genaicode 2.14.0 → 2.15.0

package/dist/app-agent/http.js

@@ -0,0 +1,228 @@
+import { timingSafeEqual } from 'node:crypto';
+import { AppAgentError } from './app-agent.js';
+import { safeJson } from './json.js';
+import { handleMcpMessage } from './mcp.js';
+const MAX_BODY = 256 * 1024;
+/**
+ * Serve an app agent over HTTP, for any Node server (node:http, Express, Connect, Fastify
+ * with `reply.hijack()`, a Vite middleware). Routes under `basePath`:
+ *
+ * - `GET  /state`, `GET /events` (server-sent `AppAgentState` snapshots)
+ * - `POST /send {text}`, `/stop`, `/reset`, `/config {agent?, mode?}`, `/view {path}`
+ * - `POST /actions/:id {decision: 'approve' | 'reject'}`, `GET /actions/:id/changes`
+ * - `POST /approvals/:id {decision: 'approve' | 'deny'}`: the agent CLI's own permission prompts
+ * - `POST /mcp`: the agent's MCP endpoint (bearer `agent.mcpToken`; browser requests refused)
+ *
+ * Requests another site started are refused (`Sec-Fetch-Site`, `Origin`).
+ */
+export function createAppAgentHandler(agent, options = {}) {
+    const base = (options.basePath ?? '/api/agent').replace(/\/$/, '');
+    const serverInfo = options.serverInfo ?? { name: agent.serverName, version: '1.0.0' };
+    const streams = new Set();
+    const handle = async (req, res) => {
+        const url = new URL(req.url ?? '/', 'http://local');
+        if (url.pathname !== base && !url.pathname.startsWith(`${base}/`))
+            return false;
+        const route = url.pathname.slice(base.length) || '/';
+        const method = req.method ?? 'GET';
+        try {
+            if (route === '/mcp') {
+                // Only the agent CLI calls this; a browser always sends Origin on POST.
+                if (req.headers.origin !== undefined)
+                    return json(res, 403, { error: 'forbidden' });
+                if (!bearerOk(req.headers.authorization, agent.mcpToken))
+                    return json(res, 401, { error: 'bad token' });
+                if (method !== 'POST')
+                    return json(res, 405, { error: 'POST only' });
+                const message = await readJson(req);
+                // Again after the body: the session may have been dropped while it arrived.
+                if (!bearerOk(req.headers.authorization, agent.mcpToken))
+                    return json(res, 401, { error: 'bad token' });
+                const response = await handleMcpMessage(message, agent.mcpTools(), serverInfo);
+                if (response === null) {
+                    res.writeHead(202).end();
+                    return true;
+                }
+                return json(res, 200, response);
+            }
+            if (crossSite(req))
+                return json(res, 403, { error: 'cross-site request' });
+            if (!options.authorize && !loopbackHost(req.headers.host, options.allowedHosts)) {
+                return json(res, 403, { error: 'unknown host' });
+            }
+            if (options.authorize && !(await options.authorize(req)))
+                return json(res, 403, { error: 'forbidden' });
+            if (method === 'GET' && route === '/state')
+                return json(res, 200, agent.get());
+            if (method === 'GET' && route === '/events') {
+                events(req, res, agent, streams);
+                return true;
+            }
+            if (method === 'GET') {
+                const changes = /^\/actions\/([^/]+)\/changes$/.exec(route);
+                if (changes)
+                    return json(res, 200, await agent.changes(decodeURIComponent(changes[1])));
+                return json(res, 404, { error: 'not found' });
+            }
+            if (method !== 'POST')
+                return json(res, 405, { error: 'method not allowed' });
+            const body = await readJson(req);
+            const field = (name) => body && typeof body === 'object' ? body[name] : undefined;
+            switch (route) {
+                case '/send':
+                    agent.send(String(field('text') ?? ''));
+                    break;
+                case '/stop':
+                    agent.stop();
+                    break;
+                case '/reset':
+                    agent.reset();
+                    break;
+                case '/config': {
+                    const name = field('agent');
+                    const mode = field('mode');
+                    agent.configure({
+                        ...(typeof name === 'string' ? { agent: name } : {}),
+                        ...(typeof mode === 'string' ? { mode: mode } : {}),
+                    });
+                    break;
+                }
+                case '/view': {
+                    const path = field('path');
+                    if (typeof path !== 'string' || path.length > 500)
+                        return json(res, 400, { error: 'path required' });
+                    agent.setView(path);
