cli-jaw 2.0.4 → 2.0.5

package/dist/src/jaw-ceo/coordinator-workers.js

@@ -0,0 +1,234 @@
+import { randomUUID } from 'node:crypto';
+import { auditTool, isPositivePort, nowIso } from './coordinator-utils.js';
+export async function listInstances(ctx, args = {}) {
+    void args;
+    if (!ctx.deps.listInstances) {
+        return auditTool(ctx.store, {
+            tool: 'dashboard.list_instances',
+            ok: true,
+            message: 'No manager instance adapter is available in this host.',
+            data: [],
+            sourceLabels: ['dashboard'],
+        });
+    }
+    try {
+        const instances = await ctx.deps.listInstances();
+        return auditTool(ctx.store, {
+            tool: 'dashboard.list_instances',
+            ok: true,
+            message: `Listed ${instances.length} worker instance(s).`,
+            data: instances,
+            sourceLabels: ['dashboard'],
+        });
+    }
+    catch (error) {
+        return auditTool(ctx.store, {
+            tool: 'dashboard.list_instances',
+            ok: false,
+            code: 'instance_list_failed',
+            message: error.message,
+            sourceLabels: ['dashboard'],
+        });
+    }
+}
+export async function inspectInstance(ctx, args) {
+    if (!isPositivePort(args.port)) {
+        return auditTool(ctx.store, {
+            tool: 'dashboard.inspect_instance',
+            ok: false,
+            code: 'invalid_port',
+            message: 'port must be a positive integer',
+            sourceLabels: ['dashboard'],
+        });
+    }
+    const instances = await ctx.deps.listInstances?.() ?? [];
+    const instance = instances.find(row => row.port === args.port) || null;
+    const latest = args.depth !== 'summary' ? await ctx.deps.fetchLatestMessage?.(args.port) ?? null : null;
+    return auditTool(ctx.store, {
+        tool: 'dashboard.inspect_instance',
+        ok: true,
+        message: `Inspected worker :${args.port}.`,
+        port: args.port,
+        data: { instance, latest },
+        sourceLabels: ['dashboard'],
+    });
+}
+export async function getInstanceActivity(ctx, args) {
+    const depth = Math.max(1, Math.min(args.limit ?? 10, 50));
+    const inspected = await inspectInstance(ctx, { port: args.port, depth: 'latest' });
+    return {
+        ...inspected,
+        tool: 'dashboard.get_instance_activity',
+        data: { ...inspected.data, limit: depth },
+    };
+}
+export async function message(ctx, input) {
+    const text = input.text.trim();
+    if (!text) {
+        return auditTool(ctx.store, {
+            tool: 'ceo.message',
+            ok: false,
+            code: 'empty_message',
+            message: 'message text is required',
+            sourceLabels: ['dashboard'],
+        });
+    }
+    const selectedPort = input.selectedPort ?? (input.selectedPort === null ? null : ctx.store.getSession().selectedPort), responseMode = input.responseMode || 'text';
+    ctx.store.updateSession({
+        ...(input.sessionId ? { sessionId: input.sessionId } : {}),
+        inputMode: input.inputMode || 'text',
+        responseMode,
+        selectedPort: selectedPort ?? null,
+    });
+    ctx.store.appendTranscript({
+        role: 'user',
+        text,
+        source: input.inputMode === 'voice' ? 'voice' : 'text',
+    });
+    if (selectedPort != null) {
+        const dispatchRef = `dispatch_${randomUUID()}`;
+        const result = await sendMessage(ctx, {
+            port: selectedPort,
+            message: text,
+            dispatchRef,
+            sourceChannel: input.inputMode === 'voice' ? 'ceo_voice' : 'ceo_text',
+            responseMode,
+            watchCompletion: true,
+        });
+        const response = result.ok
+            ? `Sent to worker :${selectedPort} and registered a completion watch.`
+            : `I could not send to worker :${selectedPort}: ${result.error?.message || 'unknown error'}`;
+        ctx.store.appendTranscript({
+            role: result.ok ? 'ceo' : 'tool',
+            text: response,
+            source: 'system',
+        });
+        return auditTool(ctx.store, {
+            tool: 'ceo.message',
+            ok: result.ok,
+            code: result.ok ? undefined : result.error?.code,
+            message: response,
+            port: selectedPort,
+            data: { response, pending: ctx.store.listPending() },
+            sourceLabels: ['dashboard'],
+        });
+    }
+    const response = 'Jaw CEO is ready. Select a worker or ask a dashboard question.';
+    ctx.store.appendTranscript({ role: 'ceo', text: response, source: 'system' });
+    return auditTool(ctx.store, {
+        tool: 'ceo.message',
+        ok: true,
+        message: response,
+        data: { response, pending: ctx.store.listPending() },
+        sourceLabels: ['dashboard'],
+    });
+}
+function auditSendFailure(ctx, code, message, port) {
+    return auditTool(ctx.store, {
+        tool: 'instance.send_message',
