daemora 1.0.0-alpha.0

package/dist/safety/PermissionGuard.js

@@ -0,0 +1,136 @@
+/**
+ * PermissionGuard — tier-based tool access control.
+ *
+ * Three tiers (cumulative):
+ *   • **minimal**  — read-only: file reads, web fetch/search, memory reads, vision.
+ *   • **standard** — adds writes, shell, channels, media generation, desktop, memory writes.
+ *   • **full**     — adds email, channel outbound, team orchestration, MCP mgmt, reload.
+ *
+ * `check(toolName)` returns `{allowed, reason?}` for the current tier.
+ * MCP tools (`mcp__<server>__<tool>`) are user-configured integrations;
+ * they pass in standard / full but are blocked in minimal.
+ *
+ * The tier is read from the settings store at construction and can be
+ * updated live via `setTier()`.
+ */
+import { EventEmitter } from "node:events";
+import { createLogger } from "../util/logger.js";
+const log = createLogger("permission-guard");
+export const PERMISSION_TIERS = {
+    minimal: {
+        name: "Minimal (Read-Only)",
+        description: "Agent can read files, search the web, and recall memory. No writes, no shell, no communication.",
+        allowedTools: [
+            // Filesystem reads
+            "read_file", "list_directory", "glob", "grep",
+            // Web reads
+            "fetch_url", "web_fetch", "web_search",
+            // Memory reads
+            "memory_recall",
+            // Vision + transcription (read-only media)
+            "image_analysis", "transcribe_audio",
+            // Read-only desktop inspection
+            "desktop_cursor_position", "desktop_list_windows", "desktop_screenshot",
+            // Read PDF
+            "read_pdf",
+        ],
+    },
+    standard: {
+        name: "Standard",
+        description: "Agent can read + write files, run commands, browse, generate media, and manage memory.",
+        allowedTools: [
+            // Filesystem
+            "read_file", "write_file", "edit_file", "apply_patch",
+            "list_directory", "glob", "grep", "create_document", "read_pdf",
+            // Shell
+            "execute_command",
+            // Web
+            "fetch_url", "web_fetch", "web_search",
+            // AI / media
+            "image_analysis", "transcribe_audio", "text_to_speech",
+            "generate_image", "generate_video", "generate_music", "image_ops",
+            // Desktop control
+            "desktop_click", "desktop_move", "desktop_mouse_down", "desktop_mouse_up",
+            "desktop_drag", "desktop_type", "desktop_press_key", "desktop_key_combo",
+            "desktop_hold_key", "desktop_scroll", "desktop_screenshot",
+            "desktop_list_windows", "desktop_focus_window", "desktop_cursor_position",
+            "desktop_find_element", "desktop_wait",
+            // System
+            "clipboard", "screen_capture", "reply_to_user",
+            // Memory
+            "memory_save", "memory_recall",
+            // Orchestration
+            "use_crew", "parallel_crew", "use_mcp",
+            // Planning / tracking
+            "project", "team", "cron", "goal", "watcher",
+            // Git
+            "git",
+        ],
+    },
+    full: {
+        name: "Full",
+        description: "All tools unlocked — email/channels/MCP management/reload/broadcast enabled.",
+        allowedTools: ["*"],
+    },
+};
+function isValidTier(t) {
+    return t === "minimal" || t === "standard" || t === "full";
+}
+export class PermissionGuard extends EventEmitter {
+    cfg;
+    tier;
+    constructor(cfg) {
+        super();
+        this.cfg = cfg;
+        const raw = (cfg.settings.getGeneric("PERMISSION_TIER") ?? "standard");
+        this.tier = isValidTier(raw) ? raw : "standard";
+        log.info({ tier: this.tier }, "permission guard initialised");
+    }
+    /** Live tier rename — emits "tier:changed". */
+    setTier(tier) {
+        if (tier === this.tier)
+            return;
+        const prev = this.tier;
+        this.tier = tier;
+        log.info({ prev, tier }, "permission tier changed");
+        this.emit("tier:changed", { prev, tier });
+    }
+    getTier() {
+        return this.tier;
+    }
+    getConfig() {
+        return PERMISSION_TIERS[this.tier];
+    }
+    /**
+     * Is this tool allowed under the current tier? Returns
+     * `{allowed: false, reason}` with a user-facing message otherwise.
+     */
+    check(toolName) {
+        const cfg = PERMISSION_TIERS[this.tier];
+        // MCP tools — user-configured integrations pass through in standard+.
+        if (toolName.startsWith("mcp__")) {
+            if (this.tier === "minimal") {
+                this.emit("denied", { toolName, tier: this.tier });
+                return { allowed: false, reason: `MCP tools blocked in '${this.tier}' tier.` };
+            }
+            return { allowed: true };
+        }
+        if (cfg.allowedTools.includes("*") || cfg.allowedTools.includes(toolName)) {
+            return { allowed: true };
+        }
+        this.emit("denied", { toolName, tier: this.tier });
+        return {
+            allowed: false,
+            reason: `Tool '${toolName}' is not allowed in '${this.tier}' tier. ` +
+                `Switch to 'standard' or 'full' in Settings if you need it.`,
+        };
+    }
+    /**
+     * Return only the tool names that are allowed — used by the agent
+     * loop when composing the per-turn tool set.
+     */
+    filterToolNames(names) {
+        return names.filter((n) => this.check(n).allowed);
+    }
+}
+//# sourceMappingURL=PermissionGuard.js.map

