@zmzai/agent-framework 0.1.0

package/dist/core/agent/registry.js

@@ -0,0 +1,98 @@
+import { rulesetFromConfig } from "../permission/ruleset.js";
+function define(def) {
+    return { ...def, permission: rulesetFromConfig(def.permission) };
+}
+const DEFAULT_PROMPT = "你是 ZMZAI Agent，一个会主动完成任务的 Coding Agent。可使用工具读取当前 Workspace，通过 write/edit 直接修改文件（每次修改生成可审查、可回滚的不可变版本），用 bash 在隔离沙箱中运行命令（stdout/stderr 会返回，生成的产物文件可下载）。\n" +
+    "工作方式：先 glob/read/grep 掌握 Workspace 现状，并用 todo 工具把任务拆成清单、边做边更新，再动手。对生成型任务（PPT、文档、脚本、报告等），不要只反问用户需求——基于已有信息自行决定合理的默认（主题、篇幅、风格、结构），直接写出生成脚本或内容 → 执行 → 校验产物 → 交付。只有信息确实无法推断、且追问明显比先交付默认方案更省事时，才问一两个关键问题，并同时给出你的默认方案。\n" +
+    "不能声称执行了未调用的操作。用中文给出简洁、可核实的结果。";
+const READONLY_PROMPT = "你是 ZMZAI Agent 的只读分析模式。仅使用 read/glob/grep 工具读取当前 Workspace 并给出可核实的中文方案；你没有写入和执行权限，不能声称执行了任何修改。任务结束后用户可以在同一会话继续追问，或切换到 default 代理执行你的方案。";
+const EXPLORE_PROMPT = "你是代码库探索子代理。快速定位与任务相关的文件、符号与数据流，返回精确的 path:line 引用和简洁结论。你只读，不做任何修改。按要求的彻底程度（quick/medium/thorough）控制搜索范围。";
+const GENERAL_PROMPT = "你是通用子任务代理。完成父代理交代的独立子任务，返回简洁、可核实的结果。不要反问父代理；信息不足时基于合理默认推进并说明假设。";
+export const builtinAgents = [
+    define({
+        name: "default",
+        description: "默认代理：读写 + 沙箱执行，自动完成任务",
+        mode: "primary",
+        steps: 12,
+        prompt: DEFAULT_PROMPT,
+        permission: { bash: "ask" }, // edit/read/... fall through to built-in defaults
+    }),
+    define({
+        name: "readonly",
+        description: "只读分析：等价于旧 plan 模式",
+        mode: "primary",
+        steps: 8,
+        prompt: READONLY_PROMPT,
+        permission: { edit: "deny", bash: "deny", task: "deny" },
+    }),
+    define({
+        name: "explore",
+        description: "代码库探索子代理（只读）",
+        mode: "subagent",
+        steps: 8,
+        prompt: EXPLORE_PROMPT,
+        permission: { "*": "deny", read: "allow", glob: "allow", grep: "allow", list: "allow", todo: "allow" },
+    }),
+    define({
+        name: "general",
+        description: "通用子任务代理",
+        mode: "subagent",
+        steps: 12,
+        prompt: GENERAL_PROMPT,
+        permission: {},
+    }),
+];
+/** Built-in baseline applied beneath every agent's own ruleset (spec §5.5). */
+export const builtinDefaults = rulesetFromConfig({
+    "*": "allow",
+    external_directory: { "*": "ask" },
+    read: { "*": "allow", "*.env": "ask", "*.env.*": "ask" },
+    bash: "ask",
+    // A connector holds an external-system credential. Even read-only calls
+    // cross a trust boundary and must be approved unless a user grants it.
+    connector: "ask",
+    edit: "allow",
+});
+export class AgentRegistry {
+    agents = new Map();
+    constructor(customAgents = []) {
+        for (const agent of builtinAgents)
+            this.agents.set(agent.name, agent);
+        for (const agent of customAgents)
+            this.agents.set(agent.name, agent); // custom overrides builtin (spec §6.3)
+    }
+    get(name) {
+        return this.agents.get(name) ?? null;
+    }
+    list(filter) {
+        return [...this.agents.values()].filter((agent) => {
+            if (!filter?.includeHidden && agent.hidden)
+                return false;
+            if (filter?.mode && agent.mode !== filter.mode && agent.mode !== "all")
+                return false;
+            return true;
+        });
+    }
+    /** Effective ruleset stack for a session running this agent, in ascending
+     *  precedence: builtin defaults → agent preset. Session rules are appended
