abtars 0.2.1-alpha.9 → 0.2.2

package/bundle/action-gate-DYV2XQBP.js

@@ -0,0 +1,191 @@
+#!/usr/bin/env node
+ import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
+import {
+  init_logger,
+  logError,
+  logInfo,
+  logWarn
+} from "./chunk-GUTRAMK3.js";
+import "./chunk-WW5F2DCO.js";
+import "./chunk-7K2YZTLD.js";
+
+// src/components/action-gate.ts
+init_logger();
+import { randomBytes } from "node:crypto";
+import { readFileSync, writeFileSync, mkdirSync, appendFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+var TAG = "action-gate";
+var ActionGate = class {
+  tokens = /* @__PURE__ */ new Map();
+  pending = /* @__PURE__ */ new Map();
+  rules = [];
+  rulesPath;
+  auditPath;
+  notify = null;
+  constructor(authDir) {
+    this.rulesPath = join(authDir, "rules.json");
+    this.auditPath = join(authDir, "audit.jsonl");
+    mkdirSync(authDir, { recursive: true });
+    this.loadRules();
+  }
+  setNotify(fn) {
+    this.notify = fn;
+  }
+  /** Check if a rule already allows/denies this action. */
+  checkRules(category, pattern) {
+    for (const rule of this.rules) {
+      if (rule.category !== category) continue;
+      if (rule.pattern === "*" || rule.pattern === pattern) {
+        return rule.action;
+      }
+    }
+    return null;
+  }
+  /**
+   * Request authorization for a privileged action.
+   * Returns true if granted, false if denied/timed out.
+   */
+  async requestAuth(category, detail) {
+    const rule = this.checkRules(category, detail);
+    if (rule === "allow") {
+      this.audit(category, detail, "allowed-by-rule");
+      return true;
+    }
+    if (rule === "deny") {
+      this.audit(category, detail, "denied-by-rule");
+      return false;
+    }
+    if (!this.notify) {
+      logWarn(TAG, `No notify function \u2014 auto-denying ${category}: ${detail.slice(0, 80)}`);
+      this.audit(category, detail, "denied-no-notify");
+      return false;
+    }
+    const requestId = randomBytes(8).toString("hex");
+    const message = this.formatMessage(category, detail);
+    return new Promise((resolve) => {
+      const timer = setTimeout(() => {
+        this.pending.delete(requestId);
+        logWarn(TAG, `Auth request timed out: ${category} ${detail.slice(0, 60)}`);
+        this.audit(category, detail, "denied-timeout");
+        resolve(false);
+      }, 12e4);
+      const reminderTimer = setTimeout(() => {
+        const req = this.pending.get(requestId);
+        if (req && !req.reminderSent) {
+          req.reminderSent = true;
+          this.notify?.("\u23F3 Still waiting for authorization...", []).catch(() => {
+          });
+        }
+      }, 6e4);
+      this.pending.set(requestId, { id: requestId, category, detail, resolve: (granted) => {
+        clearTimeout(timer);
+        clearTimeout(reminderTimer);
+        this.pending.delete(requestId);
+        resolve(granted);
+      }, timer, reminderSent: false });
+      this.notify(message, [
+        { text: "\u2705 Allow once", data: `auth:${requestId}:once` },
+        { text: "\u{1F513} Always allow", data: `auth:${requestId}:always` },
+        { text: "\u274C Deny", data: `auth:${requestId}:deny` }
+      ]).catch((err) => {
+        logError(TAG, `Failed to send auth request: ${err}`);
+        clearTimeout(timer);
+        clearTimeout(reminderTimer);
+        this.pending.delete(requestId);
+        this.audit(category, detail, "denied-send-failed");
+        resolve(false);
+      });
+    });
+  }
+  /** Handle callback from Telegram button press. */
+  handleCallback(data) {
+    const match = data.match(/^auth:([a-f0-9]+):(once|always|deny)$/);
+    if (!match) return false;
+    const [, requestId, action] = match;
+    const req = this.pending.get(requestId);
+    if (!req) return false;
+    if (action === "once") {
+      this.audit(req.category, req.detail, "allowed-once");
+      req.resolve(true);
+    } else if (action === "always") {
+      this.storeRule(req.category, req.detail, "allow");
+      this.audit(req.category, req.detail, "allowed-always");
+      req.resolve(true);
+    } else {
+      this.audit(req.category, req.detail, "denied");
+      req.resolve(false);
+    }
+    return true;
+  }
+  /** Generate a one-use token for external CLI callers. */
+  generateToken(category, pattern) {
+    const id = randomBytes(16).toString("hex");
+    this.tokens.set(id, {
+      id,
+      category,
+      pattern,
+      expiresAt: Date.now() + 12e4,
+      consumed: false
+    });
+    return id;
+  }
+  /** Validate and consume a token. */
+  validateToken(tokenId) {
+    const token = this.tokens.get(tokenId);
+    if (!token) return false;
+    if (token.consumed || Date.now() > token.expiresAt) {
+      this.tokens.delete(tokenId);
+      return false;
+    }
+    token.consumed = true;
+    this.tokens.delete(tokenId);
+    return true;
+  }
+  storeRule(category, pattern, action) {
+    this.rules.push({ category, pattern, action, createdAt: (/* @__PURE__ */ new Date()).toISOString() });
+    writeFileSync(this.rulesPath, JSON.stringify({ rules: this.rules }, null, 2) + "\n");
+    logInfo(TAG, `Stored rule: ${action} ${category}:${pattern}`);
+  }
+  loadRules() {
+    if (!existsSync(this.rulesPath)) {
+      this.rules = [];
+      return;
+    }
+    try {
+      const data = JSON.parse(readFileSync(this.rulesPath, "utf-8"));
+      this.rules = data.rules ?? [];
+    } catch {
+      this.rules = [];
+    }
+  }
+  audit(category, detail, outcome) {
+    const entry = JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), category, detail: detail.slice(0, 200), outcome });
+    try {
+      appendFileSync(this.auditPath, entry + "\n");
+    } catch {
+    }
+  }
+  formatMessage(category, detail) {
+    switch (category) {
+      case "secret-recall":
+        return `\u{1F510} Agent wants SECRET memory:
+"${detail.slice(0, 100)}"
+
+Authorize?`;
+      case "bash-auth":
+        return `\u26A0\uFE0F Agent wants to run:
+\`${detail.slice(0, 200)}\`
+
+Authorize?`;
+      default:
+        return `\u{1F512} Agent requests: ${category}
+${detail.slice(0, 150)}
+
+Authorize?`;
+    }
+  }
+};
+export {
+  ActionGate
+};
+//# sourceMappingURL=action-gate-DYV2XQBP.js.map