package/dist/safety/PermissionGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionGuard.js","sourceRoot":"","sources":["../../src/safety/PermissionGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,GAAG,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AAgB7C,MAAM,CAAC,MAAM,gBAAgB,GAAuC;IAClE,OAAO,EAAE;QACP,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,iGAAiG;QAC9G,YAAY,EAAE;YACZ,mBAAmB;YACnB,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM;YAC7C,YAAY;YACZ,WAAW,EAAE,WAAW,EAAE,YAAY;YACtC,eAAe;YACf,eAAe;YACf,2CAA2C;YAC3C,gBAAgB,EAAE,kBAAkB;YACpC,+BAA+B;YAC/B,yBAAyB,EAAE,sBAAsB,EAAE,oBAAoB;YACvE,WAAW;YACX,UAAU;SACX;KACF;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,wFAAwF;QACrG,YAAY,EAAE;YACZ,aAAa;YACb,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa;YACrD,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,UAAU;YAC/D,QAAQ;YACR,iBAAiB;YACjB,MAAM;YACN,WAAW,EAAE,WAAW,EAAE,YAAY;YACtC,aAAa;YACb,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB;YACtD,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW;YACjE,kBAAkB;YAClB,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,kBAAkB;YACzE,cAAc,EAAE,cAAc,EAAE,mBAAmB,EAAE,mBAAmB;YACxE,kBAAkB,EAAE,gBAAgB,EAAE,oBAAoB;YAC1D,sBAAsB,EAAE,sBAAsB,EAAE,yBAAyB;YACzE,sBAAsB,EAAE,cAAc;YACtC,SAAS;YACT,WAAW,EAAE,gBAAgB,EAAE,eAAe;YAC9C,SAAS;YACT,aAAa,EAAE,eAAe;YAC9B,gBAAgB;YAChB,UAAU,EAAE,eAAe,EAAE,SAAS;YACtC,sBAAsB;YACtB,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS;YAC5C,MAAM;YACN,KAAK;SACN;KACF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,8EAA8E;QAC3F,YAAY,EAAE,CAAC,GAAG,CAAC;KACpB;CACF,CAAC;AAEF,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,MAAM,CAAC;AAC7D,CAAC;AAED,MAAM,OAAO,eAAgB,SAAQ,YAAY;IAGlB;IAFrB,IAAI,CAAiB;IAE7B,YAA6B,GAAkB;QAC7C,KAAK,EAAE,CAAC;QADmB,QAAG,GAAH,GAAG,CAAe;QAE7C,MAAM,GAAG,GAAG,CAAE,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAwB,IAAI,UAAU,CAAC,CAAC;QAC/F,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,8BAA8B,CAAC,CAAC;IAChE,CAAC;IAED,+CAA+C;IAC/C,OAAO,CAAC,IAAoB;QAC1B,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,SAAS;QACP,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAgB;QACpB,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAExC,sEAAsE;QACtE,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;YACjF,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EACJ,SAAS,QAAQ,wBAAwB,IAAI,CAAC,IAAI,UAAU;gBAC5D,4DAA4D;SAC/D,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,KAAwB;QACtC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/safety/Sandbox.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Sandbox — blocklist-first command safety gate.
+ *
+ * Complements CommandGuard (which catches secret-exfil / privesc) with
+ * a tighter list of outright destructive patterns:
+ *
+ *   • `rm -rf /`, `rm -rf ~`, `:(){ :|:& };:` (fork bomb)
+ *   • `mkfs`, `dd if=…of=/dev/…`, `chmod 777 /`
+ *   • `> /dev/sd*`, `shutdown`, `reboot`, `halt`, `init 0`
+ *   • Pipe-to-shell installers (`curl|sh`, `wget|bash`)
+ *
+ * Returns `{safe: false, reason}` with a user-readable string on a hit.
+ * Keep this cheap — it runs on every `execute_command` call.
+ *
+ * Docker-sandbox mode (see DockerSandbox.ts) layers on top: after
+ * blocklist passes, runs the command inside an ephemeral container
+ * with no host network + read-only root.
+ */
+import { EventEmitter } from "node:events";
+export type SandboxMode = "blocklist" | "docker" | "off";
+export interface SandboxCheck {
+    readonly safe: boolean;
+    readonly reason?: string;
+}
+export declare class Sandbox extends EventEmitter {
+    private _mode;
+    private blockedCount;
+    constructor(mode?: SandboxMode);
+    get mode(): SandboxMode;
+    setMode(mode: SandboxMode): void;
+    check(command: string): SandboxCheck;
+    stats(): {
+        mode: SandboxMode;
+        blockedCount: number;
+    };
+}
+export declare const sandbox: Sandbox;
+//# sourceMappingURL=Sandbox.d.ts.map

