@yjjeong/omg 0.1.0

package/dist/core/adapters/openai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../../src/core/adapters/openai.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,wEAAwE;AAExE,OAAO,EAIL,SAAS,EACT,IAAI,IAAI,SAAS,EACjB,YAAY,GACb,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAQxD,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,qBAAqB,CAC1C,MAA8B;IAE9B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;IACjD,IAAI,UAAU,GAAkB,IAAI,CAAC;IAErC,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,SAAS;QAC5B,MAAM,OAAO,GAAI,EAA4B,CAAC,OAAO,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAA4B,CAAC;QAErD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtD,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;YACD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;YACnC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;oBAC3B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAAE,SAAS;oBAC5B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBACxD,IAAI,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;wBACvB,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;wBACrC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBAC9B,CAAC;oBACD,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,EAAE;wBAAE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;oBACxD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC;oBACvB,IAAI,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;wBACjB,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI;4BAAE,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;wBAChE,IAAI,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;4BACrD,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,SAAS,CAAC;wBAC3B,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,CAAC,aAAa,CAAC;QAChC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,UAAU,GAAG,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,SAAS;QACrC,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,SAAS,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC;AACxC,CAAC;AAGD,sEAAsE;AACtE,qCAAqC;AACrC,kEAAkE;AAClE,0DAA0D;AAC1D,MAAM,UAAU,aAAa,CAC3B,GAAwB;IAExB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC7B,MAAM,GAAG,GAA4B;YACnC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,GAAG,CAAC,IAAI;SAClB,CAAC;QACF,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC5C,EAAE,EAAE,IAAI,CAAC,MAAM;gBACf,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE;oBACR,IAAI,EAAE,IAAI,CAAC,QAAQ;oBACnB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;iBAC1C;aACF,CAAC,CAAC,CAAC;QACN,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7D,CAAC;AAGD,MAAM,OAAO,aAAa;IAIL;IAHV,QAAQ,GAAG,OAAO,CAAC;IAE5B,YACmB,IAIhB;QAJgB,SAAI,GAAJ,IAAI,CAIpB;IACA,CAAC;IAEJ,KAAK,CAAC,CAAC,MAAM,CAAC,KAAmB;QAC/B,MAAM,MAAM,GACT,IAAI,CAAC,IAAI,CAAC,MAQG,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAClD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CACtB,CAA2B,CAAC;QAC7B,KAAK,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,SAAS,CAAC,KAAmB;QAC3B,MAAM,QAAQ,GAAmC,EAAE,CAAC;QACpD,MAAM,MAAM,GACV,OAAO,KAAK,KAAK,QAAQ;YACvB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAClB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS;YACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;gBACpC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;;oBACnD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YACtB,QAAQ;YACR,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU;QAKtB,MAAM,IAAI,GAAG,QAAQ,CAAC;QACtB,IAAI,GAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAA0B,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,OAAO,IAAK,MAIV,EAAE,CAAC;IACP,CAAC;CACF"}

package/dist/core/adapters/parseFailures.d.ts

@@ -0,0 +1,10 @@
+export interface ParseFailuresHolder {
+    count: number;
+    /** First-seen malformed line (truncated for log readability). */
+    firstSample?: string;
+}
+export declare function recordParseFailure(holder: ParseFailuresHolder | undefined, raw: string): void;
+/** Write a single summary line to stderr when there were any parse
+ *  failures. No-op when count === 0 or holder is undefined. */
+export declare function surfaceParseFailures(provider: string, holder: ParseFailuresHolder | undefined): void;
+//# sourceMappingURL=parseFailures.d.ts.map

package/dist/core/adapters/parseFailures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseFailures.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/parseFailures.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,mBAAmB,GAAG,SAAS,EACvC,GAAG,EAAE,MAAM,GACV,IAAI,CAON;AAED;+DAC+D;AAC/D,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,mBAAmB,GAAG,SAAS,GACtC,IAAI,CAUN"}

