daycare-cli 0.0.25 → 0.0.27

package/dist/sandbox/sandboxFilesystemPolicyBuild.spec.js

@@ -1,5 +1,7 @@
 import { describe, expect, it } from "vitest";
 import path from "node:path";
+import os from "node:os";
+import { promises as fs } from "node:fs";
 import { sandboxFilesystemPolicyBuild } from "./sandboxFilesystemPolicyBuild.js";
 function basePermissions() {
     return {
@@ -49,5 +51,40 @@ describe("sandboxFilesystemPolicyBuild", () => {
         ]));
         expect(result.denyWrite).toEqual(result.denyRead);
     });
+    it("denies workspace apps directory for non-app agents", () => {
+        const workingDir = path.resolve("/workspace");
+        const result = sandboxFilesystemPolicyBuild({
+            permissions: {
+                ...basePermissions(),
+                workingDir
+            },
+            platform: "linux",
+            homeDir: "/home/alice"
+        });
+        expect(result.denyRead).toContain(path.resolve("/workspace/apps"));
+        expect(result.denyWrite).toContain(path.resolve("/workspace/apps"));
+    });
+    it("denies sibling app directories for app agents", async () => {
+        const workspace = await fs.mkdtemp(path.join(os.tmpdir(), "daycare-app-policy-"));
+        try {
+            await fs.mkdir(path.join(workspace, "apps", "my-app", "data"), { recursive: true });
+            await fs.mkdir(path.join(workspace, "apps", "other-app", "data"), { recursive: true });
+            const result = sandboxFilesystemPolicyBuild({
+                permissions: {
+                    ...basePermissions(),
+                    workingDir: path.join(workspace, "apps", "my-app", "data"),
+                    writeDirs: [path.join(workspace, "apps", "my-app", "data")],
+                    readDirs: [workspace]
+                },
+                platform: "linux",
+                homeDir: "/home/alice"
+            });
+            expect(result.denyRead).toContain(path.join(workspace, "apps", "other-app"));
+            expect(result.denyRead).not.toContain(path.join(workspace, "apps", "my-app"));
+        }
+        finally {
+            await fs.rm(workspace, { recursive: true, force: true });
+        }
+    });
 });
 //# sourceMappingURL=sandboxFilesystemPolicyBuild.spec.js.map

package/dist/sandbox/sandboxFilesystemPolicyBuild.spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandboxFilesystemPolicyBuild.spec.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxFilesystemPolicyBuild.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAEjF,SAAS,eAAe;IACtB,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QACtC,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3E,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,4BAA4B,CAAC;YAC1C,WAAW,EAAE,eAAe,EAAE;YAC9B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,4BAA4B,CAAC;YAC1C,WAAW,EAAE,eAAe,EAAE;YAC9B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAC7B,MAAM,CAAC,eAAe,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;SAC3B,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,4BAA4B,CAAC;YAC1C,WAAW,EAAE,eAAe,EAAE;YAC9B,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAC7B,MAAM,CAAC,eAAe,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,wDAAwD,CAAC;YACtE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;SACjC,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"sandboxFilesystemPolicyBuild.spec.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxFilesystemPolicyBuild.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAGzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAEjF,SAAS,eAAe;IACtB,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QACtC,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3E,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,4BAA4B,CAAC;YAC1C,WAAW,EAAE,eAAe,EAAE;YAC9B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,4BAA4B,CAAC;YAC1C,WAAW,EAAE,eAAe,EAAE;YAC9B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAC7B,MAAM,CAAC,eAAe,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;SAC3B,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,4BAA4B,CAAC;YAC1C,WAAW,EAAE,eAAe,EAAE;YAC9B,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAC7B,MAAM,CAAC,eAAe,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,wDAAwD,CAAC;YACtE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;SACjC,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,4BAA4B,CAAC;YAC1C,WAAW,EAAE;gBACX,GAAG,eAAe,EAAE;gBACpB,UAAU;aACX;YACD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvF,MAAM,MAAM,GAAG,4BAA4B,CAAC;gBAC1C,WAAW,EAAE;oBACX,GAAG,eAAe,EAAE;oBACpB,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;oBAC1D,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAC3D,QAAQ,EAAE,CAAC,SAAS,CAAC;iBACtB;gBACD,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,aAAa;aACvB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;YAC7E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChF,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/settings.d.ts

