cordisx 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/renderer/agent-session-runtime-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-session-runtime-types.js","sourceRoot":"","sources":["../../../src/renderer/agent-session-runtime-types.ts"],"names":[],"mappings":"AAiMA,MAAM,CAAC,MAAM,cAAc,GACzB,6GAAsH,CAAA;AAExH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,wGAAiH,CAAA;AAEnH,MAAM,CAAC,MAAM,eAAe,GAC1B,8GAAuH,CAAA;AAEzH,MAAM,CAAC,MAAM,cAAc,GACzB,0HAAmI,CAAA;AAErI,MAAM,CAAC,MAAM,eAAe,GAC1B,yGAAkH,CAAA;AAEpH,MAAM,CAAC,MAAM,WAAW,GACtB,2GAAoH,CAAA;AAEtH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,kHAA2H,CAAA;AAE7H,MAAM,CAAC,MAAM,kBAAkB,GAC7B,0GAAmH,CAAA;AAErH,MAAM,CAAC,MAAM,kBAAkB,GAC7B,0GAAmH,CAAA;AAErH,MAAM,CAAC,MAAM,kBAAkB,GAC7B,0GAAmH,CAAA;AAErH,MAAM,CAAC,MAAM,kBAAkB,GAC7B,0GAAmH,CAAA;AAErH,MAAM,CAAC,MAAM,2BAA2B,GACtC,8HAAuI,CAAA;AAEzI,MAAM,CAAC,MAAM,uBAAuB,GAClC,0HAAmI,CAAA;AAErI,MAAM,CAAC,MAAM,qBAAqB,GAChC,wHAAiI,CAAA;AAEnI,MAAM,CAAC,MAAM,oBAAoB,GAC/B,wHAAiI,CAAA;AAEnI,MAAM,CAAC,MAAM,qBAAqB,GAChC,oHAA6H,CAAA;AAE/H,MAAM,CAAC,MAAM,kBAAkB,GAC7B,mHAA4H,CAAA;AAE9H,MAAM,CAAC,MAAM,sBAAsB,GACjC,4HAAqI,CAAA;AAEvI,MAAM,CAAC,MAAM,yBAAyB,GACpC,2HAAoI,CAAA;AAEtI,MAAM,CAAC,MAAM,0BAA0B,GACrC,4HAAqI,CAAA;AAEvI,MAAM,CAAC,MAAM,8BAA8B,GACzC,gIAAyI,CAAA;AAE3I,MAAM,CAAC,MAAM,+BAA+B,GAC1C,iIAA0I,CAAA;AAE5I,MAAM,CAAC,MAAM,4BAA4B,GACvC,yHAAkI,CAAA;AAYpI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAQ,KAAY,EAAS,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;AAE3E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAmB,EAAE,CACxD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAA;AAEtE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,UAAU,EAAE,CAAA;AAEpG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAoC,EAAE,CAC9E,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAEtE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAA8B,EAAE,IAAuB,EAAW,EAAE;IAC/F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;IACxC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;IACjC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AACnG,CAAC,CAAA"}
+{"version":3,"file":"agent-session-runtime-types.js","sourceRoot":"","sources":["../../../src/renderer/agent-session-runtime-types.ts"],"names":[],"mappings":"AAuMA,MAAM,CAAC,MAAM,cAAc,GACzB,6GAAsH,CAAA;AAExH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,wGAAiH,CAAA;AAEnH,MAAM,CAAC,MAAM,eAAe,GAC1B,8GAAuH,CAAA;AAEzH,MAAM,CAAC,MAAM,cAAc,GACzB,0HAAmI,CAAA;AAErI,MAAM,CAAC,MAAM,eAAe,GAC1B,yGAAkH,CAAA;AAEpH,MAAM,CAAC,MAAM,WAAW,GACtB,2GAAoH,CAAA;AAEtH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,kHAA2H,CAAA;AAE7H,MAAM,CAAC,MAAM,kBAAkB,GAC7B,0GAAmH,CAAA;AAErH,MAAM,CAAC,MAAM,kBAAkB,GAC7B,0GAAmH,CAAA;AAErH,MAAM,CAAC,MAAM,kBAAkB,GAC7B,0GAAmH,CAAA;AAErH,MAAM,CAAC,MAAM,kBAAkB,GAC7B,0GAAmH,CAAA;AAErH,MAAM,CAAC,MAAM,2BAA2B,GACtC,8HAAuI,CAAA;AAEzI,MAAM,CAAC,MAAM,uBAAuB,GAClC,0HAAmI,CAAA;AAErI,MAAM,CAAC,MAAM,qBAAqB,GAChC,wHAAiI,CAAA;AAEnI,MAAM,CAAC,MAAM,oBAAoB,GAC/B,wHAAiI,CAAA;AAEnI,MAAM,CAAC,MAAM,qBAAqB,GAChC,oHAA6H,CAAA;AAE/H,MAAM,CAAC,MAAM,kBAAkB,GAC7B,mHAA4H,CAAA;AAE9H,MAAM,CAAC,MAAM,sBAAsB,GACjC,4HAAqI,CAAA;AAEvI,MAAM,CAAC,MAAM,yBAAyB,GACpC,2HAAoI,CAAA;AAEtI,MAAM,CAAC,MAAM,0BAA0B,GACrC,4HAAqI,CAAA;AAEvI,MAAM,CAAC,MAAM,8BAA8B,GACzC,gIAAyI,CAAA;AAE3I,MAAM,CAAC,MAAM,+BAA+B,GAC1C,iIAA0I,CAAA;AAE5I,MAAM,CAAC,MAAM,4BAA4B,GACvC,yHAAkI,CAAA;AAYpI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAQ,KAAY,EAAS,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;AAE3E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAmB,EAAE,CACxD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAA;AAEtE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,UAAU,EAAE,CAAA;AAEpG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAoC,EAAE,CAC9E,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAEtE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAA8B,EAAE,IAAuB,EAAW,EAAE;IAC/F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;IACxC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;IACjC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AACnG,CAAC,CAAA"}

