@tagma/sdk 0.7.3 → 0.7.4

package/README.md

@@ -64,6 +64,8 @@ console.log(result.success ? 'Done' : 'Failed');
 
 The package root is intentionally small. Use explicit subpaths for YAML,
 config editing, plugin registry helpers, and low-level dataflow utilities.
+The SDK composes `@tagma/core` with `@tagma/runtime-bun`; import those packages
+directly only when you need lower-level package boundaries.
 
 ## Features
 
@@ -408,6 +410,18 @@ YAML `ports` has been replaced by typed `inputs` / `outputs`. `validateRaw` repo
 - placeholder substitution, binding resolution, output extraction, and internal prompt-contract inference
 - the subpath name is historical; YAML `ports` is rejected by validation
 
+### Runtime approval adapters
+
+- `@tagma/sdk/runtime/adapters/stdin-approval`
+- `@tagma/sdk/runtime/adapters/websocket-approval`
+- the older `@tagma/sdk/adapters/*` subpaths remain thin compatibility re-exports
+
+### Split packages
+
+- `@tagma/core` -- runtime-independent orchestration, registry, approval, logging, event/result types, and the `TagmaRuntime` interface
+- `@tagma/runtime-bun` -- Bun process execution, file watching, log storage, `bunRuntime()`, and runtime approval adapters
+- `@tagma/sdk` -- convenience package that composes core + Bun runtime + built-in plugins
+
 ### `bootstrapBuiltins(registry)`
 
 Registers all built-in plugins (opencode driver, file/manual triggers, completion checks, static-context middleware).
@@ -425,7 +439,7 @@ Options:
 - `registry` -- use an existing `PluginRegistry` instance
 - `builtins` -- register built-in plugins into the instance registry; defaults to `true`
 - `plugins` -- register package-level `TagmaPlugin` capability objects into the instance registry
-- `runtime` -- override command/driver process execution; defaults to `bunRuntime()`
+- `runtime` -- override process execution, file watching, file existence checks, log storage, time, and sleep; defaults to `bunRuntime()`
 
 ### `createTagma().run(config, options): Promise<EngineResult>`
 
@@ -446,7 +460,7 @@ Options:
 - `maxLogRuns` -- number of per-run log directories to keep under `<workDir>/.tagma/logs/` (default: 20)
 - `skipPluginLoading` -- skip the engine's built-in `loadPlugins(config.plugins)` call. Set this when the host has already pre-loaded plugins from a custom resolution path (e.g. the editor loading from the user's workspace `node_modules`) so the engine doesn't re-resolve them via Node's default cwd-based import.
 
-> **stdout / stderr persistence.** The engine streams every task's stdout and stderr to disk under `<workDir>/.tagma/logs/<runId>/<taskId>.stdout` and `.stderr`. The `TaskResult.stdout` / `stderr` strings are bounded tails (8 MB / 4 MB by default) — long outputs are truncated from the head with a marker, and consumers that need the full bytes should read `TaskResult.stdoutPath` / `stderrPath`. Use `TaskResult.stdoutBytes` / `stderrBytes` to display "32 MB (truncated)" without re-stat'ing the file.
+> **stdout / stderr persistence.** With the default Bun runtime, the engine streams every task's stdout and stderr to disk under `<workDir>/.tagma/logs/<runId>/<taskId>.stdout` and `.stderr`. Custom runtimes can relocate those artifacts by implementing `runtime.logStore.taskOutputPath()`. The `TaskResult.stdout` / `stderr` strings are bounded tails (8 MB / 4 MB by default) — long outputs are truncated from the head with a marker, and consumers that need the full bytes should read `TaskResult.stdoutPath` / `stderrPath`. Use `TaskResult.stdoutBytes` / `stderrBytes` to display "32 MB (truncated)" without re-stat'ing the file.
 
 ### `PipelineRunner`
 
@@ -534,6 +548,8 @@ export const HttpTrigger: TriggerPlugin = {
     },
   },
   async watch(config, ctx) {
+    // Trigger plugins should use ctx.runtime for file IO, watching, and
+    // timing so they can run under non-Bun test/runtime implementations.