+                    res.writeHead(204).end();
+                    return true;
+                }
+                default: {
+                    const approval = /^\/approvals\/([^/]+)$/.exec(route);
+                    if (approval) {
+                        const answer = field('decision');
+                        if (answer !== 'approve' && answer !== 'deny') {
+                            return json(res, 400, { error: 'decision must be approve or deny' });
+                        }
+                        agent.approve(decodeURIComponent(approval[1]), answer);
+                        break;
+                    }
+                    const action = /^\/actions\/([^/]+)$/.exec(route);
+                    const decision = field('decision');
+                    if (!action)
+                        return json(res, 404, { error: 'not found' });
+                    if (decision !== 'approve' && decision !== 'reject') {
+                        return json(res, 400, { error: 'decision must be approve or reject' });
+                    }
+                    agent.decide(decodeURIComponent(action[1]), decision);
+                }
+            }
+            return json(res, 200, agent.get());
+        }
+        catch (error) {
+            const status = error instanceof AppAgentError ? error.status : error instanceof BadRequest ? 400 : 500;
+            return json(res, status, { error: error.message });
+        }
+    };
+    return Object.assign(handle, {
+        close() {
+            for (const stream of streams)
+                stream.end();
+            streams.clear();
+        },
+    });
+}
+class BadRequest extends Error {
+}
+function events(req, res, agent, streams) {
+    res.writeHead(200, { 'content-type': 'text/event-stream', 'cache-control': 'no-store', connection: 'keep-alive' });
+    res.write(`data: ${safeJson(agent.get())}\n\n`);
+    let timer = null;
+    // Streamed text changes the state per token; send the latest every 100 ms at most.
+    const unsubscribe = agent.subscribe(() => {
+        if (timer)
+            return;
+        timer = setTimeout(() => {
+            timer = null;
+            if (!res.writableEnded)
+                res.write(`data: ${safeJson(agent.get())}\n\n`);
+        }, 100);
+    });
+    const ping = setInterval(() => res.write(': ping\n\n'), 15_000);
+    streams.add(res);
+    const end = () => {
+        streams.delete(res);
+        unsubscribe();
+        clearInterval(ping);
+        if (timer)
+            clearTimeout(timer);
+    };
+    req.on('close', end);
+    res.on('close', end);
+}
+// A page on another site (or another local dev server) must not drive the agent.
+function crossSite(req) {
+    const site = req.headers['sec-fetch-site'];
+    if (site !== undefined && site !== 'same-origin' && site !== 'none')
+        return true;
+    const origin = req.headers.origin;
+    if (origin === undefined || req.method === 'GET')
+        return false;
+    try {
+        return new URL(origin).host !== req.headers.host;
+    }
+    catch {
+        return true;
+    }
+}
+// Without app auth, only a loopback name may reach the agent: a rebinding domain that resolves
+// to 127.0.0.1 still sends its own name as Host.
+function loopbackHost(host, allowed = []) {
+    if (!host)
+        return false;
+    let name;
+    try {
+        name = new URL(`http://${host}`).hostname;
+    }
+    catch {
+        return false;
+    }
+    return (name === 'localhost' ||
+        name.endsWith('.localhost') ||
+        name === '127.0.0.1' ||
+        name === '[::1]' ||
+        allowed.includes(name));
+}
+function bearerOk(header, token) {
+    if (!header?.startsWith('Bearer '))
+        return false;
+    const a = Buffer.from(header.slice('Bearer '.length));
+    const b = Buffer.from(token);
+    return a.length === b.length && timingSafeEqual(a, b);
+}
+function json(res, status, body) {
+    res.writeHead(status, { 'content-type': 'application/json', 'cache-control': 'no-store' });
+    res.end(safeJson(body));
+    return true;
+}
+// Frameworks that already parsed the body leave it on `req.body`.
+async function readJson(req) {
+    if (req.body !== undefined)
+        return req.body;
+    let size = 0;
+    const chunks = [];
+    for await (const chunk of req) {
+        size += chunk.length;
+        if (size > MAX_BODY)
+            throw new BadRequest('request too large');
+        chunks.push(chunk);
+    }
+    const text = Buffer.concat(chunks).toString('utf8');
+    if (!text)
+        return {};
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new BadRequest('expected JSON');
