daycare-cli 2026.2.9 → 2026.2.11

package/dist/engine/permissions/permissionWorkspaceGranted.spec.js

@@ -1,35 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { permissionWorkspaceGranted } from "./permissionWorkspaceGranted.js";
-describe("permissionWorkspaceGranted", () => {
-    it("returns true for workspace-scoped write permissions", () => {
-        expect(permissionWorkspaceGranted({
-            workspaceDir: "/workspace",
-            workingDir: "/workspace",
-            writeDirs: ["/workspace"],
-            readDirs: ["/workspace"],
-            network: false,
-            events: false
-        })).toBe(true);
-    });
-    it("returns false for app-scoped default writes", () => {
-        expect(permissionWorkspaceGranted({
-            workspaceDir: "/workspace",
-            workingDir: "/workspace/apps/reviewer/data",
-            writeDirs: ["/workspace/apps/reviewer/data"],
-            readDirs: ["/workspace"],
-            network: false,
-            events: false
-        })).toBe(false);
-    });
-    it("returns true for app permissions after @workspace grant", () => {
-        expect(permissionWorkspaceGranted({
-            workspaceDir: "/workspace",
-            workingDir: "/workspace/apps/reviewer/data",
-            writeDirs: ["/workspace/apps/reviewer/data", "/workspace"],
-            readDirs: ["/workspace"],
-            network: false,
-            events: false
-        })).toBe(true);
-    });
-});
-//# sourceMappingURL=permissionWorkspaceGranted.spec.js.map

package/dist/engine/permissions/permissionWorkspaceGranted.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionWorkspaceGranted.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionWorkspaceGranted.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC3D,MAAM,CACF,0BAA0B,CAAC;YACvB,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,CAAC,YAAY,CAAC;YACzB,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC,CACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACnD,MAAM,CACF,0BAA0B,CAAC;YACvB,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,+BAA+B;YAC3C,SAAS,EAAE,CAAC,+BAA+B,CAAC;YAC5C,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC,CACL,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QAC/D,MAAM,CACF,0BAA0B,CAAC;YACvB,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,+BAA+B;YAC3C,SAAS,EAAE,CAAC,+BAA+B,EAAE,YAAY,CAAC;YAC1D,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC,CACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionWorkspacePathResolve.d.ts

@@ -1,7 +0,0 @@
-import type { SessionPermissions } from "@/types";
-/**
- * Resolves the shared workspace root path for a permission set.
- * Expects: permission paths are absolute and normalized.
- */
-export declare function permissionWorkspacePathResolve(permissions: SessionPermissions): string;
-//# sourceMappingURL=permissionWorkspacePathResolve.d.ts.map

package/dist/engine/permissions/permissionWorkspacePathResolve.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionWorkspacePathResolve.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionWorkspacePathResolve.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGlD;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,kBAAkB,GAAG,MAAM,CAkBtF"}

package/dist/engine/permissions/permissionWorkspacePathResolve.js

@@ -1,42 +0,0 @@
-import path from "node:path";
-import { isWithinSecure } from "./pathResolveSecure.js";
-/**
- * Resolves the shared workspace root path for a permission set.
- * Expects: permission paths are absolute and normalized.
- */
-export function permissionWorkspacePathResolve(permissions) {
-    if (typeof permissions.workspaceDir === "string" && permissions.workspaceDir.trim().length > 0) {
-        return path.resolve(permissions.workspaceDir);
-    }
-    const appWorkspace = appWorkspacePathResolve(permissions.workingDir);
-    if (appWorkspace) {
-        return appWorkspace;
-    }
-    const workingDir = path.resolve(permissions.workingDir);
-    const candidates = Array.from(new Set([...permissions.readDirs, ...permissions.writeDirs].map((entry) => path.resolve(entry))));
-    const parentCandidates = candidates
-        .filter((entry) => isWithinSecure(entry, workingDir))
-        .sort((left, right) => right.length - left.length);
-    return parentCandidates[0] ?? workingDir;
-}
-function appWorkspacePathResolve(workingDir) {
-    const resolved = path.resolve(workingDir);
-    const segments = resolved.split(path.sep).filter((entry) => entry.length > 0);
-    const root = path.parse(resolved).root;
-    let workspaceSegments = null;
-    for (let index = 0; index < segments.length; index += 1) {
-        if (segments[index] !== "apps") {
-            continue;
-        }
-        const marker = segments[index + 2];
-        if (marker !== "data") {
-            continue;
-        }
-        workspaceSegments = segments.slice(0, index);
-    }
-    if (!workspaceSegments) {
-        return null;
-    }
-    return path.join(root, ...workspaceSegments);
-}
-//# sourceMappingURL=permissionWorkspacePathResolve.js.map

