dodo-mcp 1.0.0

package/dist/projects/registry.js

@@ -0,0 +1,291 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { DodoError } from '../errors.js';
+import { newId } from '../util/hash.js';
+import { mintWorkspaceId } from '../workspace/identity.js';
+import { resolveWorkspaceRoot } from '../workspace/root.js';
+import { fileIdentityBigInt, parseFileIdentity } from '../platform/fileIdentity.js';
+export const PROJECT_METADATA_VERSION = 2;
+const MAX_PROJECTS = 1000;
+const PROJECT_ID = /^prj_[0-9a-hjkmnp-tv-z]{8,64}$/;
+const WORKSPACE_ID = /^ws_[a-f0-9]{20}$/;
+function samePath(a, b) {
+    return process.platform === 'win32' ? a.toLowerCase() === b.toLowerCase() : a === b;
+}
+function asFiniteInteger(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0 ? value : undefined;
+}
+function asBirthtimeNs(value) {
+    if (typeof value !== 'string' || !/^[1-9][0-9]{0,30}$/.test(value))
+        return undefined;
+    return value;
+}
+function safeDisplayName(input, root) {
+    const name = (input ?? path.basename(root)).trim();
+    if (name.length < 1 || name.length > 120 || /[\u0000-\u001f\u007f]/.test(name)) {
+        throw new DodoError('INVALID_INPUT', 'project display name must be 1..120 characters without control characters');
+    }
+    return name;
+}
+function validateProjectId(projectId) {
+    if (!PROJECT_ID.test(projectId))
+        throw new DodoError('INVALID_INPUT', 'invalid project ID');
+}
+function rawRows(db, includeRemoved) {
+    return db.prepare(`SELECT id, workspace_id, canonical_root, display_name, root_dev, root_ino, root_birthtime_ns,
+            metadata_version, created_at, updated_at, removed_at
+       FROM project_registry
+      ${includeRemoved ? '' : 'WHERE removed_at IS NULL'}
+      ORDER BY updated_at DESC, id ASC
+      LIMIT ?`).all(MAX_PROJECTS + 1);
+}
+function inspectAvailability(root, dev, ino, birthtimeNs) {
+    let link;
+    try {
+        link = fs.lstatSync(root);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return { availability: 'missing', statusText: 'ไม่พบ path ที่บันทึกไว้' };
+        return { availability: 'inaccessible', statusText: 'ไม่สามารถตรวจสอบ path ได้' };
+    }
+    if (link.isSymbolicLink())
+        return { availability: 'symlinked', statusText: 'path ที่บันทึกไว้ถูกแทนด้วย symbolic link' };
+    let real;
+    let stat;
+    try {
+        real = fs.realpathSync.native(root);
+        stat = fs.statSync(real, { bigint: true });
+    }
+    catch {
+        return { availability: 'inaccessible', statusText: 'ไม่สามารถตรวจสอบ directory identity ได้' };
+    }
+    if (!samePath(real, root) ||
+        !stat.isDirectory() ||
+        stat.dev !== fileIdentityBigInt(dev) ||
+        stat.ino !== fileIdentityBigInt(ino) ||
+        stat.birthtimeNs.toString() !== birthtimeNs) {
+        return { availability: 'replaced', statusText: 'path ชี้ไปยัง directory identity อื่น' };
+    }
+    return { availability: 'ready', statusText: 'พร้อมใช้งาน' };
+}
+function invalidProject(row) {
+    const now = Date.now();
+    return {
+        schemaVersion: 1,
+        projectId: typeof row.id === 'string' ? row.id : 'prj_invalid',
+        workspaceId: typeof row.workspace_id === 'string' ? row.workspace_id : 'ws_invalid',
+        root: typeof row.canonical_root === 'string' ? row.canonical_root : '(invalid path)',
+        displayName: typeof row.display_name === 'string' ? row.display_name : '(invalid project)',
+        createdAt: asFiniteInteger(row.created_at) ?? now,
+        updatedAt: asFiniteInteger(row.updated_at) ?? now,
+        removedAt: row.removed_at === null ? null : asFiniteInteger(row.removed_at) ?? null,
+        availability: 'invalid',
+        available: false,
+        statusText: 'registry metadata ไม่ถูกต้อง; ตรวจสอบและนำรายการนี้ออกก่อนใช้งาน',
+        identity: {
+            dev: parseFileIdentity(row.root_dev) ?? 0,
+            ino: parseFileIdentity(row.root_ino) ?? 0,
+            birthtimeNs: asBirthtimeNs(row.root_birthtime_ns) ?? '0',
+        },
+    };
+}
+function materialize(row) {
+    const id = typeof row.id === 'string' && PROJECT_ID.test(row.id) ? row.id : undefined;
+    const workspaceId = typeof row.workspace_id === 'string' && WORKSPACE_ID.test(row.workspace_id) ? row.workspace_id : undefined;
+    const root = typeof row.canonical_root === 'string' && path.isAbsolute(row.canonical_root) ? row.canonical_root : undefined;
+    const displayName = typeof row.display_name === 'string' && row.display_name.length >= 1 && row.display_name.length <= 120 && !/[\u0000-\u001f\u007f]/.test(row.display_name) ? row.display_name : undefined;
+    const dev = parseFileIdentity(row.root_dev);
+    const ino = parseFileIdentity(row.root_ino);
+    const birthtimeNs = asBirthtimeNs(row.root_birthtime_ns);
+    const createdAt = asFiniteInteger(row.created_at);
+    const updatedAt = asFiniteInteger(row.updated_at);
+    const removedAt = row.removed_at === null ? null : asFiniteInteger(row.removed_at);
+    if (!id || !workspaceId || !root || !displayName || dev === undefined || ino === undefined || !birthtimeNs || createdAt === undefined || updatedAt === undefined || removedAt === undefined || row.metadata_version !== PROJECT_METADATA_VERSION) {