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/app-agent/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/app-agent/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAiB,MAAM,gBAAgB,CAAC;AAE9D,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAyB5C,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC;AAE5B;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAe,EAAE,UAAkC,EAAE;IACzF,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACtF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1C,MAAM,MAAM,GAAG,KAAK,EAAE,GAAyC,EAAE,GAAmB,EAAoB,EAAE;QACxG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,cAAc,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChF,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QACrD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QAEnC,IAAI,CAAC;YACH,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,wEAAwE;gBACxE,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACxG,IAAI,MAAM,KAAK,MAAM;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACrE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACpC,4EAA4E;gBAC5E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACxG,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,UAAU,CAAC,CAAC;gBAC/E,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBACzB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAClC,CAAC;YAED,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBAChF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAExG,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/E,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5C,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBACjC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC5D,IAAI,OAAO;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;gBACzF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAE9E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAC7B,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,QAAQ,KAAK,EAAE,CAAC;gBACd,KAAK,OAAO;oBACV,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBACxC,MAAM;gBACR,KAAK,OAAO;oBACV,KAAK,CAAC,IAAI,EAAE,CAAC;oBACb,MAAM;gBACR,KAAK,QAAQ;oBACX,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,MAAM;gBACR,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC3B,KAAK,CAAC,SAAS,CAAC;wBACd,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpD,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpE,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBACD,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;wBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;oBACrG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACpB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBACzB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACtD,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;wBACjC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;4BAC9C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;wBACvE,CAAC;wBACD,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,MAAM,CAAC,CAAC;wBACxD,MAAM;oBACR,CAAC;oBACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;oBACnC,IAAI,CAAC,MAAM;wBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;oBAC3D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBACpD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;oBACzE,CAAC;oBACD,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACvG,OAAO,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;QAC3B,KAAK;YACH,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YAC3C,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAW,SAAQ,KAAK;CAAG;AAEjC,SAAS,MAAM,CAAC,GAAoB,EAAE,GAAmB,EAAE,KAAe,EAAE,OAA4B;IACtG,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IACnH,GAAG,CAAC,KAAK,CAAC,SAAS,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,KAAK,GAA0B,IAAI,CAAC;IACxC,mFAAmF;IACnF,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACvC,IAAI,KAAK;YAAE,OAAO;QAClB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,KAAK,GAAG,IAAI,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,aAAa;gBAAE,GAAG,CAAC,KAAK,CAAC,SAAS,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QAC1E,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,MAAM,GAAG,GAAG,GAAG,EAAE;QACf,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,WAAW,EAAE,CAAC;QACd,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,iFAAiF;AACjF,SAAS,SAAS,CAAC,GAAoB;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACjF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,iDAAiD;AACjD,SAAS,YAAY,CAAC,IAAwB,EAAE,UAA6B,EAAE;IAC7E,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,IAAI,KAAK,WAAW;QACpB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC3B,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,OAAO;QAChB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,MAA0B,EAAE,KAAa;IACzD,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC9D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3F,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,QAAQ,CAAC,GAAyC;IAC/D,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IAC5C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;QACjC,IAAI,IAAI,GAAG,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/app-agent/json.d.ts

