actoviq-agent-sdk 0.4.7 → 0.4.9

package/CHANGELOG.md

@@ -4,6 +4,57 @@ All notable changes to this project will be documented in this file.
 
 The format is based on Keep a Changelog, with automated updates from GitHub Releases.
 
+## Unreleased
+
+## v0.4.9 - 2026-07-30
+
+### Platform
+
+- **Policy / sandbox / hooks** — host/user/project policy resolution, OS sandbox adapters (Linux bubblewrap / macOS sandbox-exec / Windows degraded), and typed lifecycle hooks.
+- **Checkpoints / goals / session graph** — durable file+conversation checkpoints, goal contracts, and session fork/tree/catalog primitives.
+- **App-server / remote / VS Code** — stdio/WebSocket JSON app-server, file-backed remote job leases, and a VS Code extension client.
+- **Plugin packages** — versioned installable plugins with integrity-required trust grants.
+- **Code intel / updates / worktrees / proposals** — LSP tools, app update service, task worktree coordination, context rules, review/diff stores, memory and team proposals.
+
+### GUI
+
+- Upgrade the bottom-right FAB to a global **Assistant**: always visible, chat icon, Global/Project scope. Global mode lists project briefs and can change settings/plugins/bridge/automation/MCP (no source Write/Edit/Bash); Project mode keeps Manager update/plan/issues.
+- Remove the redundant sidebar **New chat** button; start chats from project detail **+ New conversation**.
+- Fix opening local workspace paths: strip quotes / `file://`, require directories, surface API errors in the Open workspace dialog, roll back on failure, and allow credentialless opens (External CLI).
+- Remove Settings → **Automation** / **Browser** / **Computer control**. Configure schedules in the main **Automation** region; configure Playwright and Computer Use under **Customize → Plugins**.
+
+### Managed plugins
+
+- Add **Image Generation**, **Video Generation**, and **3D Generation** managed plugins with multi-profile / multi-key configuration (Gemini Nano Banana, GPT Image 2, Qwen-Image; Seedance, Hailuo, HappyHorse; Meshy, Tripo, Rodin).
+- Agent tools `generate_image` / `generate_video` / `generate_mesh` inject Qwen-style professional prompt-rewrite guidance and let the model choose among configured profiles.
+- Customize → Plugins includes a profile list editor with **Get API Key** links to each provider console.
+
+### Bridge / tests / CI
+
+- Add regression coverage for consecutive `ActoviqBridgeSession.stream()` calls so the second turn uses `--resume` (GitHub #8).
+- Harden GUI publish update-metadata validation (`workflow_dispatch` may rebuild an existing tag with the current builder).
+
+### Notes
+
+- This release stays on the **0.4.x** line. **1.0.0 is not published yet.**
+- Windows shell sandbox remains best-effort/degraded; `enforcement: required` fails closed when OS isolation is unavailable.
+
+## v0.4.8 - 2026-07-27
+
+### Runtime / prompt cache
+
+- Keep conversation history **append-only** on the wire and in session compact: no sliding-window rewrite of historical `tool_result` content between ReAct turns or auto session compact (aligns with Claude Code third-party behavior).
+- Context pressure is handled by **full summary compact** (in-loop + session), not by nibbling earlier tool results. Default `apiMicrocompactClearToolResults` is now `false`.
+- Map DeepSeek `prompt_cache_hit_tokens` → `cache_read_input_tokens` for local usage / GUI reporting. DeepSeek Context Caching remains automatic on their side; Anthropic hosts still receive explicit `cache_control` breakpoints.
+
+### GUI / docs
+
+- Document that the desktop **Agent graph** orchestration UI remains **under active iteration and optimization** (not a stable product surface). Prefer `/team`, saved team definitions, and SDK `createTeam()` / graph runtime for production workflows.
+
+### Notes
+
+- This release stays on the **0.4.x** line. **1.0.0 is not published yet.**
+
 ## v0.4.7 - 2026-07-12
 
 ### GUI
@@ -14,7 +65,7 @@ The format is based on Keep a Changelog, with automated updates from GitHub Rele
 
 ### Still under development (not product-ready in 0.4.7)
 
-- Main **Agent** / team-graph region UI
+- Main **Agent** / team-graph / **Agent graph orchestration UI** — still being iterated and optimized; do not treat as finished
 - Settings: **Profile**, **Browser**, **Computer control**, dedicated **Worktrees** tab
 - Keyboard shortcut remapping (reference list only)
 - Full 1.0 runtime/package surface (tracked as unreleased below)

package/README-zh.md

@@ -9,14 +9,16 @@
 
 文档站地址：https://deconbear.github.io/actoviq-agent-sdk/
 
-**Actoviq**（`0.4.x`）是 TypeScript agent SDK 与 agent-team 平台，含 TUI、GUI、Bridge 与多 agent 协作。未来的 **1.0** 线将稳定 package subpath 契约；该表面**尚未发布**。GUI 仍隐藏部分开发中面板（详见 `CHANGELOG.md` 的 0.4.7）。
+**Actoviq**（`0.4.x`）是 TypeScript agent SDK 与 agent-team 平台，含 TUI、GUI、Bridge 与多 agent 协作。未来的 **1.0** 线将稳定 package subpath 契约；该表面**尚未发布**。
+
+> **说明：** 桌面端 **Agent graph** 编排 UI（可视化团队 / 图编辑器）**仍在持续迭代与优化中**，交互与行为可能变化。生产工作流请优先使用 `/team`、已保存的 team 定义，以及 SDK 的 `createTeam()` / graph runtime。详见 `CHANGELOG.md`。
 