package/dist/engine/permissions/permissionWorkspacePathResolve.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionWorkspacePathResolve.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionWorkspacePathResolve.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,WAA+B;IAC1E,IAAI,OAAO,WAAW,CAAC,YAAY,KAAK,QAAQ,IAAI,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7F,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,YAAY,GAAG,uBAAuB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,YAAY,EAAE,CAAC;QACf,OAAO,YAAY,CAAC;IACxB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CACzB,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CACnG,CAAC;IACF,MAAM,gBAAgB,GAAG,UAAU;SAC9B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;SACpD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,gBAAgB,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;AAC7C,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IACvC,IAAI,iBAAiB,GAAoB,IAAI,CAAC;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;YAC7B,SAAS;QACb,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACpB,SAAS;QACb,CAAC;QACD,iBAAiB,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,iBAAiB,CAAC,CAAC;AACjD,CAAC"}

package/dist/engine/permissions/permissionWorkspacePathResolve.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=permissionWorkspacePathResolve.spec.d.ts.map

package/dist/engine/permissions/permissionWorkspacePathResolve.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionWorkspacePathResolve.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionWorkspacePathResolve.spec.ts"],"names":[],"mappings":""}

package/dist/engine/permissions/permissionWorkspacePathResolve.spec.js

@@ -1,36 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { permissionWorkspacePathResolve } from "./permissionWorkspacePathResolve.js";
-describe("permissionWorkspacePathResolve", () => {
-    it("prefers explicit workspaceDir when present", () => {
-        const result = permissionWorkspacePathResolve({
-            workspaceDir: "/workspace",
-            workingDir: "/workspace/apps/my-app/data",
-            writeDirs: ["/workspace/apps/my-app/data"],
-            readDirs: ["/workspace"],
-            network: false,
-            events: false
-        });
-        expect(result).toBe("/workspace");
-    });
-    it("derives workspace root from app workingDir when workspaceDir is missing", () => {
-        const result = permissionWorkspacePathResolve({
-            workingDir: "/workspace/apps/my-app/data",
-            writeDirs: ["/workspace/apps/my-app/data"],
-            readDirs: ["/workspace"],
-            network: false,
-            events: false
-        });
-        expect(result).toBe("/workspace");
-    });
-    it("falls back to closest ancestor permission root for cron-like workingDir", () => {
-        const result = permissionWorkspacePathResolve({
-            workingDir: "/workspace/cron/my-task/files",
-            writeDirs: ["/workspace"],
-            readDirs: ["/workspace"],
-            network: false,
-            events: false
-        });
-        expect(result).toBe("/workspace");
-    });
-});
-//# sourceMappingURL=permissionWorkspacePathResolve.spec.js.map

package/dist/engine/permissions/permissionWorkspacePathResolve.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionWorkspacePathResolve.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionWorkspacePathResolve.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAErF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,8BAA8B,CAAC;YAC1C,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,6BAA6B;YACzC,SAAS,EAAE,CAAC,6BAA6B,CAAC;YAC1C,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QAC/E,MAAM,MAAM,GAAG,8BAA8B,CAAC;YAC1C,UAAU,EAAE,6BAA6B;YACzC,SAAS,EAAE,CAAC,6BAA6B,CAAC;YAC1C,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QAC/E,MAAM,MAAM,GAAG,8BAA8B,CAAC;YAC1C,UAAU,EAAE,+BAA+B;YAC3C,SAAS,EAAE,CAAC,YAAY,CAAC;YACzB,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/engine/scheduling/gatePermissionRequest.d.ts