@@ -0,0 +1,7 @@
+/**
+ * JSON that never throws: a custom agent's tool input can hold a BigInt (sent as a string) or a
+ * cycle (sent as `"[Circular]"`), or a `toJSON` or getter that throws (that object is copied field by
+ * field, and what cannot be read becomes `"[Unreadable]"`). An object reached twice without a cycle is
+ * written out each time.
+ */
+export declare function safeJson(value: unknown): string;

package/dist/app-agent/json.js

@@ -0,0 +1,62 @@
+/**
+ * JSON that never throws: a custom agent's tool input can hold a BigInt (sent as a string) or a
+ * cycle (sent as `"[Circular]"`), or a `toJSON` or getter that throws (that object is copied field by
+ * field, and what cannot be read becomes `"[Unreadable]"`). An object reached twice without a cycle is
+ * written out each time.
+ */
+export function safeJson(value) {
+    try {
+        return stringify(value);
+    }
+    catch {
+        // A `toJSON` or getter that throws runs before any replacer sees the value.
+        return stringify(plain(value, []));
+    }
+}
+function stringify(value) {
+    const path = [];
+    return (JSON.stringify(value, function (_key, item) {
+        if (typeof item === 'bigint')
+            return String(item);
+        if (typeof item !== 'object' || item === null)
+            return item;
+        // `this` is the object holding `item`: drop the ancestors that are not on its path.
+        while (path.length && path.at(-1) !== this)
+            path.pop();
+        if (path.includes(item))
+            return '[Circular]';
+        path.push(item);
+        return item;
+    }) ?? '');
+}
+// A copy made of plain data only: what cannot be read becomes `"[Unreadable]"`.
+function plain(value, path) {
+    if (typeof value === 'bigint')
+        return String(value);
+    // A function (a `toJSON` among them) is left out, as JSON leaves it out.
+    if (typeof value === 'function')
+        return undefined;
+    if (typeof value !== 'object' || value === null)
+        return value;
+    if (path.includes(value))
+        return '[Circular]';
+    const inner = [...path, value];
+    try {
+        if (Array.isArray(value))
+            return value.map((item) => plain(item, inner));
+        const copy = {};
+        for (const key of Object.keys(value)) {
+            try {
+                copy[key] = plain(value[key], inner);
+            }
+            catch {
+                copy[key] = '[Unreadable]';
+            }
+        }
+        return copy;
+    }
+    catch {
+        return '[Unreadable]';
+    }
+}
+//# sourceMappingURL=json.js.map

package/dist/app-agent/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/app-agent/json.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,OAAO,CACL,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,UAAyB,IAAI,EAAE,IAAa;QAChE,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3D,oFAAoF;QACpF,OAAO,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACvD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,YAAY,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,IAAI,EAAE,CACT,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,KAAK,CAAC,KAAc,EAAE,IAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,yEAAyE;IACzE,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAC9C,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACzE,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/app-agent/mcp.d.ts

@@ -0,0 +1,15 @@
+/** A tool the app serves to the agent over MCP. */
+export interface McpTool {
+    name: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+    call(args: Record<string, unknown>): Promise<string>;
+}
+/**
+ * Answer one MCP Streamable HTTP message: JSON responses only, no server-sent stream.
+ * Returns null for notifications (reply 202 with no body).
+ */
+export declare function handleMcpMessage(message: unknown, tools: readonly McpTool[], serverInfo: {
+    name: string;
+    version: string;
+}): Promise<object | null>;