     /* ... */
   },
 };
@@ -734,7 +750,9 @@ Use `buildDag` instead when you have a fully resolved `PipelineConfig` and need
 Dual-channel logger — console + file. Creates a per-run log file at `<workDir>/.tagma/logs/<runId>/pipeline.log`.
 
 ```ts
-const logger = new Logger(workDir, runId);
+import { bunRuntime } from '@tagma/sdk';
+
+const logger = new Logger(workDir, runId, bunRuntime().logStore);
 logger.info('[track]', 'message'); // console + file
 logger.warn('[track]', 'message'); // console + file
 logger.error('[track]', 'message'); // console + file
@@ -746,13 +764,14 @@ logger.dir; // run artifact directory
 logger.close(); // close the persistent file handle (called automatically when Tagma.run completes)
 ```
 
-Pass an optional third argument to stream every appended line out as a
+Pass an optional fourth argument to stream every appended line out as a
 structured `LogRecord`; the engine uses this to emit `task_log` events:
 
 ```ts
+import { bunRuntime } from '@tagma/sdk';
 import { Logger, type LogRecord } from '@tagma/sdk/logger';
 
-const logger = new Logger(workDir, runId, (record: LogRecord) => {
+const logger = new Logger(workDir, runId, bunRuntime().logStore, (record: LogRecord) => {
   // record = { level, taskId, timestamp, text }
   // level  = 'info' | 'warn' | 'error' | 'debug' | 'section' | 'quiet'
   // taskId is extracted from a '[task:<id>]' prefix, or null for untagged lines
@@ -791,6 +810,8 @@ Truncates `text` to at most `maxBytes` UTF-8 bytes (default 16 KB), appending a
 | Package                                                                                  | Description                                   |
 | ---------------------------------------------------------------------------------------- | --------------------------------------------- |
 | [@tagma/types](https://www.npmjs.com/package/@tagma/types)                               | Shared TypeScript types                       |
+| [@tagma/core](https://www.npmjs.com/package/@tagma/core)                                 | Runtime-independent orchestration core        |
+| [@tagma/runtime-bun](https://www.npmjs.com/package/@tagma/runtime-bun)                   | Bun runtime implementation                    |
 | [@tagma/driver-codex](https://www.npmjs.com/package/@tagma/driver-codex)                 | Codex CLI driver plugin                       |
 | [@tagma/driver-claude-code](https://www.npmjs.com/package/@tagma/driver-claude-code)     | Claude Code CLI driver plugin                 |
 | [@tagma/middleware-lightrag](https://www.npmjs.com/package/@tagma/middleware-lightrag)   | LightRAG knowledge-graph retrieval middleware |

package/dist/adapters/stdin-approval.d.ts

@@ -1,6 +1,2 @@
-import type { ApprovalGateway } from '../approval';
-export interface StdinApprovalAdapter {
-    readonly detach: () => void;
-}
-export declare function attachStdinApprovalAdapter(gateway: ApprovalGateway): StdinApprovalAdapter;
+export * from '../runtime/adapters/stdin-approval';
 //# sourceMappingURL=stdin-approval.d.ts.map

package/dist/adapters/stdin-approval.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stdin-approval.d.ts","sourceRoot":"","sources":["../../src/adapters/stdin-approval.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAmB,MAAM,aAAa,CAAC;AAQpE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,eAAe,GAAG,oBAAoB,CA4FzF"}
+{"version":3,"file":"stdin-approval.d.ts","sourceRoot":"","sources":["../../src/adapters/stdin-approval.ts"],"names":[],"mappings":"AAAA,cAAc,oCAAoC,CAAC"}

package/dist/adapters/stdin-approval.js

@@ -1,90 +1,2 @@
-import * as readline from 'readline';
-export function attachStdinApprovalAdapter(gateway) {
-    const queue = [];
-    let processing = false;
-    let rl = null;
-    function ensureReadline() {
-        if (!rl) {
-            rl = readline.createInterface({ input: process.stdin, terminal: false });
-        }
-        return rl;
-    }
-    function readOneLine() {
-        return new Promise((resolvePromise) => {
-            const reader = ensureReadline();
-            const handler = (line) => {
-                reader.off('line', handler);
-                resolvePromise(line);
-            };
-            reader.on('line', handler);
-        });
-    }
-    async function processNext() {
-        if (processing)
-            return;
-        processing = true;
-        try {
-            while (queue.length > 0) {
-                const req = queue.shift();
-                // If the request was already resolved by another path while queued, skip it.
