hermes-action-bridge 0.3.0 → 0.5.0

package/CHANGELOG.md

@@ -4,6 +4,76 @@ All notable changes to this project are documented here. The format is based on
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+## [0.5.0] - 2026-07-25
+
+### Added
+
+- Complete Codex and Claude Code installation: `install all` now installs the
+  managed skills and registers a verified global MCP server through each
+  agent's native CLI using the absolute bridge launcher.
+- `doctor` now detects missing/conflicting MCP registrations and performs a
+  token-free MCP initialize/list-tools handshake.
+- Configuration-backed `hermes_capabilities`, concurrency-limited
+  asynchronous jobs (`submit`, `status`, `result`, `cancel`), and one-shot
+  two-phase actions (`prepare`, `approve`, `reject`).
+- Privacy-preserving owner-only JSONL audit metadata for job and approval
+  transitions.
+- Opt-in Streamable HTTP transport with loopback defaults and an authenticated,
+  Tailscale-only direct-listen mode.
+
+### Changed
+
+- Native skills now prefer discoverable `hermes_*` MCP tools and clearly
+  separate Hermes-owned integrations from ordinary local coding work.
+- The Codex plugin manifest now uses the supported `mcpServers` shape, ships in
+  the npm tarball, and shares the package version.
+- Refreshed patched `fast-uri` and `postcss` releases in the lockfile and
+  documented why the remaining transitive Hono advisory is not reachable in
+  the bridge HTTP architecture.
+
+### Documentation
+
+- Added a "Trusted presets (direct execution)" README section: how to define a `require_approval_for: []`
+  preset in user config to run `execute` actions without the approval gate, plus the safety trade-offs
+  (keep it in user scope, never allowlist `hermes-action run`).
+
+## [0.4.0] - 2026-07-03
+
+Deterministic security model, per-call MCP overrides, and installer hardening.
+
+### Added
+
+- MCP `hermes_run` now accepts `model`, `provider`, `maxTurns`, and `timeoutSeconds` overrides, so a
+  caller can pick a faster model or cap the tool-calling budget per request (previously only settable via a
+  preset).
+
+### Fixed
+
+- `install mcp --write` on an empty or whitespace-only `.mcp.json` (e.g. after `touch`) now initializes it
+  instead of failing with "not valid JSON".
+- `install mcp --write` no longer silently overwrites a customized `hermes-action` entry in `.mcp.json`; it
+  refuses with an actionable message so a custom command/args is never lost.
+- Removed the non-functional `profile` option (`--profile`, `defaults.profile`, `preset.profile`). The
+  Hermes CLI has no per-invocation profile flag — profiles are switched globally with `hermes profile use`
+  — so a configured profile made the bridge emit an invalid `hermes --profile … chat` command. Target a
+  specific Hermes profile via `runtime.command` (e.g. a `hermes profile alias` wrapper) instead.
+
+### Changed
+
+- **Policy is now deterministic and language-agnostic.** In `execute` mode the bridge downgrades to
+  `request-approval` by default — regardless of the prompt's wording or language — unless the preset is
+  explicitly trusted (empty `require_approval_for`) or `--yolo` is set. Previously the downgrade fired only
+  when an English keyword was detected, so non-English side-effecting prompts (e.g. `supprime…`, `paie…`)
+  silently ran in `execute`. Keyword risk detection is retained but is now **informational only** (surfaced
+  in the prompt envelope), never a security control. The real barrier is the host agent's approval prompt.
+
+### Documentation
+
+- Documented the security model: host-agent approval is the deterministic barrier; do not allowlist
+  `hermes-action run` (`execute`/`yolo`) in the coding agent.
+
 ## [0.3.0] - 2026-06-30
 
 Execution robustness and large-context support.

package/README.md

@@ -23,14 +23,16 @@ If an agent needs to do something outside its local coding session — research,
 ## Features
 