package/bundle/action-gate-DYV2XQBP.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/components/action-gate.ts"],
+  "sourcesContent": ["/**\n * action-gate.ts \u2014 Out-of-band authorization for privileged actions.\n * Agent requests a privileged action \u2192 Telegram inline keyboard to master \u2192 proceed/deny.\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { readFileSync, writeFileSync, mkdirSync, appendFileSync, existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { logInfo, logWarn, logError } from \"./logger.js\";\n\nconst TAG = \"action-gate\";\n\nexport interface AuthToken {\n  id: string;\n  category: string;\n  pattern: string;\n  expiresAt: number;\n  consumed: boolean;\n}\n\nexport interface AuthRule {\n  category: string;\n  pattern: string;\n  action: \"allow\" | \"deny\";\n  createdAt: string;\n}\n\nexport interface AuthRequest {\n  id: string;\n  category: string;\n  detail: string;\n  resolve: (granted: boolean) => void;\n  timer: ReturnType<typeof setTimeout>;\n  reminderSent: boolean;\n}\n\nexport type NotifyFn = (text: string, buttons: Array<{ text: string; data: string }>) => Promise<void>;\n\nexport class ActionGate {\n  private tokens = new Map<string, AuthToken>();\n  private pending = new Map<string, AuthRequest>();\n  private rules: AuthRule[] = [];\n  private rulesPath: string;\n  private auditPath: string;\n  private notify: NotifyFn | null = null;\n\n  constructor(authDir: string) {\n    this.rulesPath = join(authDir, \"rules.json\");\n    this.auditPath = join(authDir, \"audit.jsonl\");\n    mkdirSync(authDir, { recursive: true });\n    this.loadRules();\n  }\n\n  setNotify(fn: NotifyFn): void {\n    this.notify = fn;\n  }\n\n  /** Check if a rule already allows/denies this action. */\n  checkRules(category: string, pattern: string): \"allow\" | \"deny\" | null {\n    for (const rule of this.rules) {\n      if (rule.category !== category) continue;\n      if (rule.pattern === \"*\" || rule.pattern === pattern) {\n        return rule.action;\n      }\n    }\n    return null;\n  }\n\n  /**\n   * Request authorization for a privileged action.\n   * Returns true if granted, false if denied/timed out.\n   */\n  async requestAuth(category: string, detail: string): Promise<boolean> {\n    // Check persistent rules first\n    const rule = this.checkRules(category, detail);\n    if (rule === \"allow\") {\n      this.audit(category, detail, \"allowed-by-rule\");\n      return true;\n    }\n    if (rule === \"deny\") {\n      this.audit(category, detail, \"denied-by-rule\");\n      return false;\n    }\n\n    // No rule \u2014 ask master via Telegram\n    if (!this.notify) {\n      logWarn(TAG, `No notify function \u2014 auto-denying ${category}: ${detail.slice(0, 80)}`);\n      this.audit(category, detail, \"denied-no-notify\");\n      return false;\n    }\n\n    const requestId = randomBytes(8).toString(\"hex\");\n    const message = this.formatMessage(category, detail);\n\n    return new Promise<boolean>((resolve) => {\n      const timer = setTimeout(() => {\n        this.pending.delete(requestId);\n        logWarn(TAG, `Auth request timed out: ${category} ${detail.slice(0, 60)}`);\n        this.audit(category, detail, \"denied-timeout\");\n        resolve(false);\n      }, 120_000);\n\n      // 60s reminder\n      const reminderTimer = setTimeout(() => {\n        const req = this.pending.get(requestId);\n        if (req && !req.reminderSent) {\n          req.reminderSent = true;\n          this.notify?.(\"\u23F3 Still waiting for authorization...\", []).catch(() => {});\n        }\n      }, 60_000);\n\n      this.pending.set(requestId, { id: requestId, category, detail, resolve: (granted) => {\n        clearTimeout(timer);\n        clearTimeout(reminderTimer);\n        this.pending.delete(requestId);\n        resolve(granted);\n      }, timer, reminderSent: false });\n\n      this.notify!(message, [\n        { text: \"\u2705 Allow once\", data: `auth:${requestId}:once` },\n        { text: \"\uD83D\uDD13 Always allow\", data: `auth:${requestId}:always` },\n        { text: \"\u274C Deny\", data: `auth:${requestId}:deny` },\n      ]).catch((err) => {\n        logError(TAG, `Failed to send auth request: ${err}`);\n        clearTimeout(timer);\n        clearTimeout(reminderTimer);\n        this.pending.delete(requestId);\n        this.audit(category, detail, \"denied-send-failed\");\n        resolve(false);\n      });\n    });\n  }\n\n  /** Handle callback from Telegram button press. */\n  handleCallback(data: string): boolean {\n    const match = data.match(/^auth:([a-f0-9]+):(once|always|deny)$/);\n    if (!match) return false;\n\n    const [, requestId, action] = match;\n    const req = this.pending.get(requestId!);\n    if (!req) return false;\n\n    if (action === \"once\") {\n      this.audit(req.category, req.detail, \"allowed-once\");\n      req.resolve(true);\n    } else if (action === \"always\") {\n      this.storeRule(req.category, req.detail, \"allow\");\n      this.audit(req.category, req.detail, \"allowed-always\");\n      req.resolve(true);\n    } else {\n      this.audit(req.category, req.detail, \"denied\");\n      req.resolve(false);\n    }\n    return true;\n  }\n\n  /** Generate a one-use token for external CLI callers. */\n  generateToken(category: string, pattern: string): string {\n    const id = randomBytes(16).toString(\"hex\");\n    this.tokens.set(id, {\n      id,\n      category,\n      pattern,\n      expiresAt: Date.now() + 120_000,\n      consumed: false,\n    });\n    return id;\n  }\n\n  /** Validate and consume a token. */\n  validateToken(tokenId: string): boolean {\n    const token = this.tokens.get(tokenId);\n    if (!token) return false;\n    if (token.consumed || Date.now() > token.expiresAt) {\n      