-                if (!gateway.pending().some((p) => p.id === req.id))
-                    continue;
-                process.stdout.write(`\n[APPROVAL REQUIRED] ${req.message}\n` +
-                    `  id:      ${req.id}\n` +
-                    `  task:    ${req.taskId}${req.trackId ? ` (track: ${req.trackId})` : ''}\n` +
-                    `  approve / reject > `);
-                const input = (await readOneLine()).trim().toLowerCase();
-                const approveAliases = new Set(['approve', 'yes', 'y', 'ok', 'true', '1']);
-                const rejectAliases = new Set(['reject', 'no', 'n', 'deny', 'false', '0']);
-                if (approveAliases.has(input)) {
-                    gateway.resolve(req.id, { outcome: 'approved', actor: 'cli' });
-                }
-                else if (rejectAliases.has(input)) {
-                    gateway.resolve(req.id, {
-                        outcome: 'rejected',
-                        actor: 'cli',
-                        reason: 'user rejected via CLI',
-                    });
-                }
-                else {
-                    process.stdout.write(`  unrecognized input "${input}" — treating as rejection\n`);
-                    gateway.resolve(req.id, {
-                        outcome: 'rejected',
-                        actor: 'cli',
-                        reason: `unrecognized CLI input: ${input}`,
-                    });
-                }
-            }
-        }
-        finally {
-            processing = false;
-        }
-    }
-    const unsubscribe = gateway.subscribe((event) => {
-        switch (event.type) {
-            case 'requested':
-                queue.push(event.request);
-                void processNext();
-                return;
-            case 'resolved':
-            case 'expired':
-            case 'aborted': {
-                // Drop from queue if it's still waiting its turn.
-                const idx = queue.findIndex((r) => r.id === event.request.id);
-                if (idx >= 0)
-                    queue.splice(idx, 1);
-                return;
-            }
-        }
-    });
-    return {
-        detach: () => {
-            unsubscribe();
-            if (rl) {
-                rl.close();
-                rl = null;
-            }
-        },
-    };
-}
+export * from '../runtime/adapters/stdin-approval';
 //# sourceMappingURL=stdin-approval.js.map

package/dist/adapters/stdin-approval.js.map

@@ -1 +1 @@
-{"version":3,"file":"stdin-approval.js","sourceRoot":"","sources":["../../src/adapters/stdin-approval.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AAarC,MAAM,UAAU,0BAA0B,CAAC,OAAwB;IACjE,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,EAAE,GAA8B,IAAI,CAAC;IAEzC,SAAS,cAAc;QACrB,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,SAAS,WAAW;QAClB,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;YACpC,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAQ,EAAE;gBACrC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC5B,cAAc,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,WAAW;QACxB,IAAI,UAAU;YAAE,OAAO;QACvB,UAAU,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;gBAC3B,6EAA6E;gBAC7E,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAE9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yBAAyB,GAAG,CAAC,OAAO,IAAI;oBACtC,cAAc,GAAG,CAAC,EAAE,IAAI;oBACxB,cAAc,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI;oBAC5E,uBAAuB,CAC1B,CAAC;gBAEF,MAAM,KAAK,GAAG,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAEzD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC3E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBAE3E,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjE,CAAC;qBAAM,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;wBACtB,OAAO,EAAE,UAAU;wBACnB,KAAK,EAAE,KAAK;wBACZ,MAAM,EAAE,uBAAuB;qBAChC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,KAAK,6BAA6B,CAAC,CAAC;oBAClF,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;wBACtB,OAAO,EAAE,UAAU;wBACnB,KAAK,EAAE,KAAK;wBACZ,MAAM,EAAE,2BAA2B,KAAK,EAAE;qBAC3C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,WAAW;gBACd,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC1B,KAAK,WAAW,EAAE,CAAC;gBACnB,OAAO;YACT,KAAK,UAAU,CAAC;YAChB,KAAK,SAAS,CAAC;YACf,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,kDAAkD;gBAClD,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC9D,IAAI,GAAG,IAAI,CAAC;oBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE,GAAG,EAAE;YACX,WAAW,EAAE,CAAC;YACd,IAAI,EAAE,EAAE,CAAC;gBACP,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,EAAE,GAAG,IAAI,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"stdin-approval.js","sourceRoot":"","sources":["../../src/adapters/stdin-approval.ts"],"names":[],"mappings":"AAAA,cAAc,oCAAoC,CAAC"}

