duclaw-cli 1.9.19 → 3.0.0

package/dist/memory/MemoryEngine.d.ts

@@ -0,0 +1,51 @@
+import { Memory, MemoryCreateInput, MemoryEngineDeps, MemoryOwner, MemoryUpdateInput } from "./types";
+import { UserRequest } from "../types/request";
+/**
+ * 长期记忆引擎（索引常驻 + 详情按需读取）
+ *
+ * 新存储：
+ *   memory:file:{tenantId}:{ownerType}:{ownerId}:MEMORY.md -> markdown index
+ *   memory:file:{tenantId}:{ownerType}:{ownerId}:{topic}.md -> markdown detail
+ *
+ * 兼容：
+ *   legacy Redis/File key `memory:list:{userId}` -> Memory[]
+ */
+export declare class MemoryEngine {
+    private readonly storage;
+    private readonly recallIndexStorage?;
+    private readonly maxPerUser;
+    constructor(deps: MemoryEngineDeps);
+    ownerFromRequest(request: UserRequest): MemoryOwner;
+    resolveOwner(userId: string, owner?: Partial<MemoryOwner>): MemoryOwner;
+    list(userId: string, owner?: Partial<MemoryOwner>): Promise<Memory[]>;
+    create(userId: string, input: MemoryCreateInput, owner?: Partial<MemoryOwner>): Promise<Memory>;
+    update(userId: string, input: MemoryUpdateInput, owner?: Partial<MemoryOwner>): Promise<Memory | null>;
+    remove(userId: string, id: string, owner?: Partial<MemoryOwner>): Promise<Memory | null>;
+    read(userId: string, pathOrId: string, owner?: Partial<MemoryOwner>): Promise<string | null>;
+    /**
+     * 仅返回 MEMORY.md 索引，不注入详细 topic 正文。
+     */
+    buildContextBlock(userId: string, owner?: Partial<MemoryOwner>): Promise<string>;
+    private tenantIdFromRequest;
+    private departmentOwner;
+    private memoryFromInput;
+    private migrateLegacyListIfNeeded;
+    private readIndex;
+    private readIndexEntries;
+    private writeIndexEntries;
+    private readTopicDocument;
+    private writeTopicDocument;
+    private uniqueTopicPath;
+    private indexKey;
+    private topicKey;
+    private scopePrefix;
+    private workspaceMemoryFile;
+    private writeWorkspaceMemoryFile;
+    private removeWorkspaceMemoryFile;
+    private mirrorWorkspaceMemoryFiles;
+    private legacyKey;
+    private recallUserId;
+    private getString;
+    private upsertRecallIndex;
+}
+//# sourceMappingURL=MemoryEngine.d.ts.map

package/dist/memory/MemoryEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MemoryEngine.d.ts","sourceRoot":"","sources":["../../src/memory/MemoryEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,MAAM,EACN,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACpB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAqB/C;;;;;;;;;GASG;AACH,qBAAa,YAAY;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAA8B;IAClE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,IAAI,EAAE,gBAAgB;IAQlC,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW;IAOnD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW;IAUjE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAuBrE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAsC/F,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAwCtG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA+BxF,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAUlG;;OAEG;IACG,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBtF,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,eAAe;YA2BT,yBAAyB;YAgCzB,SAAS;YAIT,gBAAgB;YAIhB,iBAAiB;YAYjB,iBAAiB;YAKjB,kBAAkB;IAkBhC,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,mBAAmB;YAab,wBAAwB;YAOxB,yBAAyB;YAMzB,0BAA0B;IAcxC,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,YAAY;YAKN,SAAS;YAKT,iBAAiB;CAqBlC"}

package/dist/memory/index.d.ts

@@ -0,0 +1,3 @@
+export { MemoryEngine } from "./MemoryEngine";
+export * from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/memory/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/memory/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,cAAc,SAAS,CAAC"}