@@ -1,21 +0,0 @@
-import type { AgentSystem } from "../agents/agentSystem.js";
-import type { ConnectorRegistry } from "../modules/connectorRegistry.js";
-import type { PermissionRequestRegistry } from "../modules/tools/permissionRequestRegistry.js";
-export type GatePermissionRequestInput = {
-    missing: string[];
-    taskLabel: string;
-    agentSystem: AgentSystem;
-    connectorRegistry: ConnectorRegistry;
-    permissionRequestRegistry: PermissionRequestRegistry;
-    agentId: string;
-    timeoutMs?: number;
-};
-export type GatePermissionRequestResult = {
-    granted: boolean;
-};
-/**
- * Requests missing gate permissions from the most-recent foreground user.
- * Expects: missing values are valid permission tags and agentId identifies the gated task agent.
- */
-export declare function gatePermissionRequest(input: GatePermissionRequestInput): Promise<GatePermissionRequestResult>;
-//# sourceMappingURL=gatePermissionRequest.d.ts.map

package/dist/engine/scheduling/gatePermissionRequest.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gatePermissionRequest.d.ts","sourceRoot":"","sources":["../../../sources/engine/scheduling/gatePermissionRequest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAK/F,MAAM,MAAM,0BAA0B,GAAG;IACrC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,WAAW,CAAC;IACzB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,yBAAyB,EAAE,yBAAyB,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACtC,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAgGnH"}

package/dist/engine/scheduling/gatePermissionRequest.js

@@ -1,98 +0,0 @@
-import path from "node:path";
-import { createId } from "@paralleldrive/cuid2";
-import { agentDescriptorLabel } from "../agents/ops/agentDescriptorLabel.js";
-import { agentDescriptorTargetResolve } from "../agents/ops/agentDescriptorTargetResolve.js";
-import { permissionAccessParse } from "../permissions/permissionAccessParse.js";
-const DEFAULT_TIMEOUT_MS = 15 * 60_000;
-/**
- * Requests missing gate permissions from the most-recent foreground user.
- * Expects: missing values are valid permission tags and agentId identifies the gated task agent.
- */
-export async function gatePermissionRequest(input) {
-    if (input.missing.length === 0) {
-        return { granted: true };
-    }
-    const foregroundAgentId = input.agentSystem.agentFor("most-recent-foreground");
-    if (!foregroundAgentId) {
-        throw new Error("No foreground agent available for permission requests.");
-    }
-    const foregroundDescriptor = input.agentSystem.getAgentDescriptor(foregroundAgentId);
-    if (!foregroundDescriptor) {
-        throw new Error("Foreground agent descriptor not found.");
-    }
-    const target = agentDescriptorTargetResolve(foregroundDescriptor);
-    if (!target) {
-        throw new Error("Foreground agent has no user target for permission requests.");
-    }
-    const connector = input.connectorRegistry.get(target.connector);
-    if (!connector) {
-        throw new Error("Connector not available for permission requests.");
-    }
-    const requesterDescriptor = input.agentSystem.getAgentDescriptor(input.agentId);
-    if (!requesterDescriptor) {
-        throw new Error("Requesting agent descriptor not found.");
-    }
-    const permissions = input.missing.map((permission) => {
-        const access = permissionAccessParse(permission);
-        if ((access.kind === "read" || access.kind === "write") && !path.isAbsolute(access.path)) {
-            throw new Error("Path must be absolute.");
-        }
-        return { permission, access };
-    });
-    const reason = `Gate check for ${input.taskLabel} requires additional permissions.`;
-    const message = [
-        `Permission request for ${input.taskLabel}:`,
-        ...permissions.map((entry) => `- ${entry.permission}`),
-        `Reason: ${reason}`,
-        "Scope: always"
-    ].join("\n");
-    const request = {
-        token: createId(),
-        agentId: input.agentId,
-        reason,
-        message,
-        permissions,
-        scope: "always",
-        requester: {
-            id: input.agentId,
-            type: requesterDescriptor.type,
-            label: agentDescriptorLabel(requesterDescriptor),
-            kind: "background"
-        }
-    };
-    if (connector.requestPermission) {
-        await connector.requestPermission(target.targetId, request, {}, foregroundDescriptor);
-    }
-    else {
-        await connector.sendMessage(target.targetId, { text: request.message });
-    }
-    const timeoutMs = input.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    let decision;
-    try {
-        decision = await input.permissionRequestRegistry.register(request.token, timeoutMs);
-    }
-    catch (error) {
-        const isTimeout = error instanceof Error && error.message === "Permission request timed out.";
-        if (isTimeout) {
-            return { granted: false };
-        }
-        throw error;
-    }
-    if (!decision.approved) {
-        return { granted: false };
-    }
-    const targetAgentId = decision.agentId || input.agentId;
-    const resolvedDecision = {
-        ...decision,
-        agentId: targetAgentId,
-        scope: "always"
-    };
-    for (const entry of decision.permissions) {
-        await input.agentSystem.grantPermission({ agentId: targetAgentId }, entry.access, {
-            source: target.connector,
-            decision: resolvedDecision
-        });
-    }
-    return { granted: true };
-}
-//# sourceMappingURL=gatePermissionRequest.js.map