package/dist/app-agent/mcp.js

@@ -0,0 +1,53 @@
+const DEFAULT_PROTOCOL = '2025-06-18';
+/**
+ * Answer one MCP Streamable HTTP message: JSON responses only, no server-sent stream.
+ * Returns null for notifications (reply 202 with no body).
+ */
+export async function handleMcpMessage(message, tools, serverInfo) {
+    if (!isRequest(message))
+        return rpcError(null, -32600, 'invalid request');
+    const { id, method, params } = message;
+    if (id === undefined)
+        return null;
+    switch (method) {
+        case 'initialize':
+            return result(id, {
+                protocolVersion: typeof params?.protocolVersion === 'string' ? params.protocolVersion : DEFAULT_PROTOCOL,
+                capabilities: { tools: { listChanged: false } },
+                serverInfo,
+            });
+        case 'ping':
+            return result(id, {});
+        case 'tools/list':
+            return result(id, {
+                tools: tools.map(({ name, description, inputSchema }) => ({ name, description, inputSchema })),
+            });
+        case 'tools/call': {
+            const tool = tools.find((candidate) => candidate.name === params?.name);
+            if (!tool)
+                return rpcError(id, -32602, `unknown tool ${String(params?.name)}`);
+            const args = isObject(params?.arguments) ? params.arguments : {};
+            try {
+                return result(id, { content: [{ type: 'text', text: await tool.call(args) }] });
+            }
+            catch (error) {
+                return result(id, { content: [{ type: 'text', text: error.message }], isError: true });
+            }
+        }
+        default:
+            return rpcError(id, -32601, `method not found: ${method}`);
+    }
+}
+function result(id, value) {
+    return { jsonrpc: '2.0', id, result: value };
+}
+function rpcError(id, code, message) {
+    return { jsonrpc: '2.0', id, error: { code, message } };
+}
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isRequest(value) {
+    return isObject(value) && value.jsonrpc === '2.0' && typeof value.method === 'string';
+}
+//# sourceMappingURL=mcp.js.map

package/dist/app-agent/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/app-agent/mcp.ts"],"names":[],"mappings":"AAeA,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgB,EAChB,KAAyB,EACzB,UAA6C;IAE7C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAC1E,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACvC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAClC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,EAAE,EAAE;gBAChB,eAAe,EAAE,OAAO,MAAM,EAAE,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB;gBACxG,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;gBAC/C,UAAU;aACX,CAAC,CAAC;QACL,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACxB,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,EAAE,EAAE;gBAChB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;aAC/F,CAAC,CAAC;QACL,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC;YACxE,IAAI,CAAC,IAAI;gBAAE,OAAO,QAAQ,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,gBAAgB,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/E,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;QACD;YACE,OAAO,QAAQ,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,qBAAqB,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,EAA0B,EAAE,KAAc;IACxD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,QAAQ,CAAC,EAA0B,EAAE,IAAY,EAAE,OAAe;IACzE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;AACxF,CAAC"}

package/dist/app-agent/policy.d.ts

@@ -0,0 +1,13 @@
+import type { CodingAgent } from '../agents/types.js';
+import type { AppAgentMode } from './state.js';
+/**
+ * The agents an app agent offers by default: the drivers that take per-run MCP servers,
+ * locked down per mode. In `use` mode they get no shell and no file edits, only the app's
+ * tools. In `dev` mode they edit files and may run `commands` (each with any arguments), never
+ * commit or push (that goes through `propose_commit`). Codex has no per-command allowlist:
+ * in `dev` mode its shell is bounded only by the `workspace-write` sandbox. In both modes the
+ * only MCP server is the app's: the user's own configured servers are switched off. Claude's
+ * hooks are off in both modes; Copilot's in `use` mode only (through settings in the app
+ * agent's own working directory), since in `dev` mode they live in the user's repository.
+ */
+export declare function defaultAppAgents(mode: AppAgentMode, commands?: readonly string[]): CodingAgent[];