package/dist/safety/Sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sandbox.d.ts","sourceRoot":"","sources":["../../src/safety/Sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA6B3C,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,OAAQ,SAAQ,YAAY;IACvC,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,YAAY,CAAK;gBAEb,IAAI,CAAC,EAAE,WAAW;IAK9B,IAAI,IAAI,IAAI,WAAW,CAEtB;IAED,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAKhC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY;IAoBpC,KAAK,IAAI;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE;CAGrD;AAED,eAAO,MAAM,OAAO,SAAgB,CAAC"}

package/dist/safety/Sandbox.js

@@ -0,0 +1,82 @@
+/**
+ * Sandbox — blocklist-first command safety gate.
+ *
+ * Complements CommandGuard (which catches secret-exfil / privesc) with
+ * a tighter list of outright destructive patterns:
+ *
+ *   • `rm -rf /`, `rm -rf ~`, `:(){ :|:& };:` (fork bomb)
+ *   • `mkfs`, `dd if=…of=/dev/…`, `chmod 777 /`
+ *   • `> /dev/sd*`, `shutdown`, `reboot`, `halt`, `init 0`
+ *   • Pipe-to-shell installers (`curl|sh`, `wget|bash`)
+ *
+ * Returns `{safe: false, reason}` with a user-readable string on a hit.
+ * Keep this cheap — it runs on every `execute_command` call.
+ *
+ * Docker-sandbox mode (see DockerSandbox.ts) layers on top: after
+ * blocklist passes, runs the command inside an ephemeral container
+ * with no host network + read-only root.
+ */
+import { EventEmitter } from "node:events";
+import { createLogger } from "../util/logger.js";
+const log = createLogger("sandbox");
+const BLOCKED_PATTERNS = [
+    // Filesystem nukes.
+    /\brm\s+-rf?\s+\/\s*$/i,
+    /\brm\s+-rf?\s+\/[^/].*$/i,
+    /\brm\s+-rf?\s+~\s*$/i,
+    /\brm\s+-rf?\s+\*\s*$/i,
+    // Fork bomb.
+    /:\(\)\s*\{\s*:\|:&\s*\}\s*;\s*:/,
+    // Disk / filesystem formatting.
+    /\bmkfs(?:\.[a-z0-9]+)?\b/i,
+    /\bdd\s+if=.*\bof=\/dev\//i,
+    // Wide chmod on root.
+    /\bchmod\s+(?:-R\s+)?[0-7]{3,4}\s+\/\s*$/i,
+    // Device writes.
+    />\s*\/dev\/(?:sd[a-z]|hd[a-z]|nvme\d+)/i,
+    // Power management.
+    /\b(?:shutdown|reboot|halt|poweroff)\b/i,
+    /\binit\s+[06]\b/,
+    // Pipe-to-shell installers.
+    /\bcurl\b[^;|&\n]*\|\s*(?:sh|bash|zsh)\b/i,
+    /\bwget\b[^;|&\n]*\|\s*(?:sh|bash|zsh)\b/i,
+];
+export class Sandbox extends EventEmitter {
+    _mode;
+    blockedCount = 0;
+    constructor(mode) {
+        super();
+        this._mode = mode ?? (process.env["SANDBOX_MODE"] ?? "blocklist");
+    }
+    get mode() {
+        return this._mode;
+    }
+    setMode(mode) {
+        this._mode = mode;
+        log.info({ mode }, "sandbox mode changed");
+    }
+    check(command) {
+        if (!command || typeof command !== "string") {
+            return { safe: false, reason: "Empty command" };
+        }
+        if (this._mode === "off")
+            return { safe: true };
+        for (const pattern of BLOCKED_PATTERNS) {
+            if (pattern.test(command)) {
+                this.blockedCount++;
+                log.warn({ pattern: pattern.toString(), sample: command.slice(0, 120) }, "sandbox blocked");
+                this.emit("blocked", { command: command.slice(0, 200), pattern: pattern.toString() });
+                return {
+                    safe: false,
+                    reason: `Command blocked by sandbox (matches ${pattern}).`,
+                };
+            }
+        }
+        return { safe: true };
+    }
+    stats() {
+        return { mode: this._mode, blockedCount: this.blockedCount };
+    }
+}
+export const sandbox = new Sandbox();
+//# sourceMappingURL=Sandbox.js.map