@@ -29,8 +29,12 @@ export type ProviderSettings = {
 export type AgentSettings = {
     emergencyContextLimit?: number;
 };
-export type ResolvedSettingsConfig = Omit<SettingsConfig, "agents"> & {
+export type SecuritySettings = {
+    appReviewerEnabled?: boolean;
+};
+export type ResolvedSettingsConfig = Omit<SettingsConfig, "agents" | "security"> & {
     agents: Required<AgentSettings>;
+    security: Required<SecuritySettings>;
 };
 export type SettingsConfig = {
     rlm?: boolean;
@@ -40,6 +44,7 @@ export type SettingsConfig = {
     };
     assistant?: AssistantSettings;
     agents?: AgentSettings;
+    security?: SecuritySettings;
     plugins?: PluginInstanceSettings[];
     providers?: ProviderSettings[];
     inference?: {

package/dist/settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../sources/settings.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,IAAI,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAGvF,MAAM,MAAM,sBAAsB,GAAG;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG;IACpE,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE;QACP,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,OAAO,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACnC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B,SAAS,CAAC,EAAE;QACV,SAAS,CAAC,EAAE,yBAAyB,EAAE,CAAC;KACzC,CAAC;IACF,IAAI,CAAC,EAAE;QACL,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;KAC1B,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAsC,CAAC;AAEzE,wBAAsB,gBAAgB,CACpC,QAAQ,GAAE,MAA8B,GACvC,OAAO,CAAC,cAAc,CAAC,CAYzB;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,cAAc,GACpD,OAAO,CAAC,cAAc,CAAC,CAKzB;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,cAAc,GAAG,sBAAsB,EAAE,CAE9E;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,GAAG,sBAAsB,EAAE,CAErF;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,sBAAsB,EAAE,GAAG,SAAS,EAC7C,KAAK,EAAE,sBAAsB,GAC5B,sBAAsB,EAAE,CAI1B;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,sBAAsB,EAAE,GAAG,SAAS,EAC7C,OAAO,CAAC,EAAE,2BAA2B,GACpC,MAAM,CAoBR;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,sBAAsB,EAAE,GAAG,SAAS,EAC7C,UAAU,EAAE,MAAM,GACjB,sBAAsB,EAAE,CAE1B;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,gBAAgB,EAAE,CAU1E;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,cAAc,GAAG,gBAAgB,EAAE,CAEhF;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,gBAAgB,EAAE,GAAG,SAAS,EACzC,KAAK,EAAE,gBAAgB,GACtB,gBAAgB,EAAE,CAIpB;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,gBAAgB,EAAE,GAAG,SAAS,EACzC,EAAE,EAAE,MAAM,GACT,gBAAgB,EAAE,CAEpB"}
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../sources/settings.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,IAAI,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAGvF,MAAM,MAAM,sBAAsB,GAAG;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,UAAU,CAAC,GAAG;IACjF,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IAChC,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE;QACP,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,OAAO,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACnC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B,SAAS,CAAC,EAAE;QACV,SAAS,CAAC,EAAE,yBAAyB,EAAE,CAAC;KACzC,CAAC;IACF,IAAI,CAAC,EAAE;QACL,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;KAC1B,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAsC,CAAC;AAEzE,wBAAsB,gBAAgB,CACpC,QAAQ,GAAE,MAA8B,GACvC,OAAO,CAAC,cAAc,CAAC,CAYzB;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,cAAc,GACpD,OAAO,CAAC,cAAc,CAAC,CAKzB;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,cAAc,GAAG,sBAAsB,EAAE,CAE9E;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,GAAG,sBAAsB,EAAE,CAErF;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,sBAAsB,EAAE,GAAG,SAAS,EAC7C,KAAK,EAAE,sBAAsB,GAC5B,sBAAsB,EAAE,CAI1B;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,sBAAsB,EAAE,GAAG,SAAS,EAC7C,OAAO,CAAC,EAAE,2BAA2B,GACpC,MAAM,CAoBR;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,sBAAsB,EAAE,GAAG,SAAS,EAC7C,UAAU,EAAE,MAAM,GACjB,sBAAsB,EAAE,CAE1B;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,gBAAgB,EAAE,CAU1E;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,cAAc,GAAG,gBAAgB,EAAE,CAEhF;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,gBAAgB,EAAE,GAAG,SAAS,EACzC,KAAK,EAAE,gBAAgB,GACtB,gBAAgB,EAAE,CAIpB;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,gBAAgB,EAAE,GAAG,SAAS,EACzC,EAAE,EAAE,MAAM,GACT,gBAAgB,EAAE,CAEpB"}