package/dist/core/adapters/parseFailures.js

@@ -0,0 +1,35 @@
+// Phase 200d: shared parse-failure tracker for CLI envelope translators.
+//
+// All three CLI adapters (claude/codex/gemini) silently `continue` when
+// an envelope line fails JSON.parse — a malformed buffer chunk, a CLI
+// upgrade changing envelope shape, or binary noise vanishes into the
+// void. The audit (F1.1) flagged this as the largest silent-fail
+// surface in the adapter layer.
+//
+// Replacement: each translator now tallies parse failures into a small
+// holder; the adapter's stream() surfaces a single stderr line at the
+// end of the stream if the counter is non-zero. Behavior is unchanged
+// for callers — the iterator still yields what it can — but the user
+// gets a visible signal instead of a silent partial result.
+const SAMPLE_LIMIT = 120;
+export function recordParseFailure(holder, raw) {
+    if (!holder)
+        return;
+    holder.count += 1;
+    if (holder.firstSample === undefined) {
+        holder.firstSample =
+            raw.length > SAMPLE_LIMIT ? raw.slice(0, SAMPLE_LIMIT) + "…" : raw;
+    }
+}
+/** Write a single summary line to stderr when there were any parse
+ *  failures. No-op when count === 0 or holder is undefined. */
+export function surfaceParseFailures(provider, holder) {
+    if (!holder || holder.count === 0)
+        return;
+    const sample = holder.firstSample !== undefined
+        ? ` first: ${JSON.stringify(holder.firstSample)}`
+        : "";
+    process.stderr.write(`[${provider}] dropped ${holder.count} malformed envelope ` +
+        `line${holder.count === 1 ? "" : "s"};${sample}\n`);
+}
+//# sourceMappingURL=parseFailures.js.map

package/dist/core/adapters/parseFailures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseFailures.js","sourceRoot":"","sources":["../../../src/core/adapters/parseFailures.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,qEAAqE;AACrE,iEAAiE;AACjE,gCAAgC;AAChC,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,sEAAsE;AACtE,qEAAqE;AACrE,4DAA4D;AAQ5D,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB,MAAM,UAAU,kBAAkB,CAChC,MAAuC,EACvC,GAAW;IAEX,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IAClB,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,WAAW;YAChB,GAAG,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACvE,CAAC;AACH,CAAC;AAED;+DAC+D;AAC/D,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,MAAuC;IAEvC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO;IAC1C,MAAM,MAAM,GACV,MAAM,CAAC,WAAW,KAAK,SAAS;QAC9B,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;QACjD,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,QAAQ,aAAa,MAAM,CAAC,KAAK,sBAAsB;QACzD,OAAO,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,IAAI,CACrD,CAAC;AACJ,CAAC"}

package/dist/core/adapters/utils.d.ts

@@ -0,0 +1,11 @@
+/** True when `v` is a non-null, non-array plain object. Narrows the
+ *  type to `Record<string, unknown>` so the caller can index in
+ *  without an additional cast. */
+export declare function isObject(v: unknown): v is Record<string, unknown>;
+/** Best-effort JSON parse. Returns `{}` for empty input, parse
+ *  failures, or non-object payloads. Used by SDK adapters that
+ *  accumulate `input_json_delta` fragments for streaming tool
+ *  calls — the partial buffer is rendered as `{}` until the close
+ *  brace arrives. */
+export declare function parseJsonOrEmpty(buf: string): Record<string, unknown>;
+//# sourceMappingURL=utils.d.ts.map

package/dist/core/adapters/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/core/adapters/utils.ts"],"names":[],"mappings":"AASA;;kCAEkC;AAClC,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEjE;AAED;;;;qBAIqB;AACrB,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASrE"}

package/dist/core/adapters/utils.js

@@ -0,0 +1,33 @@
+// Phase 212 (F1.5 + F1.6): shared adapter-layer utilities.
+//
+// Five adapters reimplemented the same `isObject` guard; two SDK
+// adapters reimplemented the same `parseJsonOrEmpty` (used to assemble
+// streaming tool-call input from JSON-delta fragments). The audit
+// flagged these as low-risk consolidation candidates — drift between
+// five copies of a two-line guard is silent, and adding a sixth
+// adapter shouldn't bring a sixth copy.
+/** True when `v` is a non-null, non-array plain object. Narrows the
+ *  type to `Record<string, unknown>` so the caller can index in
+ *  without an additional cast. */
+export function isObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+/** Best-effort JSON parse. Returns `{}` for empty input, parse
+ *  failures, or non-object payloads. Used by SDK adapters that
+ *  accumulate `input_json_delta` fragments for streaming tool
+ *  calls — the partial buffer is rendered as `{}` until the close
+ *  brace arrives. */
+export function parseJsonOrEmpty(buf) {
+    if (!buf)
+        return {};
+    try {
+        const parsed = JSON.parse(buf);
+        if (isObject(parsed))
+            return parsed;
+        return {};
+    }
+    catch {
+        return {};
+    }
+}
+//# sourceMappingURL=utils.js.map

package/dist/core/adapters/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/core/adapters/utils.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,iEAAiE;AACjE,uEAAuE;AACvE,kEAAkE;AAClE,qEAAqE;AACrE,gEAAgE;AAChE,wCAAwC;AAExC;;kCAEkC;AAClC,MAAM,UAAU,QAAQ,CAAC,CAAU;IACjC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;qBAIqB;AACrB,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QACpC,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/core/askBroker.d.ts