package/dist/safety/Sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sandbox.js","sourceRoot":"","sources":["../../src/safety/Sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;AAEpC,MAAM,gBAAgB,GAAsB;IAC1C,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;IAC1B,sBAAsB;IACtB,uBAAuB;IACvB,aAAa;IACb,iCAAiC;IACjC,gCAAgC;IAChC,2BAA2B;IAC3B,2BAA2B;IAC3B,sBAAsB;IACtB,0CAA0C;IAC1C,iBAAiB;IACjB,yCAAyC;IACzC,oBAAoB;IACpB,wCAAwC;IACxC,iBAAiB;IACjB,4BAA4B;IAC5B,0CAA0C;IAC1C,0CAA0C;CAC3C,CAAC;AASF,MAAM,OAAO,OAAQ,SAAQ,YAAY;IAC/B,KAAK,CAAc;IACnB,YAAY,GAAG,CAAC,CAAC;IAEzB,YAAY,IAAkB;QAC5B,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,CAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAA6B,IAAI,WAAW,CAAC,CAAC;IACjG,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,OAAO,CAAC,IAAiB;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,OAAe;QACnB,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAEhD,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBAC5F,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACtF,OAAO;oBACL,IAAI,EAAE,KAAK;oBACX,MAAM,EAAE,uCAAuC,OAAO,IAAI;iBAC3D,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,KAAK;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IAC/D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC"}