+        return invalidProject(row);
+    }
+    const status = removedAt === null
+        ? inspectAvailability(root, dev, ino, birthtimeNs)
+        : { availability: 'removed', statusText: 'นำออกจาก registry แล้ว; ไฟล์และประวัติไม่ได้ถูกลบ' };
+    return {
+        schemaVersion: 1,
+        projectId: id,
+        workspaceId,
+        root,
+        displayName,
+        createdAt,
+        updatedAt,
+        removedAt,
+        availability: status.availability,
+        available: removedAt === null && status.availability === 'ready',
+        statusText: status.statusText,
+        identity: { dev, ino, birthtimeNs },
+    };
+}
+function resolveInput(candidate) {
+    if (typeof candidate !== 'string' || candidate.length < 1 || candidate.length > 4096 || candidate.includes('\0') || !path.isAbsolute(candidate)) {
+        throw new DodoError('INVALID_INPUT', 'project path must be an absolute path');
+    }
+    const root = resolveWorkspaceRoot(candidate, { allowUnsafe: false });
+    if (!root.birthtimeNs) {
+        throw new DodoError('NOT_SUPPORTED', 'project registry requires a filesystem with stable directory birth-time metadata', {
+            recovery: 'move the project to a local APFS, ext4, NTFS, or another filesystem that exposes directory birth time',
+        });
+    }
+    return { ...root, birthtimeNs: root.birthtimeNs };
+}
+/** Owner-only installation registry. It never changes workspace authority. */
+export class ProjectRegistry {
+    store;
+    constructor(store) {
+        this.store = store;
+    }
+    list(options = {}) {
+        try {
+            const rows = rawRows(this.store.db, options.includeRemoved ?? false);
+            if (rows.length > MAX_PROJECTS)
+                throw new DodoError('RESOURCE_LIMIT', `project registry exceeds ${MAX_PROJECTS} entries`);
+            return rows.map(materialize);
+        }
+        catch (error) {
+            if (error instanceof DodoError)
+                throw error;
+            throw registryFailure('read');
+        }
+    }
+    get(projectId, options = {}) {
+        validateProjectId(projectId);
+        let row;
+        try {
+            row = this.store.db.prepare(`SELECT id, workspace_id, canonical_root, display_name, root_dev, root_ino, root_birthtime_ns,
+                metadata_version, created_at, updated_at, removed_at
+           FROM project_registry WHERE id = ? ${options.includeRemoved ? '' : 'AND removed_at IS NULL'}`).get(projectId);
+        }
+        catch {
+            throw registryFailure('read');
+        }
+        if (!row)
+            throw new DodoError('NOT_FOUND', `project not found: ${projectId}`);
+        return materialize(row);
+    }
+    add(candidate, displayName) {
+        const root = resolveInput(candidate);
+        const name = safeDisplayName(displayName, root.root);
+        const workspaceId = mintWorkspaceId(this.store.installSecret(), root.root);
+        let result;
+        const tx = this.store.db.transaction(() => {
+            const byRoot = this.store.db.prepare('SELECT * FROM project_registry WHERE canonical_root = ? AND removed_at IS NULL').get(root.root);
+            if (byRoot) {
+                const current = materialize(byRoot);
+                if (current.availability === 'invalid')
+                    throw new DodoError('MIGRATION_REVIEW_REQUIRED', 'project registry row is invalid', { detail: { projectId: current.projectId } });
+                if (current.identity.dev !== root.dev || current.identity.ino !== root.ino || current.identity.birthtimeNs !== root.birthtimeNs) {
+                    throw new DodoError('CONFLICT', 'registered project path now points to another directory identity', {
+                        recovery: `review ${current.projectId}, remove it explicitly, then add the replacement as a new project`,
+                        detail: { projectId: current.projectId, availability: current.availability },
+                    });
+                }
+                if (displayName !== undefined && current.displayName !== name) {
+                    const now = Date.now();
+                    this.store.db.prepare('UPDATE project_registry SET display_name = ?, updated_at = ? WHERE id = ?').run(name, now, current.projectId);
+                    result = { changed: true, relocated: false, project: this.get(current.projectId) };
+                    this.audit(result, 'updated');
+                }
+                else
+                    result = { changed: false, relocated: false, project: current };
+                return;
+            }
+            const byIdentity = this.store.db.prepare('SELECT * FROM project_registry WHERE root_dev = ? AND root_ino = ? AND removed_at IS NULL').get(root.dev, root.ino);
+            if (byIdentity) {
+                const current = materialize(byIdentity);
+                if (current.availability === 'invalid')
+                    throw new DodoError('MIGRATION_REVIEW_REQUIRED', 'project registry row is invalid', { detail: { projectId: current.projectId } });
+                if (current.identity.birthtimeNs !== root.birthtimeNs) {
