local-commander-agent 0.3.2 → 0.3.3

package/README.md

@@ -24,6 +24,22 @@ npx local-commander-agent@latest approve-workspace
 npx local-commander-agent@latest uninstall
 ```
 
+## Workspace permissions
+
+A newly approved workspace is read-only. Only the person at this PC can widen it; the AI client, MCP calls and the cloud cannot.
+
+```powershell
+npx local-commander-agent@latest workspaces                                   # list workspaceGrantId and permissions
+npx local-commander-agent@latest allow-write <workspaceGrantId>
+npx local-commander-agent@latest allow-command <workspaceGrantId> node "C:\Program Files\nodejs\node.exe"
+npx local-commander-agent@latest allow-localhost <workspaceGrantId> 3000
+npx local-commander-agent@latest deny-write <workspaceGrantId>
+npx local-commander-agent@latest deny-command <workspaceGrantId> node
+npx local-commander-agent@latest deny-localhost <workspaceGrantId> 3000
+```
+
+`allow-command` takes the command name the AI will use and the absolute path of that executable. A running agent restarts automatically to apply the change.
+
 To also remove the protected Local Commander enrollment/state during uninstall:
 
 ```powershell
@@ -34,7 +50,7 @@ Uninstall never removes user project files.
 
 ## Control plane
 
-The package defaults to `https://localcmd.cloudpub.ru`. A staging or self-hosted control plane can be selected only at first pairing with:
+The package defaults to `https://localcmd.app`. A staging or self-hosted control plane can be selected only at first pairing with:
 
 ```powershell
 $env:LC_CONTROL_PLANE_ORIGIN="https://your-control-plane.example"

package/bin/localcommander.mjs

@@ -236,6 +236,26 @@ async function approveWorkspace(runtimeDir) {
   if (result.status !== 0) fail(result.stderr.trim() || "WORKSPACE_APPROVAL_FAILED");
   process.stdout.write(result.stdout || "Workspace selection finished.\n");
 }
+// Owner-only local permission surface. These run the installed runtime's own
+// commands on this PC; the cloud, the AI client and MCP calls cannot reach them.
+const PERMISSION_COMMANDS = { "allow-write": 1, "deny-write": 1, "allow-command": 3, "deny-command": 2, "allow-localhost": 2, "deny-localhost": 2 };
+async function listWorkspaces(runtimeDir) {
+  const result = execAgent(runtimeDir, ["list-workspaces"], 15_000);
+  if (result.status !== 0) fail(result.stderr.trim() || "WORKSPACE_LIST_FAILED");
+  try { process.stdout.write(JSON.stringify(JSON.parse(result.stdout.trim() || "[]"), null, 2) + "\n"); }
+  catch { fail("WORKSPACE_LIST_INVALID"); }
+}
+async function changePermission(runtimeDir, command, args) {
+  if (args.length !== PERMISSION_COMMANDS[command]) fail("ARGUMENT_INVALID");
+  const result = execAgent(runtimeDir, [command, ...args], 30_000);
+  if (result.status !== 0) fail(result.stderr.trim() || "PERMISSION_UPDATE_FAILED");
+  const record = await readProcessRecord();
+  if (record && pidAlive(record.pid)) {
+    await stopAgent();
+    await startAgent();
+    process.stdout.write("Permission updated; Local Commander restarted.\n");
+  } else process.stdout.write("Permission updated.\n");
+}
 function pidAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
   try { process.kill(pid, 0); return true; }
@@ -356,6 +376,11 @@ function help() {
     "  npx local-commander-agent@latest restart      restart background agent",
     "  npx local-commander-agent@latest update       install this package version and restart",
     "  npx local-commander-agent@latest approve-workspace",
+    "  npx local-commander-agent@latest workspaces    list approved workspaces and permissions",