package/dist/engine/scheduling/gatePermissionRequest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gatePermissionRequest.js","sourceRoot":"","sources":["../../../sources/engine/scheduling/gatePermissionRequest.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAIhD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAG7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAEhF,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AAgBvC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAiC;IACzE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,iBAAiB,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAC/E,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,oBAAoB,GAAG,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;IACrF,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAAG,4BAA4B,CAAC,oBAAoB,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,mBAAmB,GAAG,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,kBAAkB,KAAK,CAAC,SAAS,mCAAmC,CAAC;IACpF,MAAM,OAAO,GAAG;QACZ,0BAA0B,KAAK,CAAC,SAAS,GAAG;QAC5C,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACtD,WAAW,MAAM,EAAE;QACnB,eAAe;KAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,OAAO,GAAsB;QAC/B,KAAK,EAAE,QAAQ,EAAE;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM;QACN,OAAO;QACP,WAAW;QACX,KAAK,EAAE,QAAQ;QACf,SAAS,EAAE;YACP,EAAE,EAAE,KAAK,CAAC,OAAO;YACjB,IAAI,EAAE,mBAAmB,CAAC,IAAI;YAC9B,KAAK,EAAE,oBAAoB,CAAC,mBAAmB,CAAC;YAChD,IAAI,EAAE,YAAY;SACrB;KACJ,CAAC;IAEF,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAC9B,MAAM,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC1F,CAAC;SAAM,CAAC;QACJ,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACxD,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACD,QAAQ,GAAG,MAAM,KAAK,CAAC,yBAAyB,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,CAAC;QAC9F,IAAI,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC;IACxD,MAAM,gBAAgB,GAAuB;QACzC,GAAG,QAAQ;QACX,OAAO,EAAE,aAAa;QACtB,KAAK,EAAE,QAAQ;KAClB,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,KAAK,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE;YAC9E,MAAM,EAAE,MAAM,CAAC,SAAS;YACxB,QAAQ,EAAE,gBAAgB;SAC7B,CAAC,CAAC;IACP,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC"}

package/dist/engine/scheduling/gatePermissionRequest.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=gatePermissionRequest.spec.d.ts.map

package/dist/engine/scheduling/gatePermissionRequest.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gatePermissionRequest.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/scheduling/gatePermissionRequest.spec.ts"],"names":[],"mappings":""}