+                    throw new DodoError('CONFLICT', 'a filesystem inode was reused by another directory generation', {
+                        recovery: `review ${current.projectId}, remove it explicitly, then add the replacement as a new project`,
+                        detail: { projectId: current.projectId, availability: current.availability },
+                    });
+                }
+                if (samePath(current.root, root.root)) {
+                    result = { changed: false, relocated: false, project: current };
+                    return;
+                }
+                if (current.availability !== 'missing') {
+                    throw new DodoError('CONFLICT', 'the same directory identity is already registered at another active path', { detail: { projectId: current.projectId } });
+                }
+                const now = Date.now();
+                this.store.db.prepare('UPDATE project_registry SET workspace_id = ?, canonical_root = ?, display_name = ?, root_birthtime_ns = ?, updated_at = ? WHERE id = ?')
+                    .run(workspaceId, root.root, displayName === undefined ? current.displayName : name, root.birthtimeNs, now, current.projectId);
+                result = { changed: true, relocated: true, project: this.get(current.projectId) };
+                this.audit(result, 'relocated');
+                return;
+            }
+            const count = this.store.db.prepare('SELECT COUNT(*) AS count FROM project_registry WHERE removed_at IS NULL').get().count;
+            if (count >= MAX_PROJECTS)
+                throw new DodoError('RESOURCE_LIMIT', `project registry is limited to ${MAX_PROJECTS} active entries`);
+            const now = Date.now();
+            const projectId = newId('prj', 12);
+            this.store.db.prepare(`INSERT INTO project_registry
+          (id, workspace_id, canonical_root, display_name, root_dev, root_ino, root_birthtime_ns, metadata_version, created_at, updated_at, removed_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)`).run(projectId, workspaceId, root.root, name, root.dev, root.ino, root.birthtimeNs, PROJECT_METADATA_VERSION, now, now);
+            result = { changed: true, relocated: false, project: this.get(projectId) };
+            this.audit(result, 'added');
+        });
+        try {
+            tx.immediate();
+        }
+        catch (error) {
+            if (error instanceof DodoError)
+                throw error;
+            const code = error.code;
+            if (code === 'SQLITE_CONSTRAINT_UNIQUE') {
+                const existing = this.store.db.prepare('SELECT * FROM project_registry WHERE canonical_root = ? AND removed_at IS NULL').get(root.root);
+                if (existing)
+                    return { changed: false, relocated: false, project: materialize(existing) };
+                throw new DodoError('CONFLICT', 'project registry changed concurrently; retry the command');
+            }
+            throw registryFailure('update');
+        }
+        return result;
+    }
+    remove(projectId) {
+        validateProjectId(projectId);
+        const current = this.get(projectId);
+        try {
+            const tx = this.store.db.transaction(() => {
+                const job = this.store.db.prepare("SELECT 1 FROM jobs WHERE workspace_id=? AND status='running' LIMIT 1").get(current.workspaceId);
+                const agent = this.store.db.prepare("SELECT 1 FROM ai_runs WHERE workspace_id=? AND status NOT IN ('completed','failed','canceled') LIMIT 1").get(current.workspaceId);
+                if (job || agent)
+                    throw new DodoError('CONFLICT', 'project has unfinished jobs or agent runs; finish or cancel them before removal');
+                const now = Date.now();
+                const changed = this.store.db.prepare('UPDATE project_registry SET removed_at = ?, updated_at = ? WHERE id = ? AND removed_at IS NULL').run(now, now, projectId);
+                if (changed.changes !== 1)
+                    throw new DodoError('CONFLICT', 'project registry changed concurrently; refresh and retry');
+                this.store.audit({ principal: 'local-project-owner', workspaceId: current.workspaceId, tool: 'local.project.remove', paths: [current.root], refId: projectId, result: 'removed' });
+            });
+            tx.immediate();
+        }
+        catch (error) {
+            if (error instanceof DodoError)
+                throw error;
+            throw registryFailure('update');
+        }
+        return this.get(projectId, { includeRemoved: true });
+    }
+    audit(result, outcome) {
+        this.store.audit({
+            principal: 'local-project-owner',
+            workspaceId: result.project.workspaceId,
+            tool: 'local.project.add',
+            paths: [result.project.root],
+            refId: result.project.projectId,
+            result: outcome,
+        });
+    }
+}
+function registryFailure(operation) {
+    return new DodoError('INTERNAL_ERROR', `project registry ${operation} failed`, {
+        recovery: 'the registry was left unchanged; back up the Dodo state directory and run dodo doctor before repairing state.db',
+    });
+}
+//# sourceMappingURL=registry.js.map