 受 Claude Code、Codex、Deepagents 等项目启发。Actoviq 保持独立，拥有自己的公开 API 与文档。
 
 ## 愿景
 
 - **多 agent**：子代理委派（Task 工具）、panel-analysis 团队、reviewer-auditor 对、动态 workflow —— agent 之间协作，而非单一的 ReAct 循环。
-- **多运行时状态管理**：bridge config 支持预配置多个后端（anthropic / openai / 任意兼容）的 apiKey + baseURL + model，命名切换，对话上下文在切换中保留（同一个 session 对象、同一份 transcript）。
+- **多运行时状态管理**：bridge config 明确区分两种模式。`Direct API` 在进程内调用 Anthropic/OpenAI 兼容接口；`External CLI` 则把已安装的 Claude Code、Codex、Pi、CodeWhale、Reasonix 或 Crush 作为子进程托管，并在 CLI 协议提供会话 ID 时保留原生 session 身份。
 - **model team 协作**：leader 将每轮分派给最佳 specialist（`/model router`），panel 成员并行调查并收敛，reviewer 只报告可验证的问题 —— team 是 agent 可调用的一等工具。
 
 ## 亮点
@@ -24,8 +26,8 @@
 - **Model Team** — `panel-analysis`（并行调查 + 收敛）和 `reviewer`（只报告可验证问题的审计者）。runtime-owned 成员池、流式 `TeamEvent`、成员 provider 配置，以及继承的权限/重试边界。
 - **Model Router / Leader-Dispatch** — 每轮由 leader 分派到最佳 specialist（任意模型/提供商），执行者自身也可召集 team。Profile 位于 `~/.actoviq/routers/`。
 - **Dynamic Workflows** — 显式信任等级的 JS 编排：trusted 兼容执行、隔离 local-process，或由 host 提供的远程/container 强 sandbox；local process 不宣传为对抗性多租户沙箱。
-- **Bridge（命名连接配置）** — 进程内运行时切换：预配置 `anthropic`/`openai` 后端，命名 + apiKey + baseURL + model，命名切换，多轮上下文保留。`/bridge config` 单页编辑器；`/bridge` 列出已保存配置；`/cost` 中按配置展示用量。
-- **桌面 GUI (`actoviq-gui`)** — Electron 聊天 UI：流式 transcript、对话历史、命令面板、设置、每工具权限提示。安全增强。
+- **Bridge（命名运行时配置）** — 可选 `Direct API` 做 provider/API 级复用，也可选 `External CLI` 直接启动已安装的 Claude Code、Codex、Pi、CodeWhale、Reasonix 或 Crush，继承各 CLI 的原生登录和配置、流式显示规范化后的工具与回答事件、终止后台任务，并浏览/恢复受支持的原生会话。单独填写的 key 只注入子进程，不写入 CLI 的凭据库；Pi、CodeWhale、Reasonix 与 Crush 会使用按配置隔离的持久会话目录，因此 key 模式重启后仍可读取历史，同时不会读取原生登录凭据。
+- **桌面 GUI (`actoviq-gui`)** — Electron 聊天 UI：流式 transcript、对话历史、命令面板、设置、每工具权限提示。安全增强。全局 **Assistant** FAB（Global/Project 作用域）。可视化 **Agent graph** 编排 UI 仍在迭代中，暂勿当作稳定产品面。
 - **TUI (`actoviq-tui`)** — 终端 UI，25+ 斜杠命令，Claude Code 风格 UX：`/team`、`/bridge`、`/plan`、`/hooks`、`/mcp`、`/review`、`/context`、`/cost`、`/doctor` 等。实时状态旋转器、滚动 transcript、todo 面板、项目/用户级权限对话框、子命令自动补全。
 - **计划模式 + hooks** — `EnterPlanMode`/`ExitPlanMode` 工具 + 计划文件；`settings.json` 中的 `PreToolUse`/`PostToolUse`/`SessionStart` hooks。
 - **Worktree 工具** — `EnterWorktree`/`ExitWorktree`，栈式 cwd，`.worktreeinclude`，PR checkout。
@@ -93,7 +95,7 @@ try {
 }
 ```
 
-0.x 应用可继续从 package root 或 `/compat` 导入 `createAgentSdk`。新应用应使用上述职责 subpath；迁移步骤见 [1.0 迁移指南](./docs/zh/09-sdk-v2-migration-guide.md)。
+0.x 应用可继续从 package root 或 `/compat` 导入 `createAgentSdk`；新应用应使用上述职责 subpath。
 
 运行仓库示例：
 
@@ -126,7 +128,7 @@ npx actoviq-tui [工作目录] [选项]
 #   --continue                 继续最近更新的会话
 ```
 