+        ok: false,
+        code,
+        message,
+        ...(port !== undefined ? { port } : {}),
+        sourceLabels: ['dashboard'],
+    });
+}
+async function buildLatestMessageFallback(ctx, port, enabled) {
+    if (!enabled || !ctx.deps.fetchLatestMessage)
+        return { mode: 'disabled' };
+    try {
+        const latest = await ctx.deps.fetchLatestMessage(port);
+        const latestId = latest?.latestAssistant?.id;
+        return typeof latestId === 'number' && Number.isInteger(latestId)
+            ? { mode: 'enabled', sinceMessageId: latestId }
+            : { mode: 'disabled' };
+    }
+    catch {
+        return { mode: 'disabled' };
+    }
+}
+async function registerOptionalWatch(ctx, args) {
+    if (!args.watchCompletion)
+        return;
+    const fallback = await buildLatestMessageFallback(ctx, args.port, true);
+    await watchCompletion(ctx, {
+        port: args.port,
+        dispatchRef: args.dispatchRef,
+        reason: args.sourceChannel === 'ceo_voice' ? 'voice_started_task' : 'ceo_routed_task',
+        latestMessageFallback: fallback,
+    });
+}
+export async function watchCompletion(ctx, args) {
+    if (!isPositivePort(args.port)) {
+        return auditTool(ctx.store, {
+            tool: 'instance.watch_completion',
+            ok: false,
+            code: 'invalid_port',
+            message: 'port must be a positive integer',
+            sourceLabels: ['dashboard'],
+        });
+    }
+    const session = ctx.store.getSession();
+    const watch = {
+        watchId: `watch_${randomUUID()}`,
+        dispatchRef: args.dispatchRef,
+        port: args.port,
+        reason: args.reason,
+        latestMessageFallback: args.latestMessageFallback,
+        ...(args.sessionId ? { sessionId: args.sessionId } : { sessionId: session.sessionId }),
+        autoRead: args.autoRead ?? session.autoRead,
+        createdAt: nowIso(ctx.now),
+        lastUserActivityAt: session.lastUserActivityAt,
+    };
+    ctx.store.addWatch(watch);
+    return auditTool(ctx.store, {
+        tool: 'instance.watch_completion',
+        ok: true,
+        message: `Watching worker :${args.port}.`,
+        port: args.port,
+        data: watch,
+        sourceLabels: ['dashboard'],
+    });
+}
+export async function sendMessage(ctx, args) {
+    if (!isPositivePort(args.port)) {
+        return auditSendFailure(ctx, 'invalid_port', 'port must be a positive integer');
+    }
+    if (!args.message.trim()) {
+        return auditSendFailure(ctx, 'empty_message', 'message is required', args.port);
+    }
+    const dispatchRef = args.dispatchRef || `dispatch_${randomUUID()}`;
+    await registerOptionalWatch(ctx, { port: args.port, dispatchRef, sourceChannel: args.sourceChannel, watchCompletion: args.watchCompletion });
+    if (!ctx.deps.sendWorkerMessage) {
+        return auditSendFailure(ctx, 'worker_send_unavailable', 'worker send adapter is unavailable in this host', args.port);
+    }
+    const prompt = `[from: Jaw CEO]\n${args.message.trim()}`;
+    try {
+        const sent = await ctx.deps.sendWorkerMessage({
+            port: args.port,
+            prompt,
+            sourceChannel: args.sourceChannel,
+            responseMode: args.responseMode,
+        });
+        return auditTool(ctx.store, {
+            tool: 'instance.send_message',
+            ok: sent.ok,
+            code: sent.ok ? undefined : 'worker_send_failed',
+            message: sent.message || (sent.ok ? `Sent message to worker :${args.port}.` : `Worker :${args.port} rejected the message.`),
+            port: args.port,
+            data: { dispatchRef, response: sent.data },
+            sourceLabels: ['dashboard', `worker:${args.port}`],
+        });
+    }
+    catch (error) {
+        return auditTool(ctx.store, {
+            tool: 'instance.send_message',
+            ok: false,
+            code: 'worker_send_failed',
+            message: error.message,
+            port: args.port,
+            sourceLabels: ['dashboard', `worker:${args.port}`],
+        });
+    }
+}
+//# sourceMappingURL=coordinator-workers.js.map

package/dist/src/jaw-ceo/coordinator-workers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator-workers.js","sourceRoot":"","sources":["../../../src/jaw-ceo/coordinator-workers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAU3E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAA6B,EAAE,OAAgD,EAAE;IACjH,KAAK,IAAI,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACxB,IAAI,EAAE,0BAA0B;YAChC,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,wDAAwD;YACjE,IAAI,EAAE,EAAE;YACR,YAAY,EAAE,CAAC,WAAW,CAAC;SAC9B,CAAC,CAAC;IACP,CAAC;IACD,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACjD,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACxB,IAAI,EAAE,0BAA0B;YAChC,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,UAAU,SAAS,CAAC,MAAM,sBAAsB;YACzD,IAAI,EAAE,SAAS;YACf,YAAY,EAAE,CAAC,WAAW,CAAC;SAC9B,