package/dist/settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings.js","sourceRoot":"","sources":["../sources/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAoEhD,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;AAEzE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,qBAAqB;IAExC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,QAAwB;IAExB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEvC,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACzE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,OAAqD;IAErD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAwB;IAClD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAwB;IACzD,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAA6C,EAC7C,KAA6B;IAE7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAMD,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,OAA6C,EAC7C,OAAqC;IAErC,0EAA0E;IAC1E,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAE9D,mDAAmD;IACnD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,wCAAwC;IACxC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC,EAAE,CAAC;QACxC,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAA6C,EAC7C,UAAkB;IAElB,OAAO,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAwB;IACpD,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9D,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAwB;IAC1D,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,SAAyC,EACzC,KAAuB;IAEvB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,SAAyC,EACzC,EAAU;IAEV,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAiC;IAEjC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC"}
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../sources/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA0EhD,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;AAEzE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,qBAAqB;IAExC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,QAAwB;IAExB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEvC,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACzE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,OAAqD;IAErD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAwB;IAClD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAwB;IACzD,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAA6C,EAC7C,KAA6B;IAE7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAMD,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,OAA6C,EAC7C,OAAqC;IAErC,0EAA0E;IAC1E,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAE9D,mDAAmD;IACnD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,wCAAwC;IACxC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC,EAAE,CAAC;QACxC,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAA6C,EAC7C,UAAkB;IAElB,OAAO,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAwB;IACpD,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9D,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAwB;IAC1D,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,SAAyC,EACzC,KAAuB;IAEvB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,SAAyC,EACzC,EAAU;IAEV,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAiC;IAEjC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/skills/skills/app-creator/SKILL.md

