId: string;
+        context: Record<string, unknown>;
+        prompt: string;
+        tools: ToolDefinition[];
+    }): Promise<{
+        result: Record<string, unknown>;
+        toolCalls?: ToolUseResult[];
+    }>;
+    private streamRaw;
+    private parseJson;
+}
+//# sourceMappingURL=cli-provider.d.ts.map