hermes-action-bridge 0.4.0 → 0.5.0

package/dist/install/templates.js

@@ -7,58 +7,64 @@ export function contentVersion(content) {
 export function skillMarkdown() {
     return `---
 name: hermes-action-bridge
-description: Delegate external actions, Hermes skills, browser automation, messaging, cron jobs, and integrations to Hermes Agent through hermes-action. Use when a task needs capabilities outside the local coding session.
+description: Use Hermes Agent for Hermes-owned skills, memory, connected services, messaging, browser workflows, schedules, and external automation. Prefer the installed hermes_* MCP tools; use the CLI only as a fallback.
 ---
 
 # Hermes Action Bridge
 
-Use this skill when a task needs capabilities outside the local coding session:
-Hermes skills or memory, messaging platforms, browser automation, scheduled or
-cron automation, external research, or any platform integration already
-configured in Hermes Agent.
+Use this skill when a task needs state or capabilities owned by Hermes Agent:
+Hermes skills or memory, connected services, messaging platforms, browser
+workflows, scheduled automation, or another integration configured in Hermes.
 
-Do not reimplement those integrations here. Delegate them to Hermes through the
-\`hermes-action\` CLI.
+Do not reimplement a Hermes-owned integration in the coding agent. Prefer the
+installed \`hermes_*\` MCP tools so the host can discover, approve, and inspect
+the delegation.
 
 ## When to use
 
-- The task requires a Hermes skill, tool, profile, or connected service.
-- The task needs a real-world action that is not local code editing.
-- The task needs research, messaging, browser, or scheduled automation Hermes owns.
+- The task names Hermes, a Hermes skill, memory, preset, or connected service.
+- The task needs messaging, scheduling, browser work, or persistent external automation Hermes owns.
+- The task must continue as a cancellable background job outside the local coding step.
 
-## Safe default
+Do not use Hermes for ordinary local code edits or repository inspection that
+the current agent can perform directly.
 
-Ask Hermes for a plan first; it has no side effects:
+## Discover first
 
-\`\`\`bash
-hermes-action run --mode plan "<describe what Hermes should do>"
-\`\`\`
+Call \`hermes_capabilities\` before assuming an integration is configured. Use
+\`hermes_status\` to check the runtime without spending provider tokens.
 
-## With context
+## Safe delegation
 
-Write a concise handoff to a file and pass it explicitly:
-
-\`\`\`bash
-hermes-action run --preset coding --context ./handoff.md "<request>"
-\`\`\`
+- Use \`hermes_plan\` for plan-mode analysis, but treat it as open-world and review its output.
+- Use \`hermes_submit\`, then \`hermes_job_status\` / \`hermes_result\`, for a
+  long cancellable plan or draft.
+- Use \`hermes_cancel\` when a queued or running job is no longer wanted.
 
 ## External side effects
 
-For public posts, outbound email or messages, deletes, payments, credential
-changes, or git pushes, require human approval:
+For public posts, outbound messages, deletes, payments, credential changes, or
+git pushes:
+
+1. Call \`hermes_prepare\` to produce a local no-tool summary and approval ID.
+2. Show \`preview.action\` and the rest of the preview to the human.
+3. Call \`hermes_approve\` only after the human explicitly approves that
+   prepared action; otherwise call \`hermes_reject\`.
+
+Never treat the model's own decision as human approval.
+
+## CLI fallback
+
+If MCP tools are unavailable, use the local CLI:
 
 \`\`\`bash
-hermes-action run --mode request-approval "<request requiring side effects>"
+hermes-action run --mode plan "<describe what Hermes should do>"
 \`\`\`
 
-Never use \`--yolo\` unless the human explicitly asked for trusted local
-execution. It bypasses only the bridge policy, not Hermes' own safety rules.
-
 ## Verify setup
 