package/dist/memory/types.d.ts

@@ -0,0 +1,46 @@
+import { Storage } from "../storage/Storage";
+import { RecallIndexEntry } from "../recall/recallIndex";
+export type MemoryOwnerType = 'ceo' | 'department';
+export type MemoryOwner = {
+    tenantId: string;
+    ownerType: MemoryOwnerType;
+    ownerId: string;
+};
+/** 一条用户级长期记忆（显式由主 agent 调 memory_create 写入） */
+export type Memory = {
+    id: string;
+    userId: string;
+    title: string;
+    content: string;
+    description?: string;
+    type?: string;
+    path?: string;
+    owner?: MemoryOwner;
+    createdAt: number;
+    updatedAt: number;
+};
+/** memory_create 工具的输入 */
+export type MemoryCreateInput = {
+    title: string;
+    content: string;
+    description?: string;
+    type?: string;
+};
+/** memory_update 工具的输入 */
+export type MemoryUpdateInput = {
+    id: string;
+    title?: string;
+    content?: string;
+    description?: string;
+    type?: string;
+};
+/** MemoryEngine 构造依赖 */
+export type MemoryEngineDeps = {
+    /** 兼容旧 Memory[] 存储；新实现会在同一个 Storage 命名空间写入 MEMORY.md 与 topic markdown */
+    memoryStorage: Storage<Memory[] | string>;
+    /** 统一 recall 索引；提供时 memory_create / update / delete 会同步索引 */
+    recallIndexStorage?: Storage<RecallIndexEntry[]>;
+    /** 单用户记忆条数硬上限，超过时拒绝写入（默认 100） */
+    maxPerUser?: number;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/memory/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/memory/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,YAAY,CAAC;AAEnD,MAAM,MAAM,WAAW,GAAG;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,eAAe,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,MAAM,GAAG;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,0BAA0B;AAC1B,MAAM,MAAM,iBAAiB,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,0BAA0B;AAC1B,MAAM,MAAM,iBAAiB,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAwB;AACxB,MAAM,MAAM,gBAAgB,GAAG;IAC3B,yEAAyE;IACzE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC;IAC1C,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACjD,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC"}

package/dist/mobile/mobileStore.d.ts

@@ -0,0 +1,83 @@
+export type MobileMessageRole = 'user' | 'assistant' | 'system';
+export type MobileMessageStatus = 'accepted' | 'running' | 'finished' | 'failed';
+export type MobileAttachmentRef = {
+    id: string;
+    type?: string;
+    name?: string;
+    mimeType?: string;
+    size?: number;
+    path?: string;
+    url?: string;
+};
+export type MobileMessage = {
+    id: string;
+    threadId: string;
+    userId: string;
+    goalId?: string;
+    clientMessageId?: string;
+    role: MobileMessageRole;
+    text: string;
+    status: MobileMessageStatus;
+    attachments?: MobileAttachmentRef[];
+    metadata?: Record<string, unknown>;
+    createdAt: number;
+    updatedAt: number;
+};
+export type MobileRunActivityStepStatus = 'pending' | 'running' | 'completed' | 'failed';
+export type MobileRunActivityStatus = 'running' | 'completed' | 'failed' | 'stopped';
+export type MobileRunActivityStep = {
+    id: string;
+    toolCallId: string;
+    toolName: string;
+    status: MobileRunActivityStepStatus;
+    startedAt?: number;
+    completedAt?: number;
+    summary?: string;
+    error?: string;
+};
+export type MobileRunActivity = {
+    id: string;
+    userMessageId: string;
+    assistantMessageId?: string;
+    status: MobileRunActivityStatus;
+    autoCollapsed: boolean;
+    manuallyExpanded?: boolean;
+    startedAt: number;
+    completedAt?: number;
+    steps: MobileRunActivityStep[];
+};
+export type MobileRunState = {
+    threadId: string;
+    userId: string;
+    goalId?: string;
+    running: boolean;
+    interrupted?: boolean;
+    logs: string[];
+    llmRequestIds?: string[];
+    activity?: MobileRunActivity;
+    lastResult?: string;
+    error?: string;
+    updatedAt: number;
+};
+export type ListMobileMessagesOptions = {
+    limit?: number;
+    before?: number;
+};
+export type MobileMessagePage = {
+    messages: MobileMessage[];
+    hasMore: boolean;
+    nextBefore?: number;
+};
+export declare const saveMobileAttachment: (attachment: Omit<MobileAttachmentRef, "id"> & {
+    id?: string;
+}) => MobileAttachmentRef;
+export declare const getMobileAttachment: (id: string) => MobileAttachmentRef | undefined;
+export declare const appendMobileMessage: (input: Omit<MobileMessage, "id" | "createdAt" | "updatedAt"> & {
+    id?: string;
+}) => MobileMessage;
+export declare const listMobileMessagesPage: (threadId: string, options?: ListMobileMessagesOptions) => MobileMessagePage;
+export declare const listMobileMessages: (threadId: string) => MobileMessage[];
+export declare const upsertMobileRun: (threadId: string, patch: Partial<Omit<MobileRunState, "threadId" | "updatedAt">>) => MobileRunState;
+export declare const appendMobileRunLog: (threadId: string, line: string) => MobileRunState;
+export declare const getMobileRun: (threadId: string) => MobileRunState;
+//# sourceMappingURL=mobileStore.d.ts.map

