daycare-cli 0.0.6 → 0.0.8

package/dist/engine/permissions/permissionFormatTag.spec.js

@@ -4,6 +4,9 @@ describe("permissionFormatTag", () => {
     it("formats network permissions", () => {
         expect(permissionFormatTag({ kind: "network" })).toBe("@network");
     });
+    it("formats events permissions", () => {
+        expect(permissionFormatTag({ kind: "events" })).toBe("@events");
+    });
     it("formats path permissions", () => {
         expect(permissionFormatTag({ kind: "read", path: "/tmp" })).toBe("@read:/tmp");
     });

package/dist/engine/permissions/permissionFormatTag.spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissionFormatTag.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionFormatTag.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"permissionFormatTag.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionFormatTag.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionMergeDefault.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissionMergeDefault.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionMergeDefault.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,kBAAkB,EAC/B,kBAAkB,EAAE,kBAAkB,GACrC,kBAAkB,CAUpB"}
+{"version":3,"file":"permissionMergeDefault.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionMergeDefault.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,kBAAkB,EAC/B,kBAAkB,EAAE,kBAAkB,GACrC,kBAAkB,CAWpB"}

package/dist/engine/permissions/permissionMergeDefault.js

@@ -6,7 +6,8 @@ export function permissionMergeDefault(permissions, defaultPermissions) {
         workingDir: permissions.workingDir?.trim() || defaultPermissions.workingDir,
         writeDirs: Array.from(nextWrite.values()),
         readDirs: Array.from(nextRead.values()),
-        network: permissions.network || defaultPermissions.network
+        network: permissions.network || defaultPermissions.network,
+        events: permissions.events || defaultPermissions.events
     };
 }
 //# sourceMappingURL=permissionMergeDefault.js.map

package/dist/engine/permissions/permissionMergeDefault.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissionMergeDefault.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionMergeDefault.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,sBAAsB,CACpC,WAA+B,EAC/B,kBAAsC;IAEtC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,SAAS,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,QAAQ,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,OAAO;QACL,yDAAyD;QACzD,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,kBAAkB,CAAC,UAAU;QAC3E,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACzC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,kBAAkB,CAAC,OAAO;KAC3D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"permissionMergeDefault.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionMergeDefault.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,sBAAsB,CACpC,WAA+B,EAC/B,kBAAsC;IAEtC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,SAAS,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,QAAQ,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,OAAO;QACL,yDAAyD;QACzD,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,kBAAkB,CAAC,UAAU;QAC3E,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACzC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,kBAAkB,CAAC,OAAO;QAC1D,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,kBAAkB,CAAC,MAAM;KACxD,CAAC;AACJ,CAAC"}

package/dist/engine/permissions/permissionMergeDefault.spec.js

@@ -6,17 +6,20 @@ describe("permissionMergeDefault", () => {
             workingDir: "",
             writeDirs: ["/custom-write"],
             readDirs: [],
-            network: false
+            network: false,
+            events: false
         };
         const defaults = {
             workingDir: "/workspace",
             writeDirs: ["/base-write"],
             readDirs: ["/base-read"],
-            network: true
+            network: true,
+            events: true
         };
         const merged = permissionMergeDefault(permissions, defaults);
         expect(merged.workingDir).toBe("/workspace");
         expect(merged.network).toBe(true);
+        expect(merged.events).toBe(true);
         expect(merged.writeDirs).toEqual(expect.arrayContaining(["/base-write", "/custom-write"]));
         expect(merged.readDirs).toEqual(expect.arrayContaining(["/base-read"]));
     });
@@ -25,13 +28,15 @@ describe("permissionMergeDefault", () => {
             workingDir: "   ",
             writeDirs: [],
             readDirs: [],
-            network: false
+            network: false,
+            events: false
         };
         const defaults = {
             workingDir: "/workspace",
             writeDirs: [],
             readDirs: [],
-            network: false
+            network: false,
+            events: false
         };
         const merged = permissionMergeDefault(permissions, defaults);
         expect(merged.workingDir).toBe("/workspace");
@@ -41,13 +46,15 @@ describe("permissionMergeDefault", () => {
             workingDir: "/custom-workspace",
             writeDirs: [],
             readDirs: [],
-            network: false
+            network: false,
+            events: false
         };
         const defaults = {
             workingDir: "/workspace",
             writeDirs: [],
             readDirs: [],
-            network: false
+            network: false,
+            events: false
         };
         const merged = permissionMergeDefault(permissions, defaults);
         expect(merged.workingDir).toBe("/custom-workspace");