+    "  npx local-commander-agent@latest allow-write <workspaceGrantId>",
+    "  npx local-commander-agent@latest allow-command <workspaceGrantId> <name> <absolute-executable-path>",
+    "  npx local-commander-agent@latest allow-localhost <workspaceGrantId> <port>",
+    "  npx local-commander-agent@latest deny-write|deny-command|deny-localhost ...",
     "  npx local-commander-agent@latest uninstall [--purge-state]",
     ""
   ].join("\n");
@@ -410,6 +435,14 @@ async function main() {
     await approveWorkspace(current.runtimeDir);
     return;
   }
+  if (command === "workspaces" || Object.hasOwn(PERMISSION_COMMANDS, command)) {
+    if (command === "workspaces" && args.length) fail("ARGUMENT_INVALID");
+    const current = await readCurrent();
+    if (!current) fail("AGENT_NOT_INSTALLED");
+    if (command === "workspaces") await listWorkspaces(current.runtimeDir);
+    else await changePermission(current.runtimeDir, command, args);
+    return;
+  }
   if (command === "uninstall") {
     if (args.length > 1 || (args.length === 1 && args[0] !== "--purge-state")) fail("ARGUMENT_INVALID");
     await uninstall(args[0] === "--purge-state");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "local-commander-agent",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "One-command Windows bootstrap for the Local Commander agent.",
   "type": "module",
   "bin": {
@@ -36,6 +36,6 @@
     "windows"
   ],
   "localCommander": {
-    "controlPlaneOrigin": "https://localcmd.cloudpub.ru"
+    "controlPlaneOrigin": "https://localcmd.app"
   }
 }

package/runtime/agent.mjs

@@ -24295,8 +24295,145 @@ var ActionEvidenceSchema = external_exports.object({
   errorCode: external_exports.string().regex(/^[A-Z][A-Z0-9_]{0,63}$/).optional()
 }).strict();
 
-// packages/contracts/src/device-protocol.ts
+// packages/contracts/src/index.ts
+var protocolVersion = 1;
+var MAX_FILE_WRITE_BYTES = 1024 * 1024;
+var MAX_RELAY_FRAME_BYTES = 8 * 1024 * 1024;
 var uuid5 = external_exports.string().uuid().toLowerCase();
+var nonEmpty = external_exports.string().trim().min(1);
+var utcDateTime2 = external_exports.iso.datetime({ offset: false }).refine((value) => /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?Z$/.test(value), "Expected UTC timestamp with seconds");
+var units = external_exports.number().int().min(0).max(1e9);
+function validUsagePeriod(value) {
+  const start = new Date(value.periodStartUtc);
+  if (!Number.isFinite(start.getTime()) || start.getUTCDate() !== 1 || start.getUTCHours() !== 0 || start.getUTCMinutes() !== 0 || start.getUTCSeconds() !== 0 || start.getUTCMilliseconds() !== 0) return false;
+  const end = new Date(start);
+  end.setUTCMonth(end.getUTCMonth() + 1);
+  return Date.parse(value.periodEndUtc) === end.getTime();
+}
+var PermissionScopeSchema = external_exports.enum([
+  "devices:read",
+  "sessions:manage",
+  "files:read",
+  "files:write",
+  "commands:execute",
+  "processes:control",
+  "localhost:access"
+]);
+var OperationStateSchema = external_exports.enum([
+  "queued",
+  "prepared",
+  "accepted",
+  "running",
+  "finished",
+  "failed",
+  "cancel_requested",
+  "cancelled",
+  "rejected",
+  "unknown"
+]);
+var ErrorCodeSchema = external_exports.enum([
+  "AUTH_REQUIRED",
+  "GRANT_REVOKED",
+  "DEVICE_OFFLINE",
+  "SETUP_REQUIRED",
+  "DEVICE_NOT_OWNED",
+  "SESSION_EXPIRED",
+  "LOCAL_PERMISSION_REQUIRED",
+  "QUOTA_EXHAUSTED",
+  "CAPACITY_BUSY",
+  "RESOURCE_BUSY",
+  "POLICY_DENIED",
+  "TOOL_MISSING",
+  "TIMEOUT",
+  "CANCEL_REQUESTED",