package/dist/mobile/mobileStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobileStore.d.ts","sourceRoot":"","sources":["../../src/mobile/mobileStore.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;AAChE,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEjF,MAAM,MAAM,mBAAmB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mBAAmB,CAAC;IAC5B,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEzF,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AAErF,MAAM,MAAM,qBAAqB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,2BAA2B,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,uBAAuB,CAAC;IAChC,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,qBAAqB,EAAE,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC5B,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAsGF,eAAO,MAAM,oBAAoB,GAAI,YAAY,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,KAAG,mBAwBpG,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,IAAI,MAAM,KAAG,mBAAmB,GAAG,SAKtE,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC5B,OAAO,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,KAC/E,aA6BF,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAC/B,UAAU,MAAM,EAChB,UAAS,yBAA8B,KACxC,iBAwBF,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,UAAU,MAAM,KAAG,aAAa,EAElE,CAAC;AAEF,eAAO,MAAM,eAAe,GACxB,UAAU,MAAM,EAChB,OAAO,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC,KAC/D,cAmCF,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,UAAU,MAAM,EAAE,MAAM,MAAM,KAAG,cAanE,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,KAAG,cAY/C,CAAC"}

package/dist/recall/recallIndex.d.ts

@@ -0,0 +1,31 @@
+import { Storage } from "../storage/Storage";
+export type RecallSourceType = 'topic' | 'compact' | 'dream' | 'memory';
+export type RecallIndexEntry = {
+    id: string;
+    userId: string;
+    type: RecallSourceType;
+    title: string;
+    summary: string;
+    keywords: string[];
+    date: string;
+    sourceKey?: string;
+    sourceRange?: {
+        start: number;
+        end: number;
+    };
+    createdAt: number;
+};
+export type RecallIndexMatch = {
+    entry: RecallIndexEntry;
+    score: number;
+};
+export declare const buildRecallIndexKey: (userId: string) => string;
+export declare const tokenizeRecallText: (value: string) => string[];
+export declare const extractRecallKeywords: (value: string, limit?: number) => string[];
+export declare const upsertRecallIndexEntry: (storage: Storage<RecallIndexEntry[]>, entry: RecallIndexEntry) => Promise<void>;
+export declare const removeRecallIndexEntry: (storage: Storage<RecallIndexEntry[]>, userId: string, type: RecallSourceType, id: string) => Promise<void>;
+export declare const searchRecallIndex: (storage: Storage<RecallIndexEntry[]>, userId: string, query: string, date?: string, limit?: number) => Promise<{
+    matches: RecallIndexMatch[];
+    total: number;
+}>;
+//# sourceMappingURL=recallIndex.d.ts.map

package/dist/recall/recallIndex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recallIndex.d.ts","sourceRoot":"","sources":["../../src/recall/recallIndex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAExE,MAAM,MAAM,gBAAgB,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,QAAQ,MAAM,KAAG,MAAkC,CAAC;AAIxF,eAAO,MAAM,kBAAkB,GAAI,OAAO,MAAM,KAAG,MAAM,EAIf,CAAC;AAE3C,eAAO,MAAM,qBAAqB,GAAI,OAAO,MAAM,EAAE,cAAU,KAAG,MAAM,EAUvE,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAC/B,SAAS,OAAO,CAAC,gBAAgB,EAAE,CAAC,EACpC,OAAO,gBAAgB,KACxB,OAAO,CAAC,IAAI,CAUd,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAC/B,SAAS,OAAO,CAAC,gBAAgB,EAAE,CAAC,EACpC,QAAQ,MAAM,EACd,MAAM,gBAAgB,EACtB,IAAI,MAAM,KACX,OAAO,CAAC,IAAI,CAKd,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAC1B,SAAS,OAAO,CAAC,gBAAgB,EAAE,CAAC,EACpC,QAAQ,MAAM,EACd,OAAO,MAAM,EACb,OAAO,MAAM,EACb,cAAS,KACV,OAAO,CAAC;IAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAgCxD,CAAC"}