-特性与英文 README 一致，包括上下文管理、bridge config、计划模式、hooks、MCP、诊断等。
+特性与英文 README 一致，包括上下文管理（append-only 前缀以利于 DeepSeek 等自动缓存；超阈值走整段摘要 compact）、bridge config、计划模式、hooks、MCP、诊断等。六种 External CLI 都可使用 `/bridge status`、`/bridge background`、`/bridge runs` 和 `/bridge stop`；`/bridge history` 与 `/bridge resume` 在 TUI 和 GUI 中共享同一套校验逻辑，但原生历史/恢复能力仍取决于已安装 CLI 的协议与版本。
 
 ## 桌面 GUI (`actoviq-gui`)
 
@@ -135,6 +137,7 @@ npx actoviq-gui [工作目录] [选项]
 ```
 
 - Project 详情提供 `Document` / `Issues` 双 Tab。Issue 支持优先级、标签、验收标准、评论，以及受守卫保护的 `backlog → todo → in_progress → in_review/blocked → done` 生命周期。
+- **Agent graph 编排 UI**（GUI **Agent** 区域的可视化团队/图编辑器）**仍在持续迭代和优化中**，请勿当作已定稿产品面；稳定工作流请用已保存 team + `/team` / SDK API。
 - Settings → Models & routing 可创建 Agent Profile，将 bridge config 与模型绑定。`/issues start <id> [agent-profile]` 会先让 Project Manager 生成任务书，再创建关联会话；执行 agent 通过 `IssueReport` 汇报待审或阻塞状态。
 - Issue 与会话可双向跳转。Issue 默认保存在 `<data-root>/projects/<workspace-key>/issues.json`，也可切换到受保护的工作区文件 `.actoviq/issues.json`。
 - Settings → General 可将完整数据根目录迁移到空目录：复制并校验数据、写入 bootstrap 指针、重建 SDK/session store，并保留旧目录供手动清理。
@@ -162,11 +165,6 @@ npx actoviq-gui [工作目录] [选项]
 
 架构与运维文档：
 
-- [架构审计与实施规划](./docs/zh/08-sdk-architecture-audit-and-optimization-plan.md)
-- [1.0 迁移指南](./docs/zh/09-sdk-v2-migration-guide.md)
-- [支持、安全、SemVer 与 failure model](./docs/zh/10-support-security-semver-and-failure-model.md)
-- [JSON v1 → SQLite 迁移 Runbook](./docs/zh/11-json-v1-to-sqlite-migration-runbook.md)
-- [1.0 实施与端到端验收报告](./docs/zh/12-sdk-1.0-implementation-and-verification-report.md)
 - [安全报告政策](./SECURITY.md)
 
 ## 参与贡献

package/README.md

@@ -9,14 +9,16 @@
 
 Documentation site: https://deconbear.github.io/actoviq-agent-sdk/
 
-**Actoviq** (`0.4.x`) is a TypeScript agent SDK and agent-team platform with TUI, GUI, Bridge, and multi-agent collaboration. A future **1.0** line will stabilize package subpath contracts; that surface is **not published yet**. The GUI still hides some under-development panels (see `CHANGELOG.md` for 0.4.7).
+**Actoviq** (`0.4.x`) is a TypeScript agent SDK and agent-team platform with TUI, GUI, Bridge, and multi-agent collaboration. A future **1.0** line will stabilize package subpath contracts; that surface is **not published yet**.
+
+> **Note:** The desktop **Agent graph** orchestration UI (visual team / graph editor) is **still under active iteration and optimization** — expect UX and API changes. Prefer `/team`, saved team definitions, and the SDK `createTeam()` / graph runtime for production workflows today. See `CHANGELOG.md`.
 
 Inspired by Claude Code, Codex, Deepagents, and the broader agent ecosystem. Actoviq remains independent with its own public surface and documentation.
 
 ## Vision
 
 - **Multi-agent**: subagent delegation (Task tool), panel-analysis teams, reviewer-auditor pairs, dynamic workflows — agents collaborating, not just a single loop.
-- **Multi-runtime state management**: bridge configs let you pre-configure multiple backends (anthropic / openai / any-compatible) with apiKey + baseURL + model, switch by name mid-session, and the conversation context survives the switch (same session object, same transcript).
+- **Multi-runtime state management**: bridge configs have two explicit modes. `Direct API` calls Anthropic/OpenAI-compatible providers in-process; `External CLI` manages installed Claude Code, Codex, Pi, CodeWhale, Reasonix, or Crush runtimes as child processes and preserves native session identities when the CLI protocol exposes them.
 - **Model team collaboration**: leaders dispatch to specialists (`/model router`), panel members investigate in parallel with structured convergence, reviewers report only verifiable issues — teams as first-class tools the agent invokes.
 
 ## Highlights
@@ -24,8 +26,8 @@ Inspired by Claude Code, Codex, Deepagents, and the broader agent ecosystem. Act
 - **Model Team** — `panel-analysis` (parallel investigation + convergence) and `reviewer` (verifiable-issues-only auditor). Runtime-owned member pooling, streamed `TeamEvent`s, per-member provider config, and inherited permission/retry boundaries.
 - **Model Router / Leader-Dispatch** — a leader classifies each turn and dispatches it to the best specialist route (any model/provider), runs normally, and the executor may itself convene a team. Profiles in `~/.actoviq/routers/`.
 - **Dynamic Workflows** — JS script-based orchestration with explicit trust levels: trusted compatibility execution, isolated local-process execution, or a host-supplied remote/container sandbox for adversarial inputs.
-- **Bridge (named connection configs)** — in-process runtime switching: pre-configure `anthropic`/`openai` backends with name + apiKey + baseURL + model, switch by name mid-session, multi-turn context survives (same session). `/bridge config` single-page editor; `/bridge` lists saved configs; per-config usage tracking in `/cost`.
-- **Desktop GUI (`actoviq-gui`)** — Electron chat UI: streamed transcript, conversation history, command palette, settings, per-tool permission prompts. Security-hardened.
+- **Bridge (named runtime configs)** — choose `Direct API` for provider-level reuse, or `External CLI` to launch installed Claude Code, Codex, Pi, CodeWhale, Reasonix, or Crush; reuse each CLI's native login/config, stream normalized tool and assistant events, stop background work, and browse/resume supported native conversations. An explicit key override is injected only into the child and is not written to the CLI's credential store; Pi, CodeWhale, Reasonix, and Crush keep isolated per-config session profiles so that key-mode history survives restarts without reading the native login store.
+- **Desktop GUI (`actoviq-gui`)** — Electron chat UI: streamed transcript, conversation history, command palette, settings, per-tool permission prompts. Security-hardened. Global **Assistant** FAB (Global/Project scope). The visual **Agent graph** orchestration UI is shipping in-progress and continues to be iterated (not a stable product surface yet).
 - **TUI (`actoviq-tui`)** — Terminal UI with 25+ slash commands, Claude Code-style UX: `/team`, `/bridge`, `/plan`, `/hooks`, `/mcp`, `/review`, `/context`, `/cost`, `/doctor`, and more. Live status spinner, scrollback transcript, todo panel, permission dialogs with project/user scope, sub-command autocomplete.
 - **Plan mode + hooks** — `EnterPlanMode`/`ExitPlanMode` tools with plan file; user-configurable `PreToolUse`/`PostToolUse`/`SessionStart` hooks from `settings.json`.
 - **Worktree Tools** — `EnterWorktree`/`ExitWorktree` with stack-based cwd, `.worktreeinclude`, PR checkout.
@@ -94,7 +96,7 @@ try {
 }
 ```
 