package/dist/adapters/websocket-approval.d.ts

@@ -1,28 +1,2 @@
-import type { ApprovalGateway } from '../approval';
-export interface WebSocketApprovalAdapterOptions {
-    port?: number;
-    hostname?: string;
-    /**
-     * M11: shared secret required from the client during the WebSocket
-     * upgrade. The token can be supplied either as the `?token=` query
-     * parameter or in the `x-tagma-token` request header. When set, any
-     * upgrade request that fails the check is rejected with HTTP 401 and
-     * never reaches the WebSocket layer (so a misconfigured client cannot
-     * exhaust rate-limit slots either). Leave undefined for backward
-     * compatibility with localhost-only deployments.
-     */
-    token?: string;
-    /**
-     * M11: opt-out of origin checking. Defaults to false, meaning Origin
-     * headers are restricted to loopback hosts (localhost / 127.0.0.1 / ::1).
-     * Requests without an Origin header are still allowed so non-browser local
-     * clients can connect. Set true only for trusted reverse-proxy setups.
-     */
-    allowAnyOrigin?: boolean;
-}
-export interface WebSocketApprovalAdapter {
-    readonly port: number;
-    readonly detach: () => void;
-}
-export declare function attachWebSocketApprovalAdapter(gateway: ApprovalGateway, options?: WebSocketApprovalAdapterOptions): WebSocketApprovalAdapter;
+export * from '../runtime/adapters/websocket-approval';
 //# sourceMappingURL=websocket-approval.d.ts.map

package/dist/adapters/websocket-approval.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"websocket-approval.d.ts","sourceRoot":"","sources":["../../src/adapters/websocket-approval.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAiB,MAAM,aAAa,CAAC;AAoBlE,MAAM,WAAW,+BAA+B;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;CAC7B;AAQD,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,eAAe,EACxB,OAAO,GAAE,+BAAoC,GAC5C,wBAAwB,CAmJ1B"}
+{"version":3,"file":"websocket-approval.d.ts","sourceRoot":"","sources":["../../src/adapters/websocket-approval.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC"}

package/dist/adapters/websocket-approval.js

@@ -1,147 +1,2 @@
-// Maximum allowed message payload (bytes) to prevent DoS via oversized messages.
-const MAX_PAYLOAD_BYTES = 4_096;
-// Per-client rate limit: at most this many messages per window.
-const RATE_LIMIT_MAX = 10;
-const RATE_LIMIT_WINDOW_MS = 1_000;
-export function attachWebSocketApprovalAdapter(gateway, options = {}) {
-    const port = options.port ?? 3000;
-    const hostname = options.hostname ?? 'localhost';
-    const requiredToken = options.token ?? null;
-    const enforceOriginCheck = options.allowAnyOrigin !== true;
-    function isLoopbackOrigin(origin) {
-        try {
-            const host = new URL(origin).hostname.toLowerCase();
-            return host === 'localhost' || host === '127.0.0.1' || host === '::1' || host === '[::1]';
-        }
-        catch {
-            return false;
-        }
-    }
-    const clients = new Set();
-    const clientRates = new Map();
-    function broadcast(msg) {
-        const text = JSON.stringify(msg);
-        for (const ws of clients) {
-            ws.send(text);
-        }
-    }
-    const unsubscribe = gateway.subscribe((event) => {
-        switch (event.type) {
-            case 'requested':
-                broadcast({ type: 'approval_requested', request: event.request });
-                break;
-            case 'resolved':
-                broadcast({ type: 'approval_resolved', request: event.request, decision: event.decision });
-                break;
-            case 'expired':
-                broadcast({ type: 'approval_expired', request: event.request });
-                break;
-            case 'aborted':
-                broadcast({ type: 'approval_aborted', request: event.request, reason: event.reason });
-                break;
-        }
-    });
-    const server = Bun.serve({
-        port,
-        hostname,
-        fetch(req, server) {
-            if (enforceOriginCheck) {
-                const origin = req.headers.get('origin');
-                if (origin && !isLoopbackOrigin(origin)) {
-                    return new Response('forbidden origin', { status: 403 });
-                }
-            }
-            // M11: enforce token before any upgrade so an unauthenticated client
-            // can't even open a socket. Tokens may arrive via header or query.