this.tokens.delete(tokenId);\n      return false;\n    }\n    token.consumed = true;\n    this.tokens.delete(tokenId);\n    return true;\n  }\n\n  private storeRule(category: string, pattern: string, action: \"allow\" | \"deny\"): void {\n    this.rules.push({ category, pattern, action, createdAt: new Date().toISOString() });\n    writeFileSync(this.rulesPath, JSON.stringify({ rules: this.rules }, null, 2) + \"\\n\");\n    logInfo(TAG, `Stored rule: ${action} ${category}:${pattern}`);\n  }\n\n  private loadRules(): void {\n    if (!existsSync(this.rulesPath)) { this.rules = []; return; }\n    try {\n      const data = JSON.parse(readFileSync(this.rulesPath, \"utf-8\"));\n      this.rules = data.rules ?? [];\n    } catch { this.rules = []; }\n  }\n\n  private audit(category: string, detail: string, outcome: string): void {\n    const entry = JSON.stringify({ ts: new Date().toISOString(), category, detail: detail.slice(0, 200), outcome });\n    try { appendFileSync(this.auditPath, entry + \"\\n\"); } catch { /* best effort */ }\n  }\n\n  private formatMessage(category: string, detail: string): string {\n    switch (category) {\n      case \"secret-recall\": return `\uD83D\uDD10 Agent wants SECRET memory:\\n\"${detail.slice(0, 100)}\"\\n\\nAuthorize?`;\n      case \"bash-auth\": return `\u26A0\uFE0F Agent wants to run:\\n\\`${detail.slice(0, 200)}\\`\\n\\nAuthorize?`;\n      default: return `\uD83D\uDD12 Agent requests: ${category}\\n${detail.slice(0, 150)}\\n\\nAuthorize?`;\n    }\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;AAQA;AAHA,SAAS,mBAAmB;AAC5B,SAAS,cAAc,eAAe,WAAW,gBAAgB,kBAAkB;AACnF,SAAS,YAAY;AAGrB,IAAM,MAAM;AA4BL,IAAM,aAAN,MAAiB;AAAA,EACd,SAAS,oBAAI,IAAuB;AAAA,EACpC,UAAU,oBAAI,IAAyB;AAAA,EACvC,QAAoB,CAAC;AAAA,EACrB;AAAA,EACA;AAAA,EACA,SAA0B;AAAA,EAElC,YAAY,SAAiB;AAC3B,SAAK,YAAY,KAAK,SAAS,YAAY;AAC3C,SAAK,YAAY,KAAK,SAAS,aAAa;AAC5C,cAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,UAAU,IAAoB;AAC5B,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA,EAGA,WAAW,UAAkB,SAA0C;AACrE,eAAW,QAAQ,KAAK,OAAO;AAC7B,UAAI,KAAK,aAAa,SAAU;AAChC,UAAI,KAAK,YAAY,OAAO,KAAK,YAAY,SAAS;AACpD,eAAO,KAAK;AAAA,MACd;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,YAAY,UAAkB,QAAkC;AAEpE,UAAM,OAAO,KAAK,WAAW,UAAU,MAAM;AAC7C,QAAI,SAAS,SAAS;AACpB,WAAK,MAAM,UAAU,QAAQ,iBAAiB;AAC9C,aAAO;AAAA,IACT;AACA,QAAI,SAAS,QAAQ;AACnB,WAAK,MAAM,UAAU,QAAQ,gBAAgB;AAC7C,aAAO;AAAA,IACT;AAGA,QAAI,CAAC,KAAK,QAAQ;AAChB,cAAQ,KAAK,0CAAqC,QAAQ,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,EAAE;AACpF,WAAK,MAAM,UAAU,QAAQ,kBAAkB;AAC/C,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,YAAY,CAAC,EAAE,SAAS,KAAK;AAC/C,UAAM,UAAU,KAAK,cAAc,UAAU,MAAM;AAEnD,WAAO,IAAI,QAAiB,CAAC,YAAY;AACvC,YAAM,QAAQ,WAAW,MAAM;AAC7B,aAAK,QAAQ,OAAO,SAAS;AAC7B,gBAAQ,KAAK,2BAA2B,QAAQ,IAAI,OAAO,MAAM,GAAG,EAAE,CAAC,EAAE;AACzE,aAAK,MAAM,UAAU,QAAQ,gBAAgB;AAC7C,gBAAQ,KAAK;AAAA,MACf,GAAG