package/dist/app-agent/policy.js

@@ -0,0 +1,97 @@
+import { claude } from '../agents/drivers/claude.js';
+import { codex } from '../agents/drivers/codex.js';
+import { copilot } from '../agents/drivers/copilot.js';
+const WEB_TOOLS = ['WebFetch', 'WebSearch'];
+/**
+ * The agents an app agent offers by default: the drivers that take per-run MCP servers,
+ * locked down per mode. In `use` mode they get no shell and no file edits, only the app's
+ * tools. In `dev` mode they edit files and may run `commands` (each with any arguments), never
+ * commit or push (that goes through `propose_commit`). Codex has no per-command allowlist:
+ * in `dev` mode its shell is bounded only by the `workspace-write` sandbox. In both modes the
+ * only MCP server is the app's: the user's own configured servers are switched off. Claude's
+ * hooks are off in both modes; Copilot's in `use` mode only (through settings in the app
+ * agent's own working directory), since in `dev` mode they live in the user's repository.
+ */
+export function defaultAppAgents(mode, commands = []) {
+    if (mode === 'use') {
+        return [
+            claude({
+                permissionMode: 'dontAsk',
+                strictMcpConfig: true,
+                // The user's hooks would run shell commands on prompts that carry app data.
+                settings: { disableAllHooks: true },
+                // Read tools too: user settings may pre-allow them, and dontAsk runs pre-allowed tools.
+                disallowedTools: [
+                    'Bash',
+                    'Read',
+                    'Grep',
+                    'Glob',
+                    'LS',
+                    'Edit',
+                    'Write',
+                    'MultiEdit',
+                    'NotebookEdit',
+                    'NotebookRead',
+                    'Task',
+                    ...WEB_TOOLS,
+                ],
+            }),
+            // The sandbox alone still lets the shell read host files: drop the shell, image viewer and
+            // web search.
+            codex({
+                sandbox: 'read-only',
+                // Apps (connectors) are on by default and bypass the sandbox's network rules.
+                config: {
+                    'features.shell_tool': false,
+                    'features.view_image': false,
+                    'features.apps': false,
+                    'features.hooks': false,
+                    web_search: 'disabled',
+                },
+                onlyTaskMcpServers: true,
+            }),
+            copilot({
+                allowAllTools: false,
+                denyTools: ['shell', 'write', 'read', 'url', 'memory'],
+                // A deny rule leaves read-only tools such as web search in place; only this removes them.
+                excludedTools: ['web_fetch', 'web_search'],
+                onlyTaskMcpServers: true,
+            }),
+        ];
+    }
+    // Each command with any arguments. No git rules: `git diff --no-index` or `git log --output`
+    // reach outside cwd; git asks through the agent's own permission prompt instead.
+    const allowed = [...commands];
+    return [
+        claude({
+            permissionMode: 'acceptEdits',
+            strictMcpConfig: true,
+            // acceptEdits already reads and edits inside cwd without asking; no bare Read/Edit rules,
+            // which would match every path on the machine.
+            allowedTools: allowed.map((c) => `Bash(${c}:*)`),
+            disallowedTools: ['Bash(git commit:*)', 'Bash(git push:*)', ...WEB_TOOLS],
+            // Hooks run commands outside these rules, `git commit` included.
+            settings: { disableAllHooks: true },
+        }),
+        codex({
+            sandbox: 'workspace-write',
+            config: {
+                'features.apps': false,
+                'features.hooks': false,
+                web_search: 'disabled',
+                // The user's own config may open the sandbox up: no network, no roots beyond cwd.
+                'sandbox_workspace_write.network_access': false,
+                'sandbox_workspace_write.writable_roots': [],
+            },
+            onlyTaskMcpServers: true,
+        }),
+        copilot({
+            allowAllTools: false,
+            // `shell(npm test)` is the exact command only; `:*` adds any arguments.
+            allowTools: ['write', ...allowed.flatMap((c) => [`shell(${c})`, `shell(${c}:*)`])],
+            denyTools: ['shell(git commit)', 'shell(git commit:*)', 'shell(git push)', 'shell(git push:*)'],
+            onlyTaskMcpServers: true,
+        }),
+    ];
+}
+//# sourceMappingURL=policy.js.map