package/dist/safety/SecretScanner.d.ts

@@ -0,0 +1,67 @@
+/**
+ * SecretScanner — detects and redacts sensitive data in tool I/O.
+ *
+ * Two complementary layers:
+ *
+ *   1. **Pattern-based redaction** — regex patterns for well-known
+ *      secret formats (AWS keys, GitHub tokens, OpenAI / Anthropic /
+ *      Google AI keys, JWTs, connection strings, Telegram bot tokens,
+ *      and so on). Matches are replaced with `[REDACTED:<kind>]`.
+ *
+ *   2. **Blind value redaction** — at startup (and on demand) we snapshot
+ *      every value of env vars whose *name* looks secret-y (`*_TOKEN`,
+ *      `*_KEY`, `*_SECRET`, …) and any keys pulled out of the vault.
+ *      Those exact strings are stripped from tool output, so we catch
+ *      provider tokens that don't match any regex above
+ *      (DISCORD_BOT_TOKEN, LINE_CHANNEL_SECRET, custom webhooks, …).
+ *
+ * Exposes a singleton (`secretScanner`) so channels / tool runners share
+ * detection counts and the blind-redaction set across the process.
+ */
+import { EventEmitter } from "node:events";
+export interface SecretMatch {
+    readonly type: string;
+    /** First / last 4 chars of the matched value — never the full secret. */
+    readonly preview: string;
+    readonly position: number;
+}
+export interface ScanResult {
+    readonly found: boolean;
+    readonly secrets: readonly SecretMatch[];
+    readonly redacted: string;
+}
+export declare class SecretScanner extends EventEmitter {
+    private detectionCount;
+    private readonly blindValues;
+    constructor();
+    /**
+     * Re-scan process.env for sensitive values. Call after vault unlock,
+     * config reload, or any operation that injects new secrets into env.
+     */
+    refreshFromEnv(): number;
+    /**
+     * Add known secret values for blind redaction — e.g. vault keys after
+     * unlock, or API keys resolved for a particular tool call.
+     */
+    addKnownSecrets(values: readonly string[]): void;
+    /** How many blind values are currently tracked. */
+    get trackedCount(): number;
+    /**
+     * Scan text using pattern-based detection only. Returns the scan
+     * result with a redacted copy.
+     */
+    scan(text: string): ScanResult;
+    /**
+     * Scan + redact with both layers (pattern + blind env values). The
+     * preferred entry point for redacting tool output before it re-enters
+     * the agent loop.
+     */
+    redact(text: string): string;
+    stats(): {
+        totalDetections: number;
+        trackedCount: number;
+    };
+}
+/** Process-wide singleton — shared by tool runners, channels, audit log. */
+export declare const secretScanner: SecretScanner;
+//# sourceMappingURL=SecretScanner.d.ts.map

package/dist/safety/SecretScanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretScanner.d.ts","sourceRoot":"","sources":["../../src/safety/SecretScanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAmC3C,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,aAAc,SAAQ,YAAY;IAC7C,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;;IAOjD;;;OAGG;IACH,cAAc,IAAI,MAAM;IAcxB;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAMhD,mDAAmD;IACnD,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;OAGG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU;IAkC9B;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAiB5B,KAAK,IAAI;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE;CAG3D;AAED,4EAA4E;AAC5E,eAAO,MAAM,aAAa,eAAsB,CAAC"}