,IAAO;AAGV,YAAM,gBAAgB,WAAW,MAAM;AACrC,cAAM,MAAM,KAAK,QAAQ,IAAI,SAAS;AACtC,YAAI,OAAO,CAAC,IAAI,cAAc;AAC5B,cAAI,eAAe;AACnB,eAAK,SAAS,6CAAwC,CAAC,CAAC,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QAC1E;AAAA,MACF,GAAG,GAAM;AAET,WAAK,QAAQ,IAAI,WAAW,EAAE,IAAI,WAAW,UAAU,QAAQ,SAAS,CAAC,YAAY;AACnF,qBAAa,KAAK;AAClB,qBAAa,aAAa;AAC1B,aAAK,QAAQ,OAAO,SAAS;AAC7B,gBAAQ,OAAO;AAAA,MACjB,GAAG,OAAO,cAAc,MAAM,CAAC;AAE/B,WAAK,OAAQ,SAAS;AAAA,QACpB,EAAE,MAAM,qBAAgB,MAAM,QAAQ,SAAS,QAAQ;AAAA,QACvD,EAAE,MAAM,0BAAmB,MAAM,QAAQ,SAAS,UAAU;AAAA,QAC5D,EAAE,MAAM,eAAU,MAAM,QAAQ,SAAS,QAAQ;AAAA,MACnD,CAAC,EAAE,MAAM,CAAC,QAAQ;AAChB,iBAAS,KAAK,gCAAgC,GAAG,EAAE;AACnD,qBAAa,KAAK;AAClB,qBAAa,aAAa;AAC1B,aAAK,QAAQ,OAAO,SAAS;AAC7B,aAAK,MAAM,UAAU,QAAQ,oBAAoB;AACjD,gBAAQ,KAAK;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,eAAe,MAAuB;AACpC,UAAM,QAAQ,KAAK,MAAM,uCAAuC;AAChE,QAAI,CAAC,MAAO,QAAO;AAEnB,UAAM,CAAC,EAAE,WAAW,MAAM,IAAI;AAC9B,UAAM,MAAM,KAAK,QAAQ,IAAI,SAAU;AACvC,QAAI,CAAC,IAAK,QAAO;AAEjB,QAAI,WAAW,QAAQ;AACrB,WAAK,MAAM,IAAI,UAAU,IAAI,QAAQ,cAAc;AACnD,UAAI,QAAQ,IAAI;AAAA,IAClB,WAAW,WAAW,UAAU;AAC9B,WAAK,UAAU,IAAI,UAAU,IAAI,QAAQ,OAAO;AAChD,WAAK,MAAM,IAAI,UAAU,IAAI,QAAQ,gBAAgB;AACrD,UAAI,QAAQ,IAAI;AAAA,IAClB,OAAO;AACL,WAAK,MAAM,IAAI,UAAU,IAAI,QAAQ,QAAQ;AAC7C,UAAI,QAAQ,KAAK;AAAA,IACnB;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,cAAc,UAAkB,SAAyB;AACvD,UAAM,KAAK,YAAY,EAAE,EAAE,SAAS,KAAK;AACzC,SAAK,OAAO,IAAI,IAAI;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,KAAK,IAAI,IAAI;AAAA,MACxB,UAAU;AAAA,IACZ,CAAC;AACD,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,cAAc,SAA0B;AACtC,UAAM,QAAQ,KAAK,OAAO,IAAI,OAAO;AACrC,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,MAAM,YAAY,KAAK,IAAI,IAAI,MAAM,WAAW;AAClD,WAAK,OAAO,OAAO,OAAO;AAC1B,aAAO;AAAA,IACT;AACA,UAAM,WAAW;AACjB,SAAK,OAAO,OAAO,OAAO;AAC1B,WAAO;AAAA,EACT;AAAA,EAEQ,UAAU,UAAkB,SAAiB,QAAgC;AACnF,SAAK,MAAM,KAAK,EAAE,UAAU,SAAS,QAAQ,YAAW,oBAAI,KAAK,GAAE,YAAY,EAAE,CAAC;AAClF,kBAAc,KAAK,WAAW,KAAK,UAAU,EAAE,OAAO,KAAK,MAAM,GAAG,MAAM,CAAC,IAAI,IAAI;AACnF,YAAQ,KAAK,gBAAgB,MAAM,IAAI,QAAQ,IAAI,OAAO,EAAE;AAAA,EAC9D;AAAA,EAEQ,YAAkB;AACxB,QAAI,CAAC,WAAW,KAAK,SAAS,GAAG;AAAE,WAAK,QAAQ,CAAC;AAAG;AAAA,IAAQ;AAC5D,QAAI;AACF,YAAM,OAAO,KAAK,MAAM,aAAa,KAAK,WAAW,OAAO,CAAC;AAC7D,WAAK,QAAQ,KAAK,SAAS,CAAC;AAAA,IAC9B,QAAQ;AAAE,WAAK,QAAQ,CAAC;AAAA,IAAG;AAAA,EAC7B;AAAA,EAEQ,MAAM,UAAkB,QAAgB,SAAuB;AACrE,UAAM,QAAQ,KAAK,UAAU,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,GAAG,UAAU,QAAQ,OAAO,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC;AAC9G,QAAI;AAAE,qBAAe,KAAK,WAAW,QAAQ,IAAI;AAAA,IAAG,QAAQ;AAAA,IAAoB;AAAA,EAClF;AAAA,EAEQ,cAAc,UAAkB,QAAwB;AAC9D,YAAQ,UAAU;AAAA,MAChB,KAAK;AAAiB,eAAO;AAAA,GAAmC,OAAO,MAAM,GAAG,GAAG,CAAC;AAAA;AAAA;AAAA,MACpF,KAAK;AAAa,eAAO;AAAA,IAA6B,OAAO,MAAM,GAAG,GAAG,CAAC;AAAA;AAAA;AAAA,MAC1E;AAAS,eAAO,6BAAsB,QAAQ;AAAA,EAAK,OAAO,MAAM,GAAG,GAAG,CAAC;AAAA;AAAA;AAAA,IACzE;AAAA,EACF;AACF;",
+  "names": []
+}