 \`\`\`bash
-hermes-action status
-hermes-action run --dry-run --json "Return BRIDGE_OK only."
+hermes-action doctor
 \`\`\`
 `;
 }
@@ -67,9 +73,9 @@ export function projectHint() {
     return [
         "When a task requires Hermes Agent capabilities (skills, memory, messaging,",
         "browser automation, cron, research, or platform integrations), use the",
-        "`hermes-action-bridge` skill and delegate through `hermes-action`. Prefer",
-        "`--mode plan` or `--mode request-approval`; never use `--yolo` unless the",
-        "human explicitly requested trusted local execution.",
+        "`hermes-action-bridge` skill and installed `hermes_*` MCP tools. Discover",
+        "capabilities first, prefer `hermes_plan`, and use `hermes_prepare` followed",
+        "by `hermes_approve` only after explicit human approval for side effects.",
     ].join("\n");
 }
 /** Canonical MCP server entry for hermes-action, shared by the printed snippets and the .mcp.json writer. */

package/dist/install/templates.js.map

@@ -1 +1 @@
-{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/install/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,0GAA0G;AAC1G,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,aAAa;IAC3B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDR,CAAC;AACF,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,WAAW;IACzB,OAAO;QACL,4EAA4E;QAC5E,wEAAwE;QACxE,2EAA2E;QAC3E,2EAA2E;QAC3E,qDAAqD;KACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAW,CAAC;AAEnF,0EAA0E;AAC1E,MAAM,UAAU,cAAc;IAC5B,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,6BAA6B,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvG,CAAC"}
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/install/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,0GAA0G;AAC1G,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,aAAa;IAC3B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6DR,CAAC;AACF,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,WAAW;IACzB,OAAO;QACL,4EAA4E;QAC5E,wEAAwE;QACxE,2EAA2E;QAC3E,6EAA6E;QAC7E,0EAA0E;KAC3E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAW,CAAC;AAEnF,0EAA0E;AAC1E,MAAM,UAAU,cAAc;IAC5B,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,6BAA6B,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvG,CAAC"}

package/dist/install/types.d.ts

@@ -1,4 +1,5 @@
 export type SkillAgent = "claude-code" | "codex";
+export type McpTarget = SkillAgent | "all";
 export type InstallTarget = SkillAgent | "all" | "mcp";
 export type InstallScope = "global" | "project";
 export type ManagedState = "absent" | "current" | "stale" | "user-modified" | "foreign";

package/dist/jobs.d.ts

@@ -0,0 +1,51 @@
+import type { HermesCliExecution } from "./adapters/hermes-cli.js";
+import type { EffectiveRun } from "./types.js";
+export type JobStatus = "queued" | "running" | "succeeded" | "failed" | "cancelled" | "timed_out";
+export interface JobOutput {
+    stdout: string;
+    stderr: string;
+    truncated: boolean;
+}
+export interface BridgeJob {
+    id: string;
+    status: JobStatus;
+    createdAt: string;
+    startedAt?: string | undefined;
+    finishedAt?: string | undefined;
+    startBefore?: string | undefined;
+    expiresAt: string;
+    requestedMode: EffectiveRun["requestedMode"];
+    effectiveMode: EffectiveRun["mode"];
+    presetName: string;
+    detectedRisks: EffectiveRun["detectedRisks"];
+    exitCode?: number | undefined;
+    output?: JobOutput | undefined;
+}
+export interface JobStoreOptions {
+    ttlMs?: number | undefined;
+    maxOutputBytes?: number | undefined;
+    maxConcurrent?: number | undefined;
+    maxQueued?: number | undefined;
+    now?: () => Date;
+    createId?: () => string;
+    onSettled?: ((job: BridgeJob) => void) | undefined;
+}
+export interface JobStore {
+    submit(run: EffectiveRun, options?: JobSubmitOptions): BridgeJob;
+    canSubmit(): boolean;
+    get(jobId: string): BridgeJob | undefined;
+    cancel(jobId: string): BridgeJob | undefined;
+    cleanup(): number;
+    shutdown(): Promise<void>;
+}
+export interface JobSubmitOptions {
+    beforeStart?: ((job: BridgeJob) => void) | undefined;
+    startBefore?: string | undefined;
+}
+export type StartExecution = (run: EffectiveRun) => HermesCliExecution;
+export declare const defaultJobMaxOutputBytes: number;
+/**
+ * In-process job storage for long-running Hermes requests. It intentionally keeps no prompt or context
+ * document after starting the child process, so a status endpoint cannot expose handoff data.
+ */
+export declare function createJobStore(startExecution: StartExecution, options?: JobStoreOptions): JobStore;