package/dist/safety/SecretScanner.js

@@ -0,0 +1,150 @@
+/**
+ * SecretScanner — detects and redacts sensitive data in tool I/O.
+ *
+ * Two complementary layers:
+ *
+ *   1. **Pattern-based redaction** — regex patterns for well-known
+ *      secret formats (AWS keys, GitHub tokens, OpenAI / Anthropic /
+ *      Google AI keys, JWTs, connection strings, Telegram bot tokens,
+ *      and so on). Matches are replaced with `[REDACTED:<kind>]`.
+ *
+ *   2. **Blind value redaction** — at startup (and on demand) we snapshot
+ *      every value of env vars whose *name* looks secret-y (`*_TOKEN`,
+ *      `*_KEY`, `*_SECRET`, …) and any keys pulled out of the vault.
+ *      Those exact strings are stripped from tool output, so we catch
+ *      provider tokens that don't match any regex above
+ *      (DISCORD_BOT_TOKEN, LINE_CHANNEL_SECRET, custom webhooks, …).
+ *
+ * Exposes a singleton (`secretScanner`) so channels / tool runners share
+ * detection counts and the blind-redaction set across the process.
+ */
+import { EventEmitter } from "node:events";
+import { createLogger } from "../util/logger.js";
+const log = createLogger("secret-scanner");
+/** Minimum match length before we treat it as a secret — avoids catching short env values. */
+const MIN_SECRET_LEN = 8;
+const SECRET_PATTERNS = [
+    { name: "AWS Access Key", pattern: /AKIA[0-9A-Z]{16}/g },
+    { name: "AWS Secret Key", pattern: /(?:aws_secret_access_key|secret_key)\s*[:=]\s*['"]?([A-Za-z0-9/+=]{40})['"]?/gi },
+    { name: "Generic API Key", pattern: /(?:api[_-]?key|apikey)\s*[:=]\s*['"]?([A-Za-z0-9_\-]{20,})['"]?/gi },
+    { name: "Generic Secret", pattern: /(?:secret|password|passwd|pwd|token)\s*[:=]\s*['"]?([^\s'"]{8,})['"]?/gi },
+    { name: "Private Key", pattern: /-----BEGIN (?:RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----/g },
+    { name: "GitHub Token", pattern: /gh[ps]_[A-Za-z0-9_]{36,}/g },
+    { name: "Slack Token", pattern: /xox[bprs]-[A-Za-z0-9\-]{10,}/g },
+    { name: "OpenAI Key", pattern: /sk-[A-Za-z0-9]{20,}/g },
+    { name: "Anthropic Key", pattern: /sk-ant-[A-Za-z0-9\-_]{20,}/g },
+    { name: "Google AI Key", pattern: /AIza[A-Za-z0-9\-_]{35}/g },
+    { name: "Telegram Token", pattern: /\d{8,12}:[A-Za-z0-9_\-]{35}/g },
+    { name: "Twilio SID", pattern: /AC[a-f0-9]{32}/g },
+    { name: "Bearer Token", pattern: /Bearer\s+[A-Za-z0-9\-._~+\/]{20,}/g },
+    { name: "Connection String", pattern: /(?:mongodb|postgres|mysql|redis):\/\/[^\s'"]+/gi },
+    { name: "JWT", pattern: /eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g },
+];
+const SENSITIVE_NAME_PATTERN = /(_KEY|_TOKEN|_SECRET|_PASSWORD|_PASS|_PWD|_SID|_AUTH|_PRIVATE|_CREDENTIAL|_API|_WEBHOOK)$/i;
+export class SecretScanner extends EventEmitter {
+    detectionCount = 0;
+    blindValues = new Set();
+    constructor() {
+        super();
+        this.refreshFromEnv();
+    }
+    /**
+     * Re-scan process.env for sensitive values. Call after vault unlock,
+     * config reload, or any operation that injects new secrets into env.
+     */
+    refreshFromEnv() {
+        let added = 0;
+        for (const [key, val] of Object.entries(process.env)) {
+            if (!val)
+                continue;
+            if (val.length < MIN_SECRET_LEN)
+                continue;
+            if (!SENSITIVE_NAME_PATTERN.test(key))
+                continue;
+            if (this.blindValues.has(val))
+                continue;
+            this.blindValues.add(val);
+            added++;
+        }
+        if (added > 0)
+            log.info({ added, total: this.blindValues.size }, "env secrets refreshed");
+        return added;
+    }
+    /**
+     * Add known secret values for blind redaction — e.g. vault keys after
+     * unlock, or API keys resolved for a particular tool call.
+     */
+    addKnownSecrets(values) {
+        for (const v of values) {
+            if (v && v.length >= MIN_SECRET_LEN)
+                this.blindValues.add(v);
+        }
+    }
+    /** How many blind values are currently tracked. */
+    get trackedCount() {
+        return this.blindValues.size;
+    }
+    /**
+     * Scan text using pattern-based detection only. Returns the scan
+     * result with a redacted copy.
+     */
+    scan(text) {
+        if (!text || typeof text !== "string") {
+            return { found: false, secrets: [], redacted: text ?? "" };
+        }
+        const secrets = [];
+        let redacted = text;
+        for (const { name, pattern } of SECRET_PATTERNS) {
+            pattern.lastIndex = 0;
+            let match;
+            while ((match = pattern.exec(text)) !== null) {
+                const value = match[0];
+                if (value.length < MIN_SECRET_LEN)
+                    continue;
+                secrets.push({
+                    type: name,
+                    preview: `${value.slice(0, 4)}...${value.slice(-4)}`,
+                    position: match.index,
+                });
+                redacted = redacted.split(value).join(`[REDACTED:${name}]`);
+            }
+        }
+        if (secrets.length > 0) {
+            this.detectionCount += secrets.length;
+            this.emit("detected", {
+                count: secrets.length,
+                types: [...new Set(secrets.map((s) => s.type))],
+            });
+        }
+        return { found: secrets.length > 0, secrets, redacted };
+    }
+    /**
+     * Scan + redact with both layers (pattern + blind env values). The
+     * preferred entry point for redacting tool output before it re-enters
+     * the agent loop.
+     */
+    redact(text) {
+        if (!text || typeof text !== "string")
+            return text ?? "";
+        const patternResult = this.scan(text);
+        let out = patternResult.redacted;
+        let blindCount = 0;
+        for (const val of this.blindValues) {
+            if (!out.includes(val))
+                continue;
+            out = out.split(val).join("[REDACTED:ENV_SECRET]");
+            blindCount++;
+        }
+        if (blindCount > 0) {
+            this.detectionCount += blindCount;
+            log.info({ patterns: patternResult.secrets.length, blind: blindCount }, "secrets redacted");
+        }
+        return out;
+    }
+    stats() {
+        return { totalDetections: this.detectionCount, trackedCount: this.blindValues.size };
+    }
+}
+/** Process-wide singleton — shared by tool runners, channels, audit log. */
+export const secretScanner = new SecretScanner();
+//# sourceMappingURL=SecretScanner.js.map