@@ -0,0 +1,11 @@
+export interface AskOption {
+    label: string;
+    description?: string;
+}
+export type AskDecider = (question: string, options: AskOption[], multiSelect: boolean) => Promise<string>;
+export interface AskBrokerHandle {
+    socketPath: string;
+    close: () => Promise<void>;
+}
+export declare function startAskBroker(onAsk: AskDecider): Promise<AskBrokerHandle>;
+//# sourceMappingURL=askBroker.d.ts.map

package/dist/core/askBroker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"askBroker.d.ts","sourceRoot":"","sources":["../../src/core/askBroker.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,UAAU,GAAG,CACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,SAAS,EAAE,EACpB,WAAW,EAAE,OAAO,KACjB,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC,eAAe,CAAC,CAM1B"}

package/dist/core/askBroker.js

@@ -0,0 +1,78 @@
+// Phase 150: Unix-socket broker for the interactive `ask_user` tool.
+//
+// Mirrors the permission broker (src/core/permissionBroker.ts): when omg
+// runs a CLI with --expose-omg-tools, the omg MCP server lives in a
+// grandchild process (omg → CLI → mcp-server). The TUI's picker lives in
+// the omg parent, so the grandchild can't render it directly.
+//
+// This bridges with a Unix domain socket:
+//   - startAskBroker(onAsk): opens a socket server in omg, returns
+//     { socketPath, close() }.
+//   - The MCP-side client (src/mcp/askClient.ts) connects, writes one
+//     JSON request line per ask_user call, reads one answer line.
+//   - Each request is forwarded to onAsk(question, options, multiSelect);
+//     whatever string that resolves to becomes the `answer` on the wire.
+//
+// Protocol (line-delimited JSON):
+//   client → broker:  {"id":1,"question":"...","options":[{label,description?}],"multiSelect":false}
+//   broker → client:  {"id":1,"answer":"chosen label"}
+//
+// On any error / closed connection the client falls back to a sentinel
+// ("user did not answer"), so a broken UI never hangs the agent.
+import { startSocketBroker } from "./socketBroker.js";
+export async function startAskBroker(onAsk) {
+    return startSocketBroker({
+        prefix: "ask",
+        filename: "ask.sock",
+        onLine: (line, sock) => handleLine(line, sock, onAsk),
+    });
+}
+function normalizeOptions(raw) {
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const o of raw) {
+        if (typeof o === "string") {
+            out.push({ label: o });
+        }
+        else if (o && typeof o === "object") {
+            const obj = o;
+            if (typeof obj.label === "string") {
+                out.push({
+                    label: obj.label,
+                    description: typeof obj.description === "string" ? obj.description : undefined,
+                });
+            }
+        }
+    }
+    return out;
+}
+async function handleLine(line, sock, onAsk) {
+    let req;
+    try {
+        req = JSON.parse(line);
+    }
+    catch {
+        return;
+    }
+    const id = req.id;
+    const question = typeof req.question === "string" ? req.question : "";
+    const options = normalizeOptions(req.options);
+    const multiSelect = req.multiSelect === true;
+    if (id === undefined || !question || options.length === 0)
+        return;
+    let answer;
+    try {
+        answer = await onAsk(question, options, multiSelect);
+    }
+    catch {
+        answer = "user did not answer";
+    }
+    try {
+        sock.write(JSON.stringify({ id, answer }) + "\n");
+    }
+    catch {
+        /* socket closed before reply — client fails closed */
+    }
+}
+//# sourceMappingURL=askBroker.js.map