package/dist/runtime/activity.d.ts

@@ -0,0 +1,10 @@
+export type RuntimeActivityKind = "tool_use" | "mailbox";
+export type RuntimeActivityStatus = "started" | "completed" | "failed" | "active";
+export declare function reportRuntimeActivity(input: {
+    kind: RuntimeActivityKind;
+    toolName?: string | null;
+    status: RuntimeActivityStatus;
+    toolCallId?: string | null;
+    metadata?: Record<string, unknown>;
+}): Promise<void>;
+//# sourceMappingURL=activity.d.ts.map

package/dist/runtime/activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../src/runtime/activity.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,SAAS,CAAC;AACzD,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAElF,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IAC/C,IAAI,EAAE,mBAAmB,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BhB"}

package/dist/runtime/duclawHome.d.ts

@@ -0,0 +1,7 @@
+export declare const getDuclawHomeDir: () => string;
+export declare const getDuclawDataDir: () => string;
+export declare const getDuclawCronDir: () => string;
+export declare const getDuclawWorkspaceDir: () => string;
+export declare const getDuclawTasksDir: () => string;
+export declare const getDuclawWorktreesDir: () => string;
+//# sourceMappingURL=duclawHome.d.ts.map

package/dist/runtime/duclawHome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"duclawHome.d.ts","sourceRoot":"","sources":["../../src/runtime/duclawHome.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,gBAAgB,QAAO,MAInC,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAO,MAInC,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAO,MAInC,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAO,MAIxC,CAAC;AAEF,eAAO,MAAM,iBAAiB,QAAO,MAIpC,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAO,MAIxC,CAAC"}

package/dist/runtime/events.d.ts

@@ -0,0 +1,20 @@
+export type RuntimeEventType = "toolUse.started" | "toolUse.blocked" | "toolUse.completed" | "toolUse.failed";
+export type RuntimeEvent = {
+    eventId: string;
+    type: RuntimeEventType;
+    occurredAt: string;
+    toolName: string;
+    toolCallId: string | null;
+    inputSummary: string;
+    durationMs?: number;
+    resultSummary?: string;
+    errorSummary?: string;
+    requestContext: Record<string, unknown>;
+};
+export type RuntimeEventHandler = (event: RuntimeEvent) => void | Promise<void>;
+export type RuntimeEventBus = {
+    emit(event: RuntimeEvent): Promise<void>;
+    subscribe(type: RuntimeEventType, handler: RuntimeEventHandler): () => void;
+};
+export declare const createRuntimeEventBus: () => RuntimeEventBus;
+//# sourceMappingURL=events.d.ts.map

package/dist/runtime/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/runtime/events.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GACtB,iBAAiB,GACjB,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,CAAC;AAEvB,MAAM,MAAM,YAAY,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,gBAAgB,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEhF,MAAM,MAAM,eAAe,GAAG;IAC1B,IAAI,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,GAAG,MAAM,IAAI,CAAC;CAC/E,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAO,eAyBxC,CAAC"}

package/dist/runtime/localToolActivity.d.ts

@@ -0,0 +1,17 @@
+export type LocalToolActivityStatus = "started" | "completed" | "failed";
+export type LocalToolActivity = {
+    id: string;
+    mailboxId: string;
+    requestId?: string;
+    toolCallId?: string | null;
+    toolName: string;
+    status: LocalToolActivityStatus;
+    summary?: string;
+    error?: string;
+    occurredAt: number;
+};
+export declare function recordLocalToolActivity(input: Omit<LocalToolActivity, "id"> & {
+    id?: string;
+}): LocalToolActivity;
+export declare function listLocalToolActivity(mailboxId: string, limit?: number): LocalToolActivity[];
+//# sourceMappingURL=localToolActivity.d.ts.map

package/dist/runtime/localToolActivity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localToolActivity.d.ts","sourceRoot":"","sources":["../../src/runtime/localToolActivity.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEzE,MAAM,MAAM,iBAAiB,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,uBAAuB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACtB,CAAC;AAcF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,iBAAiB,CAwBjH;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,iBAAiB,EAAE,CAYzF"}