+     *  later by the permission engine. */
+    rulesetsFor(name) {
+        const agent = this.get(name);
+        return agent ? [builtinDefaults, agent.permission] : [builtinDefaults];
+    }
+    /** Returns a NEW registry with additional agents layered on top (workspace
+     *  custom agents). The base registry is shared/process-wide, so per-run
+     *  customization must not mutate it — this derive keeps the singleton
+     *  immutable while letting a session see its workspace's .zmzai/agents. */
+    derive(extraAgents) {
+        if (!extraAgents.length)
+            return this;
+        const merged = new AgentRegistry([...this.customAgents, ...extraAgents]);
+        return merged;
+    }
+    /** Custom agents registered beyond the builtins (for derive()). */
+    get customAgents() {
+        return [...this.agents.values()].filter((agent) => !builtinAgents.some((builtin) => builtin.name === agent.name));
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/core/agent/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/core/agent/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAuC,MAAM,0BAA0B,CAAC;AAuBlG,SAAS,MAAM,CAAC,GAAoB;IAClC,OAAO,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,cAAc,GAClB,yJAAyJ;IACzJ,oNAAoN;IACpN,+BAA+B,CAAC;AAElC,MAAM,eAAe,GACnB,yIAAyI,CAAC;AAE5I,MAAM,cAAc,GAClB,0GAA0G,CAAC;AAE7G,MAAM,cAAc,GAAG,iEAAiE,CAAC;AAEzF,MAAM,CAAC,MAAM,aAAa,GAAgB;IACxC,MAAM,CAAC;QACL,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,uBAAuB;QACpC,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,cAAc;QACtB,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,kDAAkD;KAChF,CAAC;IACF,MAAM,CAAC;QACL,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,mBAAmB;QAChC,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,eAAe;QACvB,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;KACzD,CAAC;IACF,MAAM,CAAC;QACL,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,cAAc;QAC3B,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,cAAc;QACtB,UAAU,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;KACvG,CAAC;IACF,MAAM,CAAC;QACL,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,cAAc;QACtB,UAAU,EAAE,EAAE;KACf,CAAC;CACH,CAAC;AAEF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAY,iBAAiB,CAAC;IACxD,GAAG,EAAE,OAAO;IACZ,kBAAkB,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;IAClC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IACxD,IAAI,EAAE,KAAK;IACX,wEAAwE;IACxE,uEAAuE;IACvE,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE,OAAO;CACd,CAAC,CAAC;AAEH,MAAM,OAAO,aAAa;IACP,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAEvD,YAAY,eAA4B,EAAE;QACxC,KAAK,MAAM,KAAK,IAAI,aAAa;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtE,KAAK,MAAM,KAAK,IAAI,YAAY;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,uCAAuC;IAC/G,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,MAAmE;QACtE,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAChD,IAAI,CAAC,MAAM,EAAE,aAAa,IAAI,KAAK,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACzD,IAAI,MAAM,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAO,KAAK,CAAC;YACrF,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;0CAEsC;IACtC,WAAW,CAAC,IAAY;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IACzE,CAAC;IAED;;;+EAG2E;IAC3E,MAAM,CAAC,WAAwB;QAC7B,IAAI,CAAC,WAAW,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mEAAmE;IACnE,IAAI,YAAY;QACd,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpH,CAAC;CACF"}