@@ -0,0 +1,207 @@
+---
+name: app-creator
+description: Guide for creating effective apps. Use when users want to create a new app or update an existing app with APP.md, PERMISSIONS.md, allow and deny rules, and sandboxed execution.
+license: Complete terms in LICENSE.txt
+---
+
+# App Creator
+
+This skill provides guidance for creating effective Daycare apps.
+
+## About Apps
+
+Apps are sandboxed tool wrappers discovered from
+`workspace/apps/<app-id>/APP.md` and `workspace/apps/<app-id>/PERMISSIONS.md`.
+Each app is exposed as a callable tool named `app_<name>`.
+
+On invocation, an app runs as a constrained app agent and each tool call is reviewed
+against the app's allow/deny rules before execution.
+
+### What Apps Provide
+
+1. Isolated capabilities with explicit boundaries
+2. Rule-reviewed tool execution on every app tool call
+3. Persistent app state in `data/`
+4. Reusable app behavior via clear metadata and strict rules
+
+## Core Principles
+
+### Start Narrow
+
+Default to restrictive rules and small scope. Add capabilities only when they are
+required by real usage.
+
+### Keep Rules Concrete
+
+Write allow/deny rules in specific, testable language. Prefer concrete constraints
+(paths, hosts, command families) over vague policy statements.
+
+### Preserve Isolation
+
+Design around Daycare app boundaries:
+
+- App writes only to `workspace/apps/<app-id>/data/`
+- App manifest and bundled files are read-only to the app
+- Non-app agents should not read/write app directories
+
+## Anatomy of an App
+
+Every app consists of required `APP.md` and `PERMISSIONS.md` files plus optional bundled resources:
+
+```text
+app-id/
+├── APP.md (required)
+│   ├── YAML frontmatter (required)
+│   │   ├── name: (required, username-style; this is the app id)
+│   │   ├── title: (required, human-readable)
+│   │   ├── description: (required)
+│   │   └── model: (optional)
+│   └── Markdown body (required)
+│       └── Full body is system prompt
+├── PERMISSIONS.md (required)
+│   └── Markdown body (required)
+│       ├── ## Source Intent
+│       └── ## Rules
+│           ├── ### Allow
+│           └── ### Deny
+├── data/ (required runtime writable state)
+└── scripts/ (optional read-only helpers)
+```
+
+### APP.md (required)
+
+Every `APP.md` consists of:
+
+- **Frontmatter** (YAML): `name`, `title`, `description`, optional `model`.
+- **Body** (Markdown): full body is the system prompt.
+
+When parsing or writing `APP.md`:
+
+- Never parse frontmatter manually
+- Never write frontmatter manually
+- Always use `gray-matter` for parse and stringify flows
+
+### Example APP.md
+
+```markdown
+---
+name: github-reviewer
+title: GitHub Reviewer
+description: Reviews pull requests and drafts feedback
+model: default
+---
+
+You review pull requests and provide concrete, actionable feedback.
+```
+
+### Example PERMISSIONS.md
+
+```markdown
+## Source Intent
+
+Review pull requests and draft actionable feedback while preserving repository safety.
+
+## Rules
+
+### Allow
+- Read files in the workspace
+- Run read-only git commands
+
+### Deny
+- Write outside data/
+- Delete files
+- Rewrite git history
+```
+
+## App Creation Process
+
+App creation involves these steps:
+
+1. Understand concrete app use cases
+2. Plan boundaries and reusable app resources
+3. Initialize the app in workspace
+4. Edit `APP.md`, `PERMISSIONS.md`, and app resources
+5. Validate behavior and safety
+6. Iterate based on real usage
+
+Follow these steps in order, skipping only if there is a clear reason.
+
+### Step 1: Understand with Concrete Examples
+
+Collect examples that should be handled by the app and examples that should be denied
+or handled elsewhere.
+
+Capture:
+
+- expected input/output shape
+- required tool classes (`read`, `write`, `edit`, `exec`)
+- safety boundaries and failure modes
+
+### Step 2: Plan Boundaries and Resources
+
+Before creating files, define:
+
+- app id and scope
+- success criteria
+- rule matrix (allow/deny/conditional)
+- persistent state model for `data/`
+
+Consult references:
+
+- **Workflow design**: `references/workflows.md`
+- **Rule design and anti-patterns**: `references/rules-patterns.md`
+
+### Step 3: Initialize App in Workspace
+
+Create the app structure:
+
+```bash
+mkdir -p workspace/apps/<app-id>/data
+mkdir -p workspace/apps/<app-id>/scripts
+```
+
+Then create `APP.md` and `PERMISSIONS.md` with required sections.
+
+### Step 4: Edit APP.md, PERMISSIONS.md, and Resources
+
+Write clear metadata in `APP.md` and clear source intent + allow/deny rules in `PERMISSIONS.md`.
+
+If scripts are needed, keep them minimal and app-specific.
+
+### Step 5: Validate Behavior and Safety
+
+Validation checklist:
+
+- Frontmatter has valid `name`, `title`, `description` (optional `model`)
+- APP.md body is non-empty and contains the system prompt
+- Tool name maps cleanly to `app_<name>`
+- Writes are limited to `data/`
+- Allow rules cover intended workflows
+- Deny rules block destructive actions
+- Error messages are actionable when calls are denied
+
+Run tests and typecheck after changes.
+
+### Step 6: Iterate
+
+After real usage:
+
+1. Capture failures and unnecessary denials
+2. Tighten prompt and rules
+3. Re-test representative workflows
+4. Keep changes small and reversible
+
+## Practical Guidance
+
+### Keep Apps Single-Purpose
+
+If one app starts owning unrelated workflows, split it into multiple apps.
+
+### Prefer Stable Rules
+
+Write rules that remain understandable months later and are tied to observable behavior.
+
+### Keep Runtime Rule Changes Aligned
+
+If rules are modified at runtime via app rule tools, keep `PERMISSIONS.md` and runtime
+behavior consistent.

package/dist/skills/skills/app-creator/references/rules-patterns.md

@@ -0,0 +1,36 @@
+# App Rules Patterns
+
+Use this reference when writing `## Rules` sections in `PERMISSIONS.md`.
+
+## Rule writing checklist
+
+- Keep one constraint per rule line.
+- Use concrete nouns and verbs.
+- Prefer explicit path and host constraints.
+- State prohibited destructive operations directly.
+- Avoid broad, ambiguous phrases.
+
+## Good allow examples
+
+- Allow reading files under workspace root.
+- Allow running `git status`, `git diff`, and `git show`.
+- Allow writing only under `workspace/apps/<app-id>/data/`.
+
+## Good deny examples
+
+- Deny deleting files.
+- Deny changing git history (`git reset`, `git rebase`, forced pushes).
+- Deny writes outside `data/`.
+- Deny network access except approved hosts.
+
+## Anti-patterns
+
+- "Be safe."
+- "Only do reasonable things."
+- "Avoid dangerous commands when possible."
+
+These are hard to evaluate consistently and should be replaced with explicit constraints.
+
+## Reviewability heuristic
+
+A rule is strong when a reviewer can answer "allowed or denied?" without guessing.