 - Generic `hermes-action run` command for one-shot delegation.
-- Configurable presets for skills, toolsets, provider/model, profile, source, and max turns.
-- Safety policy that can downgrade risky `execute` requests to `request-approval`, with optional per-preset overrides.
+- Configurable presets for skills, toolsets, provider/model, source, and max turns.
+- Deterministic, language-agnostic safety policy: downgrades `execute` to `request-approval` by default, with per-preset trust overrides.
 - Explicit `--yolo` mode for users who intentionally want to bypass bridge-level policy.
 - Context file injection with a per-file cap and a configurable aggregate budget (clear error instead of a cryptic `E2BIG`).
 - Automatic large-context delivery: an oversized prompt is handed to Hermes through a secure temp file instead of overflowing the command line.
 - Per-run timeouts (configurable, with per-mode defaults) that always reap the Hermes child process.
 - Dry-run mode for debugging the exact Hermes command, prompt, and computed prompt size.
-- Minimal MCP server exposing delegation tools: `hermes_run`, `hermes_plan`, `hermes_presets`, and `hermes_status`.
+- Complete Codex and Claude Code installer: managed skill plus verified global MCP registration.
+- MCP capability discovery, cancellable asynchronous jobs, and one-shot two-phase approvals with a privacy-preserving local audit log.
+- Local stdio transport plus an opt-in, authenticated Streamable HTTP transport for Tailscale-restricted hosts.
 - No project-specific assumptions. All behavior is configured through YAML and CLI flags.
 
 ## Requirements
@@ -52,13 +54,20 @@ Install from npm:
 npm install -g hermes-action-bridge
 ```
 
-Then check it works:
+Install the skill and MCP registration for Codex and Claude Code, then verify
+the complete setup:
 
 ```bash
 hermes-action --version
+hermes-action install all
 hermes-action doctor
 ```
 
+Global installation is all-or-nothing for the requested agents. If Codex or
+Claude Code is unavailable, conflicting, or cannot verify its user-scoped
+stdio MCP entry, the command exits non-zero without installing the requested
+skills. Use `--project` for an explicit skill-only setup.
+
 <details>
 <summary>From source (for development)</summary>
 
@@ -103,14 +112,16 @@ hermes-action run --dry-run --json "Summarize this project."
 
 ## Execution modes
 
-- `plan`: Hermes returns a plan only. No side effects.
+- `plan`: Hermes is instructed to return a plan only. Treat it as open-world because configured tools remain available.
 - `draft`: Hermes produces an artifact only. No external side effects.
 - `execute`: Hermes may execute allowed actions, while still following Hermes' own safety rules.
-- `request-approval`: Hermes prepares the action and asks the human for approval before irreversible external effects.
+- `request-approval`: Hermes prepares an action without executing it. MCP
+  callers should use `hermes_prepare` and then call `hermes_approve` only after
+  explicit human approval.
 
-If the bridge detects a risky request in `execute` mode, it can automatically switch to `request-approval` unless YOLO is enabled.
+The guard is deterministic and language-agnostic: in `execute` mode the bridge switches to `request-approval` by default — regardless of the prompt's wording or language — unless the preset is explicitly trusted (empty `require_approval_for`) or `--yolo` is set. It does not try to infer risk from keywords. See [Security model](#security-model) for why the real barrier is your coding agent's own approval prompt.
 
-Risk categories:
+Risk categories below are **informational only**: the bridge surfaces the ones it recognizes in the prompt envelope to help you and Hermes decide, but they never drive the mode. (Keyword matching is English-biased and trivially evaded, so it must not be a security control.)
 
 - `publish_external`
 - `send_message`
@@ -132,6 +143,30 @@ YOLO only bypasses the bridge policy. It does not remove Hermes Agent's own safe
 
 Use it only when the caller and environment are trusted.
 
+## Trusted presets (direct execution)
+
+By default every `execute` is downgraded to `request-approval` — the right default when an agent might act unattended. When *you* are the one asking for an action and want it to run without that extra gate, define a **trusted preset**: one whose `require_approval_for` is an empty list. Put it in your **user** config so it is yours alone and available in every project:
+
+```yaml
+# ~/.config/hermes-action/config.yaml   (user scope, merged before any project config)
+presets:
+  act:
+    description: Direct execution of an action I explicitly asked for (trusted).
+    require_approval_for: []
+```
+
+Run actions through it — `execute` stays `execute`, with no downgrade and no `--yolo` needed:
+
+```bash
+hermes-action run --preset act --mode execute "post the release note to #general"
+```
+
+**Keep it safe:**
+
+- A trusted preset relaxes only the bridge's own gate. The real barrier stays your coding agent's approval prompt, so **do not allowlist `hermes-action run` (`execute`/`yolo`)** (see [Security model](#security-model)).
+- Keep it in your **user** config; it never ships in the public package, and the distributed `SKILL.md` stays cautious for everyone else.
+- Reserve trusted presets for actions a human explicitly asks for. Leave the conservative default for anything an agent could trigger on its own.
+
 ## Configuration
 
 `hermes-action` loads config in this order:
@@ -222,6 +257,7 @@ hermes-action run [options] "request"
 hermes-action presets [--json]
 hermes-action status [--json]
 hermes-action mcp
+hermes-action serve [--listen 127.0.0.1] [--port 8765]
 hermes-action install <claude-code|codex|all|mcp> [options]
 hermes-action uninstall <claude-code|codex|all|mcp> [options]
 hermes-action doctor [--json] [--probe]
@@ -234,7 +270,6 @@ Common `run` options:
 --preset <name>
 --context <path...>
 --config <path>
---profile <name>
 --provider <name>
 --model <name>
 --max-turns <number>
@@ -247,17 +282,24 @@ Common `run` options:
 
 ## Native agent skills
 
-Instead of pasting instructions by hand, install a native skill so Claude Code and Codex know when to delegate to Hermes. The skill is the same open-standard `SKILL.md` for both agents; the CLI stays the deterministic execution layer.
+Instead of pasting instructions and MCP snippets by hand, run the complete
+installer. It installs the open-standard skill and registers the local stdio
+MCP server through each agent's own CLI:
 