package/dist/core/agent/resolver.d.ts

@@ -0,0 +1,16 @@
+import type { AgentInfo } from "./registry.js";
+import type { SessionInfo } from "../session/types.js";
+import type { ToolDef } from "../tools/def.js";
+/** A product resolves an immutable Agent Version into this runtime-safe shape.
+ *  The framework deliberately does not know how versions, plugins, secrets,
+ *  or connectors are stored. */
+export type ResolvedAgent = {
+    agent: AgentInfo;
+    /** Extra tool definitions contributed by trusted, resolved capabilities.
+     *  Base tools remain owned by the framework. */
+    tools?: ToolDef[];
+};
+export type AgentResolver = {
+    resolve(session: SessionInfo): Promise<ResolvedAgent | null>;
+};
+//# sourceMappingURL=resolver.d.ts.map

package/dist/core/agent/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/core/agent/resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE/C;;gCAEgC;AAChC,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,EAAE,SAAS,CAAC;IACjB;oDACgD;IAChD,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;CAC9D,CAAC"}

package/dist/core/agent/resolver.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=resolver.js.map

package/dist/core/agent/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../../src/core/agent/resolver.ts"],"names":[],"mappings":""}

package/dist/core/events/bus.d.ts

@@ -0,0 +1,30 @@
+import type { FrameworkEvent, PersistedFrameworkEvent } from "./manifest.js";
+/** EventLog (spec §4.1 abstracted for M5): the durable per-session event log.
+ *  The framework ships an in-memory implementation (below) and a JSONL one;
+ *  the product supplies a Mongo implementation (see zmzai-agent's
+ *  framework/core/events/mongo-event-log.ts). All methods must be safe under
+ *  the single-writer-per-session lease model. */
+export interface EventLog {
+    /** Persists one validated event, allocating the next per-session seq. */
+    append(event: FrameworkEvent & {
+        sessionId: string;
+    }): Promise<PersistedFrameworkEvent>;
+    /** Reads events with seq > sinceSeq, ascending, capped at limit. */
+    read(sessionId: string, sinceSeq: number, limit: number): Promise<PersistedFrameworkEvent[]>;
+    /** Raw record count (stats/audit). */
+    count(sessionId: string): Promise<number>;
+}
+export declare function createMemoryEventLog(): EventLog;
+export type SubscribeOptions = {
+    sinceSeq?: number;
+    pollIntervalMs?: number;
+    signal?: AbortSignal;
+};
+/** Subscribes to a session's event stream: durable catch-up via log.read, then
+ *  live delivery via the in-process listener registry. Cross-process delivery
+ *  (product's Mongo log) works because log.read polls the durable store. */
+export declare function subscribeEventLog(log: EventLog, sessionId: string, options?: SubscribeOptions): AsyncIterable<PersistedFrameworkEvent>;
+/** Notifies live subscribers (called by framework when an event is appended —
+ *  the runner does this after EventLog.append). */
+export declare function notifyEventLogListeners(event: PersistedFrameworkEvent): void;
+//# sourceMappingURL=bus.d.ts.map

package/dist/core/events/bus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bus.d.ts","sourceRoot":"","sources":["../../../src/core/events/bus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAsB,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAIjG;;;;iDAIiD;AACjD,MAAM,WAAW,QAAQ;IACvB,yEAAyE;IACzE,MAAM,CAAC,KAAK,EAAE,cAAc,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACxF,oEAAoE;IACpE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAC7F,sCAAsC;IACtC,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3C;AAID,wBAAgB,oBAAoB,IAAI,QAAQ,CA4B/C;AAMD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF;;4EAE4E;AAC5E,wBAAuB,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,aAAa,CAAC,uBAAuB,CAAC,CA2DjJ;AAKD;mDACmD;AACnD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,uBAAuB,GAAG,IAAI,CAQ5E"}