package/dist/skills/skills/app-creator/references/workflows.md

@@ -0,0 +1,32 @@
+# App Workflows
+
+Use this reference when designing end-to-end app workflows from user prompt to final result.
+
+## Minimal workflow pattern
+
+1. Define the task in one sentence.
+2. Identify required tools and data reads.
+3. Apply allow/deny constraints before execution.
+4. Execute tool calls through review middleware.
+5. Return concise final output with rationale.
+
+## Decision checkpoints
+
+- **Before first call**: Is the requested action in app scope?
+- **Before each tool call**: Does allow/deny policy permit it?
+- **After denial**: Can the app adapt with a safer alternative?
+- **Before response**: Is output complete and actionable?
+
+## Escalation pattern
+
+If the app cannot complete safely:
+
+1. Explain what was blocked.
+2. Explain why it was blocked.
+3. Offer a safe alternative path.
+
+## Stable workflow guidance
+
+- Prefer deterministic steps over open-ended exploration.
+- Keep tool-call count low for predictable latency.
+- Avoid mixing unrelated responsibilities in one app flow.

package/dist/types.d.ts

@@ -1,7 +1,7 @@
 export type { SessionPermissions } from "./engine/permissions.js";
 export type { ExecGateDefinition } from "./engine/scheduling/execGateTypes.js";
 export type { SandboxPackageManager } from "./sandbox/sandboxPackageManagers.js";
-export type { Connector, ConnectorCapabilities, ConnectorFile, ConnectorFileDisposition, ConnectorFileMode, ConnectorMessage, CommandHandler, CommandUnsubscribe, MessageContext, MessageHandler, MessageUnsubscribe, PluginCommandDefinition, PermissionAccess, PermissionEntry, PermissionDecision, PermissionHandler, PermissionKind, PermissionRequest, SlashCommandEntry } from "./engine/modules/connectors/types.js";
+export type { Connector, ConnectorCapabilities, ConnectorFile, ConnectorFileDisposition, ConnectorFileMode, ConnectorMessage, CommandHandler, CommandUnsubscribe, MessageContext, MessageHandler, MessageUnsubscribe, PluginCommandDefinition, PermissionAccess, PermissionEntry, PermissionDecision, PermissionHandler, PermissionKind, PermissionRequestScope, PermissionRequest, SlashCommandEntry } from "./engine/modules/connectors/types.js";
 export type { FileReference } from "./files/types.js";
 export type { PluginApi, PluginInstance, PluginModule, PluginOnboardingApi, PluginOnboardingResult } from "./engine/plugins/types.js";
 export type { AgentMessage, AgentState, AgentTokenEntry, AgentTokenSize, AgentTokenSnapshotSize, AgentTokenStats, AgentLifecycleState, AgentHistoryRecord, AgentInboxItem, AgentInboxResult, AgentPostTarget, BackgroundAgentState } from "./engine/agents/ops/agentTypes.js";
@@ -13,4 +13,5 @@ export type { AgentSkill } from "./engine/skills/skillTypes.js";
 export type { Config } from "./config/configTypes.js";
 export type { Signal, DelayedSignal, DelayedSignalCancelRepeatKeyInput, DelayedSignalScheduleInput, SignalGenerateInput, SignalSource, SignalSubscription, SignalSubscribeInput, SignalUnsubscribeInput } from "./engine/signals/signalTypes.js";
 export type { Channel, ChannelMember, ChannelMessage, ChannelSignalData } from "./engine/channels/channelTypes.js";
+export type { AppDescriptor, AppManifest, AppPermissions, AppReviewDecision, AppRule, AppRuleSet } from "./engine/apps/appTypes.js";
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../sources/types.ts"],"names":[],"mappings":"AAIA,YAAY,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAGlE,YAAY,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,YAAY,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAGjF,YAAY,EACV,SAAS,EACT,qBAAqB,EACrB,aAAa,EACb,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,sCAAsC,CAAC;AAG9C,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,YAAY,EACV,SAAS,EACT,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,2BAA2B,CAAC;AAGnC,YAAY,EACV,YAAY,EACZ,UAAU,EACV,eAAe,EACf,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACrB,MAAM,mCAAmC,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAGvG,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,qCAAqC,CAAC;AAG7C,YAAY,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAGhF,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,iCAAiC,CAAC;AAGzC,YAAY,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAGhE,YAAY,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAGtD,YAAY,EACV,MAAM,EACN,aAAa,EACb,iCAAiC,EACjC,0BAA0B,EAC1B,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,iCAAiC,CAAC;AAGzC,YAAY,EACV,OAAO,EACP,aAAa,EACb,cAAc,EACd,iBAAiB,EAClB,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../sources/types.ts"],"names":[],"mappings":"AAIA,YAAY,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAGlE,YAAY,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,YAAY,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAGjF,YAAY,EACV,SAAS,EACT,qBAAqB,EACrB,aAAa,EACb,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,sCAAsC,CAAC;AAG9C,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,YAAY,EACV,SAAS,EACT,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,2BAA2B,CAAC;AAGnC,YAAY,EACV,YAAY,EACZ,UAAU,EACV,eAAe,EACf,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACrB,MAAM,mCAAmC,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAGvG,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,qCAAqC,CAAC;AAG7C,YAAY,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAGhF,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,iCAAiC,CAAC;AAGzC,YAAY,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAGhE,YAAY,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAGtD,YAAY,EACV,MAAM,EACN,aAAa,EACb,iCAAiC,EACjC,0BAA0B,EAC1B,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,iCAAiC,CAAC;AAGzC,YAAY,EACV,OAAO,EACP,aAAa,EACb,cAAc,EACd,iBAAiB,EAClB,MAAM,mCAAmC,CAAC;AAG3C,YAAY,EACV,aAAa,EACb,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,OAAO,EACP,UAAU,EACX,MAAM,2BAA2B,CAAC"}