-Existing 0.x applications may keep importing `createAgentSdk` from the package root or `/compat`. See the [1.0 migration guide](./docs/zh/09-sdk-v2-migration-guide.md); new applications should use the responsibility subpaths above.
+Existing 0.x applications may keep importing `createAgentSdk` from the package root or `/compat`; new applications should use the responsibility subpaths above.
 
 Run the repository examples with:
 
@@ -146,9 +148,9 @@ Features:
 - **Permission presets + per-tool scope** — `/permissions` switches between read-only/workspace/full/plan presets; always-allow rules persist with project or user scope.
 - **Mid-run steering** — keep typing while the agent works and press `Enter`: the message is queued and injected into the very next model request (shown as `⧗ queued`).
 - **Plan mode + hooks** — `/plan` enters plan mode (`EnterPlanMode`/`ExitPlanMode` tools, plan file); `PreToolUse`/`PostToolUse`/`SessionStart` hooks from settings.json; `/hooks` lists them.
-- **Bridge configs** — `/bridge config` manages named connection profiles (name + runtime + apiKey + baseURL + model); `/bridge` lists them; selecting one switches the active runtime in-process. Per-config usage in `/cost` and `/usage`.
+- **Bridge configs** — `/bridge config` manages named API or External CLI profiles for all six managed CLIs. `/bridge status`, `/bridge background`, `/bridge runs`, `/bridge stop`, `/bridge history`, and `/bridge resume` expose the same runtime lifecycle in the TUI and GUI; native history/resume remains subject to each installed CLI's protocol/version support.
 - **Diagnostics + inspection** — `/doctor` checks config health; `/context` inspects the context window; `/cost`/`/usage` track token + spend (per-config breakdown); `/review` reviews the git diff; `/stats` shows session stats.
-- **Context management built in** — the Hadamard SDK auto-compacts long sessions mid-run and reactively recovers when a provider rejects an oversized prompt; compactions surface as `∿ context compacted` notices.
+- **Context management built in** — the Hadamard SDK auto-compacts long sessions mid-run (full summary compact) and reactively recovers when a provider rejects an oversized prompt; notices surface as ∿ context compacted. History stays **append-only** between turns so automatic prefix caches (e.g. DeepSeek Context Caching) stay hot; Anthropic hosts still get explicit cache_control breakpoints. Oversized tool outputs are artifacted at write time rather than rewriting earlier messages.
 - **MCP management** — `/mcp add`/`/mcp remove` manage stdio + remote HTTP MCP servers, persisted to `~/.actoviq/mcp.json`.
 - **Image attachments** — `@<path>.png` tokens expand into image content blocks (in-process, read as base64).
 