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACxB,IAAI,EAAE,0BAA0B;YAChC,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAG,KAAe,CAAC,OAAO;YACjC,YAAY,EAAE,CAAC,WAAW,CAAC;SAC9B,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAA6B,EAAE,IAA8D;IAC/H,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACxB,IAAI,EAAE,4BAA4B;YAClC,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,iCAAiC;YAC1C,YAAY,EAAE,CAAC,WAAW,CAAC;SAC9B,CAAC,CAAC;IACP,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxG,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;QACxB,IAAI,EAAE,4BAA4B;QAClC,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,qBAAqB,IAAI,CAAC,IAAI,GAAG;QAC1C,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;QAC1B,YAAY,EAAE,CAAC,WAAW,CAAC;KAC9B,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAA6B,EAAE,IAAkD;IACvH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnF,OAAO;QACH,GAAG,SAAS;QACZ,IAAI,EAAE,iCAAiC;QACvC,IAAI,EAAE,EAAE,GAAI,SAAS,CAAC,IAA4C,EAAE,KAAK,EAAE,KAAK,EAAE;KACrF,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAA6B,EAAE,KAAyB;IAClF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACxB,IAAI,EAAE,aAAa;YACnB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,0BAA0B;YACnC,YAAY,EAAE,CAAC,WAAW,CAAC;SAC9B,CAAC,CAAC;IACP,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,MAAM,CAAC;IACnK,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;QACpB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,MAAM;QACpC,YAAY;QACZ,YAAY,EAAE,YAAY,IAAI,IAAI;KACrC,CAAC,CAAC;IACH,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACvB,IAAI,EAAE,MAAM;QACZ,IAAI;QACJ,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;KACzD,CAAC,CAAC;IACH,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,YAAY,UAAU,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE;YAClC,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,IAAI;YACb,WAAW;YACX,aAAa,EAAE,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;YACrE,YAAY;YACZ,eAAe,EAAE,IAAI;SACxB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE;YACtB,CAAC,CAAC,mBAAmB,YAAY,qCAAqC;YACtE,CAAC,CAAC,+BAA+B,YAAY,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC;QACjG,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC;YACvB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;YAChC,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACxB,IAAI,EAAE,aAAa;YACnB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI;YAChD,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE;YACpD,YAAY,EAAE,CAAC,WAAW,CAAC;SAC9B,CAAC,CAAC;IACP,CAAC;IACD,MAAM,QAAQ,GAAG,gEAAgE,CAAC;IAClF,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9E,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;QACxB,IAAI,EAAE,aAAa;QACnB,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE;QACpD,YAAY,EAAE,CAAC,WAAW,CAAC;KAC9B,CAAC,CAAC;AACP,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA6B,EAAE,IAAY,EAAE,OAAe,EAAE,IAAyB;IAC7G,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;QACxB,IAAI,EAAE,uBAAuB;QAC7B,EAAE,EAAE,KAAK;QACT,IAAI;QACJ,OAAO;QACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,YAAY,EAAE,CAAC,WAAW,CAAC;KAC9B,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,GAA6B,EAAE,IAAY,EAAE,OAAgB;IACnG,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC1E,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC;QAC7C,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE;YAC/C,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,GAA6B,EAAE,IAKnE;IACG,IAAI,CAAC,IAAI,CAAC,eAAe;QAAE,OAAO;IAClC,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxE,MAAM,eAAe,CAAC,GAAG,EAAE;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,aAAa,KAAK,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB;QACrF,qBAAqB,EAAE,QAAQ;KAClC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAA6B,EAAE,IAOpE;IACG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACxB,IAAI,EAAE,2BAA2B;YACjC,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,iCAAiC;YAC1C,YAAY,EAAE,CAAC,WAAW,CAAC;SAC9B,CAAC,CAAC;IACP,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IACvC,MAAM,KAAK,GAAgB;QACvB,OAAO,EAAE,SAAS,UAAU,EAAE,EAAE;QAChC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QACtF,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC3C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QAC1B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;KACjD,CAAC;IACF,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;QACxB,IAAI,EAAE,2BAA2B;QACjC,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,GAAG;QACzC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,KAAK;QACX,YAAY,EAAE,CAAC,WAAW,CAAC;KAC9B,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAA6B,EAAE,IAQhE;IACG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,iCAAiC,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACvB,OAAO,gBAAgB,CAAC,GAAG,EAAE,eAAe,EAAE,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,YAAY,UAAU,EAAE,EAAE,CAAC;IACnE,MAAM,qBAAqB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