-            if (requiredToken !== null) {
-                const headerToken = req.headers.get('x-tagma-token') ?? '';
-                let queryToken = '';
-                try {
-                    queryToken = new URL(req.url).searchParams.get('token') ?? '';
-                }
-                catch {
-                    /* malformed URL — leave queryToken empty */
-                }
-                const presented = headerToken || queryToken;
-                if (presented !== requiredToken) {
-                    return new Response('unauthorized', { status: 401 });
-                }
-            }
-            if (server.upgrade(req))
-                return undefined;
-            return new Response('tagma-sdk WebSocket approval endpoint', { status: 426 });
-        },
-        websocket: {
-            open(ws) {
-                clients.add(ws);
-                // Sync current pending approvals to newly connected client.
-                ws.send(JSON.stringify({ type: 'pending', requests: gateway.pending() }));
-            },
-            message(ws, raw) {
-                const rawStr = typeof raw === 'string' ? raw : raw.toString();
-                // Payload size guard — reject oversized messages before parsing.
-                if (rawStr.length > MAX_PAYLOAD_BYTES) {
-                    ws.send(JSON.stringify({ type: 'error', message: 'message too large' }));
-                    return;
-                }
-                // Per-client rate limit.
-                const now = Date.now();
-                const rate = clientRates.get(ws) ?? { count: 0, resetAt: now + RATE_LIMIT_WINDOW_MS };
-                if (now >= rate.resetAt) {
-                    rate.count = 0;
-                    rate.resetAt = now + RATE_LIMIT_WINDOW_MS;
-                }
-                rate.count++;
-                clientRates.set(ws, rate);
-                if (rate.count > RATE_LIMIT_MAX) {
-                    ws.send(JSON.stringify({ type: 'error', message: 'rate limit exceeded' }));
-                    return;
-                }
-                let msg;
-                try {
-                    msg = JSON.parse(rawStr);
-                }
-                catch {
-                    ws.send(JSON.stringify({ type: 'error', message: 'invalid JSON' }));
-                    return;
-                }
-                if (!isResolveMessage(msg)) {
-                    ws.send(JSON.stringify({ type: 'error', message: 'unknown message type' }));
-                    return;
-                }
-                const ok = gateway.resolve(msg.approvalId, {
-                    outcome: msg.outcome,
-                    actor: msg.actor ?? 'websocket',
-                    reason: msg.reason,
-                });
-                if (!ok) {
-                    ws.send(JSON.stringify({
-                        type: 'error',
-                        message: `approval ${msg.approvalId} not found or already resolved`,
-                    }));
-                }
-            },
-            close(ws) {
-                clients.delete(ws);
-                clientRates.delete(ws);
-            },
-        },
-    });
-    return {
-        port: server.port,
-        detach() {
-            unsubscribe();
-            clients.clear();
-            server.stop(true);
-        },
-    };
-}
-function isResolveMessage(v) {
-    if (typeof v !== 'object' || v === null)
-        return false;
-    const m = v;
-    return (m['type'] === 'resolve' &&
-        typeof m['approvalId'] === 'string' &&
-        (m['outcome'] === 'approved' || m['outcome'] === 'rejected'));
-}
+export * from '../runtime/adapters/websocket-approval';
 //# sourceMappingURL=websocket-approval.js.map

package/dist/adapters/websocket-approval.js.map

@@ -1 +1 @@