package/dist/engine/permissions/permissionMergeDefault.spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissionMergeDefault.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionMergeDefault.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,WAAW,GAAuB;YACtC,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,CAAC,eAAe,CAAC;YAC5B,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,CAAC,aAAa,CAAC;YAC1B,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,IAAI;SACd,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAC9B,MAAM,CAAC,eAAe,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CACzD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,WAAW,GAAuB;YACtC,UAAU,EAAE,KAAK;YACjB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,WAAW,GAAuB;YACtC,UAAU,EAAE,mBAAmB;YAC/B,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"permissionMergeDefault.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionMergeDefault.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,WAAW,GAAuB;YACtC,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,CAAC,eAAe,CAAC;YAC5B,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,CAAC,aAAa,CAAC;YAC1B,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI;SACb,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAC9B,MAAM,CAAC,eAAe,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CACzD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,WAAW,GAAuB;YACtC,UAAU,EAAE,KAAK;YACjB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,WAAW,GAAuB;YACtC,UAAU,EAAE,mBAAmB;YAC/B,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionTagsApply.d.ts

@@ -1,7 +1,7 @@
 import type { SessionPermissions } from "@/types";
 /**
  * Applies permission tags to a permissions object.
- * Expects: tags are @network, @read:<path>, or @write:<path>.
+ * Expects: tags are @network, @events, @read:<path>, or @write:<path>.
  */
 export declare function permissionTagsApply(permissions: SessionPermissions, tags: string[]): void;
 //# sourceMappingURL=permissionTagsApply.d.ts.map

package/dist/engine/permissions/permissionTagsApply.js

@@ -2,7 +2,7 @@ import { permissionAccessApply } from "./permissionAccessApply.js";
 import { permissionAccessParse } from "./permissionAccessParse.js";
 /**
  * Applies permission tags to a permissions object.
- * Expects: tags are @network, @read:<path>, or @write:<path>.
+ * Expects: tags are @network, @events, @read:<path>, or @write:<path>.
  */
 export function permissionTagsApply(permissions, tags) {
     for (const tag of tags) {

package/dist/engine/permissions/permissionTagsApply.spec.js

@@ -6,10 +6,12 @@ describe("permissionTagsApply", () => {
             workingDir: "/tmp",
             writeDirs: [],
             readDirs: [],
-            network: false
+            network: false,
+            events: false
         };
-        permissionTagsApply(permissions, ["@network", "@read:/tmp", "@write:/var/tmp"]);
+        permissionTagsApply(permissions, ["@network", "@events", "@read:/tmp", "@write:/var/tmp"]);
         expect(permissions.network).toBe(true);
+        expect(permissions.events).toBe(true);
         expect(permissions.readDirs).toContain("/tmp");
         expect(permissions.readDirs).toContain("/var/tmp");
         expect(permissions.writeDirs).toContain("/var/tmp");

package/dist/engine/permissions/permissionTagsApply.spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissionTagsApply.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsApply.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QACF,mBAAmB,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"permissionTagsApply.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsApply.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;QACF,mBAAmB,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionTagsNormalize.d.ts

@@ -1,6 +1,6 @@
 /**
  * Normalizes an unknown permissions list into unique permission tags.
- * Expects: entries are @network, @read:<path>, or @write:<path>.
+ * Expects: entries are @network, @events, @read:<path>, or @write:<path>.
  */
 export declare function permissionTagsNormalize(value: unknown): string[];
 //# sourceMappingURL=permissionTagsNormalize.d.ts.map

package/dist/engine/permissions/permissionTagsNormalize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissionTagsNormalize.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CA4BhE"}
+{"version":3,"file":"permissionTagsNormalize.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAiChE"}