 ```bash
-hermes-action doctor                 # check Node, Hermes, agents, and installed skills
-hermes-action install all            # ~/.claude/skills and ~/.codex/skills
+hermes-action install all            # skills + global MCP for both agents
+hermes-action doctor                 # verifies skills, registrations, and MCP handshake
 hermes-action install claude-code --print     # preview, write nothing
 hermes-action install codex --project-hint     # also add a marker block to AGENTS.md
 hermes-action uninstall all
 ```
 
-Install behavior is safe by default: it never modifies `CLAUDE.md` / `AGENTS.md` unless you pass `--project-hint`, refuses to overwrite a file it did not generate, and is idempotent. Use `--project` for a project-local skill and `--dry-run` to preview operations.
+Install behavior is safe by default: it uses a stable absolute bridge path,
+does not depend on an interactive `PATH`, never modifies `CLAUDE.md` /
+`AGENTS.md` unless you pass `--project-hint`, and refuses to overwrite either a
+foreign skill or a customized MCP entry. Re-running it is idempotent. Use
+`--project` for a project-local skill only and `--dry-run` to preview
+operations.
 
 The generated skill is shown in [`examples/claude-code/SKILL.md`](examples/claude-code/SKILL.md). Project-hint usage is documented in [`examples/claude-code/CLAUDE.md`](examples/claude-code/CLAUDE.md) and [`examples/codex/AGENTS.md`](examples/codex/AGENTS.md).
 
@@ -272,15 +314,20 @@ codex plugin add hermes-action@hermes-action-bridge
 
 This registers the `hermes-action` MCP server and the Hermes delegation skill in Codex. Hermes Agent must be installed locally — the plugin runs `npx -y hermes-action-bridge mcp`.
 
+> **Faster MCP startup:** `npx` re-resolves the package on every server start.
+> The native installer registers the absolute global launcher instead.
+
 ## MCP configuration
 
-Print the config snippet for your client (Claude Code / Cursor / VS Code use JSON; Codex uses TOML):
+Register the global MCP server for Codex and Claude Code without reinstalling
+their skills:
 