package/dist/src/renderer/agent-task-approvals.d.ts

@@ -0,0 +1,22 @@
+import type { AgentTaskApprovalHandlers } from '@cordisx/protocol/agent-task-binding/v1';
+import type { AgentTaskRecord } from '../agent-task-record.js';
+import type { AgentTaskCreateRequest } from '@cordisx/protocol/agent-task/v1';
+import type { AgentTaskApprovalInstaller } from './agent-tasks.js';
+import type { CordisXAgentSessionRuntime } from './agent-session-runtime.js';
+import type { PluginOwnerIdentity } from '@cordisx/protocol/sessions/v1';
+/** Only approval callbacks are exposed; no plugin callback runs during first-turn preparation. */
+export declare class HostAgentTaskApprovalRegistry {
+    private readonly runtime;
+    private readonly owner;
+    private readonly active;
+    private readonly declared;
+    private readonly validateRecord?;
+    private readonly registrations;
+    constructor(runtime: CordisXAgentSessionRuntime, owner: PluginOwnerIdentity, active: () => boolean, declared: (commandId: string) => boolean, validateRecord?: ((request: AgentTaskCreateRequest, record: AgentTaskRecord, stage: "install" | "use") => Promise<boolean>) | undefined);
+    register(command: {
+        commandId: string;
+    }, handlers: AgentTaskApprovalHandlers): () => void;
+    capture(commandId: string): AgentTaskApprovalInstaller | undefined;
+    dispose(): void;
+}
+//# sourceMappingURL=agent-task-approvals.d.ts.map

package/dist/src/renderer/agent-task-approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-task-approvals.d.ts","sourceRoot":"","sources":["../../../src/renderer/agent-task-approvals.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAA4B,yBAAyB,EAAE,MAAM,yCAAyC,CAAA;AAClH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAA;AAC7E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AAClE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AAC5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AAcxE,kGAAkG;AAClG,qBAAa,6BAA6B;IAGtC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IANlC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;gBAE7C,OAAO,EAAE,0BAA0B,EACnC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,OAAO,EACrB,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,EACxC,cAAc,CAAC,GAAE,CAChC,OAAO,EAAE,sBAAsB,EAC/B,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,SAAS,GAAG,KAAK,KACrB,OAAO,CAAC,OAAO,CAAC,aAAA;IAGvB,QAAQ,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,QAAQ,EAAE,yBAAyB,GAAG,MAAM,IAAI;IAwBzF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,GAAG,SAAS;IA6HlE,OAAO,IAAI,IAAI;CAOhB"}

package/dist/src/renderer/agent-task-approvals.js

@@ -0,0 +1,152 @@
+import { AgentTaskApprovalCleanupError } from '../agent-task-record.js';
+/** Only approval callbacks are exposed; no plugin callback runs during first-turn preparation. */
+export class HostAgentTaskApprovalRegistry {
+    runtime;
+    owner;
+    active;
+    declared;
+    validateRecord;
+    registrations = new Map();
+    constructor(runtime, owner, active, declared, validateRecord) {
+        this.runtime = runtime;
+        this.owner = owner;
+        this.active = active;
+        this.declared = declared;
+        this.validateRecord = validateRecord;
+    }
+    register(command, handlers) {
+        if (!this.active() || typeof command?.commandId !== 'string' || !command.commandId.length
+            || !this.declared(command.commandId) || this.registrations.has(command.commandId)
+            || typeof handlers?.resolveRequest !== 'function'
+            || typeof handlers.answerAuthority !== 'function'
+            || (handlers.answerLegacy !== undefined && typeof handlers.answerLegacy !== 'function')) {
+            throw new Error('Task approval registration unavailable or duplicate');
+        }
+        const registration = {
+            id: crypto.randomUUID(),
+            handlers: Object.freeze({ ...handlers }),
+            installations: new Set(),
+            active: true,
+        };
+        this.registrations.set(command.commandId, registration);
+        return () => {
+            registration.active = false;
+            if (this.registrations.get(command.commandId) === registration)
+                this.registrations.delete(command.commandId);
+            for (const installation of registration.installations)
+                void installation.close().catch(() => undefined);
+        };
+    }
+    capture(commandId) {
+        const registration = this.registrations.get(commandId);
+        if (registration === undefined)
+            return undefined;
+        const live = () => this.declared(commandId) && this.active() && registration.active
+            && (!this.runtime.taskApprovalDeclarations(this.owner)
+                || this.runtime.taskApprovalDeclarations(this.owner, commandId))
+            && this.registrations.get(commandId) === registration;
+        return {
+            active: live,
+            install: async (agent, request, record) => {
+                if (this.validateRecord !== undefined && !await this.validateRecord(request, record, 'install')) {
+                    throw new Error('Durable required task intent unavailable');
+                }
+                if (!live() || !await this.runtime.authorizeTask(this.owner, 'approval', agent.id)) {
+                    throw new Error('Task approval registration replaced');
+                }
+                if (!live())
+                    throw new Error('Task approval registration replaced');
+                const taskScoped = this.runtime.taskApprovalDeclarations(this.owner, commandId);
+                const controller = new AbortController();
+                let releaseTask;
+                const handles = [];
+                const installation = {
+                    controller,
+                    handles,
+                    close: async () => {
+                        controller.abort();
+                        releaseTask?.();
+                        registration.installations.delete(installation);
+                        const results = await Promise.allSettled(handles.splice(0).map(handle => handle.dispose()));
+                        if (results.some(result => result.status === 'rejected'))
+                            throw new AgentTaskApprovalCleanupError();
+                    },
+                };
+                registration.installations.add(installation);
+                const current = () => live() && !controller.signal.aborted;
+                const binding = structuredClone({
+                    operationId: record.operationId,
+                    toolScope: request.tool.scope,
+                });
+                const freeze = (value) => {
+                    if (value === null || typeof value !== 'object')
+                        return;
+                    Object.values(value).forEach(freeze);
+                    Object.freeze(value);
+                };
+                freeze(binding);
+                const invoke = async (fn, source) => {
+                    if (!current() || source?.aborted)
+                        throw new Error('Task approval binding unavailable');
+                    const signal = source === undefined ? controller.signal : AbortSignal.any([source, controller.signal]);
+                    const value = await fn(signal);
+                    if (!current() || signal.aborted)
+                        throw new Error('Task approval binding replaced');
+                    return value;
+                };
+                const retain = async (handle) => {
+                    if (!current() || !await this.runtime.authorizeTask(this.owner, 'approval', agent.id)) {
+                        await handle.dispose();
+                        throw new Error('Task approval installation replaced');
+                    }
+                    if (!current()) {
+                        await handle.dispose();
+                        throw new Error('Task approval installation replaced');
+                    }
+                    handles.push(handle);
+                };
+                try {
+                    await retain(await this.runtime.registerAuthorityAnswerer(this.owner, { agent, definition: request.definition }, (question, source) => invoke(signal => registration.handlers.answerAuthority(question, binding, signal), source)));
+                    if (registration.handlers.answerLegacy !== undefined) {
+                        await retain(await this.runtime.registerAnswerer(this.owner, agent, (question, source) => invoke(signal => registration.handlers.answerLegacy(question, binding, signal), source)));
+                    }
+                    const resolver = await this.runtime.registerRequestResolver(this.owner, { agent, definition: request.definition }, (question, signal) => invoke(combined => registration.handlers.resolveRequest(question, binding, combined), signal));
+                    if (resolver.status !== 'registered')
+                        throw new Error('Task approval resolver unavailable');
+                    await retain(resolver.handle);
+                    if (taskScoped) {
+                        if (record.bindingPolicy !== 'required' || record.phase !== 'approval-installing') {
+                            throw new Error('Required task intent unavailable');
+                        }
+                        releaseTask = this.runtime.bindTaskPermission({
+                            $schema: 'https://raw.githubusercontent.com/cordisx/cordisx-protocol/main/schemas/agent-task-permission-source.v1.schema.json',
+                            contract: 'cordisx.agent-task-permission-source/v1',
+                            schemaVersion: 1,
+                            kind: 'host-agent-task',
+                            owner: this.owner,
+                            operationId: record.operationId,
+                            commandId,
+                            sessionId: record.sessionId,
+                            definition: request.definition,
+                            taskRegistrationId: registration.id,
+                        }, agent, current, async () => this.validateRecord !== undefined && await this.validateRecord(request, record, 'use'));
+                    }
+                    return installation.close;
+                }
+                catch (error) {
+                    await installation.close();
+                    throw error;
+                }
+            },
+        };
+    }
+    dispose() {
+        for (const registration of this.registrations.values()) {
+            registration.active = false;
+            for (const installation of registration.installations)
+                void installation.close().catch(() => undefined);
+        }
+        this.registrations.clear();
+    }
+}
+//# sourceMappingURL=agent-task-approvals.js.map