package/dist/engine/permissions/permissionTagsNormalize.js

@@ -1,7 +1,7 @@
 import { permissionAccessParse } from "./permissionAccessParse.js";
 /**
  * Normalizes an unknown permissions list into unique permission tags.
- * Expects: entries are @network, @read:<path>, or @write:<path>.
+ * Expects: entries are @network, @events, @read:<path>, or @write:<path>.
  */
 export function permissionTagsNormalize(value) {
     if (!value) {
@@ -19,9 +19,16 @@ export function permissionTagsNormalize(value) {
             continue;
         }
         const access = permissionAccessParse(trimmed);
-        const tag = access.kind === "network"
-            ? "@network"
-            : `${access.kind === "read" ? "@read" : "@write"}:${access.path}`;
+        let tag;
+        if (access.kind === "network") {
+            tag = "@network";
+        }
+        else if (access.kind === "events") {
+            tag = "@events";
+        }
+        else {
+            tag = `${access.kind === "read" ? "@read" : "@write"}:${access.path}`;
+        }
         if (seen.has(tag)) {
             continue;
         }

package/dist/engine/permissions/permissionTagsNormalize.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissionTagsNormalize.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAqB,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS;YACnC,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACpE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}
+{"version":3,"file":"permissionTagsNormalize.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAqB,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,GAAW,CAAC;QAChB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,GAAG,UAAU,CAAC;QACnB,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACxE,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/engine/permissions/permissionTagsNormalize.spec.js

@@ -4,11 +4,12 @@ describe("permissionTagsNormalize", () => {
     it("normalizes and dedupes permission tags", () => {
         const result = permissionTagsNormalize([
             " @network ",
+            "@events",
             "@read:/tmp",
             "@read:/tmp",
             "@write:/var/log"
         ]);
-        expect(result).toEqual(["@network", "@read:/tmp", "@write:/var/log"]);
+        expect(result).toEqual(["@network", "@events", "@read:/tmp", "@write:/var/log"]);
     });
     it("returns empty for missing values", () => {
         expect(permissionTagsNormalize(undefined)).toEqual([]);

package/dist/engine/permissions/permissionTagsNormalize.spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissionTagsNormalize.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ,iBAAiB;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"permissionTagsNormalize.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,YAAY;YACZ,SAAS;YACT,YAAY;YACZ,YAAY;YACZ,iBAAiB;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionTagsValidate.d.ts

@@ -3,7 +3,7 @@ import type { SessionPermissions } from "@/types";
  * Validates that all permission tags are allowed by current permissions.
  * Throws an error if any permission is not already held by the caller.
  *
- * Expects: tags are @network, @read:<path>, or @write:<path>.
+ * Expects: tags are @network, @events, @read:<path>, or @write:<path>.
  */
 export declare function permissionTagsValidate(permissions: SessionPermissions, tags: string[]): Promise<void>;
 //# sourceMappingURL=permissionTagsValidate.d.ts.map

package/dist/engine/permissions/permissionTagsValidate.js

@@ -4,7 +4,7 @@ import { permissionAccessParse } from "./permissionAccessParse.js";
  * Validates that all permission tags are allowed by current permissions.
  * Throws an error if any permission is not already held by the caller.
  *
- * Expects: tags are @network, @read:<path>, or @write:<path>.
+ * Expects: tags are @network, @events, @read:<path>, or @write:<path>.
  */
 export async function permissionTagsValidate(permissions, tags) {
     for (const tag of tags) {