package/dist/engine/scheduling/gatePermissionRequest.spec.js

@@ -1,126 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import { PermissionRequestRegistry } from "../modules/tools/permissionRequestRegistry.js";
-import { gatePermissionRequest } from "./gatePermissionRequest.js";
-describe("gatePermissionRequest", () => {
-    it("requests permission, waits for approval, and grants missing access", async () => {
-        const registry = new PermissionRequestRegistry();
-        const grantPermission = vi.fn(async () => undefined);
-        const requestPermission = vi.fn(async (_targetId, _request) => undefined);
-        const pending = gatePermissionRequest({
-            missing: ["@network"],
-            taskLabel: "cron task alpha",
-            agentId: "agent-1",
-            agentSystem: agentSystemBuild({
-                grantPermission
-            }),
-            connectorRegistry: connectorRegistryBuild({ requestPermission }),
-            permissionRequestRegistry: registry
-        });
-        const request = await permissionRequestWait(requestPermission);
-        await registryResolveWhenReady(registry, {
-            token: request.token,
-            agentId: request.agentId,
-            approved: true,
-            permissions: request.permissions,
-            scope: "always"
-        });
-        const result = await pending;
-        expect(result.granted).toBe(true);
-        expect(request.scope).toBe("always");
-        expect(grantPermission).toHaveBeenCalledTimes(1);
-        expect(grantPermission).toHaveBeenCalledWith({ agentId: "agent-1" }, { kind: "network" }, expect.objectContaining({ source: "telegram" }));
-    });
-    it("returns false when permission is denied", async () => {
-        const registry = new PermissionRequestRegistry();
-        const grantPermission = vi.fn(async () => undefined);
-        const requestPermission = vi.fn(async (_targetId, _request) => undefined);
-        const pending = gatePermissionRequest({
-            missing: ["@network"],
-            taskLabel: "heartbeat task beta",
-            agentId: "agent-1",
-            agentSystem: agentSystemBuild({
-                grantPermission
-            }),
-            connectorRegistry: connectorRegistryBuild({ requestPermission }),
-            permissionRequestRegistry: registry
-        });
-        const request = await permissionRequestWait(requestPermission);
-        await registryResolveWhenReady(registry, {
-            token: request.token,
-            agentId: request.agentId,
-            approved: false,
-            permissions: request.permissions,
-            scope: "always"
-        });
-        const result = await pending;
-        expect(result.granted).toBe(false);
-        expect(grantPermission).not.toHaveBeenCalled();
-    });
-    it("returns false on timeout", async () => {
-        const result = await gatePermissionRequest({
-            missing: ["@network"],
-            taskLabel: "cron task gamma",
-            agentId: "agent-1",
-            agentSystem: agentSystemBuild({}),
-            connectorRegistry: connectorRegistryBuild({ requestPermission: vi.fn(async () => undefined) }),
-            permissionRequestRegistry: new PermissionRequestRegistry(),
-            timeoutMs: 10
-        });
-        expect(result.granted).toBe(false);
-    });
-});
-function agentSystemBuild(overrides) {
-    const descriptors = new Map([
-        [
-            "foreground-1",
-            {
-                type: "user",
-                connector: "telegram",
-                userId: "u1",
-                channelId: "c1"
-            }
-        ],
-        [
-            "agent-1",
-            {
-                type: "system",
-                tag: "cron"
-            }
-        ]
-    ]);
-    return {
-        agentFor: vi.fn(() => "foreground-1"),
-        getAgentDescriptor: vi.fn((agentId) => descriptors.get(agentId) ?? null),
-        grantPermission: overrides.grantPermission ?? (async () => undefined)
-    };
-}
-function connectorRegistryBuild(options) {
-    return {
-        get: vi.fn(() => ({
-            capabilities: { sendText: true },
-            onMessage: vi.fn(() => () => undefined),
-            sendMessage: vi.fn(async () => undefined),
-            requestPermission: options.requestPermission
-        }))
-    };
-}
-async function permissionRequestWait(requestPermission) {
-    for (let attempt = 0; attempt < 50; attempt += 1) {
-        const request = requestPermission.mock.calls[0]?.[1];
-        if (request) {
-            return request;
-        }
-        await new Promise((resolve) => setTimeout(resolve, 0));
-    }
-    throw new Error("Expected permission request payload");
-}
-async function registryResolveWhenReady(registry, decision) {
-    for (let attempt = 0; attempt < 20; attempt += 1) {
-        if (registry.resolve(decision.token, decision)) {
-            return;
-        }
-        await Promise.resolve();
-    }
-    throw new Error("Permission token was never registered.");
-}
-//# sourceMappingURL=gatePermissionRequest.spec.js.map