 ```bash
 hermes-action install mcp
 ```
 
-For Claude Code, write or merge the project `.mcp.json` directly (preserving other servers):
+For other JSON MCP clients, or a Claude Code project-scoped configuration,
+write or merge `.mcp.json` directly while preserving other servers:
 
 ```bash
 hermes-action install mcp --write
@@ -322,12 +369,56 @@ hermes-action mcp
 
 Exposed tools:
 
-- `hermes_run`: delegate a request to Hermes.
+- `hermes_run`: delegate a request to Hermes. Optional overrides: `mode`, `preset`, `contextFiles`, `yolo`, `dryRun`, and — to trade cost for speed on simple tasks — `model`, `provider`, `maxTurns`, `timeoutSeconds`.
 - `hermes_plan`: shortcut for `hermes_run` with `mode=plan`.
+- `hermes_capabilities`: report configured presets, skills, toolsets, runtime, and policy without inventing live integrations.
 - `hermes_presets`: list configured presets.
 - `hermes_status`: check the configured Hermes runtime command.
+- `hermes_submit`, `hermes_job_status`, `hermes_result`, `hermes_cancel`:
+  manage bounded, process-local asynchronous jobs.
+- `hermes_prepare`, `hermes_approve`, `hermes_reject`: create and consume a
+  short-lived one-shot approval before execution.
+
+The MCP surface delegates to Hermes instead of mirroring every Hermes tool.
+Jobs and approvals are intentionally process-local: restarting the MCP server
+clears them. Audit events are written as owner-only JSONL metadata under
+`$XDG_STATE_HOME/hermes-action/audit.jsonl` (or
+`~/.local/state/hermes-action/audit.jsonl`) without prompt, context, token, or
+full result content.
 
-The MCP surface is intentionally small. The bridge delegates to Hermes instead of exposing every Hermes tool one by one.
+## Remote MCP over Tailscale
+
+The HTTP transport is opt-in and loopback-only by default:
+
+```bash
+hermes-action serve --listen 127.0.0.1 --port 8765
+```
+
+Prefer placing Tailscale Serve in front of that loopback endpoint. Forwarded
+`*.ts.net` requests still require a bearer token, so start the loopback server
+with `--token-env`:
+
+```bash
+export HERMES_ACTION_HTTP_TOKEN="<at-least-32-random-bytes>"
+hermes-action serve \
+  --listen 127.0.0.1 \
+  --port 8765 \
+  --token-env HERMES_ACTION_HTTP_TOKEN
+```
+
+For direct tailnet listening, the bridge accepts only an explicit Tailscale
+IPv4 address and requires the same bearer-token setup:
+
+```bash
+hermes-action serve \
+  --listen 100.64.0.10 \
+  --port 8765 \
+  --allow-tailnet \
+  --token-env HERMES_ACTION_HTTP_TOKEN
+```
+
+The token is never accepted as a CLI value or stored in bridge configuration.
+Public/wildcard and non-Tailscale addresses are refused.
 
 ## Development
 
@@ -348,12 +439,22 @@ Functional tests use a fake Hermes binary to verify command construction, prompt
 - [Changelog](CHANGELOG.md): release history.
 - [Security policy](SECURITY.md): how to report a vulnerability.
 
-## Security notes
+## Security model
+
+Direct CLI and `hermes_run` usage assumes a **supervised host agent**: Claude
+Code / Codex ask you to approve the command or tool call. For MCP side effects,
+prefer the bridge's additional, testable two-phase flow:
+`hermes_prepare` returns a local no-tool summary and opaque approval ID, and
+`hermes_approve` consumes the unchanged request exactly once after the human
+approves it.
+
+The bridge's own guard is a secondary net: `execute` is downgraded to `request-approval` by default unless a preset is trusted (empty `require_approval_for`) or `--yolo` is set. The bridge never injects `--yolo` or a bypass flag on its own.
 