IAC7I,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC9B,OAAO,gBAAgB,CAAC,GAAG,EAAE,yBAAyB,EAAE,iDAAiD,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IACzD,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC;YAC1C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM;YACN,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY,EAAE,IAAI,CAAC,YAAY;SAClC,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACxB,IAAI,EAAE,uBAAuB;YAC7B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB;YAChD,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,2BAA2B,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,IAAI,wBAAwB,CAAC;YAC3H,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;YAC1C,YAAY,EAAE,CAAC,WAAW,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;SACrD,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACxB,IAAI,EAAE,uBAAuB;YAC7B,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAG,KAAe,CAAC,OAAO;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY,EAAE,CAAC,WAAW,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;SACrD,CAAC,CAAC;IACP,CAAC;AACL,CAAC"}

package/dist/src/jaw-ceo/coordinator.js

@@ -0,0 +1,116 @@
+import path from 'node:path';
+import { canAutoResumeVoiceForCompletion as canAutoResumeVoiceForCompletionImpl, cancelConfirmation as cancelConfirmationImpl, closeVoiceSession as closeVoiceSessionImpl, confirmConfirmation as confirmConfirmationImpl, createConfirmation as createConfirmationImpl, editDocs as editDocsImpl, query as queryImpl, registerVoiceSession as registerVoiceSessionImpl, runLifecycleTool as runLifecycleToolImpl, } from './coordinator-admin.js';
+import { continueCompletion as continueCompletionImpl, ingestManagerEvent as ingestManagerEventImpl, refreshEvents as refreshEventsImpl, summarizeCompletion as summarizeCompletionImpl, updatePendingStatus as updatePendingStatusImpl, } from './coordinator-completions.js';
+import { executeRealtimeTool as executeRealtimeToolImpl } from './coordinator-realtime-tools.js';
+import { getInstanceActivity, inspectInstance, listInstances, message, sendMessage, watchCompletion } from './coordinator-workers.js';
+import { buildJawCeoDocsEditPolicy } from './docs-edit.js';
+import { createJawCeoStore } from './store.js';
+import { loadJawCeoTranscript, persistJawCeoTranscript } from './transcript-persistence.js';
+const DEFAULT_DASHBOARD_NOTES_ROOT = path.join(process.env["HOME"] || process.cwd(), '.cli-jaw-dashboard', 'notes');
+export class JawCeoCoordinator {
+    store;
+    repoRoot;
+    docsPolicy;
+    deps;
+    now;
+    voiceSessions = new Map();
+    constructor(deps) {
+        this.deps = deps;
+        this.now = deps.now ?? (() => new Date());
+        this.store = deps.store || createJawCeoStore({
+            now: this.now,
+            initialTranscript: loadJawCeoTranscript(),
+            onTranscriptAppend: entry => persistJawCeoTranscript(entry),
+        });
+        this.repoRoot = path.resolve(deps.repoRoot);
+        this.docsPolicy = buildJawCeoDocsEditPolicy({
+            repoRoot: this.repoRoot,
+            dashboardNotesRoot: deps.dashboardNotesRoot || DEFAULT_DASHBOARD_NOTES_ROOT,
+        });
+    }
+    context() {
+        return {
+            store: this.store,
+            repoRoot: this.repoRoot,
+            docsPolicy: this.docsPolicy,
+            deps: this.deps,
+            now: this.now,
+            voiceSessions: this.voiceSessions,
+        };
+    }
+    state() {
+        return this.store.getState();
+    }
+    updatePresence(args) {
+        this.store.updateSession({
+            ...(args.selectedPort !== undefined ? { selectedPort: args.selectedPort } : {}),
+            ...(args.frontendPresence !== undefined ? { frontendPresence: args.frontendPresence } : {}),
+            ...(args.autoRead !== undefined ? { autoRead: args.autoRead } : {}),
+        });
+        return this.state();
+    }
+    async listInstances(args = {}) {
+        return await listInstances(this.context(), args);
+    }
+    async inspectInstance(args) {
+        return await inspectInstance(this.context(), args);
+    }
+    async getInstanceActivity(args) {
+        return await getInstanceActivity(this.context(), args);
+    }
+    async message(input) {
+        return await message(this.context(), input);
+    }
+    async watchCompletion(args) {
+        return await watchCompletion(this.context(), args);
+    }
+    async sendMessage(args) {
+        return await sendMessage(this.context(), args);
+    }
+    ingestManagerEvent(event) {
+        return ingestManagerEventImpl(this.context(), event);
+    }
+    async refreshEvents(args) {
+        return await refreshEventsImpl(this.context(), args);
+    }
+    continueCompletion(completionKey, mode = 'text') {
+        return continueCompletionImpl(this.context(), completionKey, mode);
+    }
+    summarizeCompletion(completionKey, format = 'short') {
+        return summarizeCompletionImpl(this.context(), completionKey, format);