package/dist/engine/scheduling/gatePermissionRequest.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gatePermissionRequest.spec.js","sourceRoot":"","sources":["../../../sources/engine/scheduling/gatePermissionRequest.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAKlD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,QAAQ,GAAG,IAAI,yBAAyB,EAAE,CAAC;QACjD,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,SAAiB,EAAE,QAA2B,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;QAErG,MAAM,OAAO,GAAG,qBAAqB,CAAC;YAClC,OAAO,EAAE,CAAC,UAAU,CAAC;YACrB,SAAS,EAAE,iBAAiB;YAC5B,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,gBAAgB,CAAC;gBAC1B,eAAe;aAClB,CAAC;YACF,iBAAiB,EAAE,sBAAsB,CAAC,EAAE,iBAAiB,EAAE,CAAC;YAChE,yBAAyB,EAAE,QAAQ;SACtC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QAC/D,MAAM,wBAAwB,CAAC,QAAQ,EAAE;YACrC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,QAAQ;SAClB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;QAE7B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CACxC,EAAE,OAAO,EAAE,SAAS,EAAE,EACtB,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAClD,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,QAAQ,GAAG,IAAI,yBAAyB,EAAE,CAAC;QACjD,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,SAAiB,EAAE,QAA2B,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;QAErG,MAAM,OAAO,GAAG,qBAAqB,CAAC;YAClC,OAAO,EAAE,CAAC,UAAU,CAAC;YACrB,SAAS,EAAE,qBAAqB;YAChC,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,gBAAgB,CAAC;gBAC1B,eAAe;aAClB,CAAC;YACF,iBAAiB,EAAE,sBAAsB,CAAC,EAAE,iBAAiB,EAAE,CAAC;YAChE,yBAAyB,EAAE,QAAQ;SACtC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QAC/D,MAAM,wBAAwB,CAAC,QAAQ,EAAE;YACrC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,QAAQ;SAClB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;YACvC,OAAO,EAAE,CAAC,UAAU,CAAC;YACrB,SAAS,EAAE,iBAAiB;YAC5B,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACjC,iBAAiB,EAAE,sBAAsB,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9F,yBAAyB,EAAE,IAAI,yBAAyB,EAAE;YAC1D,SAAS,EAAE,EAAE;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,SAAS,gBAAgB,CAAC,SAMzB;IACG,MAAM,WAAW,GAAG,IAAI,GAAG,CAA0B;QACjD;YACI,cAAc;YACd;gBACI,IAAI,EAAE,MAAM;gBACZ,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;aAClB;SACJ;QACD;YACI,SAAS;YACT;gBACI,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,MAAM;aACd;SACJ;KACJ,CAAC,CAAC;IAEH,OAAO;QACH,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC;QACrC,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;QAChF,eAAe,EAAE,SAAS,CAAC,eAAe,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;KAC9C,CAAC;AAChC,CAAC;AAED,SAAS,sBAAsB,CAAC,OAE/B;IACG,OAAO;QACH,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;YACd,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YAChC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;YACvC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;YACzC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;SAC/C,CAAC,CAAC;KAC0B,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,iBAAmD;IACpF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAkC,CAAC;QACtF,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,wBAAwB,CACnC,QAAmC,EACnC,QAMC;IAED,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7C,OAAO;QACX,CAAC;QACD,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC9D,CAAC"}

package/dist/engine/scheduling/gatePermissionsCheck.d.ts

@@ -1,11 +0,0 @@
-import type { SessionPermissions } from "@/types";
-export type GatePermissionsCheckResult = {
-    allowed: boolean;
-    missing: string[];
-};
-/**
- * Checks gate permission tags against the current permissions.
- * Expects: tags are @network, @events, @workspace, @read:<path>, or @write:<path>.
- */
-export declare function gatePermissionsCheck(permissions: SessionPermissions, tags?: string[]): Promise<GatePermissionsCheckResult>;
-//# sourceMappingURL=gatePermissionsCheck.d.ts.map