@@ -181,6 +183,7 @@ It opens an Electron window backed by a localhost-only HTTP server. Features:
 - **Command palette + slash commands**, settings (provider / model / keys / appearance), workspace switching, and empty-chat cleanup
 - **Per-tool permission prompts** (queued so concurrent requests don't collide) and a token-usage readout
 - **Project Documents + Issues** — each Project detail page has `Document` and `Issues` tabs. Issues use the guarded `backlog → todo → in_progress → in_review/blocked → done` lifecycle, support priorities, labels, acceptance criteria, comments, and links back to their worker sessions.
+- **Agent graph orchestration UI** — visual team/graph editor lives in the GUI **Agent** region; **it is still being iterated and optimized** and should not be treated as a finished product surface. Prefer saved teams + `/team` / SDK APIs for stable workflows.
 - **Agent Profiles for issue dispatch** — Settings → Models & routing can bind a named profile to a saved bridge config and model. `/issues start <id> [agent-profile]` asks the Project Manager for a worker brief, starts a linked session without changing the globally active runtime, and requires the worker to report through `IssueReport`.
 - **Movable data root** — Settings → General can copy the complete Actoviq data root to an empty directory, validate it, write the bootstrap pointer, rebuild the SDK/session store, and retain the previous directory for manual cleanup.
 
@@ -215,11 +218,6 @@ Start with these examples:
 
 Architecture and operations:
 
-- [Architecture audit and implementation plan](./docs/zh/08-sdk-architecture-audit-and-optimization-plan.md)
-- [1.0 migration guide](./docs/zh/09-sdk-v2-migration-guide.md)
-- [Support, security, SemVer, and failure model](./docs/zh/10-support-security-semver-and-failure-model.md)
-- [JSON v1 to SQLite migration runbook](./docs/zh/11-json-v1-to-sqlite-migration-runbook.md)
-- [1.0 implementation and verification report](./docs/zh/12-sdk-1.0-implementation-and-verification-report.md)
 - [Security policy](./SECURITY.md)
 
 ## Contributing

package/SECURITY.md

@@ -16,7 +16,7 @@ Do not open a public issue for a suspected vulnerability. Use the repository's [
 
 Avoid including real credentials or private user data. If private reporting is unavailable, open a public issue containing no exploit details and ask a maintainer to establish a private channel.
 
-The maintainers will acknowledge receipt, validate severity, coordinate remediation and disclosure, and publish an advisory when appropriate. Response targets and the full threat/failure policy are documented in [docs/zh/10-support-security-semver-and-failure-model.md](docs/zh/10-support-security-semver-and-failure-model.md).
+The maintainers will acknowledge receipt, validate severity, coordinate remediation and disclosure, and publish an advisory when appropriate.
 
 ## Security boundaries
 

package/bin/actoviq-app-server.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import('../dist/src/app-server/cli.js').catch(error => {
+  console.error('Failed to start actoviq-app-server:', error);
+  process.exit(1);
+});

package/dist/src/app-server/appServer.d.ts

@@ -0,0 +1,14 @@
+import type { ActoviqAgentClient } from '../runtime/agentClient.js';
+import { type AppServerNotification, type AppServerRequest, type AppServerResponse } from './protocol.js';
+export type AppServerEmit = (notification: AppServerNotification) => void;
+export declare class AppServer {
+    private readonly sdk;
+    private readonly liveSessions;
+    constructor(sdk: ActoviqAgentClient);
+    handle(request: AppServerRequest, emit?: AppServerEmit): Promise<AppServerResponse>;
+    private dispatch;
+    private openSession;
+    private rememberSession;
+    private goalService;
+}
+//# sourceMappingURL=appServer.d.ts.map

package/dist/src/app-server/appServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appServer.d.ts","sourceRoot":"","sources":["../../../src/app-server/appServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAIpE,OAAO,EAA+B,KAAK,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvI,MAAM,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,qBAAqB,KAAK,IAAI,CAAC;AAI1E,qBAAa,SAAS;IAGR,OAAO,CAAC,QAAQ,CAAC,GAAG;IAFhC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmC;gBAEnC,GAAG,EAAE,kBAAkB;IAE9C,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAmB3E,QAAQ;YAiHR,WAAW;IAMzB,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,WAAW;CAGpB"}