+    }
+    updatePendingStatus(completionKey, status) {
+        return updatePendingStatusImpl(this.context(), completionKey, status);
+    }
+    async query(args) {
+        return await queryImpl(this.context(), args);
+    }
+    async editDocs(args) {
+        return await editDocsImpl(this.context(), args);
+    }
+    createConfirmation(args) {
+        return createConfirmationImpl(this.context(), args);
+    }
+    confirmConfirmation(confirmationId, args = {}) {
+        return confirmConfirmationImpl(this.context(), confirmationId, args);
+    }
+    cancelConfirmation(confirmationId, reason) {
+        return cancelConfirmationImpl(this.context(), confirmationId, reason);
+    }
+    async runLifecycleTool(args) {
+        return await runLifecycleToolImpl(this.context(), args);
+    }
+    canAutoResumeVoiceForCompletion(completion, documentVisible) {
+        return canAutoResumeVoiceForCompletionImpl(this.context(), completion, documentVisible);
+    }
+    registerVoiceSession(record) {
+        registerVoiceSessionImpl(this.context(), record);
+    }
+    closeVoiceSession(sessionId) {
+        return closeVoiceSessionImpl(this.context(), sessionId);
+    }
+    async executeRealtimeTool(name, rawArgs) {
+        return await executeRealtimeToolImpl(this.context(), name, rawArgs);
+    }
+}
+//# sourceMappingURL=coordinator.js.map

package/dist/src/jaw-ceo/coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator.js","sourceRoot":"","sources":["../../../src/jaw-ceo/coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACH,+BAA+B,IAAI,mCAAmC,EACtE,kBAAkB,IAAI,sBAAsB,EAC5C,iBAAiB,IAAI,qBAAqB,EAC1C,mBAAmB,IAAI,uBAAuB,EAC9C,kBAAkB,IAAI,sBAAsB,EAC5C,QAAQ,IAAI,YAAY,EACxB,KAAK,IAAI,SAAS,EAClB,oBAAoB,IAAI,wBAAwB,EAChD,gBAAgB,IAAI,oBAAoB,GAC3C,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACH,kBAAkB,IAAI,sBAAsB,EAC5C,kBAAkB,IAAI,sBAAsB,EAC5C,aAAa,IAAI,iBAAiB,EAClC,mBAAmB,IAAI,uBAAuB,EAC9C,mBAAmB,IAAI,uBAAuB,GACjD,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,IAAI,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAOjG,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AACtI,OAAO,EAAE,yBAAyB,EAA6B,MAAM,gBAAgB,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAoB,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAmB5F,MAAM,4BAA4B,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;AAEpH,MAAM,OAAO,iBAAiB;IACjB,KAAK,CAAc;IACnB,QAAQ,CAAS;IACjB,UAAU,CAAuB;IACzB,IAAI,CAAwB;IAC5B,GAAG,CAAa;IAChB,aAAa,GAAG,IAAI,GAAG,EAAoC,CAAC;IAE7E,YAAY,IAA2B;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,iBAAiB,CAAC;YACzC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,iBAAiB,EAAE,oBAAoB,EAAE;YACzC,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,yBAAyB,CAAC;YACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,4BAA4B;SAC9E,CAAC,CAAC;IACP,CAAC;IAEO,OAAO;QACX,OAAO;YACH,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,aAAa,EAAE,IAAI,CAAC,aAAa;SACpC,CAAC;IACN,CAAC;IAED,KAAK;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,cAAc,CAAC,IAId;QACG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAgD,EAAE;QAClE,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAA8D;QAChF,OAAO,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAkD;QACxE,OAAO,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAyB;QACnC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAOrB;QACG,OAAO,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAQjB;QACG,OAAO,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,kBAAkB,CAAC,KAAyB;QACxC,OAAO,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAmH;QACnI,OAAO,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,kBAAkB,CAAC,aAAqB,EAAE,OAA2B,MAAM;QACvE,OAAO,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;IAED,mBAAmB,CAAC,aAAqB,EAAE,SAA+B,OAAO;QAC7E,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAED,mBAAmB,CAAC,aAAqB,EAAE,MAA+C;QACtF,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAKX;QACG,OAAO,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAKd;QACG,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,kBAAkB,CAAC,IAMlB;QACG,OAAO,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAED,mBAAmB,CAAC,cAAsB,EAAE,OAAwE,EAAE;QAClH,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;IAED,kBAAkB,CAAC,cAAsB,EAAE,MAA2B;QAClE,OAAO,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAMtB;QACG,OAAO,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAED,+BAA+B,CAAC,UAA4B,EAAE,eAAwB;QAClF,OAAO,mCAAmC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAC5F,CAAC;IAED,oBAAoB,CAAC,MAAgC;QACjD,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,iBAAiB,CAAC,SAAiB;QAC/B,OAAO,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAY,EAAE,OAAgB;QACpD,OAAO,MAAM,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;CACJ"}

package/dist/src/jaw-ceo/docs-edit.js

@@ -0,0 +1,142 @@
+import { constants as fsConstants } from 'node:fs';