package/dist/runtime/paths.d.ts

@@ -0,0 +1,4 @@
+export declare const findProjectRoot: (filename?: string, startDir?: string) => string | null;
+export declare const resolveCoreRoot: () => string;
+export declare const resolveWebDistRoot: () => string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/runtime/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/runtime/paths.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,eAAe,GAC1B,iBAAwB,EACxB,iBAAwB,KACvB,MAAM,GAAG,IAaX,CAAC;AAEF,eAAO,MAAM,eAAe,QAAO,MAclC,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,MAcrC,CAAC"}

package/dist/runtime/plugins/activityToolHook.d.ts

@@ -0,0 +1,3 @@
+import { ToolHookPlugin } from "../toolHooks";
+export declare const createRuntimeActivityToolHookPlugin: () => ToolHookPlugin;
+//# sourceMappingURL=activityToolHook.d.ts.map

package/dist/runtime/plugins/activityToolHook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activityToolHook.d.ts","sourceRoot":"","sources":["../../../src/runtime/plugins/activityToolHook.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAkB,MAAM,cAAc,CAAC;AAE9D,eAAO,MAAM,mCAAmC,QAAO,cAoCrD,CAAC"}

package/dist/runtime/plugins/index.d.ts

@@ -0,0 +1,7 @@
+import { ToolHookPlugin } from "../toolHooks";
+import { createRuntimeActivityToolHookPlugin } from "./activityToolHook";
+import { createLocalToolActivityHookPlugin } from "./localToolActivityHook";
+import { createSaasCreditToolHookPlugin } from "./saasCreditToolHook";
+export declare function createDefaultToolHookPlugins(extra?: ToolHookPlugin[]): ToolHookPlugin[];
+export { createRuntimeActivityToolHookPlugin, createLocalToolActivityHookPlugin, createSaasCreditToolHookPlugin, };
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/plugins/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/plugins/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,mCAAmC,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEtE,wBAAgB,4BAA4B,CAAC,KAAK,GAAE,cAAc,EAAO,GAAG,cAAc,EAAE,CAO3F;AAED,OAAO,EACH,mCAAmC,EACnC,iCAAiC,EACjC,8BAA8B,GACjC,CAAC"}

package/dist/runtime/plugins/localToolActivityHook.d.ts

@@ -0,0 +1,3 @@
+import type { ToolHookPlugin } from "../toolHooks";
+export declare const createLocalToolActivityHookPlugin: () => ToolHookPlugin;
+//# sourceMappingURL=localToolActivityHook.d.ts.map

package/dist/runtime/plugins/localToolActivityHook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localToolActivityHook.d.ts","sourceRoot":"","sources":["../../../src/runtime/plugins/localToolActivityHook.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,cAAc,CAAC;AAEnE,eAAO,MAAM,iCAAiC,QAAO,cAenD,CAAC"}

package/dist/runtime/plugins/saasCreditToolHook.d.ts

@@ -0,0 +1,3 @@
+import { ToolHookPlugin } from "../toolHooks";
+export declare const createSaasCreditToolHookPlugin: () => ToolHookPlugin;
+//# sourceMappingURL=saasCreditToolHook.d.ts.map

package/dist/runtime/plugins/saasCreditToolHook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saasCreditToolHook.d.ts","sourceRoot":"","sources":["../../../src/runtime/plugins/saasCreditToolHook.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAkB,MAAM,cAAc,CAAC;AAsB9D,eAAO,MAAM,8BAA8B,QAAO,cAoDhD,CAAC"}

package/dist/runtime/runtimeMode.d.ts

@@ -0,0 +1,5 @@
+export declare const LOCAL_MACOS_RUNTIME_PROVIDER = "local-macos";
+export declare const isLocalMacOSRuntime: () => boolean;
+export declare const isSpoolQueueRuntime: () => boolean;
+export declare const isFileBackedRuntimeMode: () => boolean;
+//# sourceMappingURL=runtimeMode.d.ts.map

package/dist/runtime/runtimeMode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeMode.d.ts","sourceRoot":"","sources":["../../src/runtime/runtimeMode.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,gBAAgB,CAAC;AAE1D,eAAO,MAAM,mBAAmB,QAAO,OAEtC,CAAC;AAEF,eAAO,MAAM,mBAAmB,QAAO,OAItC,CAAC;AAEF,eAAO,MAAM,uBAAuB,QAAO,OAG1C,CAAC"}

package/dist/runtime/runtimeSafetyPrompt.d.ts

@@ -0,0 +1,2 @@
+export declare const RUNTIME_PROCESS_SAFETY_PROMPT: string;
+//# sourceMappingURL=runtimeSafetyPrompt.d.ts.map