package/dist/core/events/bus.js

@@ -0,0 +1,112 @@
+import { frameworkEventSchemas } from "./manifest.js";
+import { newEventId } from "../session/ids.js";
+// ---- In-memory implementation (single-process demo/tests) ----
+export function createMemoryEventLog() {
+    const store = new Map();
+    return {
+        async append(event) {
+            const schema = frameworkEventSchemas[event.type];
+            const parsed = schema.safeParse(event.data);
+            if (!parsed.success)
+                throw new Error(`INVALID_FRAMEWORK_EVENT: ${event.type} ${parsed.error.issues[0]?.message ?? ""}`);
+            const list = store.get(event.sessionId) ?? [];
+            const persisted = {
+                id: newEventId(),
+                sessionId: event.sessionId,
+                seq: list.length + 1,
+                type: event.type,
+                data: parsed.data,
+                at: new Date().toISOString(),
+            };
+            list.push(persisted);
+            store.set(event.sessionId, list);
+            return persisted;
+        },
+        async read(sessionId, sinceSeq, limit) {
+            const list = store.get(sessionId) ?? [];
+            return list.filter((event) => event.seq > sinceSeq).slice(0, limit);
+        },
+        async count(sessionId) {
+            return (store.get(sessionId) ?? []).length;
+        },
+    };
+}
+/** Subscribes to a session's event stream: durable catch-up via log.read, then
+ *  live delivery via the in-process listener registry. Cross-process delivery
+ *  (product's Mongo log) works because log.read polls the durable store. */
+export async function* subscribeEventLog(log, sessionId, options = {}) {
+    const pollIntervalMs = options.pollIntervalMs ?? 1_000;
+    let cursor = options.sinceSeq ?? 0;
+    const queue = [];
+    let wake = null;
+    let done = false;
+    const listener = (event) => {
+        if (event.seq <= cursor)
+            return;
+        queue.push(event);
+        wake?.();
+    };
+    const registered = listeners.get(sessionId) ?? new Set();
+    registered.add(listener);
+    listeners.set(sessionId, registered);
+    const onAbort = () => {
+        done = true;
+        wake?.();
+    };
+    options.signal?.addEventListener("abort", onAbort, { once: true });
+    try {
+        while (!done) {
+            const missed = await log.read(sessionId, cursor, 500);
+            for (const record of missed) {
+                if (record.seq <= cursor)
+                    continue;
+                queue.push(record);
+            }
+            queue.sort((a, b) => a.seq - b.seq);
+            while (queue.length && queue[0].seq > cursor) {
+                const event = queue.shift();
+                cursor = event.seq;
+                yield event;
+            }
+            queue.length = 0;
+            if (done)
+                break;
+            await new Promise((resolve) => {
+                const timer = setTimeout(() => {
+                    wake = null;
+                    resolve();
+                }, pollIntervalMs);
+                wake = () => {
+                    clearTimeout(timer);
+                    wake = null;
+                    resolve();
+                };
+                if (done) {
+                    clearTimeout(timer);
+                    resolve();
+                }
+            });
+        }
+    }
+    finally {
+        options.signal?.removeEventListener("abort", onAbort);
+        registered.delete(listener);
+        if (registered.size === 0)
+            listeners.delete(sessionId);
+    }
+}
+/** In-process live fan-out registry shared by subscribeEventLog consumers. */
+const listeners = new Map();
+/** Notifies live subscribers (called by framework when an event is appended —
+ *  the runner does this after EventLog.append). */
+export function notifyEventLogListeners(event) {
+    for (const listener of listeners.get(event.sessionId) ?? []) {
+        try {
+            listener(event);
+        }
+        catch {
+            // A throwing subscriber must never break the publish path.
+        }
+    }
+}
+//# sourceMappingURL=bus.js.map

package/dist/core/events/bus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bus.js","sourceRoot":"","sources":["../../../src/core/events/bus.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAgB/C,iEAAiE;AAEjE,MAAM,UAAU,oBAAoB;IAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC3D,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAA0B,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;YACxH,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC9C,MAAM,SAAS,GAA4B;gBACzC,EAAE,EAAE,UAAU,EAAE;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,GAAG,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC;gBACpB,IAAI,EAAE,KAAK,CAAC,IAA0B;gBACtC,IAAI,EAAE,MAAM,CAAC,IAAa;gBAC1B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK;YACnC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,SAAS;YACnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC;AAYD;;4EAE4E;AAC5E,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,iBAAiB,CAAC,GAAa,EAAE,SAAiB,EAAE,UAA4B,EAAE;IACvG,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACvD,IAAI,MAAM,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,IAAI,IAAI,GAAwB,IAAI,CAAC;IACrC,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,MAAM,QAAQ,GAAG,CAAC,KAA8B,EAAE,EAAE;QAClD,IAAI,KAAK,CAAC,GAAG,IAAI,MAAM;YAAE,OAAO;QAChC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,EAAE,EAAE,CAAC;IACX,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAgB,CAAC;IACvE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAErC,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,GAAG,IAAI,CAAC;QACZ,IAAI,EAAE,EAAE,CAAC;IACX,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnE,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACtD,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;gBAC5B,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM;oBAAE,SAAS;gBACnC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACpC,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,GAAG,GAAG,MAAM,EAAE,CAAC;gBAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;gBAC7B,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC;gBACnB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACjB,IAAI,IAAI;gBAAE,MAAM;YAEhB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,IAAI,GAAG,IAAI,CAAC;oBACZ,OAAO,EAAE,CAAC;gBACZ,CAAC,EAAE,cAAc,CAAC,CAAC;gBACnB,IAAI,GAAG,GAAG,EAAE;oBACV,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,IAAI,GAAG,IAAI,CAAC;oBACZ,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC;gBACF,IAAI,IAAI,EAAE,CAAC;oBACT,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtD,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;AAEvD;mDACmD;AACnD,MAAM,UAAU,uBAAuB,CAAC,KAA8B;IACpE,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5D,IAAI,CAAC;YACH,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/core/events/manifest.d.ts