+import { access, mkdir, readFile, realpath, stat, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { assertDocsOnlyEdit } from './policy.js';
+export const JAW_CEO_MAX_PATCH_BYTES = 20 * 1024;
+export const JAW_CEO_MAX_TARGET_BYTES = 1024 * 1024;
+export function buildJawCeoDocsEditPolicy(args) {
+    return {
+        allowedFiles: [
+            path.join(args.repoRoot, 'README.md'),
+        ],
+        allowedDirectories: [
+            path.join(args.repoRoot, 'docs'),
+            path.join(args.repoRoot, 'devlog', '_plan', '260508_realtime_voice_mode'),
+            args.dashboardNotesRoot,
+        ],
+    };
+}
+async function canonicalExistingOrParent(target) {
+    try {
+        return await realpath(target);
+    }
+    catch {
+        const parent = path.dirname(target);
+        await mkdir(parent, { recursive: true });
+        return path.join(await realpath(parent), path.basename(target));
+    }
+}
+async function canonicalizePolicy(policy) {
+    const allowedFiles = [];
+    for (const file of policy.allowedFiles) {
+        try {
+            allowedFiles.push(await canonicalExistingOrParent(file));
+        }
+        catch {
+            allowedFiles.push(path.resolve(file));
+        }
+    }
+    const allowedDirectories = [];
+    for (const directory of policy.allowedDirectories) {
+        try {
+            await mkdir(directory, { recursive: true });
+            allowedDirectories.push(await realpath(directory));
+        }
+        catch {
+            allowedDirectories.push(path.resolve(directory));
+        }
+    }
+    return { allowedFiles, allowedDirectories };
+}
+function isInside(root, target) {
+    const relative = path.relative(root, target);
+    return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+}
+function hasHiddenSegmentOutsideNotes(target, notesRoot) {
+    if (isInside(notesRoot, target))
+        return false;
+    return target.split(path.sep).some(segment => segment.startsWith('.') && segment.length > 1);
+}
+function assertUtf8Text(buffer) {
+    if (buffer.includes(0)) {
+        throw Object.assign(new Error('binary content is not eligible for CEO docs edit'), { code: 'docs_edit_binary_denied' });
+    }
+    const decoded = buffer.toString('utf8');
+    if (Buffer.from(decoded, 'utf8').toString('utf8') !== decoded) {
+        throw Object.assign(new Error('invalid UTF-8 content is not eligible for CEO docs edit'), { code: 'docs_edit_utf8_denied' });
+    }
+}
+export async function resolveJawCeoDocsEditTarget(args) {
+    if (!path.isAbsolute(args.targetPath)) {
+        throw Object.assign(new Error('docs edit path must be absolute'), { code: 'docs_edit_path_not_absolute' });
+    }
+    const canonicalPolicy = await canonicalizePolicy(args.policy);
+    const canonicalPath = await canonicalExistingOrParent(args.targetPath);
+    const allowedRoots = [...canonicalPolicy.allowedFiles, ...canonicalPolicy.allowedDirectories];
+    const coarse = assertDocsOnlyEdit({ path: canonicalPath, allowedRoots });
+    if (!coarse.ok)
+        throw Object.assign(new Error(coarse.message), { code: coarse.code });
+    const directFileAllowed = canonicalPolicy.allowedFiles.some(file => file === canonicalPath);
+    const directoryAllowed = canonicalPolicy.allowedDirectories.some(directory => isInside(directory, canonicalPath));
+    if (!directFileAllowed && !directoryAllowed) {
+        throw Object.assign(new Error('path is outside the Jaw CEO docs-edit allowlist'), { code: 'docs_edit_root_denied' });
+    }
+    const notesRoot = canonicalPolicy.allowedDirectories[canonicalPolicy.allowedDirectories.length - 1] || '';
+    if (hasHiddenSegmentOutsideNotes(canonicalPath, notesRoot)) {
+        throw Object.assign(new Error('hidden paths are not eligible for CEO docs edit'), { code: 'docs_edit_hidden_path_denied' });
+    }
+    return { canonicalPath, canonicalPolicy };
+}
+function replaceMarkdownSection(current, content) {
+    const firstLine = content.split(/\r?\n/, 1)[0] || '';
+    const heading = firstLine.match(/^(#{1,6})\s+(.+?)\s*$/);
+    if (!heading)
+        return `${current.replace(/\s*$/, '')}\n\n${content.trim()}\n`;
+    const level = heading[1].length;
+    const escapedTitle = firstLine.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    const startMatch = current.match(new RegExp(`^${escapedTitle}\\s*$`, 'm'));
+    if (!startMatch || startMatch.index === undefined)
+        return `${current.replace(/\s*$/, '')}\n\n${content.trim()}\n`;
+    const afterStart = startMatch.index + startMatch[0].length;
+    const rest = current.slice(afterStart);
+    const nextHeading = rest.match(new RegExp(`\\n#{1,${level}}\\s+`, 'm'));
+    const endIndex = nextHeading?.index === undefined ? current.length : afterStart + nextHeading.index;
+    return `${current.slice(0, startMatch.index)}${content.trim()}\n${current.slice(endIndex).replace(/^\n?/, '\n')}`;
+}
+export async function applyJawCeoDocsEdit(args) {
+    const contentBytes = Buffer.byteLength(args.content, 'utf8');