package/dist/runtime/runtimeSafetyPrompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeSafetyPrompt.d.ts","sourceRoot":"","sources":["../../src/runtime/runtimeSafetyPrompt.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,6BAA6B,QAOlC,CAAC"}

package/dist/runtime/sandbox/AuditEventWriter.d.ts

@@ -0,0 +1,19 @@
+export type SandboxAuditDecision = 'allow' | 'deny';
+export type SandboxAuditEvent = {
+    eventId: string;
+    toolName: string;
+    decision: SandboxAuditDecision;
+    [key: string]: unknown;
+};
+export type AuditEventWriterOptions = {
+    auditDir: string;
+};
+export declare class AuditEventWriter {
+    private readonly auditDir;
+    private readonly auditPath;
+    constructor(options: AuditEventWriterOptions);
+    write(event: SandboxAuditEvent): Promise<void>;
+    append(event: SandboxAuditEvent): Promise<void>;
+}
+export declare function createAuditEventWriter(options: AuditEventWriterOptions): AuditEventWriter;
+//# sourceMappingURL=AuditEventWriter.d.ts.map

package/dist/runtime/sandbox/AuditEventWriter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditEventWriter.d.ts","sourceRoot":"","sources":["../../../src/runtime/sandbox/AuditEventWriter.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEpD,MAAM,MAAM,iBAAiB,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAClC,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,qBAAa,gBAAgB;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,EAAE,uBAAuB;IAKtC,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpD,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;CAGlD;AA8GD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CAEzF"}

package/dist/runtime/sandbox/DockerSandboxRuntime.d.ts

@@ -0,0 +1,16 @@
+import { spawn, type ChildProcessWithoutNullStreams } from 'node:child_process';
+import type { SandboxRuntime } from './SandboxRuntime';
+export type DockerCommandRunner = {
+    execFileSync(file: string, args: string[], options?: {
+        encoding?: BufferEncoding;
+        stdio?: 'ignore' | 'pipe';
+    }): string | Buffer;
+    spawn(file: string, args: string[], options?: Parameters<typeof spawn>[2]): ChildProcessWithoutNullStreams;
+};
+export type DockerSandboxRuntimeOptions = {
+    image?: string;
+    containerNamePrefix?: string;
+    commandRunner?: DockerCommandRunner;
+};
+export declare function createDockerSandboxRuntime(options?: DockerSandboxRuntimeOptions): SandboxRuntime;
+//# sourceMappingURL=DockerSandboxRuntime.d.ts.map

package/dist/runtime/sandbox/DockerSandboxRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DockerSandboxRuntime.d.ts","sourceRoot":"","sources":["../../../src/runtime/sandbox/DockerSandboxRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAgB,KAAK,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAI9F,OAAO,KAAK,EAA8C,cAAc,EAAkB,MAAM,kBAAkB,CAAC;AAEnH,MAAM,MAAM,mBAAmB,GAAG;IAC9B,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,cAAc,CAAC;QAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;KAAE,GAAG,MAAM,GAAG,MAAM,CAAC;IAChI,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,8BAA8B,CAAC;CAC9G,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACvC,CAAC;AAUF,wBAAgB,0BAA0B,CAAC,OAAO,GAAE,2BAAgC,GAAG,cAAc,CA6DpG"}

package/dist/runtime/sandbox/HostCapabilityBroker.d.ts

@@ -0,0 +1,11 @@
+export type HostCapabilityKind = "browser" | "finder" | "xcode" | "simulator" | "apple_script" | "clipboard" | "unknown";
+export type HostCapabilityRequest = {
+    kind: HostCapabilityKind;
+    command: string;
+    reason: string;
+};
+export type HostCapabilityBroker = {
+    requestCapability(request: HostCapabilityRequest): Promise<never>;
+};
+export declare const denyOnlyHostCapabilityBroker: HostCapabilityBroker;
+//# sourceMappingURL=HostCapabilityBroker.d.ts.map

package/dist/runtime/sandbox/HostCapabilityBroker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HostCapabilityBroker.d.ts","sourceRoot":"","sources":["../../../src/runtime/sandbox/HostCapabilityBroker.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GACxB,SAAS,GACT,QAAQ,GACR,OAAO,GACP,WAAW,GACX,cAAc,GACd,WAAW,GACX,SAAS,CAAC;AAEhB,MAAM,MAAM,qBAAqB,GAAG;IAChC,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,iBAAiB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CACrE,CAAC;AAEF,eAAO,MAAM,4BAA4B,EAAE,oBAI1C,CAAC"}