package/dist/projects/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/projects/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAiB,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAqB,MAAM,6BAA6B,CAAC;AAEvG,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAC1C,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,UAAU,GAAG,gCAAgC,CAAC;AACpD,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAuCzC,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACpG,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB,EAAE,IAAY;IAC9D,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,2EAA2E,CAAC,CAAC;IACpH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,OAAO,CAAC,EAAqB,EAAE,cAAuB;IAC7D,OAAO,EAAE,CAAC,OAAO,CACf;;;QAGI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0BAA0B;;cAE1C,CACX,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,CAAkB,CAAC;AAC3C,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,GAAiB,EAAE,GAAiB,EAAE,WAAmB;IAClG,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,yBAAyB,EAAE,CAAC;QAClI,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,2BAA2B,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,2CAA2C,EAAE,CAAC;IACzH,IAAI,IAAY,CAAC;IACjB,IAAI,IAAoB,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,yCAAyC,EAAE,CAAC;IACjG,CAAC;IACD,IACE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;QACrB,CAAC,IAAI,CAAC,WAAW,EAAE;QACnB,IAAI,CAAC,GAAG,KAAK,kBAAkB,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,GAAG,KAAK,kBAAkB,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,WAAW,EAC3C,CAAC;QACD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,uCAAuC,EAAE,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,cAAc,CAAC,GAAgB;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa;QAC9D,WAAW,EAAE,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY;QACnF,IAAI,EAAE,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB;QACpF,WAAW,EAAE,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB;QAC1F,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG;QACjD,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG;QACjD,SAAS,EAAE,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI;QACnF,YAAY,EAAE,SAAS;QACvB,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,kEAAkE;QAC9E,QAAQ,EAAE;YACR,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzC,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzC,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,GAAG;SACzD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAgB;IACnC,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/H,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5H,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7M,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACnF,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,WAAW,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,gBAAgB,KAAK,wBAAwB,EAAE,CAAC;QACjP,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,KAAK,IAAI;QAC/B,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;QAClD,CAAC,CAAC,EAAE,YAAY,EAAE,SAAkB,EAAE,UAAU,EAAE,mDAAmD,EAAE,CAAC;IAC1G,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,EAAE;QACb,WAAW;QACX,IAAI;QACJ,WAAW;QACX,SAAS;QACT,SAAS;QACT,SAAS;QACT,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,KAAK,OAAO;QAChE,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB;IACrC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChJ,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,uCAAuC,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,kFAAkF,EAAE;YACvH,QAAQ,EAAE,uGAAuG;SAClH,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;AACpD,CAAC;AAED,8EAA8E;AAC9E,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,KAAY;QAAZ,UAAK,GAAL,KAAK,CAAO;IAAG,CAAC;IAE7C,IAAI,CAAC,UAAwC,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC;YACrE,IAAI,IAAI,CAAC,MAAM,GAAG,YAAY;gBAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,4BAA4B,YAAY,UAAU,CAAC,CAAC;YAC1H,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,SAAS;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,GAAG,CAAC,SAAiB,EAAE,UAAwC,EAAE;QAC/D,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7B,IAAI,GAA4B,CAAC;QACjC,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CACzB;;gDAEwC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,EAAE,CACjG,CAAC,GAAG,CAAC,SAAS,CAA4B,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,sBAAsB,SAAS,EAAE,CAAC,CAAC;QAC9E,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,GAAG,CAAC,SAAiB,EAAE,WAAoB;QACzC,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,MAAyB,CAAC;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,gFAAgF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAA4B,CAAC;YACjK,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;oBAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,EAAE,iCAAiC,EAAE,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC1K,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;oBAChI,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,kEAAkE,EAAE;wBAClG,QAAQ,EAAE,UAAU,OAAO,CAAC,SAAS,mEAAmE;wBACxG,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;qBAC7E,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;oBAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBACvB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;oBACrI,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBACnF,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAChC,CAAC;;oBAAM,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;gBACvE,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,2FAA2F,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAA4B,CAAC;YACzL,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;gBACxC,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;oBAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,EAAE,iCAAiC,EAAE,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC1K,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;oBACtD,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,+DAA+D,EAAE;wBAC/F,QAAQ,EAAE,UAAU,OAAO,CAAC,SAAS,mEAAmE;wBACxG,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;qBAC7E,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;oBAChE,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACvC,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,0EAA0E,EAAE,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC5J,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,wIAAwI,CAAC;qBAC5J,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACjI,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClF,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,yEAAyE,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK,CAAC;YAClJ,IAAI,KAAK,IAAI,YAAY;gBAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,kCAAkC,YAAY,iBAAiB,CAAC,CAAC;YAClI,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CACnB;;qDAE6C,CAC9C,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,wBAAwB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACzH,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,SAAS;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAC;YAC/C,IAAI,IAAI,KAAK,0BAA0B,EAAE,CAAC;gBACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,gFAAgF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAA4B,CAAC;gBACnK,IAAI,QAAQ;oBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1F,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,0DAA0D,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBACnI,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,wGAAwG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBACvK,IAAI,GAAG,IAAI,KAAK;oBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAC,iFAAiF,CAAC,CAAC;gBACpI,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,gGAAgG,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;gBACjK,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,0DAA0D,CAAC,CAAC;gBACvH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACrL,CAAC,CAAC,CAAC;YACH,EAAE,CAAC,SAAS,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,SAAS;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAEO,KAAK,CAAC,MAAwB,EAAE,OAA0C;QAChF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YACf,SAAS,EAAE,qBAAqB;YAChC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;YACvC,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAC5B,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YAC/B,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,eAAe,CAAC,SAA4B;IACnD,OAAO,IAAI,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,SAAS,SAAS,EAAE;QAC7E,QAAQ,EAAE,iHAAiH;KAC5H,CAAC,CAAC;AACL,CAAC"}