package/dist/src/app-server/appServer.js

@@ -0,0 +1,228 @@
+import { GoalService } from '../goal/goalService.js';
+import { APP_SERVER_PROTOCOL_VERSION } from './protocol.js';
+const MAX_LIVE_SESSIONS = 32;
+export class AppServer {
+    sdk;
+    liveSessions = new Map();
+    constructor(sdk) {
+        this.sdk = sdk;
+    }
+    async handle(request, emit) {
+        try {
+            return {
+                version: APP_SERVER_PROTOCOL_VERSION,
+                id: request.id,
+                result: await this.dispatch(request.method, request.params ?? {}, emit),
+            };
+        }
+        catch (error) {
+            return {
+                version: APP_SERVER_PROTOCOL_VERSION,
+                id: request.id,
+                error: {
+                    code: 'APP_SERVER_ERROR',
+                    message: error instanceof Error ? error.message : String(error),
+                },
+            };
+        }
+    }
+    async dispatch(method, params, emit) {
+        if (method === 'initialize') {
+            return {
+                protocolVersion: APP_SERVER_PROTOCOL_VERSION,
+                capabilities: APP_SERVER_CAPABILITIES,
+            };
+        }
+        if (method === 'capability/list')
+            return APP_SERVER_CAPABILITIES;
+        if (method === 'session/list')
+            return this.sdk.sessions.list();
+        if (method === 'session/tree')
+            return this.sdk.sessionGraph.roots();
+        if (method === 'session/create') {
+            const session = await this.sdk.createSession({
+                title: stringParam(params, 'title', false),
+                model: stringParam(params, 'model', false),
+            });
+            this.rememberSession(session);
+            return session.snapshot();
+        }
+        if (method === 'session/open') {
+            const session = await this.openSession(stringParam(params, 'sessionId'));
+            return session.snapshot();
+        }
+        if (method === 'session/close') {
+            const sessionId = stringParam(params, 'sessionId');
+            this.liveSessions.delete(sessionId);
+            return { closed: true };
+        }
+        if (method === 'session/send') {
+            const sessionId = stringParam(params, 'sessionId');
+            const session = await this.openSession(sessionId);
+            const stream = session.stream(stringParam(params, 'input'));
+            if (emit) {
+                // Consume the event stream to completion before returning so response
+                // ordering stays behind session/event notifications on stdio/WS.
+                for await (const event of stream) {
+                    emit({
+                        version: APP_SERVER_PROTOCOL_VERSION,
+                        type: 'event',
+                        method: 'session/event',
+                        params: { sessionId, event },
+                    });
+                }
+            }
+            return stream.result;
+        }
+        if (method === 'diff/get') {
+            return this.sdk.getSessionDiff(stringParam(params, 'sessionId'));
+        }
+        if (method === 'diff/apply') {
+            if (params.confirm !== true)
+                throw new Error('diff/apply requires confirm:true.');
+            return this.sdk.applySessionDiff(stringParam(params, 'sessionId'), stringParam(params, 'targetDir', false));
+        }
+        if (method === 'checkpoint/list') {
+            return this.sdk.checkpoints.list(stringParam(params, 'sessionId'));
+        }
+        if (method === 'checkpoint/preview') {
+            return this.sdk.checkpoints.preview(stringParam(params, 'sessionId'), stringParam(params, 'checkpointId'));
+        }
+        if (method === 'checkpoint/restore') {
+            if (params.confirm !== true)
+                throw new Error('checkpoint/restore requires confirm:true.');
+            const mode = checkpointMode(params.mode);
+            return this.sdk.checkpoints.restore({
+                sessionId: stringParam(params, 'sessionId'),
+                checkpointId: stringParam(params, 'checkpointId'),
+                mode,
+            });
+        }
+        if (method === 'goal/get') {
+            return this.goalService(await this.openSession(stringParam(params, 'sessionId'))).read();
+        }
+        if (method === 'goal/create') {
+            return this.goalService(await this.openSession(stringParam(params, 'sessionId'))).create({
+                objective: stringParam(params, 'objective'),
+                completionCriteria: stringParam(params, 'completionCriteria', false),
+            });
+        }
+        if (method === 'goal/transition') {
+            const status = stringParam(params, 'status');
+            if (status !== 'active' && status !== 'paused') {
+                throw new Error('status must be active or paused.');
+            }
+            return this.goalService(await this.openSession(stringParam(params, 'sessionId')))
+                .transition(status);
+        }
+        if (method === 'goal/revise') {
+            return this.goalService(await this.openSession(stringParam(params, 'sessionId'))).revise({
+                objective: stringParam(params, 'objective', false),
+                completionCriteria: stringParam(params, 'completionCriteria', false),
+                expectedRevision: numberParam(params, 'expectedRevision', false),
+            });
+        }
+        if (method === 'approval/list')
+            return this.sdk.approvalPolicy.list();
+        if (method === 'approval/remember') {
+            if (params.confirm !== true) {
+                throw new Error('approval/remember requires confirm:true.');
+            }
+            const approval = parseStoredApproval(params.approval);
+            await this.sdk.approvalPolicy.remember(approval);
+            return { saved: true };
+        }
+        throw new Error(`Unknown app-server method: ${method}`);
+    }
+    async openSession(sessionId) {
+        const session = this.liveSessions.get(sessionId) ?? await this.sdk.resumeSession(sessionId);
+        this.rememberSession(session);
+        return session;
+    }
+    rememberSession(session) {
+        // Refresh insertion order so LRU eviction drops the oldest idle handle.
+        this.liveSessions.delete(session.id);
+        this.liveSessions.set(session.id, session);
+        while (this.liveSessions.size > MAX_LIVE_SESSIONS) {
+            const oldest = this.liveSessions.keys().next().value;
+            if (!oldest)
+                break;
+            this.liveSessions.delete(oldest);
+        }
+    }
+    goalService(session) {
+        return GoalService.forSession(session);
+    }
+}
+const APP_SERVER_CAPABILITIES = [
+    'sessions',
+    'streaming',
+    'session-tree',
+    'diff',
+    'checkpoints',
+    'goals',
+    'approvals',
+];
+function stringParam(params, name, required = true) {
+    const value = params[name];
+    if (typeof value === 'string' && value.trim())
+        return value.trim();
+    if (required)
+        throw new Error(`${name} is required.`);
+    return undefined;
+}
+function numberParam(params, name, required) {
+    const value = params[name];
+    if (typeof value === 'number' && Number.isFinite(value))
+        return value;
+    if (required)
+        throw new Error(`${name} is required.`);
+    return undefined;
+}
+function checkpointMode(value) {
+    if (value === undefined)
+        return 'both';
+    if (value === 'files' || value === 'conversation' || value === 'both')
+        return value;
+    throw new Error('mode must be files, conversation, or both.');
+}
+function parseStoredApproval(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error('approval/remember requires an approval object.');
+    }
+    const record = value;
+    const id = typeof record.id === 'string' ? record.id.trim() : '';
+    const tool = typeof record.tool === 'string' ? record.tool.trim() : '';
+    if (!id)
+        throw new Error('approval.id is required.');
+    if (!tool)
+        throw new Error('approval.tool is required.');
+    if (record.behavior !== 'allow' && record.behavior !== 'deny') {
+        throw new Error('approval.behavior must be allow or deny.');
+    }
+    if (record.pathPrefix !== undefined && typeof record.pathPrefix !== 'string') {
+        throw new Error('approval.pathPrefix must be a string when provided.');
+    }
+    if (record.expiresAt !== undefined
+        && (typeof record.expiresAt !== 'string' || Number.isNaN(Date.parse(record.expiresAt)))) {
+        throw new Error('approval.expiresAt must be an ISO timestamp when provided.');
+    }
+    if (record.behavior === 'allow' && tool !== 'Read' && tool !== 'Glob' && tool !== 'Grep') {
+        if (typeof record.pathPrefix !== 'string' || !record.pathPrefix.trim()) {
+            throw new Error('approval/remember allow rules for mutating tools require a pathPrefix scope.');
+        }
+    }
+    return {
+        id,
+        tool,
+        behavior: record.behavior,
+        ...(typeof record.pathPrefix === 'string' && record.pathPrefix.trim()
+            ? { pathPrefix: record.pathPrefix.trim() }
+            : {}),
+        ...(typeof record.expiresAt === 'string' ? { expiresAt: record.expiresAt } : {}),
+        createdAt: typeof record.createdAt === 'string' && record.createdAt.trim()
+            ? record.createdAt
+            : new Date().toISOString(),
+    };
+}
+//# sourceMappingURL=appServer.js.map