-- Do not put secrets in `.hermes-action.yaml`.
-- Keep provider credentials in Hermes Agent, your OS keychain, or the relevant platform's secure store.
-- Use `request-approval` for public posting, outbound email/messages, deletes, payments, credential changes, and git pushes.
-- Treat `--yolo` as a trusted-local-mode escape hatch, not as a default.
+- **Do not allowlist / auto-approve `hermes-action run`, `hermes_run`, or
+  `hermes_approve`**. A command-pattern allowlist cannot distinguish a safe
+  plan from an execution with side effects.
+- Do not put secrets in `.hermes-action.yaml`. Keep provider credentials in Hermes Agent, your OS keychain, or the platform's secure store.
+- Treat `--yolo` as a trusted-local escape hatch, not a default.
 
 ## Also by the author
 

package/dist/adapters/hermes-cli.d.ts

@@ -1,3 +1,17 @@
 import type { AdapterResult, BridgeConfig, EffectiveRun } from "../types.js";
 export declare function buildHermesCliArgs(run: EffectiveRun, prompt?: string, extraToolsets?: string[]): string[];
+/** A started Hermes process. `cancel` is idempotent and asks the child to stop gracefully before forcing it. */
+export interface HermesCliExecution {
+    result: Promise<AdapterResult>;
+    cancel: () => boolean;
+}
+export interface HermesCliStartOptions {
+    maxOutputBytes?: number | undefined;
+}
+/**
+ * Start a Hermes CLI invocation without awaiting it. Consumers that need asynchronous work can retain
+ * the cancellation handle; `runHermesCli` below remains the backward-compatible awaitable wrapper.
+ */
+export declare function startHermesCli(config: BridgeConfig, run: EffectiveRun, dryRun: boolean, options?: HermesCliStartOptions): HermesCliExecution;
+/** Backward-compatible synchronous facade for CLI callers. */
 export declare function runHermesCli(config: BridgeConfig, run: EffectiveRun, dryRun: boolean): Promise<AdapterResult>;