package/dist/src/renderer/agent-task-approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-task-approvals.js","sourceRoot":"","sources":["../../../src/renderer/agent-task-approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAA;AAoBvE,kGAAkG;AAClG,MAAM,OAAO,6BAA6B;IAGrB;IACA;IACA;IACA;IACA;IANF,aAAa,GAAG,IAAI,GAAG,EAAwB,CAAA;IAChE,YACmB,OAAmC,EACnC,KAA0B,EAC1B,MAAqB,EACrB,QAAwC,EACxC,cAII;QARJ,YAAO,GAAP,OAAO,CAA4B;QACnC,UAAK,GAAL,KAAK,CAAqB;QAC1B,WAAM,GAAN,MAAM,CAAe;QACrB,aAAQ,GAAR,QAAQ,CAAgC;QACxC,mBAAc,GAAd,cAAc,CAIV;IACpB,CAAC;IAEJ,QAAQ,CAAC,OAA8B,EAAE,QAAmC;QAC1E,IACE,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,OAAO,OAAO,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM;eAClF,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;eAC9E,OAAO,QAAQ,EAAE,cAAc,KAAK,UAAU;eAC9C,OAAO,QAAQ,CAAC,eAAe,KAAK,UAAU;eAC9C,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,EACvF,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QACxE,CAAC;QACD,MAAM,YAAY,GAAiB;YACjC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC;YACxC,aAAa,EAAE,IAAI,GAAG,EAAE;YACxB,MAAM,EAAE,IAAI;SACb,CAAA;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QACvD,OAAO,GAAG,EAAE;YACV,YAAY,CAAC,MAAM,GAAG,KAAK,CAAA;YAC3B,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,YAAY;gBAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC5G,KAAK,MAAM,YAAY,IAAI,YAAY,CAAC,aAAa;gBAAE,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzG,CAAC,CAAA;IACH,CAAC;IAED,OAAO,CAAC,SAAiB;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACtD,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QAChD,MAAM,IAAI,GAAG,GAAY,EAAE,CACzB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,YAAY,CAAC,MAAM;eAC7D,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;mBACjD,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;eAC/D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,YAAY,CAAA;QACvD,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;gBACxC,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;oBAChG,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;gBAC7D,CAAC;gBACD,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;oBACnF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;gBACxD,CAAC;gBACD,IAAI,CAAC,IAAI,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;gBACnE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;gBAC/E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;gBACxC,IAAI,WAAqC,CAAA;gBACzC,MAAM,OAAO,GAA4B,EAAE,CAAA;gBAC3C,MAAM,YAAY,GAAiB;oBACjC,UAAU;oBACV,OAAO;oBACP,KAAK,EAAE,KAAK,IAAI,EAAE;wBAChB,UAAU,CAAC,KAAK,EAAE,CAAA;wBAClB,WAAW,EAAE,EAAE,CAAA;wBACf,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;wBAC/C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;wBAC3F,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;4BAAE,MAAM,IAAI,6BAA6B,EAAE,CAAA;oBACrG,CAAC;iBACF,CAAA;gBACD,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;gBAC5C,MAAM,OAAO,GAAG,GAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAA;gBACnE,MAAM,OAAO,GAA6B,eAAe,CAAC;oBACxD,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;iBAC9B,CAAC,CAAA;gBACF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAQ,EAAE;oBACtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;wBAAE,OAAM;oBACvD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;oBACpC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACtB,CAAC,CAAA;gBACD,MAAM,CAAC,OAAO,CAAC,CAAA;gBACf,MAAM,MAAM,GAAG,KAAK,EAClB,EAAmD,EACnD,MAAoB,EACJ,EAAE;oBAClB,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;oBACvF,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;oBACtG,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAA;oBAC9B,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;oBACnF,OAAO,KAAK,CAAA;gBACd,CAAC,CAAA;gBACD,MAAM,MAAM,GAAG,KAAK,EAAE,MAAuC,EAAiB,EAAE;oBAC9E,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;wBACtF,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;wBACtB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;oBACxD,CAAC;oBACD,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;wBACf,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;wBACtB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;oBACxD,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBACtB,CAAC,CAAA;gBACD,IAAI,CAAC;oBACH,MAAM,MAAM,CACV,MAAM,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAC1C,IAAI,CAAC,KAAK,EACV,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,EACzC,CAAC,QAAQ,EAAE,MAAoB,EAAE,EAAE,CACjC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAC7F,CACF,CAAA;oBACD,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;wBACrD,MAAM,MAAM,CACV,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CACjC,IAAI,CAAC,KAAK,EACV,KAAK,EACL,CAAC,QAAQ,EAAE,MAAoB,EAAE,EAAE,CACjC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAC3F,CACF,CAAA;oBACH,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CACzD,IAAI,CAAC,KAAK,EACV,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,EACzC,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CACnB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAChG,CAAA;oBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY;wBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;oBAC3F,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;oBAC7B,IAAI,UAAU,EAAE,CAAC;wBACf,IAAI,MAAM,CAAC,aAAa,KAAK,UAAU,IAAI,MAAM,CAAC,KAAK,KAAK,qBAAqB,EAAE,CAAC;4BAClF,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;wBACrD,CAAC;wBACD,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAC3C;4BACE,OAAO,EACL,qHAAqH;4BACvH,QAAQ,EAAE,yCAAyC;4BACnD,aAAa,EAAE,CAAC;4BAChB,IAAI,EAAE,iBAAiB;4BACvB,KAAK,EAAE,IAAI,CAAC,KAAK;4BACjB,WAAW,EAAE,MAAM,CAAC,WAAW;4BAC/B,SAAS;4BACT,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;4BAC9B,kBAAkB,EAAE,YAAY,CAAC,EAAE;yBACpC,EACD,KAAK,EACL,OAAO,EACP,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CACnG,CAAA;oBACH,CAAC;oBACD,OAAO,YAAY,CAAC,KAAK,CAAA;gBAC3B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,YAAY,CAAC,KAAK,EAAE,CAAA;oBAC1B,MAAM,KAAK,CAAA;gBACb,CAAC;YACH,CAAC;SACF,CAAA;IACH,CAAC;IAED,OAAO;QACL,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YACvD,YAAY,CAAC,MAAM,GAAG,KAAK,CAAA;YAC3B,KAAK,MAAM,YAAY,IAAI,YAAY,CAAC,aAAa;gBAAE,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzG,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAA;IAC5B,CAAC;CACF"}