@@ -0,0 +1,117 @@
+import { z } from "zod";
+import type { MessageInfo, Part, SessionInfo } from "../session/types.js";
+export declare const sessionInfoSchema: z.ZodType<SessionInfo>;
+export declare const messageInfoSchema: z.ZodCustom<MessageInfo, MessageInfo>;
+export declare const partSchema: z.ZodCustom<Part, Part>;
+declare const todoItemSchema: z.ZodObject<{
+    content: z.ZodString;
+    status: z.ZodEnum<{
+        pending: "pending";
+        completed: "completed";
+        in_progress: "in_progress";
+        cancelled: "cancelled";
+    }>;
+    priority: z.ZodOptional<z.ZodEnum<{
+        high: "high";
+        medium: "medium";
+        low: "low";
+    }>>;
+}, z.core.$strip>;
+export declare const frameworkEventSchemas: {
+    readonly "session.updated": z.ZodObject<{
+        session: z.ZodType<SessionInfo, unknown, z.core.$ZodTypeInternals<SessionInfo, unknown>>;
+    }, z.core.$strip>;
+    readonly "session.status": z.ZodObject<{
+        status: z.ZodEnum<{
+            running: "running";
+            idle: "idle";
+            waiting_permission: "waiting_permission";
+            waiting_input: "waiting_input";
+        }>;
+    }, z.core.$strip>;
+    readonly "session.error": z.ZodObject<{
+        name: z.ZodString;
+        message: z.ZodString;
+    }, z.core.$strip>;
+    readonly "message.updated": z.ZodObject<{
+        message: z.ZodCustom<MessageInfo, MessageInfo>;
+    }, z.core.$strip>;
+    readonly "message.part.updated": z.ZodObject<{
+        part: z.ZodCustom<Part, Part>;
+    }, z.core.$strip>;
+    readonly "message.part.delta": z.ZodObject<{
+        messageId: z.ZodString;
+        partId: z.ZodString;
+        field: z.ZodLiteral<"text">;
+        delta: z.ZodString;
+    }, z.core.$strip>;
+    readonly "permission.asked": z.ZodObject<{
+        request: z.ZodObject<{
+            id: z.ZodString;
+            sessionId: z.ZodString;
+            permission: z.ZodString;
+            patterns: z.ZodArray<z.ZodString>;
+            metadata: z.ZodOptional<z.ZodUnknown>;
+            always: z.ZodArray<z.ZodString>;
+            tool: z.ZodOptional<z.ZodObject<{
+                messageId: z.ZodString;
+                callId: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    readonly "permission.replied": z.ZodObject<{
+        id: z.ZodString;
+        reply: z.ZodEnum<{
+            once: "once";
+            always: "always";
+            reject: "reject";
+        }>;
+    }, z.core.$strip>;
+    readonly "todo.updated": z.ZodObject<{
+        todos: z.ZodArray<z.ZodObject<{
+            content: z.ZodString;
+            status: z.ZodEnum<{
+                pending: "pending";
+                completed: "completed";
+                in_progress: "in_progress";
+                cancelled: "cancelled";
+            }>;
+            priority: z.ZodOptional<z.ZodEnum<{
+                high: "high";
+                medium: "medium";
+                low: "low";
+            }>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    readonly "file.edited": z.ZodObject<{
+        path: z.ZodString;
+        revisionId: z.ZodString;
+        diff: z.ZodString;
+    }, z.core.$strip>;
+    readonly "artifact.created": z.ZodObject<{
+        artifactId: z.ZodString;
+        path: z.ZodString;
+        bytes: z.ZodNumber;
+        contentType: z.ZodString;
+        downloadUrl: z.ZodString;
+        previewUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+};
+export type FrameworkEventType = keyof typeof frameworkEventSchemas;
+export type FrameworkEvent = {
+    [K in FrameworkEventType]: {
+        type: K;
+        data: z.infer<(typeof frameworkEventSchemas)[K]>;
+    };
+}[FrameworkEventType];
+export type PersistedFrameworkEvent = FrameworkEvent & {
+    id: string;
+    sessionId: string;
+    seq: number;
+    at: string;
+};
+export type TodoItem = z.infer<typeof todoItemSchema>;
+/** Narrows an unknown payload (e.g. from an SSE frame) to a FrameworkEvent. */
+export declare function parseFrameworkEvent(value: unknown): FrameworkEvent | null;
+export {};
+//# sourceMappingURL=manifest.d.ts.map