package/dist/engine/permissions/permissionTagsValidate.spec.js

@@ -18,27 +18,46 @@ describe("permissionTagsValidate", () => {
             workingDir: dir,
             writeDirs: [dir],
             readDirs: [dir],
-            network: true
+            network: true,
+            events: true
         };
         // Should not throw
-        await permissionTagsValidate(permissions, ["@network", `@read:${target}`, `@write:${dir}`]);
+        await permissionTagsValidate(permissions, [
+            "@network",
+            "@events",
+            `@read:${target}`,
+            `@write:${dir}`
+        ]);
     });
     it("rejects network permission when caller lacks it", async () => {
         const permissions = {
             workingDir: "/tmp",
             writeDirs: [],
             readDirs: [],
-            network: false
+            network: false,
+            events: false
         };
         await expect(permissionTagsValidate(permissions, ["@network"]))
             .rejects.toThrow("Cannot attach permission '@network' - you don't have it.");
     });
+    it("rejects events permission when caller lacks it", async () => {
+        const permissions = {
+            workingDir: "/tmp",
+            writeDirs: [],
+            readDirs: [],
+            network: false,
+            events: false
+        };
+        await expect(permissionTagsValidate(permissions, ["@events"]))
+            .rejects.toThrow("Cannot attach permission '@events' - you don't have it.");
+    });
     it("rejects write permission outside allowed directories", async () => {
         const permissions = {
             workingDir: "/tmp",
             writeDirs: ["/tmp"],
             readDirs: [],
-            network: false
+            network: false,
+            events: false
         };
         await expect(permissionTagsValidate(permissions, ["@write:/etc"]))
             .rejects.toThrow("Cannot attach permission '@write:/etc' - you don't have it.");
@@ -48,7 +67,8 @@ describe("permissionTagsValidate", () => {
             workingDir: "/tmp",
             writeDirs: [],
             readDirs: ["/tmp"],
-            network: false
+            network: false,
+            events: false
         };
         await expect(permissionTagsValidate(permissions, ["@read:/etc"]))
             .rejects.toThrow("Cannot attach permission '@read:/etc' - you don't have it.");
@@ -58,7 +78,8 @@ describe("permissionTagsValidate", () => {
             workingDir: "/tmp",
             writeDirs: [],
             readDirs: [],
-            network: false
+            network: false,
+            events: false
         };
         await expect(permissionTagsValidate(permissions, ["@read:/etc"])).resolves.toBeUndefined();
     });

package/dist/engine/permissions/permissionTagsValidate.spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissionTagsValidate.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsValidate.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC1C,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAEzC,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,CAAC,GAAG,CAAC;YAChB,QAAQ,EAAE,CAAC,GAAG,CAAC;YACf,OAAO,EAAE,IAAI;SACd,CAAC;QAEF,mBAAmB;QACnB,MAAM,sBAAsB,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;aAC5D,OAAO,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;aAC/D,OAAO,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;aAC9D,OAAO,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,MAAM,MAAM,CACV,sBAAsB,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CACpD,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"permissionTagsValidate.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsValidate.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC1C,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAEzC,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,CAAC,GAAG,CAAC;YAChB,QAAQ,EAAE,CAAC,GAAG,CAAC;YACf,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI;SACb,CAAC;QAEF,mBAAmB;QACnB,MAAM,sBAAsB,CAAC,WAAW,EAAE;YACxC,UAAU;YACV,SAAS;YACT,SAAS,MAAM,EAAE;YACjB,UAAU,GAAG,EAAE;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;aAC5D,OAAO,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;aAC3D,OAAO,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;aAC/D,OAAO,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;aAC9D,OAAO,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;QAEF,MAAM,MAAM,CACV,sBAAsB,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CACpD,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/permissions.d.ts

@@ -4,6 +4,7 @@ export type SessionPermissions = {
     writeDirs: string[];
     readDirs: string[];
     network: boolean;
+    events: boolean;
 };
 export declare function resolveWorkspaceDir(configDir: string, assistant?: AssistantSettings | null): string;
 export declare function ensureWorkspaceDir(dir: string): Promise<void>;

package/dist/engine/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../sources/engine/permissions.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,iBAAiB,GAAG,IAAI,GACnC,MAAM,CAQR;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnE;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,iBAAiB,EAAE,MAAM,GACxB,kBAAkB,CA6CpB;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAO/E"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../sources/engine/permissions.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,iBAAiB,GAAG,IAAI,GACnC,MAAM,CAQR;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnE;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,iBAAiB,EAAE,MAAM,GACxB,kBAAkB,CAoDpB;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAO/E"}

package/dist/engine/permissions.js

@@ -16,6 +16,7 @@ export function normalizePermissions(value, defaultWorkingDir) {
     let writeDirs = [];
     let readDirs = [];
     let network = false;
+    let events = false;
     if (value && typeof value === "object") {
         const candidate = value;
         if (typeof candidate.workingDir === "string" && candidate.workingDir.trim().length > 0) {
@@ -37,11 +38,15 @@ export function normalizePermissions(value, defaultWorkingDir) {
                 if (typeof candidate.network === "boolean") {
                     network = candidate.network;
                 }
+                if (typeof candidate.events === "boolean") {
+                    events = candidate.events;
+                }
                 return {
                     workingDir: path.resolve(candidate.workingDir),
                     writeDirs: dedupe(writeDirs),
                     readDirs: dedupe(readDirs),
-                    network
+                    network,
+                    events
                 };
             }
         }
@@ -50,7 +55,8 @@ export function normalizePermissions(value, defaultWorkingDir) {
         workingDir: path.resolve(defaultWorkingDir),
         writeDirs: [],
         readDirs: [],
-        network: false
+        network: false,
+        events: false
     };
 }
 export function resolveWorkspacePath(workingDir, target) {