package/dist/engine/scheduling/gatePermissionsCheck.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gatePermissionsCheck.d.ts","sourceRoot":"","sources":["../../../sources/engine/scheduling/gatePermissionsCheck.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoB,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGpE,MAAM,MAAM,0BAA0B,GAAG;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,oBAAoB,CACtC,WAAW,EAAE,kBAAkB,EAC/B,IAAI,CAAC,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,0BAA0B,CAAC,CAwBrC"}

package/dist/engine/scheduling/gatePermissionsCheck.js

@@ -1,58 +0,0 @@
-import { permissionAccessAllows } from "../permissions/permissionAccessAllows.js";
-/**
- * Checks gate permission tags against the current permissions.
- * Expects: tags are @network, @events, @workspace, @read:<path>, or @write:<path>.
- */
-export async function gatePermissionsCheck(permissions, tags) {
-    if (!tags || tags.length === 0) {
-        return { allowed: true, missing: [] };
-    }
-    const missing = [];
-    for (const entry of tags) {
-        const trimmed = entry.trim();
-        if (!trimmed) {
-            missing.push("<blank> (Permission tag cannot be blank.)");
-            continue;
-        }
-        const parsed = parsePermissionAccess(trimmed);
-        if (!parsed.access) {
-            missing.push(`${trimmed} (${parsed.error ?? "Invalid gate permission."})`);
-            continue;
-        }
-        const allowed = await permissionAccessAllows(permissions, parsed.access);
-        if (!allowed) {
-            missing.push(trimmed);
-        }
-    }
-    return { allowed: missing.length === 0, missing };
-}
-function parsePermissionAccess(tag) {
-    if (tag === "@network") {
-        return { access: { kind: "network" } };
-    }
-    if (tag === "@events") {
-        return { access: { kind: "events" } };
-    }
-    if (tag === "@workspace") {
-        return { access: { kind: "workspace" } };
-    }
-    if (tag.startsWith("@read:")) {
-        const pathValue = tag.slice("@read:".length).trim();
-        if (!pathValue) {
-            return { access: null, error: "Read permission requires a path." };
-        }
-        return { access: { kind: "read", path: pathValue } };
-    }
-    if (tag.startsWith("@write:")) {
-        const pathValue = tag.slice("@write:".length).trim();
-        if (!pathValue) {
-            return { access: null, error: "Write permission requires a path." };
-        }
-        return { access: { kind: "write", path: pathValue } };
-    }
-    return {
-        access: null,
-        error: "Permission must be @network, @events, @workspace, @read:<path>, or @write:<path>."
-    };
-}
-//# sourceMappingURL=gatePermissionsCheck.js.map

package/dist/engine/scheduling/gatePermissionsCheck.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gatePermissionsCheck.js","sourceRoot":"","sources":["../../../sources/engine/scheduling/gatePermissionsCheck.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAOlF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,WAA+B,EAC/B,IAAe;IAEf,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAC1D,SAAS;QACb,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,KAAK,MAAM,CAAC,KAAK,IAAI,0BAA0B,GAAG,CAAC,CAAC;YAC3E,SAAS;QACb,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;IACL,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACtC,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QACxE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,OAAO;QACH,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,mFAAmF;KAC7F,CAAC;AACN,CAAC"}

package/dist/engine/scheduling/gatePermissionsCheck.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=gatePermissionsCheck.spec.d.ts.map

package/dist/engine/scheduling/gatePermissionsCheck.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gatePermissionsCheck.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/scheduling/gatePermissionsCheck.spec.ts"],"names":[],"mappings":""}