package/dist/src/app-server/appServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appServer.js","sourceRoot":"","sources":["../../../src/app-server/appServer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,EAAE,2BAA2B,EAA6E,MAAM,eAAe,CAAC;AAIvI,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,MAAM,OAAO,SAAS;IAGS;IAFZ,YAAY,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEhE,YAA6B,GAAuB;QAAvB,QAAG,GAAH,GAAG,CAAoB;IAAG,CAAC;IAExD,KAAK,CAAC,MAAM,CAAC,OAAyB,EAAE,IAAoB;QAC1D,IAAI,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,2BAA2B;gBACpC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,MAAM,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,CAAC;aACxE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,2BAA2B;gBACpC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAChE;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,MAAc,EACd,MAA+B,EAC/B,IAAoB;QAEpB,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,OAAO;gBACL,eAAe,EAAE,2BAA2B;gBAC5C,YAAY,EAAE,uBAAuB;aACtC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,iBAAiB;YAAE,OAAO,uBAAuB,CAAC;QACjE,IAAI,MAAM,KAAK,cAAc;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/D,IAAI,MAAM,KAAK,cAAc;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QACpE,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;gBAC3C,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;gBAC1C,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;aAC3C,CAAC,CAAC;YACH,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;YACzE,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACnD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5D,IAAI,IAAI,EAAE,CAAC;gBACT,sEAAsE;gBACtE,iEAAiE;gBACjE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBACjC,IAAI,CAAC;wBACH,OAAO,EAAE,2BAA2B;wBACpC,IAAI,EAAE,OAAO;wBACb,MAAM,EAAE,eAAe;wBACvB,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;qBAC7B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QACD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAC9B,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EAChC,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CACjC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EAChC,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CACpC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC1F,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC;gBAClC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC;gBAC3C,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC;gBACjD,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3F,CAAC;QACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACvF,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC;gBAC3C,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,CAAC;aACrE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;iBAC9E,UAAU,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACvF,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC;gBAClD,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,CAAC;gBACpE,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,CAAC;aACjE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,KAAK,eAAe;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACtE,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACjD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,SAAiB;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC5F,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,eAAe,CAAC,OAAqB;QAC3C,wEAAwE;QACxE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACrD,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,OAAqB;QACvC,OAAO,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;CACF;AAED,MAAM,uBAAuB,GAAG;IAC9B,UAAU;IACV,WAAW;IACX,cAAc;IACd,MAAM;IACN,aAAa;IACb,OAAO;IACP,WAAW;CACH,CAAC;AAQX,SAAS,WAAW,CAClB,MAA+B,EAC/B,IAAY,EACZ,QAAQ,GAAG,IAAI;IAEf,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC;IACtD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAClB,MAA+B,EAC/B,IAAY,EACZ,QAAe;IAEf,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC;IACtD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,cAAc,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACpF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IACE,MAAM,CAAC,SAAS,KAAK,SAAS;WAC3B,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EACvF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACzF,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE;QACF,IAAI;QACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE;YACnE,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;YACxE,CAAC,CAAC,MAAM,CAAC,SAAS;YAClB,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7B,CAAC;AACJ,CAAC"}