+  "EXECUTION_UNKNOWN",
+  "OUTPUT_EXPIRED",
+  "INFRA_UNAVAILABLE",
+  "IDEMPOTENCY_CONFLICT"
+]);
+var LedgerEventKindSchema = external_exports.enum(["reserve", "charge", "release", "credit"]);
+var TrustedPrincipalSchema = external_exports.object({
+  protocolVersion: external_exports.literal(protocolVersion),
+  accountId: uuid5,
+  tenantId: uuid5,
+  grantId: uuid5,
+  scopes: external_exports.array(PermissionScopeSchema).min(1).max(32),
+  authenticatedAt: utcDateTime2,
+  expiresAt: utcDateTime2
+}).strict().refine((value) => Date.parse(value.authenticatedAt) < Date.parse(value.expiresAt), { path: ["expiresAt"], message: "Expiry must follow authentication" });
+var ExecutionSessionSchema = external_exports.object({
+  protocolVersion: external_exports.literal(protocolVersion),
+  executionSessionId: uuid5,
+  tenantId: uuid5,
+  grantId: uuid5,
+  deviceId: uuid5,
+  workspaceGrantId: uuid5.optional(),
+  policyVersion: external_exports.string().trim().min(1).max(64),
+  openedAt: utcDateTime2,
+  expiresAt: utcDateTime2,
+  state: external_exports.enum(["open", "closing", "closed", "expired"])
+}).strict().refine((value) => Date.parse(value.openedAt) < Date.parse(value.expiresAt), { path: ["expiresAt"], message: "Expiry must follow session creation" });
+var ChildCommandSchema = external_exports.object({
+  childExecutionId: uuid5,
+  executable: nonEmpty.max(260),
+  argv: external_exports.array(external_exports.string().max(8192)).max(128).default([]),
+  cwd: external_exports.string().trim().min(1).max(2048).optional(),
+  deadlineAt: utcDateTime2.optional()
+}).strict();
+var ClientCommandRequestSchema = external_exports.object({
+  protocolVersion: external_exports.literal(protocolVersion),
+  executionSessionId: uuid5,
+  operationId: uuid5,
+  idempotencyKey: external_exports.string().trim().min(8).max(128),
+  children: external_exports.array(ChildCommandSchema).min(2).max(32)
+}).strict().superRefine((value, ctx) => {
+  const seen = /* @__PURE__ */ new Set();
+  value.children.forEach((child, index) => {
+    if (seen.has(child.childExecutionId)) {
+      ctx.addIssue({ code: "custom", path: ["children", index, "childExecutionId"], message: "childExecutionId must be unique within a batch" });
+    }
+    seen.add(child.childExecutionId);
+  });
+});
+var ControlOperationSchema = external_exports.object({
+  protocolVersion: external_exports.literal(protocolVersion),
+  executionSessionId: uuid5,
+  operationId: uuid5,
+  kind: external_exports.enum(["status", "output", "cancel"]),
+  cursor: external_exports.string().trim().min(1).max(512).optional()
+}).strict();
+var LedgerEventSchema = external_exports.object({
+  protocolVersion: external_exports.literal(protocolVersion),
+  tenantId: uuid5,
+  executionId: uuid5,
+  eventKind: LedgerEventKindSchema,
+  units: external_exports.literal(1),
+  periodStartUtc: utcDateTime2,
+  periodEndUtc: utcDateTime2,
+  occurredAt: utcDateTime2,
+  adjustmentId: uuid5.optional()
+}).strict().refine(validUsagePeriod, { path: ["periodEndUtc"], message: "Expected one UTC calendar month" }).refine((value) => value.eventKind !== "credit" || value.adjustmentId !== void 0, { path: ["adjustmentId"], message: "Credit requires a unique adjustment ID" });
+var UsageCountersSchema = external_exports.object({
+  protocolVersion: external_exports.literal(protocolVersion),
+  tenantId: uuid5,
+  periodStartUtc: utcDateTime2,
+  periodEndUtc: utcDateTime2,
+  limitUnits: units,
+  reservedUnits: units,
+  consumedUnits: units,
+  creditedUnits: units