package/dist/core/askBroker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"askBroker.js","sourceRoot":"","sources":["../../src/core/askBroker.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,yEAAyE;AACzE,oEAAoE;AACpE,yEAAyE;AACzE,8DAA8D;AAC9D,EAAE;AACF,0CAA0C;AAC1C,mEAAmE;AACnE,+BAA+B;AAC/B,sEAAsE;AACtE,kEAAkE;AAClE,0EAA0E;AAC1E,yEAAyE;AACzE,EAAE;AACF,kCAAkC;AAClC,qGAAqG;AACrG,uDAAuD;AACvD,EAAE;AACF,uEAAuE;AACvE,iEAAiE;AAGjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAkBtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAiB;IAEjB,OAAO,iBAAiB,CAAC;QACvB,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,CAA4B,CAAC;YACzC,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAClC,GAAG,CAAC,IAAI,CAAC;oBACP,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,WAAW,EACT,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;iBACpE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,IAAY,EACZ,KAAiB;IAEjB,IAAI,GAKH,CAAC;IACF,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC;IAC7C,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAClE,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,qBAAqB,CAAC;IACjC,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;AACH,CAAC"}

package/dist/core/atomicWrite.d.ts

@@ -0,0 +1,5 @@
+/** Atomically write `content` to `path` via a `<path>.<pid>.tmp`
+ *  intermediate plus `renameSync`. Caller is responsible for ensuring
+ *  the parent directory exists. */
+export declare function atomicWriteSync(path: string, content: string): void;
+//# sourceMappingURL=atomicWrite.d.ts.map

package/dist/core/atomicWrite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomicWrite.d.ts","sourceRoot":"","sources":["../../src/core/atomicWrite.ts"],"names":[],"mappings":"AAWA;;mCAEmC;AACnC,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAInE"}

package/dist/core/atomicWrite.js

@@ -0,0 +1,18 @@
+// Phase 200b: shared atomic-write helper for ~/.omg/* state files.
+//
+// `writeFileSync(path, content)` rewrites in-place: a concurrent omg
+// instance writing the same file at the same moment can drop one of
+// the writes. The fix is the textbook tmp-then-rename pattern —
+// rename(2) is atomic on POSIX, so the canonical path is never half-
+// written. tabPersistence has used this since Phase 72; Phase 200b
+// extracts it as a single helper for everyone.
+import { renameSync, writeFileSync } from "node:fs";
+/** Atomically write `content` to `path` via a `<path>.<pid>.tmp`
+ *  intermediate plus `renameSync`. Caller is responsible for ensuring
+ *  the parent directory exists. */
+export function atomicWriteSync(path, content) {
+    const tmp = `${path}.${process.pid}.tmp`;
+    writeFileSync(tmp, content, "utf-8");
+    renameSync(tmp, path);
+}
+//# sourceMappingURL=atomicWrite.js.map

package/dist/core/atomicWrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomicWrite.js","sourceRoot":"","sources":["../../src/core/atomicWrite.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,gEAAgE;AAChE,qEAAqE;AACrE,mEAAmE;AACnE,+CAA+C;AAE/C,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAEpD;;mCAEmC;AACnC,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,OAAe;IAC3D,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/core/brokers/askBroker.d.ts

@@ -0,0 +1,11 @@
+export interface AskOption {
+    label: string;
+    description?: string;
+}
+export type AskDecider = (question: string, options: AskOption[], multiSelect: boolean) => Promise<string>;
+export interface AskBrokerHandle {
+    socketPath: string;
+    close: () => Promise<void>;
+}
+export declare function startAskBroker(onAsk: AskDecider): Promise<AskBrokerHandle>;
+//# sourceMappingURL=askBroker.d.ts.map

package/dist/core/brokers/askBroker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"askBroker.d.ts","sourceRoot":"","sources":["../../../src/core/brokers/askBroker.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,UAAU,GAAG,CACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,SAAS,EAAE,EACpB,WAAW,EAAE,OAAO,KACjB,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC,eAAe,CAAC,CAM1B"}