+    if (contentBytes > JAW_CEO_MAX_PATCH_BYTES) {
+        throw Object.assign(new Error('docs edit content exceeds 20 KB'), { code: 'docs_edit_patch_too_large' });
+    }
+    const { canonicalPath } = await resolveJawCeoDocsEditTarget({ targetPath: args.targetPath, policy: args.policy });
+    let current = '';
+    try {
+        await access(canonicalPath, fsConstants.F_OK);
+        const info = await stat(canonicalPath);
+        if (info.size > JAW_CEO_MAX_TARGET_BYTES) {
+            throw Object.assign(new Error('target file exceeds 1 MB'), { code: 'docs_edit_target_too_large' });
+        }
+        const buffer = await readFile(canonicalPath);
+        assertUtf8Text(buffer);
+        current = buffer.toString('utf8');
+    }
+    catch (error) {
+        const code = error.code;
+        if (code && code !== 'ENOENT')
+            throw error;
+    }
+    let next;
+    if (args.operation === 'append_section') {
+        next = `${current.replace(/\s*$/, '')}\n\n${args.content.trim()}\n`;
+    }
+    else if (args.operation === 'replace_section') {
+        next = replaceMarkdownSection(current, args.content);
+    }
+    else {
+        next = args.content;
+    }
+    await mkdir(path.dirname(canonicalPath), { recursive: true });
+    await writeFile(canonicalPath, next, 'utf8');
+    return { path: canonicalPath, bytes: Buffer.byteLength(next, 'utf8'), operation: args.operation };
+}
+//# sourceMappingURL=docs-edit.js.map

package/dist/src/jaw-ceo/docs-edit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs-edit.js","sourceRoot":"","sources":["../../../src/jaw-ceo/docs-edit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAOjD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAAC;AAEpD,MAAM,UAAU,yBAAyB,CAAC,IAGzC;IACG,OAAO;QACH,YAAY,EAAE;YACV,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;SACxC;QACD,kBAAkB,EAAE;YAChB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,4BAA4B,CAAC;YACzE,IAAI,CAAC,kBAAkB;SAC1B;KACJ,CAAC;AACN,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,MAAc;IACnD,IAAI,CAAC;QACD,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAA4B;IAC1D,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACrC,IAAI,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,MAAM,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACL,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;IACL,CAAC;IACD,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAChD,IAAI,CAAC;YACD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,kBAAkB,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACL,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,CAAC;IACL,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAc,EAAE,SAAiB;IACnE,IAAI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IAClC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kDAAkD,CAAC,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC5H,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;QAC5D,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yDAAyD,CAAC,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACjI,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAGjD;IACG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,MAAM,YAAY,GAAG,CAAC,GAAG,eAAe,CAAC,YAAY,EAAE,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACtF,MAAM,iBAAiB,GAAG,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;IAC5F,MAAM,gBAAgB,GAAG,eAAe,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IAClH,IAAI,CAAC,iBAAiB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1C,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,kBAAkB,CAAC,eAAe,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1G,IAAI,4BAA4B,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC,CAAC;IAChI,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAE,OAAe;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;IAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;IACjC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,YAAY,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;IAClH,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,WAAW,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC;IACpG,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;AACtH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAKzC;IACG,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,YAAY,GAAG,uBAAuB,EAAE,CAAC;QACzC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,2BAA2B,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAClH,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC;QACD,MAAM,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,GAAG,wBAAwB,EAAE,CAAC;YACvC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC7C,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAC/C,CAAC;IACD,IAAI,IAAY,CAAC;IACjB,IAAI,IAAI,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACtC,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;IACxE,CAAC;SAAM,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC9C,IAAI,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACJ,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;AACtG,CAAC"}