package/dist/app-agent/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/app-agent/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AAIvD,MAAM,SAAS,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAE5C;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAkB,EAAE,WAA8B,EAAE;IACnF,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO;YACL,MAAM,CAAC;gBACL,cAAc,EAAE,SAAS;gBACzB,eAAe,EAAE,IAAI;gBACrB,4EAA4E;gBAC5E,QAAQ,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;gBACnC,wFAAwF;gBACxF,eAAe,EAAE;oBACf,MAAM;oBACN,MAAM;oBACN,MAAM;oBACN,MAAM;oBACN,IAAI;oBACJ,MAAM;oBACN,OAAO;oBACP,WAAW;oBACX,cAAc;oBACd,cAAc;oBACd,MAAM;oBACN,GAAG,SAAS;iBACb;aACF,CAAC;YACF,2FAA2F;YAC3F,cAAc;YACd,KAAK,CAAC;gBACJ,OAAO,EAAE,WAAW;gBACpB,8EAA8E;gBAC9E,MAAM,EAAE;oBACN,qBAAqB,EAAE,KAAK;oBAC5B,qBAAqB,EAAE,KAAK;oBAC5B,eAAe,EAAE,KAAK;oBACtB,gBAAgB,EAAE,KAAK;oBACvB,UAAU,EAAE,UAAU;iBACvB;gBACD,kBAAkB,EAAE,IAAI;aACzB,CAAC;YACF,OAAO,CAAC;gBACN,aAAa,EAAE,KAAK;gBACpB,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC;gBACtD,0FAA0F;gBAC1F,aAAa,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;gBAC1C,kBAAkB,EAAE,IAAI;aACzB,CAAC;SACH,CAAC;IACJ,CAAC;IACD,6FAA6F;IAC7F,iFAAiF;IACjF,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC9B,OAAO;QACL,MAAM,CAAC;YACL,cAAc,EAAE,aAAa;YAC7B,eAAe,EAAE,IAAI;YACrB,0FAA0F;YAC1F,+CAA+C;YAC/C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChD,eAAe,EAAE,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,GAAG,SAAS,CAAC;YACzE,iEAAiE;YACjE,QAAQ,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;SACpC,CAAC;QACF,KAAK,CAAC;YACJ,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE;gBACN,eAAe,EAAE,KAAK;gBACtB,gBAAgB,EAAE,KAAK;gBACvB,UAAU,EAAE,UAAU;gBACtB,kFAAkF;gBAClF,wCAAwC,EAAE,KAAK;gBAC/C,wCAAwC,EAAE,EAAE;aAC7C;YACD,kBAAkB,EAAE,IAAI;SACzB,CAAC;QACF,OAAO,CAAC;YACN,aAAa,EAAE,KAAK;YACpB,wEAAwE;YACxE,UAAU,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAClF,SAAS,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,mBAAmB,CAAC;YAC/F,kBAAkB,EAAE,IAAI;SACzB,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/app-agent/state.d.ts