package/dist/adapters/hermes-cli.js

@@ -15,8 +15,6 @@ const maxTimeoutMs = 2_147_483_647;
 const largePromptThresholdBytes = 917_504;
 export function buildHermesCliArgs(run, prompt = buildHermesPrompt(run), extraToolsets = []) {
     const args = ["chat", "-Q", "--source", run.source, "--max-turns", String(run.maxTurns)];
-    if (run.profile)
-        args.unshift("--profile", run.profile);
     if (run.provider)
         args.push("--provider", run.provider);
     if (run.model)
@@ -40,7 +38,15 @@ function filePointerPrompt(path) {
         "Never reveal secrets.",
     ].join("\n");
 }
-export async function runHermesCli(config, run, dryRun) {
+/**
+ * Start a Hermes CLI invocation without awaiting it. Consumers that need asynchronous work can retain
+ * the cancellation handle; `runHermesCli` below remains the backward-compatible awaitable wrapper.
+ */
+export function startHermesCli(config, run, dryRun, options = {}) {
+    const maxOutputBytes = options.maxOutputBytes;
+    if (maxOutputBytes !== undefined && (!Number.isSafeInteger(maxOutputBytes) || maxOutputBytes <= 0)) {
+        throw new Error("maxOutputBytes must be a positive safe integer");
+    }
     const prompt = buildHermesPrompt(run);
     const promptBytes = Buffer.byteLength(prompt, "utf8");
     const isLarge = promptBytes > largePromptThresholdBytes;
@@ -48,7 +54,20 @@ export async function runHermesCli(config, run, dryRun) {
         const args = isLarge ? buildHermesCliArgs(run, filePointerPrompt("<temp-file>"), ["file"]) : buildHermesCliArgs(run, prompt);
         const command = [config.runtime.command, ...args];
         const stdout = JSON.stringify({ command, prompt, promptBytes, promptChars: prompt.length, delivery: isLarge ? "temp-file" : "argv" }, null, 2);
-        return { ok: true, exitCode: 0, stdout, stderr: "", command, prompt, dryRun: true };
+        const captured = captureChunk(stdout, 0, maxOutputBytes);
+        return {
+            result: Promise.resolve({
+                ok: true,
+                exitCode: 0,
+                stdout: captured.value,
+                stderr: "",
+                command,
+                prompt,
+                dryRun: true,
+                outputTruncated: captured.truncated,
+            }),
+            cancel: () => false,
+        };
     }
     // Large envelopes can't ride argv (E2BIG); write them to a secure temp file the child reads itself.
     // tmpDir is set only after a successful write so a failed write cleans up and never leaks an empty dir.
@@ -71,22 +90,27 @@ export async function runHermesCli(config, run, dryRun) {
         }
     })();
     const command = [config.runtime.command, ...args];
-    return new Promise((resolve) => {
-        const child = spawn(config.runtime.command, args, { stdio: ["ignore", "pipe", "pipe"] });
+    let cancelRequested = false;
+    let settled = false;
+    let killTimer;
+    let child;
+    const result = new Promise((resolve) => {
+        const spawned = spawn(config.runtime.command, args, { stdio: ["ignore", "pipe", "pipe"] });
+        child = spawned;
         let stdout = "";
         let stderr = "";
+        let capturedBytes = 0;
+        let outputTruncated = false;
         let timedOut = false;
-        let killTimer;
         const timeoutMs = Math.min(run.timeoutSeconds * 1000, maxTimeoutMs);
         const timer = setTimeout(() => {
             timedOut = true;
-            child.kill("SIGTERM");
-            killTimer = setTimeout(() => child.kill("SIGKILL"), killGraceMs);
+            child?.kill("SIGTERM");
+            killTimer = setTimeout(() => child?.kill("SIGKILL"), killGraceMs);
         }, timeoutMs);
         // 'error' and 'close' can both fire (e.g. spawn ENOENT); guard so cleanup and resolve run exactly once.
         // The temp file is removed here on every settle path. Only an uncatchable SIGKILL of the bridge itself
         // would leave it behind; mkdtemp + 0600 + the OS temp reaper bound that residual risk.
-        let settled = false;
         const settle = (result) => {
             if (settled)
                 return;
@@ -104,26 +128,61 @@ export async function runHermesCli(config, run, dryRun) {
             }
             resolve(result);
         };
-        child.stdout.setEncoding("utf8");
-        child.stderr.setEncoding("utf8");
-        child.stdout.on("data", (chunk) => {
-            stdout += chunk;
+        spawned.stdout.setEncoding("utf8");
+        spawned.stderr.setEncoding("utf8");
+        spawned.stdout.on("data", (chunk) => {
+            const captured = captureChunk(chunk, capturedBytes, maxOutputBytes);
+            stdout += captured.value;
+            capturedBytes += captured.bytes;
+            outputTruncated ||= captured.truncated;
         });
-        child.stderr.on("data", (chunk) => {
-            stderr += chunk;
+        spawned.stderr.on("data", (chunk) => {
+            const captured = captureChunk(chunk, capturedBytes, maxOutputBytes);
+            stderr += captured.value;
+            capturedBytes += captured.bytes;
+            outputTruncated ||= captured.truncated;
         });
-        child.on("error", (error) => {
-            settle({ ok: false, exitCode: 127, stdout, stderr: `${stderr}${error.message}`, command, prompt, dryRun: false });
+        spawned.on("error", (error) => {
+            settle({ ok: false, exitCode: 127, stdout, stderr: `${stderr}${error.message}`, command, prompt, dryRun: false, outputTruncated });
         });
-        child.on("close", (code) => {
+        spawned.on("close", (code) => {
             if (timedOut) {
                 const message = `Hermes timed out after ${run.timeoutSeconds}s and was terminated.`;
-                settle({ ok: false, exitCode: code ?? 124, stdout, stderr: stderr ? `${stderr}\n${message}` : message, command, prompt, dryRun: false, timedOut: true });
+                settle({ ok: false, exitCode: code ?? 124, stdout, stderr: stderr ? `${stderr}\n${message}` : message, command, prompt, dryRun: false, outputTruncated, timedOut: true });
                 return;
             }
             const exitCode = code ?? 1;
-            settle({ ok: exitCode === 0, exitCode, stdout, stderr, command, prompt, dryRun: false });
+            settle({ ok: exitCode === 0, exitCode, stdout, stderr, command, prompt, dryRun: false, outputTruncated });
         });
     });
+    const cancel = () => {
+        if (settled || cancelRequested || !child)
+            return false;
+        if (!child.kill("SIGTERM"))
+            return false;
+        cancelRequested = true;
+        killTimer = setTimeout(() => child?.kill("SIGKILL"), killGraceMs);
+        return true;
+    };
+    return { result, cancel };
+}
+/** Backward-compatible synchronous facade for CLI callers. */
+export async function runHermesCli(config, run, dryRun) {
+    return startHermesCli(config, run, dryRun).result;
+}
+function captureChunk(chunk, capturedBytes, maxOutputBytes) {
+    if (maxOutputBytes === undefined)
+        return { value: chunk, bytes: Buffer.byteLength(chunk, "utf8"), truncated: false };
+    const remaining = Math.max(0, maxOutputBytes - capturedBytes);
+    if (remaining === 0)
+        return { value: "", bytes: 0, truncated: chunk.length > 0 };
+    const buffer = Buffer.from(chunk, "utf8");
+    if (buffer.length <= remaining)
+        return { value: chunk, bytes: buffer.length, truncated: false };
+    let end = remaining;
+    while (end > 0 && (buffer[end] ?? 0) >= 0x80 && (buffer[end] ?? 0) < 0xc0)
+        end -= 1;
+    const value = buffer.subarray(0, end).toString("utf8");
+    return { value, bytes: Buffer.byteLength(value, "utf8"), truncated: true };
 }
 //# sourceMappingURL=hermes-cli.js.map