package/dist/src/renderer/agent-task-permission-scope.d.ts

@@ -0,0 +1,37 @@
+import type { AgentRuntimeCapability } from '@cordisx/protocol/agents/v1';
+import type { ApprovalAgentBinding } from '@cordisx/protocol/approval/v2';
+import type { PluginOwnerIdentity } from '@cordisx/protocol/sessions/v1';
+import type { AgentTaskApprovalAuthorityLeaseV1, AgentTaskPermissionSourceV1 } from '@cordisx/protocol/agent-task-permission/v1';
+import type { AgentApprovalAuthorityRouteRequest, AgentRouteSessionScopeOptions, AgentRuntimePermissionDeclaration } from './agent-route-session-scope.js';
+export type AgentTaskScopeSource = AgentTaskPermissionSourceV1 | Readonly<{
+    kind: 'host-agent-task-authority';
+    lease: AgentTaskApprovalAuthorityLeaseV1;
+}>;
+/** Ephemeral Host provenance only. Persistent decisions remain in the existing permission broker. */
+export declare class AgentTaskPermissionScopeAuthority {
+    private readonly options;
+    private readonly declarations;
+    private readonly requiredSessions;
+    private readonly sources;
+    private readonly authorities;
+    constructor(options: AgentRouteSessionScopeOptions);
+    install(owner: PluginOwnerIdentity, declarations: readonly AgentRuntimePermissionDeclaration[]): void;
+    uninstall(owner: PluginOwnerIdentity): void;
+    declares(owner: PluginOwnerIdentity, capability: AgentRuntimeCapability, commandId?: string): boolean;
+    /** Called only after the owner-store required intent and actual Agent have been matched by Host installation. */
+    bind(source: AgentTaskPermissionSourceV1, requester: ApprovalAgentBinding, current: () => boolean, readback: () => Promise<boolean>): () => void;
+    markRequired(owner: PluginOwnerIdentity, sessionId: string): void;
+    hasSource(owner: PluginOwnerIdentity, sessionId: string): boolean;
+    authorizeRequest(owner: PluginOwnerIdentity, sessionId: string): Promise<boolean>;
+    mint(owner: PluginOwnerIdentity, request: AgentApprovalAuthorityRouteRequest, current: () => boolean): Promise<AgentTaskApprovalAuthorityLeaseV1 | undefined>;
+    /** Broker re-reads Host registration at every asynchronous authorization boundary. */
+    validate(owner: PluginOwnerIdentity, capability: AgentRuntimeCapability, sessionId: string, source: AgentTaskScopeSource): boolean;
+    readback(owner: PluginOwnerIdentity, capability: AgentRuntimeCapability, sessionId: string, source: AgentTaskScopeSource): Promise<boolean>;
+    leaseActive(owner: PluginOwnerIdentity, lease: AgentTaskApprovalAuthorityLeaseV1, requester: ApprovalAgentBinding, authority: ApprovalAgentBinding): boolean;
+    release(lease: AgentTaskApprovalAuthorityLeaseV1): void;
+    revoke(pluginId: string): void;
+    private active;
+    private key;
+    private decide;
+}
+//# sourceMappingURL=agent-task-permission-scope.d.ts.map