package/dist/core/events/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/core/events/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAU1E,eAAO,MAAM,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAWzB,CAAC;AAE7B,eAAO,MAAM,iBAAiB,uCAO7B,CAAC;AAEF,eAAO,MAAM,UAAU,yBAGtB,CAAC;AAYF,QAAA,MAAM,cAAc;;;;;;;;;;;;;iBAIlB,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmBxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,MAAM,OAAO,qBAAqB,CAAC;AAEpE,MAAM,MAAM,cAAc,GAAG;KAC1B,CAAC,IAAI,kBAAkB,GAAG;QAAE,IAAI,EAAE,CAAC,CAAC;QAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;KAAE;CACzF,CAAC,kBAAkB,CAAC,CAAC;AAEtB,MAAM,MAAM,uBAAuB,GAAG,cAAc,GAAG;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAOzE"}

package/dist/core/events/manifest.js

@@ -0,0 +1,69 @@
+import { z } from "zod";
+/** Framework event manifest (spec §4.2) — the frozen v0 wire contract.
+ *  Every event is persisted to fw_events with a per-session ascending seq and
+ *  can be replayed via subscribe(sinceSeq). */
+const modelRefSchema = z.object({ providerId: z.string(), modelId: z.string() });
+const rulesetSchema = z.array(z.object({ permission: z.string(), pattern: z.string(), action: z.enum(["allow", "deny", "ask"]) }));
+export const sessionInfoSchema = z.object({
+    id: z.string(),
+    workspaceId: z.string(),
+    userId: z.string(),
+    parentId: z.string().optional(),
+    title: z.string(),
+    agent: z.string(),
+    model: modelRefSchema,
+    permission: rulesetSchema,
+    queuedPrompts: z.array(z.object({ text: z.string(), agent: z.string().optional(), enqueuedAt: z.string() })),
+    time: z.object({ created: z.string(), updated: z.string(), archived: z.string().optional() }),
+});
+export const messageInfoSchema = z.custom((value) => typeof value === "object" &&
+    value !== null &&
+    "role" in value &&
+    (value.role === "user" || value.role === "assistant"), "invalid MessageInfo");
+export const partSchema = z.custom((value) => typeof value === "object" && value !== null && "type" in value && typeof value.type === "string", "invalid Part");
+const permissionRequestSchema = z.object({
+    id: z.string(),
+    sessionId: z.string(),
+    permission: z.string(),
+    patterns: z.array(z.string()),
+    metadata: z.unknown().optional(),
+    always: z.array(z.string()),
+    tool: z.object({ messageId: z.string(), callId: z.string() }).optional(),
+});
+const todoItemSchema = z.object({
+    content: z.string(),
+    status: z.enum(["pending", "in_progress", "completed", "cancelled"]),
+    priority: z.enum(["high", "medium", "low"]).optional(),
+});
+export const frameworkEventSchemas = {
+    "session.updated": z.object({ session: sessionInfoSchema }),
+    "session.status": z.object({ status: z.enum(["idle", "running", "waiting_permission", "waiting_input"]) }),
+    "session.error": z.object({ name: z.string(), message: z.string() }),
+    "message.updated": z.object({ message: messageInfoSchema }),
+    "message.part.updated": z.object({ part: partSchema }),
+    "message.part.delta": z.object({ messageId: z.string(), partId: z.string(), field: z.literal("text"), delta: z.string() }),
+    "permission.asked": z.object({ request: permissionRequestSchema }),
+    "permission.replied": z.object({ id: z.string(), reply: z.enum(["once", "always", "reject"]) }),
+    "todo.updated": z.object({ todos: z.array(todoItemSchema) }),
+    "file.edited": z.object({ path: z.string(), revisionId: z.string(), diff: z.string() }),
+    "artifact.created": z.object({
+        artifactId: z.string(),
+        path: z.string(),
+        bytes: z.number(),
+        contentType: z.string(),
+        downloadUrl: z.string(),
+        previewUrl: z.string().optional(),
+    }),
+};
+/** Narrows an unknown payload (e.g. from an SSE frame) to a FrameworkEvent. */
+export function parseFrameworkEvent(value) {
+    if (typeof value !== "object" || value === null)
+        return null;
+    const { type, data } = value;
+    if (typeof type !== "string" || !(type in frameworkEventSchemas))
+        return null;
+    const schema = frameworkEventSchemas[type];
+    const parsed = schema.safeParse(data);
+    return parsed.success ? { type, data: parsed.data } : null;
+}
+//# sourceMappingURL=manifest.js.map