package/dist/safety/SecretScanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretScanner.js","sourceRoot":"","sources":["../../src/safety/SecretScanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAO3C,8FAA8F;AAC9F,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,MAAM,eAAe,GAA6B;IAChD,EAAE,IAAI,EAAE,gBAAgB,EAAO,OAAO,EAAE,mBAAmB,EAAE;IAC7D,EAAE,IAAI,EAAE,gBAAgB,EAAO,OAAO,EAAE,gFAAgF,EAAE;IAC1H,EAAE,IAAI,EAAE,iBAAiB,EAAM,OAAO,EAAE,mEAAmE,EAAE;IAC7G,EAAE,IAAI,EAAE,gBAAgB,EAAO,OAAO,EAAE,yEAAyE,EAAE;IACnH,EAAE,IAAI,EAAE,aAAa,EAAU,OAAO,EAAE,yDAAyD,EAAE;IACnG,EAAE,IAAI,EAAE,cAAc,EAAS,OAAO,EAAE,2BAA2B,EAAE;IACrE,EAAE,IAAI,EAAE,aAAa,EAAU,OAAO,EAAE,+BAA+B,EAAE;IACzE,EAAE,IAAI,EAAE,YAAY,EAAW,OAAO,EAAE,sBAAsB,EAAE;IAChE,EAAE,IAAI,EAAE,eAAe,EAAQ,OAAO,EAAE,6BAA6B,EAAE;IACvE,EAAE,IAAI,EAAE,eAAe,EAAQ,OAAO,EAAE,yBAAyB,EAAE;IACnE,EAAE,IAAI,EAAE,gBAAgB,EAAO,OAAO,EAAE,8BAA8B,EAAE;IACxE,EAAE,IAAI,EAAE,YAAY,EAAW,OAAO,EAAE,iBAAiB,EAAE;IAC3D,EAAE,IAAI,EAAE,cAAc,EAAS,OAAO,EAAE,oCAAoC,EAAE;IAC9E,EAAE,IAAI,EAAE,mBAAmB,EAAI,OAAO,EAAE,iDAAiD,EAAE;IAC3F,EAAE,IAAI,EAAE,KAAK,EAAkB,OAAO,EAAE,mEAAmE,EAAE;CAC9G,CAAC;AAEF,MAAM,sBAAsB,GAC1B,4FAA4F,CAAC;AAe/F,MAAM,OAAO,aAAc,SAAQ,YAAY;IACrC,cAAc,GAAG,CAAC,CAAC;IACV,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjD;QACE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc;gBAAE,SAAS;YAC1C,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChD,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,KAAK,EAAE,CAAC;QACV,CAAC;QACD,IAAI,KAAK,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAC1F,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,MAAyB;QACvC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,cAAc;gBAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,IAAY;QACf,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QAC7D,CAAC;QAED,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,IAAI,QAAQ,GAAG,IAAI,CAAC;QAEpB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,eAAe,EAAE,CAAC;YAChD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACvB,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc;oBAAE,SAAS;gBAC5C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;oBACpD,QAAQ,EAAE,KAAK,CAAC,KAAK;iBACtB,CAAC,CAAC;gBACH,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,GAAG,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;gBACpB,KAAK,EAAE,OAAO,CAAC,MAAM;gBACrB,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC1D,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,IAAY;QACjB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,IAAI,EAAE,CAAC;QACzD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC;QACjC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACnD,UAAU,EAAE,CAAC;QACf,CAAC;QACD,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,cAAc,IAAI,UAAU,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK;QACH,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACvF,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC"}