package/dist/src/renderer/agent-task-permission-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-task-permission-scope.d.ts","sourceRoot":"","sources":["../../../src/renderer/agent-task-permission-scope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,KAAK,EACV,iCAAiC,EACjC,2BAA2B,EAC5B,MAAM,4CAA4C,CAAA;AACnD,OAAO,KAAK,EACV,kCAAkC,EAClC,6BAA6B,EAC7B,iCAAiC,EAClC,MAAM,gCAAgC,CAAA;AAEvC,MAAM,MAAM,oBAAoB,GAC5B,2BAA2B,GAC3B,QAAQ,CAAC;IACT,IAAI,EAAE,2BAA2B,CAAA;IACjC,KAAK,EAAE,iCAAiC,CAAA;CACzC,CAAC,CAAA;AAkBJ,qGAAqG;AACrG,qBAAa,iCAAiC;IAMhC,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkE;IAC/F,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoB;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqC;gBAEpC,OAAO,EAAE,6BAA6B;IAEnE,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,SAAS,iCAAiC,EAAE,GAAG,IAAI;IAQrG,SAAS,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI;IAK3C,QAAQ,CAAC,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,sBAAsB,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;IAOrG,iHAAiH;IACjH,IAAI,CACF,MAAM,EAAE,2BAA2B,EACnC,SAAS,EAAE,oBAAoB,EAC/B,OAAO,EAAE,MAAM,OAAO,EACtB,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAC/B,MAAM,IAAI;IAwBb,YAAY,CAAC,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAIjE,SAAS,CAAC,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAI3D,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQjF,IAAI,CACR,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,kCAAkC,EAC3C,OAAO,EAAE,MAAM,OAAO,GACrB,OAAO,CAAC,iCAAiC,GAAG,SAAS,CAAC;IAuCzD,sFAAsF;IACtF,QAAQ,CACN,KAAK,EAAE,mBAAmB,EAC1B,UAAU,EAAE,sBAAsB,EAClC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,oBAAoB,GAC3B,OAAO;IAYJ,QAAQ,CACZ,KAAK,EAAE,mBAAmB,EAC1B,UAAU,EAAE,sBAAsB,EAClC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,OAAO,CAAC;IAYnB,WAAW,CACT,KAAK,EAAE,mBAAmB,EAC1B,KAAK,EAAE,iCAAiC,EACxC,SAAS,EAAE,oBAAoB,EAC/B,SAAS,EAAE,oBAAoB,GAC9B,OAAO;IAQV,OAAO,CAAC,KAAK,EAAE,iCAAiC,GAAG,IAAI;IAIvD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAO9B,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,GAAG;YAIG,MAAM;CAoBrB"}

package/dist/src/renderer/agent-task-permission-scope.js

@@ -0,0 +1,178 @@
+const equal = (a, b) => JSON.stringify(a) === JSON.stringify(b);
+const ownerKey = (owner) => `${owner.pluginId}\u0000${owner.generation}`;
+/** Ephemeral Host provenance only. Persistent decisions remain in the existing permission broker. */
+export class AgentTaskPermissionScopeAuthority {
+    options;
+    declarations = new Map();
+    requiredSessions = new Set();
+    sources = new Map();
+    authorities = new Map();
+    constructor(options) {
+        this.options = options;
+    }
+    install(owner, declarations) {
+        this.revoke(owner.pluginId);
+        for (const key of this.declarations.keys()) {
+            if (key.startsWith(`${owner.pluginId}\u0000`))
+                this.declarations.delete(key);
+        }
+        this.declarations.set(ownerKey(owner), declarations);
+    }
+    uninstall(owner) {
+        this.declarations.delete(ownerKey(owner));
+        this.revoke(owner.pluginId);
+    }
+    declares(owner, capability, commandId) {
+        const declaration = this.declarations.get(ownerKey(owner))?.find(item => item.name === capability);
+        const selector = capability === 'approvals.request' ? declaration?.scope.task : declaration?.scope.taskRequester;
+        return declaration?.manifestVersion === 12 && selector?.kind === 'agent-task-command'
+            && (commandId === undefined || selector.commandId === commandId);
+    }
+    /** Called only after the owner-store required intent and actual Agent have been matched by Host installation. */
+    bind(source, requester, current, readback) {
+        if (!current() || source.sessionId !== requester.sessionId || requester.agentId !== requester.sessionId
+            || !equal(source.definition, requester.definition)
+            || source.connectionGeneration !== this.options.connectionGeneration()
+            || !this.declares(source.owner, 'approvals.request', source.commandId)
+            || !this.declares(source.owner, 'approvals.answer', source.commandId))
+            throw new Error('Task permission source is unavailable');
+        const key = this.key(source.owner, source.sessionId);
+        if (this.sources.has(key))
+            throw new Error('Task permission source already installed');
+        const record = {
+            source: Object.freeze(structuredClone(source)),
+            requester: structuredClone(requester),
+            current,
+            readback,
+        };
+        this.requiredSessions.add(key);
+        this.sources.set(key, record);
+        return () => {
+            if (this.sources.get(key) === record)
+                this.sources.delete(key);
+            for (const [id, authority] of this.authorities)
+                if (authority.source === record)
+                    this.authorities.delete(id);
+        };
+    }
+    markRequired(owner, sessionId) {
+        this.requiredSessions.add(this.key(owner, sessionId));
+    }
+    hasSource(owner, sessionId) {
+        return this.requiredSessions.has(this.key(owner, sessionId));
+    }
+    async authorizeRequest(owner, sessionId) {
+        const record = this.sources.get(this.key(owner, sessionId));
+        if (record === undefined || !this.active(record))
+            return false;
+        const decision = await this.decide(owner, 'approvals.request', sessionId, record.source);
+        return decision.authorized && this.active(record)
+            && decision.leaseId !== undefined && this.options.isLeaseActive?.(owner, decision.leaseId) === true;
+    }
+    async mint(owner, request, current) {
+        const source = this.sources.get(this.key(owner, request.requester.sessionId));
+        if (source === undefined || !this.active(source)
+            || !equal(source.requester, request.requester)
+            || !current() || !request.registrationId || !request.routingId
+            || !this.declares(owner, 'approvals.answer', source.source.commandId))
+            return undefined;
+        const lease = Object.freeze({
+            $schema: 'https://raw.githubusercontent.com/cordisx/cordisx-protocol/main/schemas/agent-task-approval-authority-lease.v1.schema.json',
+            contract: 'cordisx.agent-task-approval-authority-lease/v1',
+            schemaVersion: 1,
+            leaseId: crypto.randomUUID(),
+            taskSource: source.source,
+            routingId: request.routingId,
+            registrationId: request.registrationId,
+            requester: Object.freeze(structuredClone(request.requester)),
+            authority: Object.freeze(structuredClone(request.authority)),
+        });
+        const record = { lease, source, current };
+        this.authorities.set(lease.leaseId, record);
+        try {
+            const decision = await this.decide(owner, 'approvals.answer', request.authority.sessionId, {
+                kind: 'host-agent-task-authority',
+                lease,
+            });
+            if (!decision.authorized || decision.leaseId === undefined)
+                return undefined;
+            record.permissionLeaseId = decision.leaseId;
+            return this.leaseActive(owner, lease, request.requester, request.authority) ? lease : undefined;
+        }
+        finally {
+            if (record.permissionLeaseId === undefined || !this.leaseActive(owner, lease, request.requester, request.authority)) {
+                this.authorities.delete(lease.leaseId);
+            }
+        }
+    }
+    /** Broker re-reads Host registration at every asynchronous authorization boundary. */
+    validate(owner, capability, sessionId, source) {
+        if (source.kind === 'host-agent-task') {
+            const record = this.sources.get(this.key(owner, sessionId));
+            return capability === 'approvals.request' && record !== undefined && record.source === source
+                && this.active(record) && source.sessionId === sessionId;
+        }
+        const record = this.authorities.get(source.lease.leaseId);
+        return capability === 'approvals.answer' && record?.lease === source.lease
+            && ownerKey(owner) === ownerKey(record.source.source.owner)
+            && record.lease.authority.sessionId === sessionId && this.active(record.source) && record.current();
+    }
+    async readback(owner, capability, sessionId, source) {
+        if (!this.validate(owner, capability, sessionId, source))
+            return false;
+        const record = source.kind === 'host-agent-task'
+            ? this.sources.get(this.key(owner, sessionId))
+            : this.authorities.get(source.lease.leaseId)?.source;
+        try {
+            return record !== undefined && await record.readback() && this.validate(owner, capability, sessionId, source);
+        }
+        catch {
+            return false;
+        }
+    }
+    leaseActive(owner, lease, requester, authority) {
+        const record = this.authorities.get(lease.leaseId);
+        return record?.lease === lease && equal(lease.requester, requester) && equal(lease.authority, authority)
+            && this.validate(owner, 'approvals.answer', authority.sessionId, { kind: 'host-agent-task-authority', lease })
+            && record.permissionLeaseId !== undefined
+            && this.options.isLeaseActive?.(owner, record.permissionLeaseId) === true;
+    }
+    release(lease) {
+        this.authorities.delete(lease.leaseId);
+    }
+    revoke(pluginId) {
+        for (const [key, record] of this.sources)
+            if (record.source.owner.pluginId === pluginId)
+                this.sources.delete(key);
+        for (const [key, record] of this.authorities) {
+            if (record.source.source.owner.pluginId === pluginId)
+                this.authorities.delete(key);
+        }
+    }
+    active(record) {
+        return this.sources.get(this.key(record.source.owner, record.source.sessionId)) === record
+            && record.current() && record.source.connectionGeneration === this.options.connectionGeneration()
+            && this.declares(record.source.owner, 'approvals.request', record.source.commandId)
+            && this.declares(record.source.owner, 'approvals.answer', record.source.commandId);
+    }
+    key(owner, sessionId) {
+        return `${ownerKey(owner)}\u0000${sessionId}`;
+    }
+    async decide(owner, capability, sessionId, scopeSource) {
+        try {
+            return await this.options.decide({
+                schemaVersion: 4,
+                owner,
+                capability,
+                scope: { sessionIds: [sessionId] },
+                routeId: scopeSource.kind,
+                routeInstanceId: scopeSource.kind === 'host-agent-task' ? scopeSource.operationId : scopeSource.lease.routingId,
+                scopeSource,
+            });
+        }
+        catch {
+            return { authorized: false };
+        }
+    }
+}
+//# sourceMappingURL=agent-task-permission-scope.js.map