@@ -0,0 +1,75 @@
+import type { SessionState, SessionTurn } from '../agents/session.js';
+/** `use`: the agent works the app through its tools. `dev`: it also edits the app's own code. */
+export type AppAgentMode = 'use' | 'dev';
+export type AppActionStatus = 'pending' | 'running' | 'done' | 'failed' | 'rejected';
+/** A write waiting for the user, or done. */
+export interface AppAction {
+    id: string;
+    kind: 'tool' | 'commit';
+    /** The one line the user reads before deciding. */
+    summary: string;
+    tool?: {
+        name: string;
+        args: Record<string, unknown>;
+    };
+    /** `base`: the commit the reviewed tree is a change on; null before the first commit. */
+    commit?: {
+        message: string;
+        tree: string;
+        base: string | null;
+        ref: string | null;
+    };
+    status: AppActionStatus;
+    result?: string;
+    createdAt: number;
+}
+/** A chip the agent offers under a reply; clicking it opens that page of the app. */
+export interface AppLink {
+    turnId: number;
+    label: string;
+    path: string;
+}
+export interface AppAgentState {
+    name: string;
+    mode: AppAgentMode;
+    /** `dev` is offered only when the app configured it. */
+    modes: AppAgentMode[];
+    agent: string;
+    agents: Array<{
+        name: string;
+        installed: boolean;
+    }>;
+    session: SessionState | null;
+    /**
+     * Turns from before the last agent or mode switch, oldest first. They keep their place in
+     * the conversation with negative ids, so links still point at them.
+     */
+    history: SessionTurn[];
+    actions: AppAction[];
+    links: AppLink[];
+    /** The page the app last reported as open. */
+    view: string | null;
+    /** A bumped id asks the page to open `path` once. */
+    navigation: {
+        id: number;
+        path: string;
+    } | null;
+}
+/** What a proposed commit would change, for the approval card. */
+export interface TreeChanges {
+    files: Array<{
+        status: string;
+        path: string;
+    }>;
+    diff: string;
+    /** The diff was cut to fit: it cannot be reviewed here, so the commit cannot be approved. */
+    truncated?: boolean;
+    /** Changed files whose contents the diff cannot show (binary). */
+    binary?: string[];
+}
+/** Separates the briefing and page context from what the user typed. */
+export declare const PROMPT_MARKER = "\n\nUser message:\n";
+/** What the user typed, without the briefing or page context in front of it. */
+export declare function userText(prompt: string): string;
+/** Notes the app sends the agent (an action's outcome) start with this. */
+export declare const APP_NOTE = "[app] ";

package/dist/app-agent/state.js

@@ -0,0 +1,10 @@
+/** Separates the briefing and page context from what the user typed. */
+export const PROMPT_MARKER = '\n\nUser message:\n';
+/** What the user typed, without the briefing or page context in front of it. */
+export function userText(prompt) {
+    const at = prompt.lastIndexOf(PROMPT_MARKER);
+    return at < 0 ? prompt : prompt.slice(at + PROMPT_MARKER.length);
+}
+/** Notes the app sends the agent (an action's outcome) start with this. */
+export const APP_NOTE = '[app] ';
+//# sourceMappingURL=state.js.map

package/dist/app-agent/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/app-agent/state.ts"],"names":[],"mappings":"AA4DA,wEAAwE;AACxE,MAAM,CAAC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAEnD,gFAAgF;AAChF,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAC7C,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAC"}

package/dist/app-agent.d.ts

@@ -0,0 +1,8 @@
+export { AppAgentError, createAppAgent } from './app-agent/app-agent.js';
+export type { AppAgent, AppAgentOptions, AppAgentTrace, AppTool } from './app-agent/app-agent.js';
+export { createAppAgentHandler } from './app-agent/http.js';
+export type { AppAgentHandler, AppAgentHandlerOptions } from './app-agent/http.js';
+export { defaultAppAgents } from './app-agent/policy.js';
+export { APP_NOTE, PROMPT_MARKER, userText } from './app-agent/state.js';
+export type { AppAction, AppActionStatus, AppAgentMode, AppAgentState, AppLink, TreeChanges, } from './app-agent/state.js';
+export type { McpTool } from './app-agent/mcp.js';

package/dist/app-agent.js

@@ -0,0 +1,5 @@
+export { AppAgentError, createAppAgent } from './app-agent/app-agent.js';
+export { createAppAgentHandler } from './app-agent/http.js';
+export { defaultAppAgents } from './app-agent/policy.js';
+export { APP_NOTE, PROMPT_MARKER, userText } from './app-agent/state.js';
+//# sourceMappingURL=app-agent.js.map

package/dist/app-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-agent.js","sourceRoot":"","sources":["../src/app-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAEzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC"}