package/dist/safety/Supervisor.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Supervisor — watches the EventBus for runaway agent behaviour and
+ * enforces kill / warn thresholds.
+ *
+ * Listens to task:tool:before events and tracks:
+ *   • tool calls per minute (rate-limit with warn + hard-kill tiers)
+ *   • tool calls per task total (budget with warn + hard-kill tiers)
+ *   • dangerous command patterns (rm -rf /, sudo in executeCommand)
+ *
+ * When a hard limit is crossed it calls TaskRunner.cancel() — the same
+ * path the /api/tasks/:id/cancel endpoint uses — so the AgentLoop and
+ * any in-flight tool aborts cleanly.
+ *
+ * Warnings are kept in an in-memory ring and re-emitted as
+ * "supervisor:warning" / "supervisor:alert" events so the UI / audit
+ * log can surface them.
+ */
+import { EventEmitter } from "node:events";
+import type { EventBus } from "../events/eventBus.js";
+import type { TaskRunner } from "../core/TaskRunner.js";
+export interface SupervisorOpts {
+    /** Soft limit: log a warning when exceeded. Default 30. */
+    readonly maxToolCallsPerMinute?: number;
+    /** Hard limit multiplier on the per-minute limit — triggers kill. Default 2. */
+    readonly perMinuteHardMultiplier?: number;
+    /** Soft limit per task. Default 100. */
+    readonly maxToolCallsPerTask?: number;
+    /** Hard limit multiplier on the per-task limit — triggers kill. Default 1.5. */
+    readonly perTaskHardMultiplier?: number;
+    /** How many recent warnings to retain. Default 100. */
+    readonly warningRingSize?: number;
+}
+export interface SupervisorWarning {
+    readonly level: "warning" | "alert";
+    readonly taskId: string;
+    readonly message: string;
+    readonly at: number;
+}
+export declare class Supervisor extends EventEmitter {
+    private readonly bus;
+    private readonly runner;
+    private readonly maxPerMinute;
+    private readonly perMinuteHardMul;
+    private readonly maxPerTask;
+    private readonly perTaskHardMul;
+    private readonly ringSize;
+    private readonly toolCallCounts;
+    private readonly toolCallTimestamps;
+    private readonly warnings;
+    private readonly killed;
+    private unsubBefore;
+    private unsubAfter;
+    private unsubState;
+    constructor(bus: EventBus, runner: TaskRunner, opts?: SupervisorOpts);
+    start(): void;
+    stop(): void;
+    /** Recently-observed warnings (most recent last). */
+    getWarnings(limit?: number): readonly SupervisorWarning[];
+    /** Whether this task has been killed by the supervisor. */
+    isKilled(taskId: string): boolean;
+    private onToolBefore;
+    private onToolAfter;
+    private kill;
+    private warn;
+    private alert;
+    private push;
+    private cleanupTask;
+}
+//# sourceMappingURL=Supervisor.d.ts.map

package/dist/safety/Supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Supervisor.d.ts","sourceRoot":"","sources":["../../src/safety/Supervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAKxD,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,gFAAgF;IAChF,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,wCAAwC;IACxC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,gFAAgF;IAChF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,uDAAuD;IACvD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,UAAW,SAAQ,YAAY;IAiBxC,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAjBzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA+B;IAClE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAE5C,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,UAAU,CAA6B;gBAG5B,GAAG,EAAE,QAAQ,EACb,MAAM,EAAE,UAAU,EACnC,IAAI,GAAE,cAAmB;IAU3B,KAAK,IAAI,IAAI;IAgBb,IAAI,IAAI,IAAI;IAOZ,qDAAqD;IACrD,WAAW,CAAC,KAAK,SAAK,GAAG,SAAS,iBAAiB,EAAE;IAIrD,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAMjC,OAAO,CAAC,YAAY;IA+CpB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,IAAI;IASZ,OAAO,CAAC,IAAI;IAKZ,OAAO,CAAC,KAAK;IAMb,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,WAAW;CAKpB"}