package/dist/engine/permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../sources/engine/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAW7B,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,SAAoC;IAEpC,MAAM,UAAU,GAAG,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,iBAAyB;IAEzB,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,KAKjB,CAAC;QACF,IAAI,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvF,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;oBACvC,SAAS,GAAG,SAAS,CAAC,SAAS;yBAC5B,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;yBACxF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;yBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;yBACzC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzC,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtC,QAAQ,GAAG,SAAS,CAAC,QAAQ;yBAC1B,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;yBACxF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;yBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;yBACzC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzC,CAAC;gBACD,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC3C,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;gBAC9B,CAAC;gBACD,OAAO;oBACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;oBAC9C,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;oBAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;oBAC1B,OAAO;iBACR,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC3C,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,MAAc;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../sources/engine/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,SAAoC;IAEpC,MAAM,UAAU,GAAG,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,iBAAyB;IAEzB,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,KAMjB,CAAC;QACF,IAAI,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvF,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;oBACvC,SAAS,GAAG,SAAS,CAAC,SAAS;yBAC5B,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;yBACxF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;yBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;yBACzC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzC,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtC,QAAQ,GAAG,SAAS,CAAC,QAAQ;yBAC1B,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;yBACxF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;yBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;yBACzC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzC,CAAC;gBACD,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC3C,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;gBAC9B,CAAC;gBACD,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC1C,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;gBAC5B,CAAC;gBACD,OAAO;oBACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;oBAC9C,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;oBAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;oBAC1B,OAAO;oBACP,MAAM;iBACP,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC3C,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,MAAc;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/dist/engine/processes/processes.d.ts

@@ -39,6 +39,7 @@ export declare class Processes {
     private readonly lock;
     private readonly logger;
     private readonly bootTimeProvider;
+    private readonly socketPath;
     private readonly records;
     private readonly children;
     private currentBootTimeMs;
@@ -46,6 +47,7 @@ export declare class Processes {
     private monitorHandle;
     constructor(baseDir: string, logger: Logger, options?: {
         bootTimeProvider?: () => Promise<number | null>;
+        socketPath?: string;
     });
     load(): Promise<void>;
     unload(): void;

package/dist/engine/processes/processes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"processes.d.ts","sourceRoot":"","sources":["../../../sources/engine/processes/processes.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAuBzE,QAAA,MAAM,OAAO,qDAAsD,CAAC;AAEpE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,SAAS,GAAG,SAAS,CAAC;IACpC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AA6BF;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA+B;IAChE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,aAAa,CAA+B;gBAGlD,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;KAAO;IAQ7D,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAwB3B,MAAM,IAAI,IAAI;IASR,MAAM,CACV,KAAK,EAAE,kBAAkB,EACzB,WAAW,EAAE,kBAAkB,GAC9B,OAAO,CAAC,WAAW,CAAC;IAiFjB,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAS9B,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAW5C,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,GAAE,aAAyB,GAAG,OAAO,CAAC,WAAW,CAAC;IAahF,OAAO,CAAC,MAAM,GAAE,aAAyB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAaxE,OAAO,CAAC,YAAY;YAcN,yBAAyB;YA0DzB,8BAA8B;YAmC9B,iBAAiB;IAoD/B,OAAO,CAAC,oBAAoB;YA0Bd,gBAAgB;YAmBhB,iBAAiB;IAM/B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,UAAU;YAIJ,8BAA8B;IAS5C,OAAO,CAAC,4BAA4B;CA+BrC"}
+{"version":3,"file":"processes.d.ts","sourceRoot":"","sources":["../../../sources/engine/processes/processes.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAwBzE,QAAA,MAAM,OAAO,qDAAsD,CAAC;AAEpE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,SAAS,GAAG,SAAS,CAAC;IACpC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AA6BF;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA+B;IAChE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,aAAa,CAA+B;gBAGlD,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO;IASlF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAwB3B,MAAM,IAAI,IAAI;IASR,MAAM,CACV,KAAK,EAAE,kBAAkB,EACzB,WAAW,EAAE,kBAAkB,GAC9B,OAAO,CAAC,WAAW,CAAC;IAiFjB,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAS9B,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAW5C,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,GAAE,aAAyB,GAAG,OAAO,CAAC,WAAW,CAAC;IAahF,OAAO,CAAC,MAAM,GAAE,aAAyB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAaxE,OAAO,CAAC,YAAY;YAcN,yBAAyB;YA0DzB,8BAA8B;YAmC9B,iBAAiB;IAwD/B,OAAO,CAAC,oBAAoB;YA0Bd,gBAAgB;YAmBhB,iBAAiB;IAM/B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,UAAU;YAIJ,8BAA8B;IAS5C,OAAO,CAAC,4BAA4B;CA+BrC"}