package/dist/core/brokers/askBroker.js

@@ -0,0 +1,78 @@
+// Phase 150: Unix-socket broker for the interactive `ask_user` tool.
+//
+// Mirrors the permission broker (src/core/permissionBroker.ts): when omg
+// runs a CLI with --expose-omg-tools, the omg MCP server lives in a
+// grandchild process (omg → CLI → mcp-server). The TUI's picker lives in
+// the omg parent, so the grandchild can't render it directly.
+//
+// This bridges with a Unix domain socket:
+//   - startAskBroker(onAsk): opens a socket server in omg, returns
+//     { socketPath, close() }.
+//   - The MCP-side client (src/mcp/askClient.ts) connects, writes one
+//     JSON request line per ask_user call, reads one answer line.
+//   - Each request is forwarded to onAsk(question, options, multiSelect);
+//     whatever string that resolves to becomes the `answer` on the wire.
+//
+// Protocol (line-delimited JSON):
+//   client → broker:  {"id":1,"question":"...","options":[{label,description?}],"multiSelect":false}
+//   broker → client:  {"id":1,"answer":"chosen label"}
+//
+// On any error / closed connection the client falls back to a sentinel
+// ("user did not answer"), so a broken UI never hangs the agent.
+import { startSocketBroker } from "./socketBroker.js";
+export async function startAskBroker(onAsk) {
+    return startSocketBroker({
+        prefix: "ask",
+        filename: "ask.sock",
+        onLine: (line, sock) => handleLine(line, sock, onAsk),
+    });
+}
+function normalizeOptions(raw) {
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const o of raw) {
+        if (typeof o === "string") {
+            out.push({ label: o });
+        }
+        else if (o && typeof o === "object") {
+            const obj = o;
+            if (typeof obj.label === "string") {
+                out.push({
+                    label: obj.label,
+                    description: typeof obj.description === "string" ? obj.description : undefined,
+                });
+            }
+        }
+    }
+    return out;
+}
+async function handleLine(line, sock, onAsk) {
+    let req;
+    try {
+        req = JSON.parse(line);
+    }
+    catch {
+        return;
+    }
+    const id = req.id;
+    const question = typeof req.question === "string" ? req.question : "";
+    const options = normalizeOptions(req.options);
+    const multiSelect = req.multiSelect === true;
+    if (id === undefined || !question || options.length === 0)
+        return;
+    let answer;
+    try {
+        answer = await onAsk(question, options, multiSelect);
+    }
+    catch {
+        answer = "user did not answer";
+    }
+    try {
+        sock.write(JSON.stringify({ id, answer }) + "\n");
+    }
+    catch {
+        /* socket closed before reply — client fails closed */
+    }
+}
+//# sourceMappingURL=askBroker.js.map

package/dist/core/brokers/askBroker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"askBroker.js","sourceRoot":"","sources":["../../../src/core/brokers/askBroker.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,yEAAyE;AACzE,oEAAoE;AACpE,yEAAyE;AACzE,8DAA8D;AAC9D,EAAE;AACF,0CAA0C;AAC1C,mEAAmE;AACnE,+BAA+B;AAC/B,sEAAsE;AACtE,kEAAkE;AAClE,0EAA0E;AAC1E,yEAAyE;AACzE,EAAE;AACF,kCAAkC;AAClC,qGAAqG;AACrG,uDAAuD;AACvD,EAAE;AACF,uEAAuE;AACvE,iEAAiE;AAGjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAkBtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAiB;IAEjB,OAAO,iBAAiB,CAAC;QACvB,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,CAA4B,CAAC;YACzC,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAClC,GAAG,CAAC,IAAI,CAAC;oBACP,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,WAAW,EACT,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;iBACpE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,IAAY,EACZ,KAAiB;IAEjB,IAAI,GAKH,CAAC;IACF,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC;IAC7C,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAClE,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,qBAAqB,CAAC;IACjC,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;AACH,CAAC"}

package/dist/core/brokers/permissionBroker.d.ts

@@ -0,0 +1,7 @@
+export type PermissionDecider = (name: string, input: Record<string, unknown>) => Promise<boolean>;
+export interface PermissionBrokerHandle {
+    socketPath: string;
+    close: () => Promise<void>;
+}
+export declare function startPermissionBroker(onRequest: PermissionDecider): Promise<PermissionBrokerHandle>;
+//# sourceMappingURL=permissionBroker.d.ts.map

package/dist/core/brokers/permissionBroker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionBroker.d.ts","sourceRoot":"","sources":["../../../src/core/brokers/permissionBroker.ts"],"names":[],"mappings":"AA2BA,MAAM,MAAM,iBAAiB,GAAG,CAC9B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC3B,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,iBAAiB,GAC3B,OAAO,CAAC,sBAAsB,CAAC,CAQjC"}