package/dist/src/app-server/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/src/app-server/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/app-server/cli.ts"],"names":[],"mappings":""}

package/dist/src/app-server/cli.js

@@ -0,0 +1,29 @@
+#!/usr/bin/env node
+import { createActoviqCoreTools, createAgentSdk, loadDefaultActoviqSettings, } from '../index.js';
+import { AppServer } from './appServer.js';
+import { StdioAppServerTransport } from './transports/stdioTransport.js';
+async function main() {
+    await loadDefaultActoviqSettings();
+    const workDir = process.argv[2] ? process.argv[2] : process.cwd();
+    const sdk = await createAgentSdk({
+        workDir,
+        tools: createActoviqCoreTools({ cwd: workDir }),
+        permissionMode: 'default',
+    });
+    const close = async () => {
+        await sdk.close();
+    };
+    process.once('SIGINT', () => { void close().finally(() => process.exit(130)); });
+    process.once('SIGTERM', () => { void close().finally(() => process.exit(143)); });
+    try {
+        await new StdioAppServerTransport(new AppServer(sdk)).start();
+    }
+    finally {
+        await close();
+    }
+}
+main().catch(error => {
+    process.stderr.write(`actoviq-app-server: ${error instanceof Error ? error.message : String(error)}\n`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/src/app-server/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../src/app-server/cli.ts"],"names":[],"mappings":";AACA,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,KAAK,UAAU,IAAI;IACjB,MAAM,0BAA0B,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAClE,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC;QAC/B,OAAO;QACP,KAAK,EAAE,sBAAsB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;QAC/C,cAAc,EAAE,SAAS;KAC1B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC;QACH,MAAM,IAAI,uBAAuB,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAChE,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/src/app-server/index.d.ts

@@ -0,0 +1,5 @@
+export * from './protocol.js';
+export * from './appServer.js';
+export * from './transports/stdioTransport.js';
+export * from './transports/webSocketTransport.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/app-server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/app-server/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oCAAoC,CAAC"}

package/dist/src/app-server/index.js

@@ -0,0 +1,5 @@
+export * from './protocol.js';
+export * from './appServer.js';
+export * from './transports/stdioTransport.js';
+export * from './transports/webSocketTransport.js';
+//# sourceMappingURL=index.js.map

package/dist/src/app-server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/app-server/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oCAAoC,CAAC"}

package/dist/src/app-server/protocol.d.ts

@@ -0,0 +1,24 @@
+export declare const APP_SERVER_PROTOCOL_VERSION: 1;
+export interface AppServerRequest {
+    version: 1;
+    id: string;
+    method: string;
+    params?: Record<string, unknown>;
+}
+export interface AppServerResponse {
+    version: 1;
+    id: string;
+    result?: unknown;
+    error?: {
+        code: string;
+        message: string;
+    };
+}
+export interface AppServerNotification {
+    version: 1;
+    type: 'event';
+    method: string;
+    params: Record<string, unknown>;
+}
+export declare function parseAppServerRequest(value: unknown): AppServerRequest;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/src/app-server/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../../src/app-server/protocol.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,2BAA2B,EAAG,CAAU,CAAC;AAEtD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,CAAC,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,CAAC,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAWtE"}

package/dist/src/app-server/protocol.js

@@ -0,0 +1,14 @@
+export const APP_SERVER_PROTOCOL_VERSION = 1;
+export function parseAppServerRequest(value) {
+    if (!value || typeof value !== 'object')
+        throw new Error('Invalid app-server request.');
+    const request = value;
+    if (request.version !== APP_SERVER_PROTOCOL_VERSION
+        || typeof request.id !== 'string'
+        || typeof request.method !== 'string'
+        || (request.params !== undefined
+            && (typeof request.params !== 'object' || request.params === null || Array.isArray(request.params))))
+        throw new Error('Invalid app-server request.');
+    return request;
+}
+//# sourceMappingURL=protocol.js.map

package/dist/src/app-server/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/app-server/protocol.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAU,CAAC;AAuBtD,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,KAAkC,CAAC;IACnD,IACE,OAAO,CAAC,OAAO,KAAK,2BAA2B;WAC5C,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;WAC9B,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;WAClC,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;eAC3B,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,OAAO,OAA2B,CAAC;AACrC,CAAC"}