package/dist/engine/processes/processes.js

@@ -13,6 +13,7 @@ import { AsyncLock } from "../../util/lock.js";
 import { sandboxHomeRedefine } from "../../sandbox/sandboxHomeRedefine.js";
 import { atomicWrite } from "../../util/atomicWrite.js";
 import { processBootTimeRead } from "./processBootTimeRead.js";
+import { resolveEngineSocketPath } from "../ipc/socket.js";
 const RECORD_VERSION = 2;
 const MONITOR_INTERVAL_MS = 2_000;
 const PROCESS_STOP_TIMEOUT_MS = 8_000;
@@ -33,6 +34,7 @@ export class Processes {
     lock = new AsyncLock();
     logger;
     bootTimeProvider;
+    socketPath;
     records = new Map();
     children = new Map();
     currentBootTimeMs = null;
@@ -43,6 +45,7 @@ export class Processes {
         this.recordsDir = path.join(this.baseDir, "processes");
         this.logger = logger;
         this.bootTimeProvider = options.bootTimeProvider ?? processBootTimeRead;
+        this.socketPath = resolveEngineSocketPath(options.socketPath);
     }
     async load() {
         await fs.mkdir(this.recordsDir, { recursive: true });
@@ -278,7 +281,7 @@ export class Processes {
         }
     }
     async startRecordLocked(record, options) {
-        const sandboxConfig = buildSandboxConfig(record.allowedDomains, record.permissions);
+        const sandboxConfig = buildSandboxConfig(record.allowedDomains, record.permissions, this.socketPath);
         await atomicWrite(record.settingsPath, JSON.stringify(sandboxConfig));
         const baseEnv = { ...process.env, ...record.env };
         const envResult = await sandboxHomeRedefine({ env: baseEnv, home: record.home ?? undefined });
@@ -404,13 +407,14 @@ export class Processes {
         this.children.delete(record.id);
     }
 }
-function buildSandboxConfig(allowedDomains, permissions) {
+function buildSandboxConfig(allowedDomains, permissions, socketPath) {
     return {
         filesystem: sandboxFilesystemPolicyBuild({ permissions }),
         network: {
             allowedDomains,
             deniedDomains: []
         },
+        ...(permissions.events ? { allowUnixSockets: [socketPath] } : {}),
         enableWeakerNestedSandbox: true
     };
 }
@@ -510,7 +514,8 @@ function parsePermissions(value) {
     if (typeof candidate.workingDir !== "string" ||
         !Array.isArray(candidate.writeDirs) ||
         !Array.isArray(candidate.readDirs) ||
-        typeof candidate.network !== "boolean") {
+        typeof candidate.network !== "boolean" ||
+        typeof candidate.events !== "boolean") {
         return null;
     }
     const writeDirs = candidate.writeDirs.filter((entry) => typeof entry === "string");
@@ -519,7 +524,8 @@ function parsePermissions(value) {
         workingDir: candidate.workingDir,
         writeDirs,
         readDirs,
-        network: candidate.network
+        network: candidate.network,
+        events: candidate.events
     };
 }
 function clonePermissions(permissions) {
@@ -527,7 +533,8 @@ function clonePermissions(permissions) {
         workingDir: permissions.workingDir,
         writeDirs: [...permissions.writeDirs],
         readDirs: [...permissions.readDirs],
-        network: permissions.network
+        network: permissions.network,
+        events: permissions.events
     };
 }
 function isPackageManager(value) {