package/dist/core/brokers/permissionBroker.js

@@ -0,0 +1,63 @@
+// Phase 31: Unix-socket permission broker.
+//
+// When --ask is on AND --expose-omg-tools is on, the omg-MCP server
+// runs as a grandchild process (omg → CLI → mcp-server). The TUI's
+// PermissionPrompt lives in the omg parent, so the grandchild has
+// no direct path to it.
+//
+// This module bridges that gap with a Unix domain socket:
+//   - PermissionBroker.start(onRequest): spawns a socket server in
+//     omg, returns { socketPath, close() }.
+//   - The MCP server-side client (src/mcp/permissionClient.ts)
+//     connects, writes one JSON line per tool/call, reads one
+//     response line.
+//   - Each request is forwarded to onRequest(name, input). Whatever
+//     boolean that resolves to becomes the `allow` field on the
+//     wire response.
+//
+// Protocol (line-delimited JSON):
+//   client → broker:  {"id":1,"name":"echo","input":{...}}
+//   broker → client:  {"id":1,"allow":true|false}
+//
+// Errors / closed connections are fail-closed (allow=false) on the
+// client side; the broker side simply drops malformed lines.
+import { startSocketBroker } from "./socketBroker.js";
+export async function startPermissionBroker(onRequest) {
+    // Phase 203: socket boilerplate lives in startSocketBroker; here
+    // we only declare our protocol + handler.
+    return startSocketBroker({
+        prefix: "perm",
+        filename: "perm.sock",
+        onLine: (line, sock) => handleLine(line, sock, onRequest),
+    });
+}
+async function handleLine(line, sock, onRequest) {
+    let req;
+    try {
+        req = JSON.parse(line);
+    }
+    catch {
+        return;
+    }
+    const id = req.id;
+    const name = typeof req.name === "string" ? req.name : "";
+    const input = req.input !== null && typeof req.input === "object"
+        ? req.input
+        : {};
+    if (id === undefined || !name)
+        return;
+    let allow;
+    try {
+        allow = await onRequest(name, input);
+    }
+    catch {
+        allow = false;
+    }
+    try {
+        sock.write(JSON.stringify({ id, allow }) + "\n");
+    }
+    catch {
+        // Socket closed before reply — caller will fail-close on their side.
+    }
+}
+//# sourceMappingURL=permissionBroker.js.map

package/dist/core/brokers/permissionBroker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionBroker.js","sourceRoot":"","sources":["../../../src/core/brokers/permissionBroker.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,kEAAkE;AAClE,wBAAwB;AACxB,EAAE;AACF,0DAA0D;AAC1D,mEAAmE;AACnE,4CAA4C;AAC5C,+DAA+D;AAC/D,8DAA8D;AAC9D,qBAAqB;AACrB,oEAAoE;AACpE,gEAAgE;AAChE,qBAAqB;AACrB,EAAE;AACF,kCAAkC;AAClC,2DAA2D;AAC3D,kDAAkD;AAClD,EAAE;AACF,mEAAmE;AACnE,6DAA6D;AAG7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAYtD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAA4B;IAE5B,iEAAiE;IACjE,0CAA0C;IAC1C,OAAO,iBAAiB,CAAC;QACvB,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,WAAW;QACrB,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,IAAY,EACZ,SAA4B;IAE5B,IAAI,GAAsD,CAAC;IAC3D,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,KAAK,GACT,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QACjD,CAAC,CAAE,GAAG,CAAC,KAAiC;QACxC,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,IAAI;QAAE,OAAO;IACtC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC"}

package/dist/core/brokers/socketBroker.d.ts

@@ -0,0 +1,35 @@
+import { type Socket } from "node:net";
+/**
+ * The local-IPC address to listen on / connect to for this broker.
+ *
+ * - Windows: a named pipe `\\.\pipe\omg-<prefix>-<pid>-<stamp>-<seq>`.
+ *   Named pipes aren't filesystem objects — no temp dir, and the OS
+ *   releases the name when the server closes.
+ * - POSIX: a Unix-domain socket file inside a fresh `mkdtemp` dir
+ *   (unchanged from the original behavior).
+ *
+ * `platform` is a parameter so the Windows branch is unit-testable from
+ * any host.
+ */
+export declare function chooseSocketPath(platform: NodeJS.Platform, opts: {
+    prefix: string;
+    filename: string;
+}): string;
+export interface SocketBrokerHandle {
+    socketPath: string;
+    close(): Promise<void>;
+}
+export interface SocketBrokerOptions {
+    /** Prefix for `mkdtempSync(tmpdir + omg-<prefix>-)`. Just a label
+     *  so /tmp listings are scannable; doesn't affect behavior. */
+    prefix: string;
+    /** Filename of the socket inside the temp dir (e.g. "perm.sock"). */
+    filename: string;
+    /** Per-line handler. Receives the trimmed line (empty lines never
+     *  reach here) and the open socket. Caller may write reply line(s)
+     *  to the socket. Synchronous return is fine; async return is
+     *  awaited via `void`. */
+    onLine: (line: string, sock: Socket) => Promise<void> | void;
+}
+export declare function startSocketBroker(opts: SocketBrokerOptions): Promise<SocketBrokerHandle>;
+//# sourceMappingURL=socketBroker.d.ts.map