package/dist/jobs.js

@@ -0,0 +1,244 @@
+import { randomUUID } from "node:crypto";
+import { positiveInteger } from "./validation.js";
+const defaultTtlMs = 24 * 60 * 60 * 1000;
+export const defaultJobMaxOutputBytes = 256 * 1024;
+const defaultMaxConcurrent = 4;
+const defaultMaxQueued = 32;
+/**
+ * In-process job storage for long-running Hermes requests. It intentionally keeps no prompt or context
+ * document after starting the child process, so a status endpoint cannot expose handoff data.
+ */
+export function createJobStore(startExecution, options = {}) {
+    const ttlMs = positiveInteger(options.ttlMs, defaultTtlMs, "ttlMs");
+    const maxOutputBytes = positiveInteger(options.maxOutputBytes, defaultJobMaxOutputBytes, "maxOutputBytes");
+    const maxConcurrent = positiveInteger(options.maxConcurrent, defaultMaxConcurrent, "maxConcurrent");
+    const maxQueued = positiveInteger(options.maxQueued, defaultMaxQueued, "maxQueued");
+    const now = options.now ?? (() => new Date());
+    const createId = options.createId ?? randomUUID;
+    const onSettled = options.onSettled;
+    const jobs = new Map();
+    const executions = new Map();
+    const queuedRuns = new Map();
+    const queue = [];
+    const cancelRequested = new Set();
+    let shuttingDown = false;
+    let shutdownPromise;
+    const snapshot = (job) => structuredClone(job);
+    const notifySettled = (job) => {
+        try {
+            onSettled?.(snapshot(job));
+        }
+        catch {
+            // Job settlement must not become an unhandled rejection when best-effort telemetry fails.
+        }
+    };
+    const startNext = () => {
+        if (shuttingDown)
+            return;
+        while (executions.size < maxConcurrent) {
+            const id = queue.shift();
+            if (!id)
+                return;
+            const job = jobs.get(id);
+            const queued = queuedRuns.get(id);
+            if (!job || !queued || job.status !== "queued")
+                continue;
+            queuedRuns.delete(id);
+            if (Date.parse(job.startBefore ?? job.expiresAt) <= now().getTime()) {
+                job.status = "timed_out";
+                job.finishedAt = now().toISOString();
+                notifySettled(job);
+                continue;
+            }
+            let execution;
+            try {
+                queued.beforeStart?.(snapshot(job));
+                job.status = "running";
+                job.startedAt = now().toISOString();
+                execution = startExecution(queued.run);
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                settleJob(jobs, executions, cancelRequested, id, failedResult(message), now, maxOutputBytes);
+                notifySettled(job);
+                continue;
+            }
+            executions.set(id, execution);
+            void execution.result.then((result) => {
+                settleJob(jobs, executions, cancelRequested, id, result, now, maxOutputBytes);
+                notifySettled(job);
+                startNext();
+            }, (error) => {
+                const message = error instanceof Error ? error.message : String(error);
+                settleJob(jobs, executions, cancelRequested, id, failedResult(message), now, maxOutputBytes);
+                notifySettled(job);
+                startNext();
+            });
+        }
+    };
+    const cleanupExpired = () => {
+        const current = now().getTime();
+        let removed = 0;
+        for (const [id, job] of jobs) {
+            if (job.status === "running")
+                continue;
+            const retentionExpired = Date.parse(job.expiresAt) <= current;
+            const queuedStartExpired = job.status === "queued"
+                && job.startBefore !== undefined
+                && Date.parse(job.startBefore) <= current;
+            if (!retentionExpired && !queuedStartExpired)
+                continue;
+            if (job.status === "queued") {
+                job.status = "timed_out";
+                job.finishedAt = now().toISOString();
+                notifySettled(job);
+            }
+            else if (!isTerminal(job.status)) {
+                continue;
+            }
+            jobs.delete(id);
+            executions.delete(id);
+            queuedRuns.delete(id);
+            removeQueuedId(queue, id);
+            cancelRequested.delete(id);
+            removed += 1;
+        }
+        return removed;
+    };
+    return {
+        submit(run, submitOptions = {}) {
+            if (shuttingDown)
+                throw new Error("Job store is shutting down");
+            cleanupExpired();
+            if (queuedRuns.size >= maxQueued)
+                throw new Error(`Hermes job queue is full (${maxQueued} waiting)`);
+            const created = now();
+            const startBefore = submitOptions.startBefore === undefined ? undefined : Date.parse(submitOptions.startBefore);
+            if (startBefore !== undefined && (!Number.isFinite(startBefore) || startBefore <= created.getTime())) {
+                throw new Error("Hermes job start deadline has elapsed or is invalid");