-{"version":3,"file":"websocket-approval.js","sourceRoot":"","sources":["../../src/adapters/websocket-approval.ts"],"names":[],"mappings":"AA+CA,iFAAiF;AACjF,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,gEAAgE;AAChE,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAEnC,MAAM,UAAU,8BAA8B,CAC5C,OAAwB,EACxB,UAA2C,EAAE;IAE7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IACjD,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC;IAC5C,MAAM,kBAAkB,GAAG,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC;IAE3D,SAAS,gBAAgB,CAAC,MAAc;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACpD,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC;QAC5F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAGD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAM,CAAC;IAC9B,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0C,CAAC;IAEtE,SAAS,SAAS,CAAC,GAAY;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAoB,EAAE,EAAE;QAC7D,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,WAAW;gBACd,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClE,MAAM;YACR,KAAK,UAAU;gBACb,SAAS,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC3F,MAAM;YACR,KAAK,SAAS;gBACZ,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChE,MAAM;YACR,KAAK,SAAS;gBACZ,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBACtF,MAAM;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;QACvB,IAAI;QACJ,QAAQ;QAER,KAAK,CAAC,GAAG,EAAE,MAAM;YACf,IAAI,kBAAkB,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACzC,IAAI,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxC,OAAO,IAAI,QAAQ,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;YACD,qEAAqE;YACrE,mEAAmE;YACnE,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC3B,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;gBAC3D,IAAI,UAAU,GAAG,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAChE,CAAC;gBAAC,MAAM,CAAC;oBACP,4CAA4C;gBAC9C,CAAC;gBACD,MAAM,SAAS,GAAG,WAAW,IAAI,UAAU,CAAC;gBAC5C,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;oBAChC,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC1C,OAAO,IAAI,QAAQ,CAAC,uCAAuC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,SAAS,EAAE;YACT,IAAI,CAAC,EAAE;gBACL,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,4DAA4D;gBAC5D,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YAC5E,CAAC;YAED,OAAO,CAAC,EAAE,EAAE,GAAG;gBACb,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAE9D,iEAAiE;gBACjE,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;oBACtC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;oBACzE,OAAO;gBACT,CAAC;gBAED,yBAAyB;gBACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,oBAAoB,EAAE,CAAC;gBACtF,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACxB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;oBACf,IAAI,CAAC,OAAO,GAAG,GAAG,GAAG,oBAAoB,CAAC;gBAC5C,CAAC;gBACD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC1B,IAAI,IAAI,CAAC,KAAK,GAAG,cAAc,EAAE,CAAC;oBAChC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;oBAC3E,OAAO;gBACT,CAAC;gBAED,IAAI,GAAY,CAAC;gBACjB,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;oBACpE,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;oBAC5E,OAAO;gBACT,CAAC;gBAED,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE;oBACzC,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,WAAW;oBAC/B,MAAM,EAAE,GAAG,CAAC,MAAM;iBACnB,CAAC,CAAC;gBAEH,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;wBACb,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,YAAY,GAAG,CAAC,UAAU,gCAAgC;qBACpE,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,KAAK,CAAC,EAAE;gBACN,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzB,CAAC;SACF;KACF,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAK;QAClB,MAAM;YACJ,WAAW,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC;AAYD,SAAS,gBAAgB,CAAC,CAAU;IAClC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS;QACvB,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ;QACnC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,UAAU,CAAC,CAC7D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"websocket-approval.js","sourceRoot":"","sources":["../../src/adapters/websocket-approval.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC"}

package/dist/approval.d.ts

@@ -1,13 +1,3 @@
-import type { ApprovalRequest, ApprovalDecision, ApprovalListener, ApprovalGateway } from './types';
-export type { ApprovalRequest, ApprovalDecision, ApprovalOutcome, ApprovalEvent, ApprovalListener, ApprovalGateway, } from './types';
-export declare class InMemoryApprovalGateway implements ApprovalGateway {
-    private readonly pendingMap;
-    private readonly listeners;
-    request(req: Omit<ApprovalRequest, 'id' | 'createdAt'>): Promise<ApprovalDecision>;
-    resolve(approvalId: string, decision: Omit<ApprovalDecision, 'approvalId' | 'decidedAt'>): boolean;
-    pending(): readonly ApprovalRequest[];
-    subscribe(listener: ApprovalListener): () => void;
-    abortAll(reason: string): void;
-    private emit;
-}
+export { InMemoryApprovalGateway } from '@tagma/core';