package/dist/core/brokers/socketBroker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socketBroker.d.ts","sourceRoot":"","sources":["../../../src/core/brokers/socketBroker.ts"],"names":[],"mappings":"AAoBA,OAAO,EAA6B,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AAQlE;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACzC,MAAM,CAOR;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC;mEAC+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB;;;8BAG0B;IAC1B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC9D;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CA4B7B"}

package/dist/core/brokers/socketBroker.js

@@ -0,0 +1,74 @@
+// Phase 203: shared local-socket broker helper.
+//
+// The three brokers (permission / ask / askProxy) all repeated the
+// same ~25 LOC of boilerplate: mkdtempSync → createServer + readline
+// per connection → server.listen + once("error") rejection → unref.
+// The only piece that differed per broker was the per-line handler.
+// This module owns the boilerplate; brokers compose around it.
+//
+// Each connection gets a per-socket readline interface; lines arrive
+// trimmed, with empty lines skipped. The caller's onLine receives
+// the (already-trimmed) line and the socket so it can write back a
+// reply line. Broker-level errors are swallowed — clients are
+// expected to fail-closed on their side when a write fails.
+//
+// Phase 345 (Windows): the transport is a local IPC endpoint that
+// node:net abstracts identically across platforms — a Unix-domain
+// socket file on POSIX, a named pipe (`\\.\pipe\…`) on Windows.
+// `createServer().listen(path)` and the clients' `createConnection(path)`
+// take either form; only the path we hand them differs by platform.
+import { createServer } from "node:net";
+import { createInterface } from "node:readline";
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+let pipeSeq = 0;
+/**
+ * The local-IPC address to listen on / connect to for this broker.
+ *
+ * - Windows: a named pipe `\\.\pipe\omg-<prefix>-<pid>-<stamp>-<seq>`.
+ *   Named pipes aren't filesystem objects — no temp dir, and the OS
+ *   releases the name when the server closes.
+ * - POSIX: a Unix-domain socket file inside a fresh `mkdtemp` dir
+ *   (unchanged from the original behavior).
+ *
+ * `platform` is a parameter so the Windows branch is unit-testable from
+ * any host.
+ */
+export function chooseSocketPath(platform, opts) {
+    if (platform === "win32") {
+        const name = `omg-${opts.prefix}-${process.pid}-${Date.now()}-${pipeSeq++}`;
+        return `\\\\.\\pipe\\${name}`;
+    }
+    const dir = mkdtempSync(join(tmpdir(), `omg-${opts.prefix}-`));
+    return join(dir, opts.filename);
+}
+export async function startSocketBroker(opts) {
+    const socketPath = chooseSocketPath(process.platform, opts);
+    const server = createServer((sock) => {
+        const rl = createInterface({ input: sock, crlfDelay: Infinity });
+        rl.on("line", (line) => {
+            const trimmed = line.trim();
+            if (!trimmed)
+                return;
+            void opts.onLine(trimmed, sock);
+        });
+        sock.on("error", () => {
+            /* client died mid-request — drop */
+        });
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(socketPath, () => {
+            server.off("error", reject);
+            resolve();
+        });
+    });
+    // Don't keep the event loop alive solely for the broker.
+    server.unref();
+    return {
+        socketPath,
+        close: () => new Promise((resolve) => server.close(() => resolve())),
+    };
+}
+//# sourceMappingURL=socketBroker.js.map