+            }
+            const id = createId();
+            if (jobs.has(id))
+                throw new Error("Job ID collision");
+            const job = {
+                id,
+                status: "queued",
+                createdAt: created.toISOString(),
+                ...(submitOptions.startBefore === undefined ? {} : { startBefore: submitOptions.startBefore }),
+                expiresAt: new Date(created.getTime() + ttlMs).toISOString(),
+                requestedMode: run.requestedMode,
+                effectiveMode: run.mode,
+                presetName: run.presetName,
+                detectedRisks: [...run.detectedRisks],
+            };
+            jobs.set(id, job);
+            queuedRuns.set(id, { run: structuredClone(run), beforeStart: submitOptions.beforeStart });
+            queue.push(id);
+            startNext();
+            return snapshot(job);
+        },
+        canSubmit() {
+            cleanupExpired();
+            return !shuttingDown && queuedRuns.size < maxQueued;
+        },
+        get(jobId) {
+            cleanupExpired();
+            const job = jobs.get(jobId);
+            return job ? snapshot(job) : undefined;
+        },
+        cancel(jobId) {
+            cleanupExpired();
+            const job = jobs.get(jobId);
+            const execution = executions.get(jobId);
+            if (!job)
+                return undefined;
+            if (isTerminal(job.status))
+                return snapshot(job);
+            if (job.status === "queued") {
+                queuedRuns.delete(jobId);
+                removeQueuedId(queue, jobId);
+                job.status = "cancelled";
+                job.finishedAt = now().toISOString();
+                notifySettled(job);
+                return snapshot(job);
+            }
+            if (cancelRequested.has(jobId))
+                return snapshot(job);
+            if (!execution || !execution.cancel())
+                return snapshot(job);
+            cancelRequested.add(jobId);
+            return snapshot(job);
+        },
+        cleanup: cleanupExpired,
+        shutdown() {
+            if (shutdownPromise)
+                return shutdownPromise;
+            shuttingDown = true;
+            for (const id of [...queuedRuns.keys()]) {
+                const job = jobs.get(id);
+                queuedRuns.delete(id);
+                removeQueuedId(queue, id);
+                if (!job || job.status !== "queued")
+                    continue;
+                job.status = "cancelled";
+                job.finishedAt = now().toISOString();
+                notifySettled(job);
+            }
+            const active = [...executions.entries()];
+            for (const [id, execution] of active) {
+                if (cancelRequested.has(id))
+                    continue;
+                if (execution.cancel())
+                    cancelRequested.add(id);
+            }
+            shutdownPromise = Promise.allSettled(active.map(([, execution]) => execution.result)).then(() => undefined);
+            return shutdownPromise;
+        },
+    };
+}
+function settleJob(jobs, executions, cancelRequested, jobId, result, now, maxOutputBytes) {
+    const job = jobs.get(jobId);
+    if (!job || isTerminal(job.status))
+        return;
+    job.status = cancelRequested.has(jobId) ? "cancelled" : result.timedOut ? "timed_out" : result.ok ? "succeeded" : "failed";
+    job.finishedAt = now().toISOString();
+    job.exitCode = result.exitCode;
+    job.output = boundedOutput(result, maxOutputBytes);
+    executions.delete(jobId);
+    cancelRequested.delete(jobId);
+}
+function boundedOutput(result, maxBytes) {
+    const stdoutBytes = Buffer.byteLength(result.stdout, "utf8");
+    const stderrBytes = Buffer.byteLength(result.stderr, "utf8");
+    if (stdoutBytes + stderrBytes <= maxBytes) {
+        return { stdout: result.stdout, stderr: result.stderr, truncated: result.outputTruncated === true };
+    }
+    const stdout = truncateUtf8(result.stdout, maxBytes);
+    const remainingBytes = maxBytes - Buffer.byteLength(stdout, "utf8");
+    return { stdout, stderr: truncateUtf8(result.stderr, remainingBytes), truncated: true };
+}
+/** Avoid cutting a multi-byte character, which could otherwise exceed the byte cap after replacement decoding. */
+function truncateUtf8(value, maxBytes) {
+    let result = "";
+    let used = 0;
+    for (const char of value) {
+        const bytes = Buffer.byteLength(char, "utf8");
+        if (used + bytes > maxBytes)
+            break;
+        result += char;
+        used += bytes;
+    }
+    return result;
+}
+function failedResult(message) {
+    return { ok: false, exitCode: 1, stdout: "", stderr: message, command: [], prompt: "", dryRun: false };
+}
+function isTerminal(status) {
+    return status === "succeeded" || status === "failed" || status === "cancelled" || status === "timed_out";
+}
+function removeQueuedId(queue, jobId) {
+    const index = queue.indexOf(jobId);
+    if (index >= 0)
+        queue.splice(index, 1);
+}
+//# sourceMappingURL=jobs.js.map