package/dist/src/renderer/agent-task-permission-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-task-permission-scope.js","sourceRoot":"","sources":["../../../src/renderer/agent-task-permission-scope.ts"],"names":[],"mappings":"AAiCA,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,CAAU,EAAW,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;AAC1F,MAAM,QAAQ,GAAG,CAAC,KAA0B,EAAU,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,UAAU,EAAE,CAAA;AAErG,qGAAqG;AACrG,MAAM,OAAO,iCAAiC;IAMf;IALZ,YAAY,GAAG,IAAI,GAAG,EAAwD,CAAA;IAC9E,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IACzC,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAA;IAEjE,YAA6B,OAAsC;QAAtC,YAAO,GAAP,OAAO,CAA+B;IAAG,CAAC;IAEvE,OAAO,CAAC,KAA0B,EAAE,YAA0D;QAC5F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,QAAQ,QAAQ,CAAC;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC9E,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAA;IACtD,CAAC;IAED,SAAS,CAAC,KAA0B;QAClC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC7B,CAAC;IAED,QAAQ,CAAC,KAA0B,EAAE,UAAkC,EAAE,SAAkB;QACzF,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAA;QAClG,MAAM,QAAQ,GAAG,UAAU,KAAK,mBAAmB,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAA;QAChH,OAAO,WAAW,EAAE,eAAe,KAAK,EAAE,IAAI,QAAQ,EAAE,IAAI,KAAK,oBAAoB;eAChF,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAA;IACpE,CAAC;IAED,iHAAiH;IACjH,IAAI,CACF,MAAmC,EACnC,SAA+B,EAC/B,OAAsB,EACtB,QAAgC;QAEhC,IACE,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,SAAS;eAChG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC;eAC/C,MAAM,CAAC,oBAAoB,KAAK,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE;eACnE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC;eACnE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,CAAC,SAAS,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;QACtF,MAAM,MAAM,GAAG;YACb,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC9C,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC;YACrC,OAAO;YACP,QAAQ;SACT,CAAA;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC7B,OAAO,GAAG,EAAE;YACV,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC9D,KAAK,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,WAAW;gBAAE,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM;oBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC9G,CAAC,CAAA;IACH,CAAC;IAED,YAAY,CAAC,KAA0B,EAAE,SAAiB;QACxD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;IACvD,CAAC;IAED,SAAS,CAAC,KAA0B,EAAE,SAAiB;QACrD,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAA0B,EAAE,SAAiB;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;QAC3D,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAA;QAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;QACxF,OAAO,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;eAC5C,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;IACvG,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAA0B,EAC1B,OAA2C,EAC3C,OAAsB;QAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAA;QAC7E,IACE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;eACzC,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;eAC3C,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,SAAS;eAC3D,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;YACrE,OAAO,SAAS,CAAA;QAClB,MAAM,KAAK,GAAsC,MAAM,CAAC,MAAM,CAAC;YAC7D,OAAO,EACL,4HAA4H;YAC9H,QAAQ,EAAE,gDAAgD;YAC1D,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;YAC5B,UAAU,EAAE,MAAM,CAAC,MAAM;YACzB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC5D,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;SAC7D,CAAC,CAAA;QACF,MAAM,MAAM,GAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAC1D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC3C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE;gBACzF,IAAI,EAAE,2BAA2B;gBACjC,KAAK;aACN,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YAC5E,MAAM,CAAC,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAA;YAC3C,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;QACjG,CAAC;gBAAS,CAAC;YACT,IACE,MAAM,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,EAC/G,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,QAAQ,CACN,KAA0B,EAC1B,UAAkC,EAClC,SAAiB,EACjB,MAA4B;QAE5B,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;YAC3D,OAAO,UAAU,KAAK,mBAAmB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;mBACxF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAA;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACzD,OAAO,UAAU,KAAK,kBAAkB,IAAI,MAAM,EAAE,KAAK,KAAK,MAAM,CAAC,KAAK;eACrE,QAAQ,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;eACxD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAA;IACvG,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,KAA0B,EAC1B,UAAkC,EAClC,SAAiB,EACjB,MAA4B;QAE5B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;YAAE,OAAO,KAAK,CAAA;QACtE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,iBAAiB;YAC9C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;QACtD,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QAC/G,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,WAAW,CACT,KAA0B,EAC1B,KAAwC,EACxC,SAA+B,EAC/B,SAA+B;QAE/B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAClD,OAAO,MAAM,EAAE,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC;eACnG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,CAAC;eAC3G,MAAM,CAAC,iBAAiB,KAAK,SAAS;eACtC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAA;IAC7E,CAAC;IAED,OAAO,CAAC,KAAwC;QAC9C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACxC,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACjH,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACpF,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,MAAoB;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,MAAM;eACrF,MAAM,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,oBAAoB,KAAK,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE;eAC9F,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;eAChF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACtF,CAAC;IAEO,GAAG,CAAC,KAA0B,EAAE,SAAiB;QACvD,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,SAAS,EAAE,CAAA;IAC/C,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAA0B,EAC1B,UAAkC,EAClC,SAAiB,EACjB,WAAiC;QAEjC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC/B,aAAa,EAAE,CAAC;gBAChB,KAAK;gBACL,UAAU;gBACV,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE;gBAClC,OAAO,EAAE,WAAW,CAAC,IAAI;gBACzB,eAAe,EAAE,WAAW,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS;gBAC/G,WAAW;aACZ,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;QAC9B,CAAC;IACH,CAAC;CACF"}