package/dist/util/tagExtract.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Extracts the content between the first opening and last closing occurrence
+ * of an XML-like tag in text. Case-insensitive tag matching. Opening tag may
+ * include attributes (e.g. `<response foo="bar">`). Content is returned
+ * unmodified except for leading/trailing whitespace trimming.
+ *
+ * Returns null if either the opening or closing tag is missing.
+ */
+export declare function tagExtract(text: string, tag: string): string | null;
+/**
+ * Removes the matched tag block (first open to last close, inclusive) from text.
+ * Returns the remaining text. If no complete tag block is found, returns text unchanged.
+ */
+export declare function tagStrip(text: string, tag: string): string;
+//# sourceMappingURL=tagExtract.d.ts.map

package/dist/util/tagExtract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tagExtract.d.ts","sourceRoot":"","sources":["../../sources/util/tagExtract.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmBnE;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAuB1D"}

package/dist/util/tagExtract.js

@@ -0,0 +1,77 @@
+/**
+ * Extracts the content between the first opening and last closing occurrence
+ * of an XML-like tag in text. Case-insensitive tag matching. Opening tag may
+ * include attributes (e.g. `<response foo="bar">`). Content is returned
+ * unmodified except for leading/trailing whitespace trimming.
+ *
+ * Returns null if either the opening or closing tag is missing.
+ */
+export function tagExtract(text, tag) {
+    const openIndex = findOpenTag(text, tag);
+    if (openIndex === -1) {
+        return null;
+    }
+    // Find end of the opening tag (the closing `>`)
+    const openTagEnd = text.indexOf(">", openIndex);
+    if (openTagEnd === -1) {
+        return null;
+    }
+    const contentStart = openTagEnd + 1;
+    const closeIndex = findLastCloseTag(text, tag);
+    if (closeIndex === -1 || closeIndex < contentStart) {
+        return null;
+    }
+    return text.slice(contentStart, closeIndex).trim();
+}
+/**
+ * Removes the matched tag block (first open to last close, inclusive) from text.
+ * Returns the remaining text. If no complete tag block is found, returns text unchanged.
+ */
+export function tagStrip(text, tag) {
+    const openIndex = findOpenTag(text, tag);
+    if (openIndex === -1) {
+        return text;
+    }
+    const closeIndex = findLastCloseTag(text, tag);
+    if (closeIndex === -1) {
+        return text;
+    }
+    const closeTag = buildCloseTagPattern(tag);
+    const closeMatch = text.slice(closeIndex).match(closeTag);
+    if (!closeMatch) {
+        return text;
+    }
+    const blockEnd = closeIndex + closeMatch[0].length;
+    if (blockEnd <= openIndex) {
+        return text;
+    }
+    return text.slice(0, openIndex) + text.slice(blockEnd);
+}
+/**
+ * Finds the index of the first opening tag occurrence (case-insensitive).
+ * Matches `<tag>` or `<tag ...>` (with attributes).
+ */
+function findOpenTag(text, tag) {
+    const pattern = new RegExp(`<${escapeRegExp(tag)}(\\s[^>]*)?>`, "i");
+    const match = text.match(pattern);
+    return match ? match.index : -1;
+}
+/**
+ * Finds the index of the last closing tag occurrence (case-insensitive).
+ */
+function findLastCloseTag(text, tag) {
+    const pattern = buildCloseTagPattern(tag);
+    let lastIndex = -1;
+    let match;
+    while ((match = pattern.exec(text)) !== null) {
+        lastIndex = match.index;
+    }
+    return lastIndex;
+}
+function buildCloseTagPattern(tag) {
+    return new RegExp(`</${escapeRegExp(tag)}\\s*>`, "gi");
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=tagExtract.js.map