package/dist/runtime/sandbox/NetworkPolicyEngine.d.ts

@@ -0,0 +1,25 @@
+export type NetworkPolicyDecision = {
+    kind: "none";
+} | {
+    kind: "allow";
+    hosts: string[];
+} | {
+    kind: "review";
+    hosts: string[];
+    reason: string;
+} | {
+    kind: "deny";
+    hosts: string[];
+    reason: string;
+};
+export type NetworkPolicyEngineOptions = {
+    allowlist?: string[];
+};
+export declare class NetworkPolicyEngine {
+    private readonly allowlist;
+    constructor(options?: NetworkPolicyEngineOptions);
+    evaluate(command: string): NetworkPolicyDecision;
+    private isAllowedHost;
+}
+export declare function createNetworkPolicyEngine(options?: NetworkPolicyEngineOptions): NetworkPolicyEngine;
+//# sourceMappingURL=NetworkPolicyEngine.d.ts.map

package/dist/runtime/sandbox/NetworkPolicyEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NetworkPolicyEngine.d.ts","sourceRoot":"","sources":["../../../src/runtime/sandbox/NetworkPolicyEngine.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,qBAAqB,GAC3B;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,MAAM,MAAM,0BAA0B,GAAG;IACrC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAgBF,qBAAa,mBAAmB;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;gBAEzB,OAAO,GAAE,0BAA+B;IAIpD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,qBAAqB;IAgDhD,OAAO,CAAC,aAAa;CAGxB;AAED,wBAAgB,yBAAyB,CAAC,OAAO,GAAE,0BAA+B,GAAG,mBAAmB,CAEvG"}

package/dist/runtime/sandbox/SandboxReviewStore.d.ts

@@ -0,0 +1,51 @@
+export type SandboxReviewStatus = "pending" | "approved" | "rejected" | "conflicted";
+export type SandboxReviewChangeAction = "created" | "modified" | "deleted";
+export type SandboxReviewChange = {
+    action: SandboxReviewChangeAction;
+    path: string;
+    hostPath: string;
+    overlayPath: string;
+    baseHash: string | null;
+    overlayHash: string | null;
+    diff: string;
+};
+export type SandboxReview = {
+    id: string;
+    status: SandboxReviewStatus;
+    hostWorkspacePath: string;
+    overlayWorkspacePath: string;
+    toolName: string;
+    command?: string;
+    reason: string;
+    createdAt: string;
+    updatedAt: string;
+    changes: SandboxReviewChange[];
+    stdout?: string;
+    stderr?: string;
+};
+export type SandboxReviewStoreOptions = {
+    rootDir?: string;
+};
+export type CreateSandboxReviewInput = {
+    hostWorkspacePath?: string;
+    includedRelativePaths?: string[];
+    toolName: string;
+    command?: string;
+    reason: string;
+    stdout?: string;
+    stderr?: string;
+    mutateOverlay?: (input: {
+        overlayWorkspacePath: string;
+    }) => Promise<void> | void;
+};
+export type SandboxReviewStore = {
+    createReview(input: CreateSandboxReviewInput): Promise<SandboxReview>;
+    listReviews(): SandboxReview[];
+    getReview(id: string): SandboxReview | undefined;
+    approveReview(id: string): Promise<SandboxReview>;
+    rejectReview(id: string): Promise<SandboxReview>;
+};
+export declare function getDefaultSandboxReviewStore(): SandboxReviewStore;
+export declare function setDefaultSandboxReviewStoreForTest(store: SandboxReviewStore | null): void;
+export declare function createSandboxReviewStore(options?: SandboxReviewStoreOptions): SandboxReviewStore;
+//# sourceMappingURL=SandboxReviewStore.d.ts.map

package/dist/runtime/sandbox/SandboxReviewStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxReviewStore.d.ts","sourceRoot":"","sources":["../../../src/runtime/sandbox/SandboxReviewStore.ts"],"names":[],"mappings":"AAgBA,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,YAAY,CAAC;AACrF,MAAM,MAAM,yBAAyB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAE3E,MAAM,MAAM,mBAAmB,GAAG;IAC9B,MAAM,EAAE,yBAAyB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,mBAAmB,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,oBAAoB,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACrF,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC7B,YAAY,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACtE,WAAW,IAAI,aAAa,EAAE,CAAC;IAC/B,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IACjD,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACpD,CAAC;AAMF,wBAAgB,4BAA4B,IAAI,kBAAkB,CAKjE;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAE1F;AAED,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,yBAA8B,GAAG,kBAAkB,CAyGpG"}