package/bundle/{agent-api-rate-limit-C25WGSFF.js → agent-api-rate-limit-R2OFAQ3N.js}

@@ -3,9 +3,9 @@
 import {
   getEnv,
   init_env_schema
-} from "./chunk-PZE3J7ER.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+} from "./chunk-3OXQWII3.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 
 // src/components/agent-api-rate-limit.ts
@@ -36,4 +36,4 @@ function checkRateLimit(caller) {
 export {
   checkRateLimit
 };
-//# sourceMappingURL=agent-api-rate-limit-C25WGSFF.js.map
+//# sourceMappingURL=agent-api-rate-limit-R2OFAQ3N.js.map

package/bundle/{agent-registry-SYUFNSVB.js → agent-registry-5VL5KI6U.js}

@@ -3,17 +3,17 @@
 import {
   createAgentTransport,
   createSubagentTransport
-} from "./chunk-ZVDVNSXK.js";
-import "./chunk-RV54J75Q.js";
-import "./chunk-UDZIZB5F.js";
+} from "./chunk-HAS5NEK7.js";
+import "./chunk-PKHYCNTT.js";
+import "./chunk-RTL7HO3N.js";
 import "./chunk-MZWMYN4O.js";
-import "./chunk-EX2SRTUE.js";
-import "./chunk-PZE3J7ER.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+import "./chunk-3OXQWII3.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 export {
   createAgentTransport,
   createSubagentTransport
 };
-//# sourceMappingURL=agent-registry-SYUFNSVB.js.map
+//# sourceMappingURL=agent-registry-5VL5KI6U.js.map