package/dist/util/tagExtract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tagExtract.js","sourceRoot":"","sources":["../../sources/util/tagExtract.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,GAAW;IAClD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gDAAgD;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,YAAY,GAAG,UAAU,GAAG,CAAC,CAAC;IAEpC,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/C,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,UAAU,GAAG,YAAY,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,GAAW;IAChD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/C,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAEnD,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,GAAW;IAC5C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,GAAW;IACjD,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IACnB,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,OAAO,IAAI,MAAM,CAAC,KAAK,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC"}

package/dist/util/tagExtract.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tagExtract.spec.d.ts.map

package/dist/util/tagExtract.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tagExtract.spec.d.ts","sourceRoot":"","sources":["../../sources/util/tagExtract.spec.ts"],"names":[],"mappings":""}

package/dist/util/tagExtract.spec.js

@@ -0,0 +1,92 @@
+import { describe, it, expect } from "vitest";
+import { tagExtract, tagStrip } from "./tagExtract.js";
+describe("tagExtract", () => {
+    it("extracts basic content", () => {
+        expect(tagExtract("<response>hello</response>", "response")).toBe("hello");
+    });
+    it("returns null when open tag is missing", () => {
+        expect(tagExtract("hello</response>", "response")).toBeNull();
+    });
+    it("returns null when close tag is missing", () => {
+        expect(tagExtract("<response>hello", "response")).toBeNull();
+    });
+    it("returns empty string for empty content", () => {
+        expect(tagExtract("<response></response>", "response")).toBe("");
+    });
+    it("handles case-insensitive tags", () => {
+        expect(tagExtract("<Response>hello</Response>", "response")).toBe("hello");
+        expect(tagExtract("<RESPONSE>hello</RESPONSE>", "response")).toBe("hello");
+        expect(tagExtract("<rEsPoNsE>hello</rEsPoNsE>", "response")).toBe("hello");
+    });
+    it("handles mixed-case open and close", () => {
+        expect(tagExtract("<Response>hello</response>", "response")).toBe("hello");
+        expect(tagExtract("<response>hello</RESPONSE>", "response")).toBe("hello");
+    });
+    it("handles tags with attributes", () => {
+        expect(tagExtract('<response foo="bar">content</response>', "response")).toBe("content");
+        expect(tagExtract('<response type="final" id="1">content</response>', "response")).toBe("content");
+    });
+    it("preserves inner tags unmodified", () => {
+        expect(tagExtract("<response>has <inner> tags</response>", "response")).toBe("has <inner> tags");
+    });
+    it("uses first open and last close for multiple occurrences", () => {
+        const text = "<response>outer <response>inner</response> middle</response> end";
+        expect(tagExtract(text, "response")).toBe("outer <response>inner</response> middle");
+    });
+    it("preserves multiline content", () => {
+        const text = "<response>\nline 1\nline 2\nline 3\n</response>";
+        expect(tagExtract(text, "response")).toBe("line 1\nline 2\nline 3");
+    });
+    it("trims leading and trailing whitespace only", () => {
+        expect(tagExtract("<response>  hello world  </response>", "response")).toBe("hello world");
+    });
+    it("preserves internal whitespace", () => {
+        expect(tagExtract("<response>hello   world</response>", "response")).toBe("hello   world");
+    });
+    it("handles text before and after the tag block", () => {
+        expect(tagExtract("prefix <response>content</response> suffix", "response")).toBe("content");
+    });
+    it("works with different tag names", () => {
+        expect(tagExtract("<result>data</result>", "result")).toBe("data");
+        expect(tagExtract("<output>data</output>", "output")).toBe("data");
+        expect(tagExtract("<answer>data</answer>", "answer")).toBe("data");
+    });
+    it("returns null when close tag appears before open tag content start", () => {
+        expect(tagExtract("</response><response>hello", "response")).toBeNull();
+    });
+    it("handles whitespace in close tag", () => {