package/dist/runtime/sandbox/SandboxRuntime.d.ts

@@ -0,0 +1,27 @@
+import type { ChildProcessWithoutNullStreams } from 'node:child_process';
+export type SandboxMode = 'fast' | 'review';
+export type SandboxSession = {
+    id: string;
+    mode: SandboxMode;
+    hostWorkspacePath: string;
+    sandboxWorkspacePath: string;
+};
+export type SandboxPrepareInput = {
+    hostWorkspacePath: string;
+    mode?: SandboxMode;
+};
+export type SandboxExecSpawnInput = {
+    session: SandboxSession;
+    command: string;
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+};
+export type SandboxRuntime = {
+    prepare(input: SandboxPrepareInput): Promise<SandboxSession>;
+    spawnExec(input: SandboxExecSpawnInput): ChildProcessWithoutNullStreams;
+    stop?(session: SandboxSession): Promise<void>;
+};
+export type SandboxRuntimeFactory = {
+    create(): SandboxRuntime;
+};
+//# sourceMappingURL=SandboxRuntime.d.ts.map

package/dist/runtime/sandbox/SandboxRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxRuntime.d.ts","sourceRoot":"","sources":["../../../src/runtime/sandbox/SandboxRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAEzE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE5C,MAAM,MAAM,cAAc,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAChC,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IACzB,OAAO,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7D,SAAS,CAAC,KAAK,EAAE,qBAAqB,GAAG,8BAA8B,CAAC;IACxE,IAAI,CAAC,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAChC,MAAM,IAAI,cAAc,CAAC;CAC5B,CAAC"}

package/dist/runtime/sandbox/SecretBroker.d.ts

@@ -0,0 +1,10 @@
+export type SecretAccessRequest = {
+    kind: "ssh" | "keychain" | "cloud" | "browser_cookie" | "env" | "unknown";
+    command: string;
+    reason: string;
+};
+export type SecretBroker = {
+    requestSecretAccess(request: SecretAccessRequest): Promise<never>;
+};
+export declare const denyOnlySecretBroker: SecretBroker;
+//# sourceMappingURL=SecretBroker.d.ts.map

package/dist/runtime/sandbox/SecretBroker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretBroker.d.ts","sourceRoot":"","sources":["../../../src/runtime/sandbox/SecretBroker.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG;IAC9B,IAAI,EAAE,KAAK,GAAG,UAAU,GAAG,OAAO,GAAG,gBAAgB,GAAG,KAAK,GAAG,SAAS,CAAC;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACvB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CACrE,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,YAIlC,CAAC"}

package/dist/runtime/sandbox/ToolPolicyEngine.d.ts

@@ -0,0 +1,30 @@
+import type { WorkspaceBroker } from './WorkspaceBroker';
+import { type NetworkPolicyEngineOptions } from './NetworkPolicyEngine';
+export type ToolRiskLevel = 'safe_read' | 'safe_compute' | 'workspace_write' | 'network' | 'destructive' | 'secret' | 'host_capability';
+export type ToolPolicyDecision = {
+    allow: boolean;
+    riskLevel: ToolRiskLevel;
+    reason?: string;
+    reviewRequired?: boolean;
+};
+export type ToolPolicyInput = {
+    toolName: string;
+    command?: string;
+    cwd?: string;
+    filePath?: string;
+    args?: Record<string, unknown>;
+};
+export type ToolPolicyEngineOptions = {
+    workspaceBroker: WorkspaceBroker;
+    networkPolicy?: NetworkPolicyEngineOptions;
+};
+export declare class ToolPolicyEngine {
+    private readonly workspaceBroker;
+    private readonly networkPolicy;
+    constructor(options: ToolPolicyEngineOptions);
+    evaluate(input: ToolPolicyInput): ToolPolicyDecision;
+    private evaluateShell;
+    private evaluateWorkspacePath;
+}
+export declare function createToolPolicyEngine(options: ToolPolicyEngineOptions): ToolPolicyEngine;
+//# sourceMappingURL=ToolPolicyEngine.d.ts.map