+export type { ApprovalDecision, ApprovalEvent, ApprovalGateway, ApprovalListener, ApprovalOutcome, ApprovalRequest, } from '@tagma/core';
 //# sourceMappingURL=approval.d.ts.map

package/dist/approval.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAEhB,gBAAgB,EAChB,eAAe,EAChB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,eAAe,GAChB,MAAM,SAAS,CAAC;AAUjB,qBAAa,uBAAwB,YAAW,eAAe;IAC7D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmC;IAC9D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IAEzD,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkClF,OAAO,CACL,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,WAAW,CAAC,GAC3D,OAAO;IAkBV,OAAO,IAAI,SAAS,eAAe,EAAE;IAIrC,SAAS,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,IAAI;IAOjD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAe9B,OAAO,CAAC,IAAI;CASb"}
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,aAAa,CAAC"}

package/dist/approval.js

@@ -1,91 +1,2 @@
-import { randomUUID } from 'crypto';
-import { nowISO } from './utils';
-export class InMemoryApprovalGateway {
-    pendingMap = new Map();
-    listeners = new Set();
-    request(req) {
-        const full = {
-            id: randomUUID(),
-            createdAt: nowISO(),
-            taskId: req.taskId,
-            trackId: req.trackId,
-            message: req.message,
-            timeoutMs: req.timeoutMs,
-            metadata: req.metadata,
-        };
-        return new Promise((resolvePromise) => {
-            let timer = null;
-            if (full.timeoutMs > 0) {
-                timer = setTimeout(() => {
-                    const entry = this.pendingMap.get(full.id);
-                    if (!entry)
-                        return;
-                    this.pendingMap.delete(full.id);
-                    const decision = {
-                        approvalId: full.id,
-                        outcome: 'timeout',
-                        reason: `Approval timed out after ${full.timeoutMs}ms`,
-                        decidedAt: nowISO(),
-                    };
-                    this.emit({ type: 'expired', request: full });
-                    resolvePromise(decision);
-                }, full.timeoutMs);
-            }
-            this.pendingMap.set(full.id, { request: full, settle: resolvePromise, timer });
-            this.emit({ type: 'requested', request: full });
-        });
-    }
-    resolve(approvalId, decision) {
-        const entry = this.pendingMap.get(approvalId);
-        if (!entry)
-            return false;
-        this.pendingMap.delete(approvalId);
-        if (entry.timer)
-            clearTimeout(entry.timer);
-        const full = {
-            approvalId,
-            outcome: decision.outcome,
-            actor: decision.actor,
-            reason: decision.reason,
-            decidedAt: nowISO(),
-        };
-        this.emit({ type: 'resolved', request: entry.request, decision: full });
-        entry.settle(full);
-        return true;
-    }
-    pending() {
-        return Array.from(this.pendingMap.values()).map((e) => e.request);
-    }
-    subscribe(listener) {
-        this.listeners.add(listener);
-        return () => {
-            this.listeners.delete(listener);
-        };
-    }
-    abortAll(reason) {
-        const entries = Array.from(this.pendingMap.entries());
-        this.pendingMap.clear();
-        for (const [id, entry] of entries) {
-            if (entry.timer)
-                clearTimeout(entry.timer);
-            this.emit({ type: 'aborted', request: entry.request, reason });
-            entry.settle({
-                approvalId: id,
-                outcome: 'aborted',
-                reason,
-                decidedAt: nowISO(),
-            });
-        }
-    }
-    emit(event) {
-        for (const listener of this.listeners) {
-            try {
-                listener(event);
-            }
-            catch (err) {
-                console.error('[approval gateway] listener error:', err);
-            }
-        }
-    }
-}
+export { InMemoryApprovalGateway } from '@tagma/core';
 //# sourceMappingURL=approval.js.map