package/dist/src/jaw-ceo/openai-key.js

@@ -0,0 +1,22 @@
+const OPENAI_API_KEY_PATTERN = /\b(sk-[A-Za-z0-9_-]{16,})\b/;
+export function extractOpenAiApiKey(input) {
+    const raw = String(input || '').trim();
+    return raw.match(OPENAI_API_KEY_PATTERN)?.[1] || '';
+}
+export function hasInvalidOpenAiApiKeyInput(input) {
+    const raw = String(input || '').trim();
+    return !!raw && !extractOpenAiApiKey(raw);
+}
+export function resolveJawCeoOpenAiApiKey(args) {
+    const fromDeps = extractOpenAiApiKey(args.override);
+    if (fromDeps)
+        return { value: fromDeps, source: 'deps' };
+    const fromEnv = extractOpenAiApiKey(args.env);
+    if (fromEnv)
+        return { value: fromEnv, source: 'env' };
+    const fromSettings = extractOpenAiApiKey(args.settings);
+    if (fromSettings)
+        return { value: fromSettings, source: 'settings' };
+    return { value: '', source: 'none' };
+}
+//# sourceMappingURL=openai-key.js.map

package/dist/src/jaw-ceo/openai-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-key.js","sourceRoot":"","sources":["../../../src/jaw-ceo/openai-key.ts"],"names":[],"mappings":"AAOA,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAE7D,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAIzC;IACG,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACtD,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,YAAY;QAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACrE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC"}

package/dist/src/jaw-ceo/policy.js

@@ -0,0 +1,92 @@
+import path from 'node:path';
+const ACTIVE_WINDOW_MS = 5 * 60_000;
+const CONFIRMATION_REQUIRED_ACTIONS = new Set([
+    'instance.stop',
+    'instance.request_perm',
+    'instance.cross_route',
+    'destructive',
+    'broad_action',
+]);
+const DOCS_CODE_EXTENSIONS = new Set([
+    '.js', '.jsx', '.ts', '.tsx', '.mjs', '.cjs', '.css', '.scss', '.json', '.toml',
+    '.yaml', '.yml', '.sh', '.bash', '.zsh', '.py', '.rs', '.go', '.java', '.lock',
+]);
+const DOCS_CODE_BASENAMES = new Set([
+    'package.json',
+    'package-lock.json',
+    'pnpm-lock.yaml',
+    'yarn.lock',
+    'tsconfig.json',
+    'vite.config.ts',
+    'server.ts',
+]);
+export function canAutoVoiceResume(args) {
+    if (!args.documentVisible || !args.autoRead)
+        return false;
+    const last = Date.parse(args.lastUserActivityAt);
+    if (Number.isNaN(last))
+        return false;
+    return (args.now ?? new Date()).getTime() - last <= ACTIVE_WINDOW_MS;
+}
+export function requireConfirmation(args) {
+    if (!CONFIRMATION_REQUIRED_ACTIONS.has(args.action))
+        return { ok: true };
+    if (!args.confirmationRecordId) {
+        return {
+            ok: false,
+            code: 'confirmation_required',
+            message: `${args.action} requires an explicit confirmation token`,
+        };
+    }
+    if (!args.argsHash || !args.sessionId) {
+        return {
+            ok: false,
+            code: 'confirmation_context_missing',
+            message: `${args.action} confirmation must include argsHash and sessionId`,
+        };
+    }
+    return { ok: true };
+}
+export function assertDocsOnlyEdit(args) {
+    const target = path.resolve(args.path);
+    const basename = path.basename(target);
+    const ext = path.extname(target).toLowerCase();
+    if (DOCS_CODE_BASENAMES.has(basename) || DOCS_CODE_EXTENSIONS.has(ext)) {
+        return { ok: false, code: 'docs_edit_code_path_denied', message: 'CEO docs edit cannot touch code, config, script, or package metadata paths' };
+    }
+    if (ext !== '.md' && basename !== 'README.md') {
+        return { ok: false, code: 'docs_edit_extension_denied', message: 'CEO docs edit is limited to markdown files and README.md' };
+    }
+    for (const root of args.allowedRoots) {
+        const resolvedRoot = path.resolve(root);
+        const relative = path.relative(resolvedRoot, target);
+        if (relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative))) {
+            return { ok: true };
+        }
+    }
+    return { ok: false, code: 'docs_edit_root_denied', message: 'path is outside the Jaw CEO docs-edit allowlist' };
+}
+export function isReadonlyCliQueryAllowed(command) {
+    const trimmed = command.trim();
+    if (!trimmed || /[;&|`$<>]/.test(trimmed))
+        return false;
+    const allowedPrefixes = [
+        'pwd',
+        'ls',
+        'rg',
+        'sed',
+        'nl',
+        'wc',
+        'git status',
+        'git diff',
+        'git show',
+        'git log',
+        'gh issue view',
+        'gh issue list',
+        'gh pr view',
+        'gh pr list',
+        'gh run list',
+    ];
+    return allowedPrefixes.some(prefix => trimmed === prefix || trimmed.startsWith(`${prefix} `));
+}
+//# sourceMappingURL=policy.js.map