+}).strict().refine(validUsagePeriod, { path: ["periodEndUtc"], message: "Expected one UTC calendar month" });
+var OperationErrorSchema = external_exports.object({
+  protocolVersion: external_exports.literal(protocolVersion),
+  code: ErrorCodeSchema,
+  message: external_exports.string().trim().min(1).max(512),
+  retryable: external_exports.boolean(),
+  dispatched: external_exports.boolean(),
+  quotaEffect: external_exports.enum(["none", "reserved", "charged", "released", "credited", "unknown"])
+}).strict();
+
+// packages/contracts/src/device-protocol.ts
+var uuid8 = external_exports.string().uuid().toLowerCase();
 var hash2 = external_exports.string().regex(/^[a-f0-9]{64}$/);
 var epoch = external_exports.string().regex(/^[1-9]\d{0,18}$/).refine((v) => BigInt(v) <= 9223372036854775807n);
 var text = external_exports.string().max(32767).refine((v) => !v.includes("\0"));
@@ -24306,7 +24443,7 @@ var ToolCallSchema = external_exports.discriminatedUnion("name", [
   external_exports.object({ name: external_exports.literal("fs_list"), args: external_exports.object({ path: path.optional(), recursive: external_exports.boolean().default(false), maxDepth: external_exports.number().int().min(0).max(8).default(3), maxEntries: external_exports.number().int().min(1).max(1e3).default(200) }).strict() }).strict(),
   external_exports.object({ name: external_exports.literal("fs_read"), args: external_exports.object({ path, startLine: external_exports.number().int().min(1).max(1e6).optional(), endLine: external_exports.number().int().min(1).max(1e6).optional() }).strict() }).strict(),
   external_exports.object({ name: external_exports.literal("fs_search"), args: external_exports.object({ path: path.optional(), query: external_exports.string().min(1).max(1e3), caseSensitive: external_exports.boolean().default(false), maxResults: external_exports.number().int().min(1).max(300).default(100) }).strict() }).strict(),
-  external_exports.object({ name: external_exports.literal("fs_write"), args: external_exports.object({ path, content: external_exports.string().max(12e4), overwrite: external_exports.boolean().default(false), expectedSha256: hash2.optional() }).strict() }).strict(),
+  external_exports.object({ name: external_exports.literal("fs_write"), args: external_exports.object({ path, content: external_exports.string().max(MAX_FILE_WRITE_BYTES).refine((value) => Buffer.byteLength(value, "utf8") <= MAX_FILE_WRITE_BYTES, "fs_write content exceeds 1 MiB UTF-8"), overwrite: external_exports.boolean().default(false), expectedSha256: hash2.optional() }).strict() }).strict(),
   external_exports.object({ name: external_exports.literal("fs_replace"), args: external_exports.object({ path, oldText: external_exports.string().min(1).max(6e4), newText: external_exports.string().max(6e4), replaceAll: external_exports.boolean().default(false), expectedSha256: hash2.optional() }).strict() }).strict(),
   external_exports.object({ name: external_exports.literal("git_status"), args: external_exports.object({ path: path.optional() }).strict() }).strict(),
   external_exports.object({ name: external_exports.literal("git_diff"), args: external_exports.object({ path: path.optional(), file: path.optional(), staged: external_exports.boolean().default(false) }).strict() }).strict(),
@@ -24320,32 +24457,32 @@ function scopeForTool(call) {
   if (call.name === "localhost_request") return "localhost:access";
   return call.name === "fs_write" || call.name === "fs_replace" ? "files:write" : "files:read";
 }