package/dist/approval.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval.js","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAmCjC,MAAM,OAAO,uBAAuB;IACjB,UAAU,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC7C,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEzD,OAAO,CAAC,GAA8C;QACpD,MAAM,IAAI,GAAoB;YAC5B,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,MAAM,EAAE;YACnB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CAAC;QAEF,OAAO,IAAI,OAAO,CAAmB,CAAC,cAAc,EAAE,EAAE;YACtD,IAAI,KAAK,GAAyC,IAAI,CAAC;YACvD,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC3C,IAAI,CAAC,KAAK;wBAAE,OAAO;oBACnB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAChC,MAAM,QAAQ,GAAqB;wBACjC,UAAU,EAAE,IAAI,CAAC,EAAE;wBACnB,OAAO,EAAE,SAAS;wBAClB,MAAM,EAAE,4BAA4B,IAAI,CAAC,SAAS,IAAI;wBACtD,SAAS,EAAE,MAAM,EAAE;qBACpB,CAAC;oBACF,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC9C,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC3B,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CACL,UAAkB,EAClB,QAA4D;QAE5D,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE3C,MAAM,IAAI,GAAqB;YAC7B,UAAU;YACV,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS,EAAE,MAAM,EAAE;SACpB,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,SAAS,CAAC,QAA0B;QAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,MAAc;QACrB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/D,KAAK,CAAC,MAAM,CAAC;gBACX,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,SAAS;gBAClB,MAAM;gBACN,SAAS,EAAE,MAAM,EAAE;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,KAAoB;QAC/B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}

package/dist/bootstrap.d.ts

@@ -1,4 +1,4 @@
-import type { PluginRegistry } from './registry';
+import type { PluginRegistry } from '@tagma/core';
 export declare const BuiltinTagmaPlugin: {
     name: string;
     capabilities: {

package/dist/bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAsBjD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;CAmBR,CAAC;AAExB;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAE9D"}
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAsBlD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;CAmBR,CAAC;AAExB;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAE9D"}

package/dist/core/task-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-executor.d.ts","sourceRoot":"","sources":["../../src/core/task-executor.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAWlD,OAAO,EAAmB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAoBhD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;CAC3C;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgrB5E"}
+{"version":3,"file":"task-executor.d.ts","sourceRoot":"","sources":["../../src/core/task-executor.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAWlD,OAAO,EAAmB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAoBhD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;CAC3C;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0rB5E"}

package/dist/core/task-executor.js

@@ -1,4 +1,3 @@
-import { resolve } from 'path';
 import { parseDuration, nowISO } from '../utils';
 import { promptDocumentFromString, serializePromptDocument, prependContext, renderInputsBlock, renderOutputSchemaBlock, } from '../prompt-doc';
 import { resolveTaskBindingInputs, resolveTaskInputs, substituteInputs } from '../ports';
@@ -88,6 +87,7 @@ export async function executeTask(options) {
                     workDir: task.cwd ?? workDir,
                     signal: ctx.abortController.signal,
                     approvalGateway,
+                    runtime: ctx.runtime,
                 })
                     .then((v) => {
                     if (settled)
@@ -298,9 +298,18 @@ export async function executeTask(options) {
         // and keep only a bounded tail in the returned TaskResult. Filenames
         // mirror the existing `.stderr` naming — dots in task ids are replaced
         // so hierarchical ids (e.g. `track1.task2`) map cleanly to a flat dir.
-        const fsSafeTaskId = taskId.replace(/\./g, '_');
-        const stdoutPath = resolve(log.dir, `${fsSafeTaskId}.stdout`);
-        const stderrPath = resolve(log.dir, `${fsSafeTaskId}.stderr`);
+        const stdoutPath = ctx.runtime.logStore.taskOutputPath({
+            workDir,
+            runId: ctx.runId,
+            taskId,
+            stream: 'stdout',
+        });
+        const stderrPath = ctx.runtime.logStore.taskOutputPath({
+            workDir,
+            runId: ctx.runId,
+            taskId,
+            stream: 'stderr',
+        });
         const runOpts = {
             timeoutMs,
             signal: ctx.abortController.signal,