+        expect(tagExtract("<response>hello</response >", "response")).toBe("hello");
+        expect(tagExtract("<response>hello</ response>", "response")).toBeNull();
+    });
+});
+describe("tagStrip", () => {
+    it("removes the tag block from text", () => {
+        expect(tagStrip("prefix <response>content</response> suffix", "response")).toBe("prefix  suffix");
+    });
+    it("returns text unchanged when no tag found", () => {
+        const text = "no tags here";
+        expect(tagStrip(text, "response")).toBe(text);
+    });
+    it("handles tag at start of text", () => {
+        expect(tagStrip("<response>content</response> suffix", "response")).toBe(" suffix");
+    });
+    it("handles tag at end of text", () => {
+        expect(tagStrip("prefix <response>content</response>", "response")).toBe("prefix ");
+    });
+    it("removes entire text when tag is the whole text", () => {
+        expect(tagStrip("<response>content</response>", "response")).toBe("");
+    });
+    it("uses first open and last close", () => {
+        expect(tagStrip("before <response>a</response> mid <response>b</response> after", "response")).toBe("before  after");
+    });
+    it("handles case-insensitive tags", () => {
+        expect(tagStrip("x<Response>y</Response>z", "response")).toBe("xz");
+    });
+    it("returns text when only open tag present", () => {
+        expect(tagStrip("<response>hello", "response")).toBe("<response>hello");
+    });
+    it("returns text when only close tag present", () => {
+        expect(tagStrip("hello</response>", "response")).toBe("hello</response>");
+    });
+});
+//# sourceMappingURL=tagExtract.spec.js.map

package/dist/util/tagExtract.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tagExtract.spec.js","sourceRoot":"","sources":["../../sources/util/tagExtract.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEvD,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,UAAU,CAAC,4BAA4B,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,UAAU,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,UAAU,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,UAAU,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,UAAU,CAAC,4BAA4B,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3E,MAAM,CAAC,UAAU,CAAC,4BAA4B,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3E,MAAM,CAAC,UAAU,CAAC,4BAA4B,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,UAAU,CAAC,4BAA4B,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3E,MAAM,CAAC,UAAU,CAAC,4BAA4B,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,UAAU,CAAC,wCAAwC,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzF,MAAM,CAAC,UAAU,CAAC,kDAAkD,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CACrF,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,UAAU,CAAC,uCAAuC,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAC1E,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,kEAAkE,CAAC;QAChF,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CACvC,yCAAyC,CAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,IAAI,GAAG,iDAAiD,CAAC;QAC/D,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,UAAU,CAAC,sCAAsC,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,UAAU,CAAC,oCAAoC,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,UAAU,CAAC,4CAA4C,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,UAAU,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,CAAC,UAAU,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,CAAC,UAAU,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,UAAU,CAAC,4BAA4B,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,UAAU,CAAC,6BAA6B,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5E,MAAM,CAAC,UAAU,CAAC,6BAA6B,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,QAAQ,CAAC,4CAA4C,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAC7E,gBAAgB,CACjB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,IAAI,GAAG,cAAc,CAAC;QAC5B,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,QAAQ,CAAC,qCAAqC,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,QAAQ,CAAC,qCAAqC,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,QAAQ,CAAC,8BAA8B,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CACJ,QAAQ,CAAC,gEAAgE,EAAE,UAAU,CAAC,CACvF,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "daycare-cli",
-  "version": "0.0.25",
+  "version": "0.0.27",
   "description": "Local-first, plugin-driven multi-agent runtime",
   "type": "module",
   "license": "MIT",