package/dist/security/accessMode.js

@@ -0,0 +1,19 @@
+export const ACCESS_MODE_META_KEY = 'owner-access-mode';
+/**
+ * Personal mode is DODO's single-owner default. OAuth still identifies the
+ * installed client and limits token scopes, while registered projects become
+ * available without a second per-project ACL/profile ceremony.
+ *
+ * Managed mode keeps the original project ACL, trust and AI egress allowlists
+ * for owners who share one installation between independently trusted clients.
+ */
+export function accessMode(store) {
+    return store.getMeta(ACCESS_MODE_META_KEY) === 'managed' ? 'managed' : 'personal';
+}
+export function setAccessMode(store, mode) {
+    store.setMeta(ACCESS_MODE_META_KEY, mode);
+}
+export function isPersonalMode(store) {
+    return accessMode(store) === 'personal';
+}
+//# sourceMappingURL=accessMode.js.map

package/dist/security/accessMode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessMode.js","sourceRoot":"","sources":["../../src/security/accessMode.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAGxD;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,KAAY;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAY,EAAE,IAAgB;IAC1D,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAY;IACzC,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC;AAC1C,CAAC"}

package/dist/security/approvals.js

@@ -0,0 +1,56 @@
+import { DodoError } from '../errors.js';
+import { digestOf } from '../util/hash.js';
+export function actionDigest(req, policyVersion) {
+    return digestOf({ tool: req.tool, action: req.action, policyVersion });
+}
+function policyVersionOf(store, workspaceId) {
+    const row = store.db.prepare('SELECT COUNT(*) AS c FROM policy_versions WHERE workspace_id = ?').get(workspaceId);
+    return row.c;
+}
+/**
+ * Gate an action behind a local approval. Either returns (approval found and
+ * consumed — proceed) or throws APPROVAL_REQUIRED carrying an opaque request
+ * reference the model can surface to the user.
+ */
+export function requireLocalApproval(store, req) {
+    const digest = actionDigest(req, policyVersionOf(store, req.workspaceId));
+    const existing = store.findPendingActionApproval(req.workspaceId, digest, req.principal);
+    if (existing) {
+        if (existing.epoch !== req.epoch) {
+            // approvals do not survive server restarts (spec §12.3)
+            store.setApprovalStatus(existing.id, 'denied');
+        }
+        else if (existing.status === 'approved') {
+            const consumed = store.setApprovalStatus(existing.id, 'consumed');
+            if (consumed)
+                return { approvalId: existing.id };
+            throw new DodoError('APPROVAL_EXPIRED', 'approval expired before use; request again', {
+                retryable: true,
+                detail: { approvalId: existing.id },
+            });
+        }
+        else if (existing.status === 'pending') {
+            throw new DodoError('APPROVAL_REQUIRED', `local approval pending: run \`dodo approve ${existing.id}\` on the server terminal`, {
+                retryable: true,
+                recovery: `ask the machine owner to run: dodo approve ${existing.id}`,
+                detail: { approvalId: existing.id, summary: req.summary },
+            });
+        }
+    }
+    const created = store.createApproval({
+        kind: 'action',
+        workspaceId: req.workspaceId,
+        epoch: req.epoch,
+        principal: req.principal,
+        tool: req.tool,
+        digest,
+        summary: req.summary,
+        ttlMs: req.ttlMs,
+    });
+    throw new DodoError('APPROVAL_REQUIRED', `local approval required: run \`dodo approve ${created.id}\` on the server terminal, then retry this call with the same arguments`, {
+        retryable: true,
+        recovery: `ask the machine owner to run: dodo approve ${created.id}`,
+        detail: { approvalId: created.id, summary: req.summary },
+    });
+}
+//# sourceMappingURL=approvals.js.map

package/dist/security/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../../src/security/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAsB3C,MAAM,UAAU,YAAY,CAAC,GAA6C,EAAE,aAAqB;IAC/F,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,eAAe,CAAC,KAAY,EAAE,WAAmB;IACxD,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAkB,CAAC;IACnI,OAAO,GAAG,CAAC,CAAC,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAY,EAAE,GAAoB;IACrE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACzF,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;YACjC,wDAAwD;YACxD,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YAClE,IAAI,QAAQ;gBAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,4CAA4C,EAAE;gBACpF,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,8CAA8C,QAAQ,CAAC,EAAE,2BAA2B,EAAE;gBAC7H,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,8CAA8C,QAAQ,CAAC,EAAE,EAAE;gBACrE,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,CAAC;QACnC,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM;QACN,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC,CAAC;IACH,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,+CAA+C,OAAO,CAAC,EAAE,yEAAyE,EAAE;QAC3K,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,8CAA8C,OAAO,CAAC,EAAE,EAAE;QACpE,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;KACzD,CAAC,CAAC;AACL,CAAC"}