package/dist/core/brokers/socketBroker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socketBroker.js","sourceRoot":"","sources":["../../../src/core/brokers/socketBroker.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,mEAAmE;AACnE,qEAAqE;AACrE,oEAAoE;AACpE,oEAAoE;AACpE,+DAA+D;AAC/D,EAAE;AACF,qEAAqE;AACrE,kEAAkE;AAClE,mEAAmE;AACnE,8DAA8D;AAC9D,4DAA4D;AAC5D,EAAE;AACF,kEAAkE;AAClE,kEAAkE;AAClE,gEAAgE;AAChE,0EAA0E;AAC1E,oEAAoE;AAEpE,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,IAAI,OAAO,GAAG,CAAC,CAAC;AAEhB;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAyB,EACzB,IAA0C;IAE1C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,EAAE,EAAE,CAAC;QAC5E,OAAO,gBAAgB,IAAI,EAAE,CAAC;IAChC,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAoBD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAyB;IAEzB,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,IAAY,EAAE,EAAE;QACnD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,oCAAoC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,yDAAyD;IACzD,MAAM,CAAC,KAAK,EAAE,CAAC;IAEf,OAAO;QACL,UAAU;QACV,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;KAC3E,CAAC;AACJ,CAAC"}

package/dist/core/clipboard.d.ts

@@ -0,0 +1,4 @@
+/** Copy `text` to the clipboard. Resolves with the utility that
+ *  succeeded (e.g. "pbcopy"); rejects when no candidate works. */
+export declare function copyToClipboard(text: string): Promise<string>;
+//# sourceMappingURL=clipboard.d.ts.map

package/dist/core/clipboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard.d.ts","sourceRoot":"","sources":["../../src/core/clipboard.ts"],"names":[],"mappings":"AAoCA;kEACkE;AAClE,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBnE"}

package/dist/core/clipboard.js

@@ -0,0 +1,46 @@
+// Phase 172: copy text to the system clipboard via the platform's
+// native utility. macOS uses pbcopy; Linux tries the common
+// wayland/X11 tools; Windows uses clip. Each candidate is piped the
+// text on stdin and we take the first one that exits cleanly.
+import { spawn } from "node:child_process";
+/** Ordered list of `argv` candidates per platform. The first one that
+ *  runs without erroring wins, so a machine missing wl-copy can still
+ *  fall through to xclip / xsel. */
+const CANDIDATES = {
+    darwin: [["pbcopy"]],
+    linux: [
+        ["wl-copy"],
+        ["xclip", "-selection", "clipboard"],
+        ["xsel", "--clipboard", "--input"],
+    ],
+    win32: [["clip"]],
+};
+function pipeToCommand(bin, args, text) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(bin, args, { stdio: ["pipe", "ignore", "ignore"] });
+        child.on("error", reject);
+        child.on("close", (code) => code === 0 ? resolve() : reject(new Error(`${bin} exited ${code}`)));
+        child.stdin.on("error", reject);
+        child.stdin.end(text);
+    });
+}
+/** Copy `text` to the clipboard. Resolves with the utility that
+ *  succeeded (e.g. "pbcopy"); rejects when no candidate works. */
+export async function copyToClipboard(text) {
+    const candidates = CANDIDATES[process.platform] ?? [];
+    if (candidates.length === 0) {
+        throw new Error(`no clipboard utility known for platform ${process.platform}`);
+    }
+    let lastErr;
+    for (const [bin, ...args] of candidates) {
+        try {
+            await pipeToCommand(bin, args, text);
+            return bin;
+        }
+        catch (e) {
+            lastErr = e;
+        }
+    }
+    throw new Error(`clipboard copy failed (tried ${candidates.map((c) => c[0]).join(", ")}): ${lastErr instanceof Error ? lastErr.message : String(lastErr)}`);
+}
+//# sourceMappingURL=clipboard.js.map

package/dist/core/clipboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard.js","sourceRoot":"","sources":["../../src/core/clipboard.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,4DAA4D;AAC5D,oEAAoE;AACpE,8DAA8D;AAE9D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C;;oCAEoC;AACpC,MAAM,UAAU,GAA+B;IAC7C,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpB,KAAK,EAAE;QACL,CAAC,SAAS,CAAC;QACX,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC;QACpC,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC;KACnC;IACD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;CAClB,CAAC;AAEF,SAAS,aAAa,CACpB,GAAW,EACX,IAAc,EACd,IAAY;IAEZ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CACzB,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,WAAW,IAAI,EAAE,CAAC,CAAC,CACpE,CAAC;QACF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;kEACkE;AAClE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,2CAA2C,OAAO,CAAC,QAAQ,EAAE,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,OAAgB,CAAC;IACrB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,GAAG,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gCAAgC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MACpE,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAC7D,EAAE,CACH,CAAC;AACJ,CAAC"}