package/bundle/agent-registry-PIS5XJHX.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+ import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
+import {
+  createAgentTransport,
+  createSubagentTransport
+} from "./chunk-7WFE2JI5.js";
+import "./chunk-PKHYCNTT.js";
+import "./chunk-RTL7HO3N.js";
+import "./chunk-MZWMYN4O.js";
+import "./chunk-3OXQWII3.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-WW5F2DCO.js";
+import "./chunk-7K2YZTLD.js";
+export {
+  createAgentTransport,
+  createSubagentTransport
+};
+//# sourceMappingURL=agent-registry-PIS5XJHX.js.map

package/bundle/{bridge-lock-transport-HO545SBK.js → bridge-lock-transport-N6OGDOSE.js}

@@ -15,11 +15,11 @@ import {
   writeRestartReason,
   writeRestartRequested,
   writeSleepStatus
-} from "./chunk-UDZIZB5F.js";
+} from "./chunk-RTL7HO3N.js";
 import "./chunk-MZWMYN4O.js";
-import "./chunk-EX2SRTUE.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 export {
   appendRestartTimestamp,
@@ -37,4 +37,4 @@ export {
   writeRestartRequested,
   writeSleepStatus
 };
-//# sourceMappingURL=bridge-lock-transport-HO545SBK.js.map
+//# sourceMappingURL=bridge-lock-transport-N6OGDOSE.js.map

package/bundle/{browse-delivery-VTLEAVYA.js → browse-delivery-DXGMDMXA.js}

@@ -3,16 +3,17 @@
 import {
   checkBrowseTasks,
   deliverBrowseResult
-} from "./chunk-LDKSCXGL.js";
-import "./chunk-HEHD3GG5.js";
+} from "./chunk-DHPFI7OF.js";
+import "./chunk-ITB2K6LI.js";
 import "./chunk-TBLYGCPQ.js";
-import "./chunk-GPL57SRN.js";
-import "./chunk-EX2SRTUE.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+import "./chunk-H7RX7UCR.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-DGS7J4P6.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 export {
   checkBrowseTasks,
   deliverBrowseResult
 };
-//# sourceMappingURL=browse-delivery-VTLEAVYA.js.map
+//# sourceMappingURL=browse-delivery-DXGMDMXA.js.map

package/bundle/{browser-REIXOJ6S.js → browser-QMYGSP5W.js}

@@ -2,18 +2,19 @@
  import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
 import {
   register
-} from "./chunk-KJOCXWJ5.js";
-import "./chunk-LDKSCXGL.js";
-import "./chunk-HEHD3GG5.js";
+} from "./chunk-RITEGAW6.js";
+import "./chunk-DHPFI7OF.js";
+import "./chunk-ITB2K6LI.js";
 import "./chunk-TBLYGCPQ.js";
-import "./chunk-GPL57SRN.js";
-import "./chunk-KSEIWT4T.js";
-import "./chunk-EX2SRTUE.js";
-import "./chunk-PZE3J7ER.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+import "./chunk-H7RX7UCR.js";
+import "./chunk-JFKOPNKL.js";
+import "./chunk-3OXQWII3.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-DGS7J4P6.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 export {
   register
 };
-//# sourceMappingURL=browser-REIXOJ6S.js.map
+//# sourceMappingURL=browser-QMYGSP5W.js.map

package/bundle/{capability-ILW3D5HS.js → capability-733TLH4W.js}

@@ -4,15 +4,15 @@ import {
   createCapabilityApi,
   createCapabilityRegistry,
   discoverCapabilities
-} from "./chunk-OOKLEC6V.js";
-import "./chunk-EX2SRTUE.js";
-import "./chunk-PZE3J7ER.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+} from "./chunk-FY3QUO2L.js";
+import "./chunk-3OXQWII3.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 export {
   createCapabilityApi,
   createCapabilityRegistry,
   discoverCapabilities
 };
-//# sourceMappingURL=capability-ILW3D5HS.js.map
+//# sourceMappingURL=capability-733TLH4W.js.map