package/dist/security/env.js

@@ -0,0 +1,57 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { isWithinPath } from '../platform/pathPolicy.js';
+import { envValue, windowsProgramDataDirectory } from '../platform/system.js';
+/** Child jobs receive a whitelist, not the server's OAuth/config/loader state. */
+const BASE_ALLOWED = ['HOME', 'LANG', 'LC_ALL', 'LC_CTYPE', 'TMPDIR', 'TZ', 'USER', 'LOGNAME', 'SHELL', 'COLORTERM'];
+const WINDOWS_ALLOWED = ['SYSTEMROOT', 'WINDIR', 'SYSTEMDRIVE', 'USERPROFILE', 'HOMEDRIVE', 'HOMEPATH', 'APPDATA', 'LOCALAPPDATA', 'PROGRAMDATA', 'TEMP', 'TMP', 'USERNAME', 'USERDOMAIN', 'PROGRAMFILES', 'PROGRAMFILES(X86)', 'PROGRAMW6432', 'COMMONPROGRAMFILES', 'PROCESSOR_ARCHITECTURE', 'NUMBER_OF_PROCESSORS'];
+const ALWAYS_DENIED = new Set(['NODE_OPTIONS', 'NODE_EXTRA_CA_CERTS', 'LD_PRELOAD', 'DYLD_INSERT_LIBRARIES', 'DYLD_LIBRARY_PATH', 'LD_LIBRARY_PATH', 'PATH', 'TERM', 'COMSPEC', 'PATHEXT', 'NODE_PATH', 'TUNNEL_TOKEN', 'TUNNEL_TOKEN_FILE']);
+export function trustedPath(parentPath, workspaceRoot, platform = process.platform) {
+    const p = platform === 'win32' ? path.win32 : path.posix;
+    const real = (value) => {
+        try {
+            return platform === process.platform ? fs.realpathSync.native(value) : value;
+        }
+        catch {
+            return value;
+        }
+    };
+    const root = real(workspaceRoot);
+    const entries = (parentPath ?? '').split(p.delimiter).filter(entry => {
+        if (!entry || !p.isAbsolute(entry) || (platform === 'win32' && !/^[a-z]:[\\/]/i.test(entry)))
+            return false;
+        return !isWithinPath(workspaceRoot, entry, platform) && !isWithinPath(root, real(entry), platform);
+    });
+    if (entries.length > 0)
+        return [...new Set(entries)].join(p.delimiter);
+    if (platform === 'win32') {
+        const systemRoot = envValue(process.env, 'SystemRoot', 'win32') ?? 'C:\\Windows';
+        return [p.join(systemRoot, 'System32'), systemRoot].filter(entry => !isWithinPath(root, entry, platform)).join(';');
+    }
+    return ['/usr/bin', '/bin', '/usr/sbin', '/sbin'].filter(entry => !isWithinPath(root, real(entry), platform)).join(':');
+}
+export function buildChildEnv(opts) {
+    const platform = opts.platform ?? process.platform;
+    const out = { PATH: trustedPath(envValue(opts.parentEnv, 'PATH', platform), opts.workspaceRoot, platform), TERM: 'dumb' };
+    const names = new Set([...BASE_ALLOWED, ...(platform === 'win32' ? WINDOWS_ALLOWED : []), ...opts.extraAllowlist]);
+    for (const name of names) {
+        const upper = name.toUpperCase();
+        if (ALWAYS_DENIED.has(upper) || upper.startsWith('DODO_'))
+            continue;
+        const value = envValue(opts.parentEnv, name, platform);
+        if (value !== undefined)
+            out[platform === 'win32' ? upper : name] = value;
+    }
+    if (platform === 'win32') {
+        if (!out['PROGRAMDATA']) {
+            const programData = windowsProgramDataDirectory(opts.parentEnv);
+            if (programData)
+                out['PROGRAMDATA'] = programData;
+        }
+        const extensions = (envValue(opts.parentEnv, 'PATHEXT', platform) ?? '.COM;.EXE;.BAT;.CMD').split(';').map(e => e.toUpperCase()).filter(e => ['.EXE', '.COM', '.CMD', '.BAT'].includes(e));
+        out['PATHEXT'] = [...new Set(extensions.length ? extensions : ['.EXE', '.COM', '.CMD', '.BAT'])].join(';');
+        out['NoDefaultCurrentDirectoryInExePath'] = '1';
+    }
+    return out;
+}
+//# sourceMappingURL=env.js.map