package/dist/jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.js","sourceRoot":"","sources":["../src/jobs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAoDlD,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,CAAC;AACnD,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,cAA8B,EAAE,UAA2B,EAAE;IAC1F,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,wBAAwB,EAAE,gBAAgB,CAAC,CAAC;IAC3G,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,CAAC,aAAa,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC;IACpG,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA8B,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuF,CAAC;IAClH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,eAA0C,CAAC;IAE/C,MAAM,QAAQ,GAAG,CAAC,GAAc,EAAa,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,CAAC,GAAc,EAAQ,EAAE;QAC7C,IAAI,CAAC;YACH,SAAS,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,0FAA0F;QAC5F,CAAC;IACH,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,GAAS,EAAE;QAC3B,IAAI,YAAY;YAAE,OAAO;QACzB,OAAO,UAAU,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;YACvC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,EAAE;gBAAE,OAAO;YAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;gBAAE,SAAS;YACzD,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpE,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;gBACzB,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,IAAI,SAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBACpC,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;gBACvB,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;gBACpC,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;gBAC7F,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9B,KAAK,SAAS,CAAC,MAAM,CAAC,IAAI,CACxB,CAAC,MAAM,EAAE,EAAE;gBACT,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;gBAC9E,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnB,SAAS,EAAE,CAAC;YACd,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;gBACjB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;gBAC7F,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnB,SAAS,EAAE,CAAC;YACd,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,GAAW,EAAE;QAClC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YACvC,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC;YAC9D,MAAM,kBAAkB,GAAG,GAAG,CAAC,MAAM,KAAK,QAAQ;mBAC7C,GAAG,CAAC,WAAW,KAAK,SAAS;mBAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC;YAC5C,IAAI,CAAC,gBAAgB,IAAI,CAAC,kBAAkB;gBAAE,SAAS;YACvD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC5B,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;gBACzB,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,aAAa,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;iBAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnC,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChB,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtB,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtB,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1B,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO;QACL,MAAM,CAAC,GAAG,EAAE,aAAa,GAAG,EAAE;YAC5B,IAAI,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChE,cAAc,EAAE,CAAC;YACjB,IAAI,UAAU,CAAC,IAAI,IAAI,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,WAAW,CAAC,CAAC;YACrG,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;YAChH,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;gBACrG,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtD,MAAM,GAAG,GAAc;gBACrB,EAAE;gBACF,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE;gBAChC,GAAG,CAAC,aAAa,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,CAAC;gBAC9F,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;gBAC5D,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,aAAa,EAAE,GAAG,CAAC,IAAI;gBACvB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC;aACtC,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAClB,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,SAAS,EAAE,CAAC;YACZ,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,SAAS;YACP,cAAc,EAAE,CAAC;YACjB,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC,IAAI,GAAG,SAAS,CAAC;QACtD,CAAC;QACD,GAAG,CAAC,KAAK;YACP,cAAc,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzC,CAAC;QACD,MAAM,CAAC,KAAK;YACV,cAAc,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5B,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC;YAC3B,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC5B,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzB,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC7B,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;gBACzB,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,aAAa,CAAC,GAAG,CAAC,CAAC;gBACnB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;YACD,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5D,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,EAAE,cAAc;QACvB,QAAQ;YACN,IAAI,eAAe;gBAAE,OAAO,eAAe,CAAC;YAC5C,YAAY,GAAG,IAAI,CAAC;YACpB,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACzB,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACtB,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC1B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;oBAAE,SAAS;gBAC9C,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;gBACzB,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,aAAa,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YACzC,KAAK,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,MAAM,EAAE,CAAC;gBACrC,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBACtC,IAAI,SAAS,CAAC,MAAM,EAAE;oBAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5G,OAAO,eAAe,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,IAA4B,EAC5B,UAA2C,EAC3C,eAA4B,EAC5B,KAAa,EACb,MAAqB,EACrB,GAAe,EACf,cAAsB;IAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO;IAC3C,GAAG,CAAC,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC3H,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC/B,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACnD,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,MAAqB,EAAE,QAAgB;IAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,WAAW,GAAG,WAAW,IAAI,QAAQ,EAAE,CAAC;QAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;IACtG,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC1F,CAAC;AAED,kHAAkH;AAClH,SAAS,YAAY,CAAC,KAAa,EAAE,QAAgB;IACnD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,IAAI,GAAG,KAAK,GAAG,QAAQ;YAAE,MAAM;QACnC,MAAM,IAAI,IAAI,CAAC;QACf,IAAI,IAAI,KAAK,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACzG,CAAC;AAED,SAAS,UAAU,CAAC,MAAiB;IACnC,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,WAAW,CAAC;AAC3G,CAAC;AAED,SAAS,cAAc,CAAC,KAAe,EAAE,KAAa;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,IAAI,CAAC;QAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/mcp-server.d.ts