package/dist/core/events/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/core/events/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;+CAE+C;AAE/C,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEjF,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAEnI,MAAM,CAAC,MAAM,iBAAiB,GAA2B,CAAC,CAAC,MAAM,CAAC;IAChE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,cAAc;IACrB,UAAU,EAAE,aAAa;IACzB,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5G,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;CAC9F,CAA2B,CAAC;AAE7B,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CACvC,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ;IACzB,KAAK,KAAK,IAAI;IACd,MAAM,IAAI,KAAK;IACf,CAAE,KAA2B,CAAC,IAAI,KAAK,MAAM,IAAK,KAA2B,CAAC,IAAI,KAAK,WAAW,CAAC,EACrG,qBAAqB,CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,OAAQ,KAA2B,CAAC,IAAI,KAAK,QAAQ,EAClI,cAAc,CACf,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzE,CAAwC,CAAC;AAE1C,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACpE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC3D,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;IAC1G,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACpE,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC3D,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACtD,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1H,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;IAClE,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;IAC/F,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;IAC5D,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACvF,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC;CACM,CAAC;AAiBX,+EAA+E;AAC/E,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAA2C,CAAC;IACnE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,qBAAqB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAA0B,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAqB,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC"}

package/dist/core/permission/engine.d.ts

@@ -0,0 +1,84 @@
+import { type Action, type Ruleset } from "../permission/ruleset.js";
+/** Permission engine (spec §5.2/§5.3). The single choke point for every
+ *  dangerous operation: SessionRunner wires `ask()` into PI's beforeToolCall.
+ *
+ *  - allow-all patterns short-circuit without emitting any event
+ *  - otherwise a PermissionRequest is published (`permission.asked`) and the
+ *    caller is suspended on a Deferred until `reply()` resolves it
+ *  - "always" stamps an allow rule onto the session ruleset and auto-resolves
+ *    other pending requests in the same session now covered by it
+ *  - "reject" throws RejectedError back into the tool call (fed to the model)
+ */
+export type Reply = "once" | "always" | "reject";
+export type PermissionRequest = {
+    id: string;
+    sessionId: string;
+    permission: string;
+    patterns: string[];
+    metadata?: unknown;
+    always: string[];
+    tool?: {
+        messageId: string;
+        callId: string;
+    };
+};
+export declare class RejectedError extends Error {
+    readonly feedback?: string | undefined;
+    constructor(message: string, feedback?: string | undefined);
+}
+export type AskInput = {
+    sessionId: string;
+    permission: string;
+    patterns: string[];
+    metadata?: unknown;
+    always?: string[];
+    tool?: {
+        messageId: string;
+        callId: string;
+    };
+};
+export type PermissionEngineOptions = {
+    /** Called after a request is created; typically publishes permission.asked. */
+    onAsked?: (request: PermissionRequest) => void | Promise<void>;