package/dist/adapters/hermes-cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"hermes-cli.js","sourceRoot":"","sources":["../../src/adapters/hermes-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,+EAA+E;AAC/E,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,0IAA0I;AAC1I,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAE1C,MAAM,UAAU,kBAAkB,CAChC,GAAiB,EACjB,SAAiB,iBAAiB,CAAC,GAAG,CAAC,EACvC,gBAA0B,EAAE;IAE5B,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzF,IAAI,GAAG,CAAC,OAAO;QAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,GAAG,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,GAAG,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8GAA8G;AAC9G,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO;QACL,+EAA+E;QAC/E,IAAI;QACJ,uGAAuG;QACvG,uBAAuB;KACxB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAoB,EAAE,GAAiB,EAAE,MAAe;IACzF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,GAAG,yBAAyB,CAAC;IAExD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7H,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/I,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtF,CAAC;IAED,oGAAoG;IACpG,wGAAwG;IACxG,IAAI,MAA0B,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,GAAa,EAAE;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAO,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC1C,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,wGAAwG;YACxG,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAG,CAAC;YACb,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAElD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACzF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,SAAoD,CAAC;QACzD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,GAAG,IAAI,EAAE,YAAY,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;QACnE,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,wGAAwG;QACxG,uGAAuG;QACvG,uFAAuF;QACvF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,EAAE;YACvC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACpH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,0BAA0B,GAAG,CAAC,cAAc,uBAAuB,CAAC;gBACpF,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzJ,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC;YAC3B,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"hermes-cli.js","sourceRoot":"","sources":["../../src/adapters/hermes-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,+EAA+E;AAC/E,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,0IAA0I;AAC1I,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAE1C,MAAM,UAAU,kBAAkB,CAChC,GAAiB,EACjB,SAAiB,iBAAiB,CAAC,GAAG,CAAC,EACvC,gBAA0B,EAAE;IAE5B,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzF,IAAI,GAAG,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,GAAG,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,8GAA8G;AAC9G,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO;QACL,+EAA+E;QAC/E,IAAI;QACJ,uGAAuG;QACvG,uBAAuB;KACxB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAoB,EACpB,GAAiB,EACjB,MAAe,EACf,UAAiC,EAAE;IAEnC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAC9C,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,IAAI,CAAC,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,GAAG,yBAAyB,CAAC;IAExD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7H,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/I,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC;gBACtB,EAAE,EAAE,IAAI;gBACR,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,QAAQ,CAAC,KAAK;gBACtB,MAAM,EAAE,EAAE;gBACV,OAAO;gBACP,MAAM;gBACN,MAAM,EAAE,IAAI;gBACZ,eAAe,EAAE,QAAQ,CAAC,SAAS;aACpC,CAAC;YACF,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;SACpB,CAAC;IACJ,CAAC;IAED,oGAAoG;IACpG,wGAAwG;IACxG,IAAI,MAA0B,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,GAAa,EAAE;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAO,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC1C,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,wGAAwG;YACxG,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAG,CAAC;YACb,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAElD,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAAoD,CAAC;IACzD,IAAI,KAA2C,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3F,KAAK,GAAG,OAAO,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,GAAG,IAAI,EAAE,YAAY,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;QACpE,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,wGAAwG;QACxG,uGAAuG;QACvG,uFAAuF;QACvF,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,EAAE;YACvC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;YACpE,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC;YACzB,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC;YAChC,eAAe,KAAK,QAAQ,CAAC,SAAS,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;YACpE,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC;YACzB,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC;YAChC,eAAe,KAAK,QAAQ,CAAC,SAAS,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACrI,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC3B,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,0BAA0B,GAAG,CAAC,cAAc,uBAAuB,CAAC;gBACpF,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1K,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC;YAC3B,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5G,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,GAAY,EAAE;QAC3B,IAAI,OAAO,IAAI,eAAe,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,eAAe,GAAG,IAAI,CAAC;QACvB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAoB,EAAE,GAAiB,EAAE,MAAe;IACzF,OAAO,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC;AACpD,CAAC;AAED,SAAS,YAAY,CACnB,KAAa,EACb,aAAqB,EACrB,cAAkC;IAElC,IAAI,cAAc,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,aAAa,CAAC,CAAC;IAC9D,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAChG,IAAI,GAAG,GAAG,SAAS,CAAC;IACpB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI;QAAE,GAAG,IAAI,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7E,CAAC"}