package/dist/security/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/security/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAE9E,kFAAkF;AAClF,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AACrH,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,cAAc,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,sBAAsB,CAAC,CAAC;AACxT,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,qBAAqB,EAAE,YAAY,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE9O,MAAM,UAAU,WAAW,CAAC,UAA8B,EAAE,aAAqB,EAAE,WAA4B,OAAO,CAAC,QAAQ;IAC7H,MAAM,CAAC,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE;QAC7B,IAAI,CAAC;YAAC,OAAO,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAAC,CAAC;QACrF,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IACzB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACnE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3G,OAAO,CAAC,YAAY,CAAC,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,aAAa,CAAC;QACjF,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtH,CAAC;IACD,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1H,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAmH;IAC/I,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,GAAG,GAAsB,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7I,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACnH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS;QACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC5E,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACxB,MAAM,WAAW,GAAG,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChE,IAAI,WAAW;gBAAE,GAAG,CAAC,aAAa,CAAC,GAAG,WAAW,CAAC;QACpD,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3L,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3G,GAAG,CAAC,oCAAoC,CAAC,GAAG,GAAG,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/security/mutationQueue.js

@@ -0,0 +1,78 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { DodoError } from '../errors.js';
+/** One queue per real workspace; nested dispatch shares its ticket, background jobs retain it. */
+export class MutationQueue {
+    context = new AsyncLocalStorage();
+    active;
+    waiters = [];
+    get busy() { return this.active !== undefined; }
+    get pending() { return this.waiters.length; }
+    ticket() {
+        const t = { refs: 1, open: true, release: () => {
+                if (--t.refs !== 0)
+                    return;
+                if (this.active === t)
+                    this.active = undefined;
+                const next = this.waiters.shift();
+                if (next)
+                    next(this.ticket());
+            } };
+        this.active = t;
+        return t;
+    }
+    async run(fn, signal) {
+        if (signal?.aborted)
+            throw new DodoError('CONFLICT', 'queued action was canceled');
+        const nested = this.context.getStore();
+        if (nested?.open && this.active === nested)
+            return fn();
+        let ticket;
+        if (this.busy) {
+            if (this.waiters.length >= 32)
+                throw new DodoError('RESOURCE_LIMIT', 'workspace mutation queue is full');
+            ticket = await new Promise((resolve, reject) => {
+                const waiter = (t) => { signal?.removeEventListener('abort', abort); resolve(t); };
+                const abort = () => { const i = this.waiters.indexOf(waiter); if (i >= 0) {
+                    this.waiters.splice(i, 1);
+                    reject(new DodoError('CONFLICT', 'queued action was canceled'));
+                } };
+                this.waiters.push(waiter);
+                signal?.addEventListener('abort', abort, { once: true });
+                if (signal?.aborted)
+                    abort();
+            });
+        }
+        else
+            ticket = this.ticket();
+        try {
+            return await this.context.run(ticket, fn);
+        }
+        finally {
+            ticket.open = false;
+            ticket.release();
+        }
+    }
+    assertCanStart() {
+        const ticket = this.context.getStore();
+        if (this.busy && (!ticket?.open || ticket !== this.active))
+            throw new DodoError('CONFLICT', 'workspace mutation queue is busy');
+    }
+    /** Sync producers (schedules) refuse a busy queue; they may retry before claiming a due run. */
+    retainJob() {
+        let ticket = this.context.getStore();
+        if (!ticket?.open || ticket !== this.active) {
+            if (this.busy)
+                throw new DodoError('CONFLICT', 'workspace mutation queue is busy; wait for the current job');
+            ticket = this.ticket();
+            ticket.open = false;
+        }
+        else
+            ticket.refs++;
+        let done = false;
+        return () => { if (!done) {
+            done = true;
+            ticket.release();
+        } };
+    }
+}
+//# sourceMappingURL=mutationQueue.js.map

package/dist/security/mutationQueue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutationQueue.js","sourceRoot":"","sources":["../../src/security/mutationQueue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,kGAAkG;AAClG,MAAM,OAAO,aAAa;IACP,OAAO,GAAG,IAAI,iBAAiB,EAAU,CAAC;IACnD,MAAM,CAAqB;IAC3B,OAAO,GAAoC,EAAE,CAAC;IACtD,IAAI,IAAI,KAAc,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC;IACzD,IAAI,OAAO,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,MAAM;QACZ,MAAM,CAAC,GAAW,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE;gBACrD,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC;oBAAE,OAAO;gBAC3B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClC,IAAI,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAChC,CAAC,EAAE,CAAC;QACJ,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,CAAC,GAAG,CAAI,EAAoB,EAAE,MAAoB;QACrD,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAC,4BAA4B,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,MAAc,CAAC;QACnB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE;gBAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;YACzG,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAC,MAAM,EAAE,EAAE;gBACpD,MAAM,MAAM,GAAG,CAAC,CAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzF,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,GAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA,IAAG,CAAC,IAAE,CAAC,EAAC,CAAC;oBAAA,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC;oBAAA,MAAM,CAAC,IAAI,SAAS,CAAC,UAAU,EAAC,4BAA4B,CAAC,CAAC,CAAC;gBAAA,CAAC,CAAC,CAAC,CAAC;gBAChK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAAA,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;gBAC9E,IAAG,MAAM,EAAE,OAAO;oBAAC,KAAK,EAAE,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC;;YAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;gBAC1C,CAAC;YAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACpD,CAAC;IACD,cAAc;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;IAClI,CAAC;IACD,gGAAgG;IAChG,SAAS;QACP,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,4DAA4D,CAAC,CAAC;YAC7G,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;QACtB,CAAC;;YAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrB,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;CACF"}