package/dist/src/renderer/agent-tasks-install.d.ts

@@ -0,0 +1,17 @@
+import type { NativeExecutionProjectAuthority } from './native-execution-projects.js';
+import type { Context } from '@deepseek-ai/cordis';
+import type { AgentTools } from '@cordisx/protocol/agent-tools/v1';
+import type { EntityRegistry } from '@cordisx/protocol/entities/v1';
+import type { CordisXAgentSessionRuntime } from './agent-session-runtime.js';
+/** Production plugin mount supplies current authority; plugins cannot supply dependencies. */
+export declare function installAgentTasks(ctx: Context, input: {
+    readonly projects?: NativeExecutionProjectAuthority;
+    readonly runtime: CordisXAgentSessionRuntime;
+    readonly entities: EntityRegistry;
+    readonly tools: AgentTools & {
+        validateCommand(commandId: string): Promise<boolean>;
+        declaresCommand(commandId: string): boolean;
+    };
+    readonly active: () => boolean;
+}): void;
+//# sourceMappingURL=agent-tasks-install.d.ts.map

package/dist/src/renderer/agent-tasks-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tasks-install.d.ts","sourceRoot":"","sources":["../../../src/renderer/agent-tasks-install.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAA;AAKrF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAA;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAA;AACnE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AAI5E,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,+BAA+B,CAAA;IACnD,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAA;IAC5C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG;QAC3B,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QACpD,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAA;KAC5C,CAAA;IACD,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAA;CAC/B,GAAG,IAAI,CAiHP"}