+    /** Called when a request resolves; typically publishes permission.replied. */
+    onReplied?: (request: PermissionRequest, reply: Reply) => void | Promise<void>;
+    /** Persist a session-scoped rule produced by an "always" reply. */
+    onSessionRuleAdded?: (sessionId: string, rule: {
+        permission: string;
+        pattern: string;
+        action: Action;
+    }) => void | Promise<void>;
+};
+export declare class PermissionEngine {
+    private readonly sessionId;
+    private readonly options;
+    /** Rulesets in ascending precedence: built-in defaults → agent preset → session. */
+    private readonly rulesets;
+    private readonly sessionRules;
+    private readonly pending;
+    private disposed;
+    /** 临时允许缓存：once 批准后同一 run 内相同模式直接放行（F1，避免 Agent
+     *  二次调用相同命令时重复打断用户）。run 结束（dispose）时清空，下次 run
+     *  重新询问。键 = permission + pattern（bash 的 pattern 即命令原文）。 */
+    private readonly onceAllowed;
+    constructor(sessionId: string, baseRulesets: Ruleset[], sessionRules?: Ruleset, options?: PermissionEngineOptions);
+    private onceKey;
+    evaluate(permission: string, pattern: string): Action;
+    /** Snapshot of the effective session rules (for persistence on reply "always"). */
+    get sessionRuleset(): Ruleset;
+    revoke(permission: string, patterns: string[]): boolean;
+    get pendingRequests(): PermissionRequest[];
+    ask(input: AskInput): Promise<Reply>;
+    /** Resolves a pending request. Returns false when the id is unknown (already
+     *  resolved or session restarted — callers map that to a 404/conflict).
+     *
+     *  Harness-course retrofit（tutorial-harness 08，OpenCode 拒绝级联）：用户拒绝一个
+     *  请求时，同会话排队中的其他待批请求一并拒绝——用户说“不”的时候，
+     *  不该让后面的请求继续敲门。批准不连坐，拒绝连坐。 */
+    reply(requestId: string, reply: Reply, feedback?: string): boolean;
+    /** Rejects everything still pending — used on abort and process teardown so
+     *  tool calls never hang forever (spec §5.4: restart semantics). Also clears
+     *  the once-allowed cache so the next run asks again. */
+    dispose(reason?: string): void;
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/core/permission/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/permission/engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,MAAM,EAAE,KAAK,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAEpF;;;;;;;;;GASG;AAEH,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C,CAAC;AAEF,qBAAa,aAAc,SAAQ,KAAK;IAGpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM;gBAD1B,OAAO,EAAE,MAAM,EACN,QAAQ,CAAC,EAAE,MAAM,YAAA;CAK7B;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C,CAAC;AAOF,MAAM,MAAM,uBAAuB,GAAG;IACpC,+EAA+E;IAC/E,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,8EAA8E;IAC9E,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,mEAAmE;IACnE,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjI,CAAC;AAEF,qBAAa,gBAAgB;IAYzB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAG1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAd1B,oFAAoF;IACpF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAY;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAS;IACzB;;+DAE2D;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;gBAG9B,SAAS,EAAE,MAAM,EAClC,YAAY,EAAE,OAAO,EAAE,EACvB,YAAY,GAAE,OAAY,EACT,OAAO,GAAE,uBAA4B;IAMxD,OAAO,CAAC,OAAO;IAIf,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAIrD,mFAAmF;IACnF,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO;IAQvD,IAAI,eAAe,IAAI,iBAAiB,EAAE,CAEzC;IAEK,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC;IAqD1C;;;;;mCAK+B;IAC/B,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAelE;;6DAEyD;IACzD,OAAO,CAAC,MAAM,SAAmB,GAAG,IAAI;CAQzC"}