package/dist/security/policy.js

@@ -0,0 +1,22 @@
+export const ALL_SCOPES = ['dodo:read', 'dodo:write', 'dodo:exec'];
+export function decide(action, mode) {
+    switch (action) {
+        case 'read':
+        case 'plan':
+        case 'job-control':
+            return 'allow';
+        case 'mutate-files':
+            return mode === 'inspect' ? 'approval' : 'allow';
+        case 'exec':
+            return mode === 'trusted' ? 'allow' : 'approval';
+    }
+}
+export function scopeSatisfied(required, tokenScopes) {
+    return tokenScopes.includes(required);
+}
+export const TRUST_MODE_DESCRIPTIONS = {
+    inspect: 'read & search allowed; every file change (write_file/edit_file/apply_changes) and every command (run_command/exec_command/run_task/git_commit) needs a per-action local approval',
+    edit: 'read & search allowed; file changes (write_file/edit_file/delete_path/move_path/apply_changes) apply directly under this standing consent; running commands still needs per-action local approval',
+    trusted: 'file changes and command execution (run_command/exec_command/run_task/git_commit) run directly — the recommended mode when your MCP client confirms every call. Commands run with YOUR OS user privileges — the workspace directory guard is NOT an OS sandbox; test/lint/build scripts can execute arbitrary code and reach files outside the workspace',
+};
+//# sourceMappingURL=policy.js.map

package/dist/security/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/security/policy.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,UAAU,GAAiB,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;AAYjF,MAAM,UAAU,MAAM,CAAC,MAAmB,EAAE,IAAe;IACzD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,aAAa;YAChB,OAAO,OAAO,CAAC;QACjB,KAAK,cAAc;YACjB,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;QACnD,KAAK,MAAM;YACT,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACrD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAoB,EAAE,WAAqB;IACxE,OAAO,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAA8B;IAChE,OAAO,EAAE,kLAAkL;IAC3L,IAAI,EAAE,mMAAmM;IACzM,OAAO,EACL,0VAA0V;CAC7V,CAAC"}

package/dist/security/projectAuthority.js

@@ -0,0 +1,22 @@
+import { DodoError } from '../errors.js';
+import { isPersonalMode } from './accessMode.js';
+export function isOwner(p) {
+    return p.sub === 'owner' && ((p.grantId === 'local-stdio' && p.clientId === 'stdio') || (p.grantId === 'local-config-owner' && p.clientId === 'local-config'));
+}
+/** A delegation can narrow token scopes; live target ACLs and expiry are always re-read. */
+export function projectAuthority(store, p, workspaceId) {
+    if (p.projectRestriction && p.projectRestriction !== workspaceId)
+        throw new DodoError('FORBIDDEN', 'delegation is restricted to its target project');
+    if (p.expiresAt !== undefined && p.expiresAt <= Date.now() / 1000)
+        throw new DodoError('AUTH_REQUIRED', 'authorization expired; authenticate and resume');
+    if (isOwner(p))
+        return { ...p, scopes: [...p.scopes] };
+    const grant = store.getGrant(p.grantId);
+    if (!grant || grant.revokedAt !== null || grant.clientId !== p.clientId || !store.getOAuthClient(p.clientId))
+        throw new DodoError('AUTH_REQUIRED', 'authorization was revoked');
+    if ((p.identityGrant === false || store.getMeta(`identity-grant:${p.grantId}`) !== '2') && grant.workspaceId !== workspaceId)
+        throw new DodoError('FORBIDDEN', 'authorization is bound to another workspace');
+    const allowed = isPersonalMode(store) ? grant.scopes : store.clientAccess(workspaceId, p.clientId);
+    return { ...p, scopes: (p.tokenScopes ?? p.scopes).filter(s => grant.scopes.includes(s) && allowed.includes(s)) };
+}
+//# sourceMappingURL=projectAuthority.js.map

package/dist/security/projectAuthority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAuthority.js","sourceRoot":"","sources":["../../src/security/projectAuthority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,MAAM,UAAU,OAAO,CAAC,CAAY;IAClC,OAAO,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,aAAa,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,oBAAoB,IAAI,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC;AACjK,CAAC;AACD,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,KAAY,EAAE,CAAY,EAAE,WAAmB;IAC9E,IAAI,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,kBAAkB,KAAK,WAAW;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAC,gDAAgD,CAAC,CAAC;IACpJ,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,gDAAgD,CAAC,CAAC;IAC1J,IAAI,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;IAChL,IAAI,CAAC,CAAC,CAAC,aAAa,KAAK,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,6CAA6C,CAAC,CAAC;IAC9M,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IACnG,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpH,CAAC"}