package/dist/src/renderer/agent-tasks-install.js

@@ -0,0 +1,117 @@
+import { canonicalTaskJson } from '../agent-task-record.js';
+import { HostAgentTaskApprovalRegistry } from './agent-task-approvals.js';
+import { resolveAgentDefinitionCatalog } from './agent-loop.js';
+import { HostAgentTasks } from './agent-tasks.js';
+import { nativeAgentTaskClient } from './native-agent-session-recovery.js';
+/** Production plugin mount supplies current authority; plugins cannot supply dependencies. */
+export function installAgentTasks(ctx, input) {
+    const owner = input.runtime.ownerFromContext(ctx);
+    const client = nativeAgentTaskClient(owner);
+    const handles = new Map();
+    const approvals = new HostAgentTaskApprovalRegistry(input.runtime, owner, input.active, commandId => input.tools.declaresCommand(commandId), async (request, record, stage) => {
+        const saved = await client.store.load(record.operationId);
+        return saved?.bindingPolicy === 'required' && (stage === 'use' || saved.phase === 'approval-installing')
+            && saved.sessionId === record.sessionId && saved.fingerprint === canonicalTaskJson(request);
+    });
+    const tasks = new HostAgentTasks({
+        captureApprovals: commandId => approvals.capture(commandId),
+        existing: sessionId => input.runtime.get(owner, sessionId),
+        ownership: async (sessionId) => {
+            const handle = handles.get(sessionId);
+            const current = await input.runtime.get(owner, sessionId);
+            return current !== undefined && handle?.agent.generation === current.generation ? handle : undefined;
+        },
+        ...client,
+        resolveContext: async (context) => {
+            if (context?.kind === 'inherit' && !await input.runtime.authorizeTask(owner, 'read', context.sessionId)) {
+                return { status: 'unavailable', code: 'permission-denied' };
+            }
+            if (context?.kind === 'project') {
+                const project = await input.projects?.read(context.projectId);
+                if (project === undefined)
+                    return { status: 'unavailable', code: 'project-unavailable' };
+                return await client.resolveProjectContext(context, project);
+            }
+            return await client.resolveContext(context);
+        },
+        active: input.active,
+        authorize: async (operation, sessionId) => await input.runtime.authorizeTask(owner, operation, sessionId),
+        validateDefinition: async (request) => {
+            const definitions = new Map();
+            const visit = async (identity) => {
+                const key = JSON.stringify([identity.agentId, identity.revision]);
+                if (definitions.has(key))
+                    return true;
+                if (definitions.size >= 128)
+                    return false;
+                const result = await input.entities.get(identity);
+                if (result.status !== 'found')
+                    return false;
+                definitions.set(key, result.entity.definition);
+                for (const parent of result.entity.definition.extends ?? [])
+                    if (!await visit(parent))
+                        return false;
+                return true;
+            };
+            try {
+                if (!await visit(request.definition))
+                    return false;
+                const catalog = [...definitions.values()];
+                if (catalog.length === 0)
+                    return false;
+                resolveAgentDefinitionCatalog({
+                    definition: request.definition,
+                    definitions: catalog,
+                });
+                return true;
+            }
+            catch {
+                return false;
+            }
+        },
+        validateTool: async (commandId) => await input.tools.validateCommand(commandId),
+        create: async (request, record) => {
+            const acquired = await input.runtime.createEntity(owner, {
+                sessionId: record.sessionId,
+                definition: request.definition,
+                ...(request.options === undefined ? {} : { options: request.options }),
+            }, input.entities, record.context, record.bindingPolicy === 'required' ? record.operationId : undefined);
+            if (acquired.status !== 'accepted')
+                return undefined;
+            handles.set(acquired.sessionId, acquired.handle);
+            return acquired.handle.agent;
+        },
+        bind: async (commandId, sessionId, scope) => {
+            await input.tools.bind({ commandId, sessionId, scope });
+        },
+        submit: async (agent, messageId, text) => (await agent.followup({
+            id: messageId,
+            role: 'user',
+            content: [{ type: 'text', text }],
+            source: { kind: 'plugin', pluginId: owner.pluginId, generation: owner.generation },
+        })).status === 'accepted',
+        observe: async (sessionId) => (await input.runtime.get(owner, sessionId))?.status
+            ?? { status: 'unavailable', code: 'host-unavailable' },
+    });
+    ctx.effect(() => {
+        const removers = [
+            ctx.reflect.provide('agentTasks', {
+                createAndSubmit: (request) => tasks.createAndSubmit(request),
+                query: tasks.query.bind(tasks),
+            }),
+            ctx.reflect.provide('agentTaskApprovals', {
+                register: approvals.register.bind(approvals),
+                createAndSubmit: (request) => tasks.createAndSubmit(request, 'required'),
+                recover: tasks.recover.bind(tasks),
+            }),
+            ctx.reflect.provide('agentTaskOwnership', { acquire: tasks.acquireOwnership.bind(tasks) }),
+        ];
+        return () => {
+            handles.clear();
+            approvals.dispose();
+            for (const remove of removers)
+                remove();
+        };
+    });
+}
+//# sourceMappingURL=agent-tasks-install.js.map

package/dist/src/renderer/agent-tasks-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tasks-install.js","sourceRoot":"","sources":["../../../src/renderer/agent-tasks-install.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAA;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAA;AAM/D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAA;AAE1E,8FAA8F;AAC9F,MAAM,UAAU,iBAAiB,CAAC,GAAY,EAAE,KAS/C;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC9C,MAAM,SAAS,GAAG,IAAI,6BAA6B,CACjD,KAAK,CAAC,OAAO,EACb,KAAK,EACL,KAAK,CAAC,MAAM,EACZ,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,EACnD,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACzD,OAAO,KAAK,EAAE,aAAa,KAAK,UAAU,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,qBAAqB,CAAC;eACnG,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC/F,CAAC,CACF,CAAA;IACD,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC;QAC/B,gBAAgB,EAAE,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;QAC3D,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC;QAC1D,SAAS,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACrC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;YACzD,OAAO,OAAO,KAAK,SAAS,IAAI,MAAM,EAAE,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;QACtG,CAAC;QACD,GAAG,MAAM;QACT,cAAc,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YAC9B,IAAI,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxG,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAA;YAC7D,CAAC;YACD,IAAI,OAAO,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;gBAC7D,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAA;gBACxF,OAAO,MAAM,MAAM,CAAC,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC7D,CAAC;YACD,OAAO,MAAM,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QAC7C,CAAC;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;QACzG,kBAAkB,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YAClC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAA;YACtD,MAAM,KAAK,GAAG,KAAK,EAAE,QAAiC,EAAoB,EAAE;gBAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;gBACjE,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAA;gBACrC,IAAI,WAAW,CAAC,IAAI,IAAI,GAAG;oBAAE,OAAO,KAAK,CAAA;gBACzC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACjD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;oBAAE,OAAO,KAAK,CAAA;gBAC3C,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;gBAC9C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE;oBAAE,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC;wBAAE,OAAO,KAAK,CAAA;gBACnG,OAAO,IAAI,CAAA;YACb,CAAC,CAAA;YACD,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;oBAAE,OAAO,KAAK,CAAA;gBAClD,MAAM,OAAO,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAA;gBACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAA;gBACtC,6BAA6B,CAAC;oBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,WAAW,EAAE,OAAkD;iBAChE,CAAC,CAAA;gBACF,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QACD,YAAY,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC;QAC7E,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YAChC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,CAC/C,KAAK,EACL;gBACE,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;aACvE,EACD,KAAK,CAAC,QAAQ,EACd,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,aAAa,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CACrE,CAAA;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,SAAS,CAAA;YACpD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;YAChD,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAA;QAC9B,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;YAC1C,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CACvC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC;YACpB,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACjC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE;SACnF,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU;QAC3B,OAAO,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE,CACzB,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,MAAM;eAC9C,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,kBAAkB,EAAE;KAC3D,CAAC,CAAA;IACF,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,MAAM,QAAQ,GAAG;YACf,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE;gBAChC,eAAe,EAAE,CAAC,OAAyD,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC;gBAC9G,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aAC/B,CAAC;YACF,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE;gBACxC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC5C,eAAe,EAAE,CAAC,OAAyD,EAAE,EAAE,CAC7E,KAAK,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC;gBAC5C,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;aACnC,CAAC;YACF,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;SAC3F,CAAA;QACD,OAAO,GAAG,EAAE;YACV,OAAO,CAAC,KAAK,EAAE,CAAA;YACf,SAAS,CAAC,OAAO,EAAE,CAAA;YACnB,KAAK,MAAM,MAAM,IAAI,QAAQ;gBAAE,MAAM,EAAE,CAAA;QACzC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}