@@ -1 +1,33 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ApprovalStore } from "./approvals.js";
+import { type ExecutionGate } from "./execution-gate.js";
+import { type JobStore } from "./jobs.js";
+import type { BridgeConfig, BridgeMode, EffectiveRun } from "./types.js";
+type BridgeTransport = "stdio" | "http";
+interface RequestAuditContext {
+    principalId: string;
+    transport: BridgeTransport;
+    promptFingerprint: string;
+    requestedMode: BridgeMode;
+    effectiveMode: BridgeMode;
+    presetName: string;
+    detectedRisks: EffectiveRun["detectedRisks"];
+}
+export interface BridgeRuntime {
+    jobs: JobStore;
+    approvals: ApprovalStore;
+    auditFile: string;
+    jobAudit: Map<string, RequestAuditContext>;
+    approvalAudit: Map<string, RequestAuditContext>;
+    directExecutions: ExecutionGate;
+    dispose(): Promise<void>;
+}
+export interface BridgeServerOptions {
+    transport?: BridgeTransport | undefined;
+    principalId?: string | undefined;
+    runtime?: BridgeRuntime | undefined;
+}
+export declare function createBridgeRuntime(config: BridgeConfig, auditFile?: string): BridgeRuntime;
+export declare function createBridgeMcpServer(config: BridgeConfig, options?: BridgeServerOptions): McpServer;
 export declare function startMcpServer(configPath?: string): Promise<void>;
+export {};