package/dist/approvals.d.ts

@@ -0,0 +1,35 @@
+import type { EffectiveRun } from "./types.js";
+export type ApprovalStatus = "awaiting_approval" | "approved" | "rejected" | "expired";
+export interface ApprovalRequest {
+    id: string;
+    status: ApprovalStatus;
+    createdAt: string;
+    expiresAt: string;
+    requestedMode: EffectiveRun["requestedMode"];
+    effectiveMode: EffectiveRun["mode"];
+    presetName: string;
+    detectedRisks: EffectiveRun["detectedRisks"];
+}
+export interface ConsumedApproval {
+    approval: ApprovalRequest;
+    run: EffectiveRun;
+}
+export interface ApprovalStoreOptions {
+    ttlMs?: number | undefined;
+    maxPending?: number | undefined;
+    now?: () => Date;
+    createId?: () => string;
+    onExpired?: ((approval: ApprovalRequest) => void) | undefined;
+}
+export interface ApprovalStore {
+    prepare(run: EffectiveRun): ApprovalRequest;
+    get(approvalId: string): ApprovalRequest | undefined;
+    approve(approvalId: string): ConsumedApproval | undefined;
+    reject(approvalId: string): ApprovalRequest | undefined;
+    cleanup(): number;
+}
+/**
+ * One-shot, in-process approvals. A stored run is returned exactly once by `approve`; callers must
+ * execute that unchanged run rather than accepting new execution options at approval time.
+ */
+export declare function createApprovalStore(options?: ApprovalStoreOptions): ApprovalStore;