package/dist/engine/scheduling/gatePermissionsCheck.spec.js

@@ -1,67 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { gatePermissionsCheck } from "./gatePermissionsCheck.js";
-const basePermissions = {
-    workspaceDir: "/tmp",
-    workingDir: "/tmp",
-    readDirs: ["/tmp"],
-    writeDirs: ["/tmp"],
-    network: false,
-    events: false
-};
-describe("gatePermissionsCheck", () => {
-    it("allows empty tags", async () => {
-        const result = await gatePermissionsCheck(basePermissions);
-        expect(result).toEqual({ allowed: true, missing: [] });
-    });
-    it("denies network when not allowed", async () => {
-        const result = await gatePermissionsCheck(basePermissions, ["@network"]);
-        expect(result.allowed).toBe(false);
-        expect(result.missing).toEqual(["@network"]);
-    });
-    it("allows network when permitted", async () => {
-        const permissions = { ...basePermissions, network: true };
-        const result = await gatePermissionsCheck(permissions, ["@network"]);
-        expect(result).toEqual({ allowed: true, missing: [] });
-    });
-    it("denies events when not allowed", async () => {
-        const result = await gatePermissionsCheck(basePermissions, ["@events"]);
-        expect(result.allowed).toBe(false);
-        expect(result.missing).toEqual(["@events"]);
-    });
-    it("allows events when permitted", async () => {
-        const permissions = { ...basePermissions, events: true };
-        const result = await gatePermissionsCheck(permissions, ["@events"]);
-        expect(result).toEqual({ allowed: true, missing: [] });
-    });
-    it("denies workspace when not allowed", async () => {
-        const appPermissions = {
-            workspaceDir: "/tmp",
-            workingDir: "/tmp/apps/my-app/data",
-            readDirs: ["/tmp"],
-            writeDirs: ["/tmp/apps/my-app/data"],
-            network: false,
-            events: false
-        };
-        const result = await gatePermissionsCheck(appPermissions, ["@workspace"]);
-        expect(result.allowed).toBe(false);
-        expect(result.missing).toEqual(["@workspace"]);
-    });
-    it("allows workspace when permitted", async () => {
-        const permissions = { ...basePermissions };
-        const result = await gatePermissionsCheck(permissions, ["@workspace"]);
-        expect(result).toEqual({ allowed: true, missing: [] });
-    });
-    it("denies paths outside allowed roots", async () => {
-        const result = await gatePermissionsCheck(basePermissions, ["@read:/etc"]);
-        expect(result.allowed).toBe(false);
-        expect(result.missing).toEqual(["@read:/etc"]);
-    });
-    it("reports invalid permission tags", async () => {
-        const result = await gatePermissionsCheck(basePermissions, ["@banana"]);
-        expect(result.allowed).toBe(false);
-        expect(result.missing).toEqual([
-            "@banana (Permission must be @network, @events, @workspace, @read:<path>, or @write:<path>.)"
-        ]);
-    });
-});
-//# sourceMappingURL=gatePermissionsCheck.spec.js.map

package/dist/engine/scheduling/gatePermissionsCheck.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gatePermissionsCheck.spec.js","sourceRoot":"","sources":["../../../sources/engine/scheduling/gatePermissionsCheck.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,eAAe,GAAuB;IACxC,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,MAAM;IAClB,QAAQ,EAAE,CAAC,MAAM,CAAC;IAClB,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,OAAO,EAAE,KAAK;IACd,MAAM,EAAE,KAAK;CAChB,CAAC;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,eAAe,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,WAAW,GAAuB,EAAE,GAAG,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,WAAW,GAAuB,EAAE,GAAG,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,cAAc,GAAuB;YACvC,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,uBAAuB;YACnC,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,SAAS,EAAE,CAAC,uBAAuB,CAAC;YACpC,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,cAAc,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,WAAW,GAAuB,EAAE,GAAG,eAAe,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,eAAe,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;YAC3B,6FAA6F;SAChG,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/prompts/CRON.md

@@ -1,8 +0,0 @@
-# CRON WORKER
-
-You are the Daycare cron worker.
-
-- Treat incoming signal events as scheduler-triggered cron tasks.
-- Parse the signal payload and execute the task prompt carefully.
-- Respect granted permissions and avoid requesting unnecessary escalation.
-- When reporting results, keep output concise and actionable.