-var ExecutionBindingSchema = external_exports.object({ tenantId: uuid5, accountId: uuid5.optional(), deviceId: uuid5, grantId: uuid5, sessionId: uuid5, operationId: uuid5, executionId: uuid5, connectionEpoch: epoch, workspaceGrantId: uuid5, policyVersion: external_exports.number().int().min(1).max(2147483647), payloadHash: hash2, deadlineAt: timestamp }).strict();
+var ExecutionBindingSchema = external_exports.object({ tenantId: uuid8, accountId: uuid8.optional(), deviceId: uuid8, grantId: uuid8, sessionId: uuid8, operationId: uuid8, executionId: uuid8, connectionEpoch: epoch, workspaceGrantId: uuid8, policyVersion: external_exports.number().int().min(1).max(2147483647), payloadHash: hash2, deadlineAt: timestamp }).strict();
 var EfficiencyNoticeSchema = external_exports.object({ message: external_exports.string().min(1).max(160), estimatedSavedTokens: external_exports.number().int().min(1).max(1e12), savedBytes: external_exports.number().int().min(1).max(1e12), sessionCalls: external_exports.number().int().min(20).max(1e9) }).strict();
 var ResultSchema = external_exports.object({ exitCode: external_exports.number().int().min(-2147483648).max(4294967295).nullable(), timedOut: external_exports.boolean(), cancelled: external_exports.boolean(), treeTerminated: external_exports.boolean(), stdout: external_exports.string().max(196608), stderr: external_exports.string().max(196608), stdoutTruncated: external_exports.boolean(), stderrTruncated: external_exports.boolean(), resultCode: external_exports.string().regex(/^[A-Z0-9_]{1,40}$/), efficiencyNotice: EfficiencyNoticeSchema.optional() }).strict();
 var ServerFrameSchema = external_exports.discriminatedUnion("type", [
-  external_exports.object({ type: external_exports.literal("hello"), version: external_exports.literal(1), tenantId: uuid5, deviceId: uuid5, connectionEpoch: epoch, serverTime: timestamp }).strict(),
+  external_exports.object({ type: external_exports.literal("hello"), version: external_exports.literal(1), tenantId: uuid8, deviceId: uuid8, connectionEpoch: epoch, serverTime: timestamp }).strict(),
   external_exports.object({ type: external_exports.literal("prepare"), version: external_exports.literal(1), binding: ExecutionBindingSchema, tool: ToolCallSchema }).strict(),
   external_exports.object({ type: external_exports.literal("execute"), version: external_exports.literal(1), binding: ExecutionBindingSchema }).strict(),
-  external_exports.object({ type: external_exports.literal("control"), version: external_exports.literal(1), requestId: uuid5, binding: ExecutionBindingSchema, action: external_exports.enum(["status", "output", "cancel"]) }).strict(),
+  external_exports.object({ type: external_exports.literal("control"), version: external_exports.literal(1), requestId: uuid8, binding: ExecutionBindingSchema, action: external_exports.enum(["status", "output", "cancel"]) }).strict(),
   external_exports.object({ type: external_exports.literal("heartbeat_ack"), version: external_exports.literal(1), connectionEpoch: epoch, leaseExpiresAt: timestamp }).strict(),
-  external_exports.object({ type: external_exports.literal("workspace_ack"), version: external_exports.literal(1), requestId: uuid5, workspaceGrantId: uuid5, accepted: external_exports.boolean(), code: external_exports.string().max(64).optional() }).strict(),
+  external_exports.object({ type: external_exports.literal("workspace_ack"), version: external_exports.literal(1), requestId: uuid8, workspaceGrantId: uuid8, accepted: external_exports.boolean(), code: external_exports.string().max(64).optional() }).strict(),
   external_exports.object({ type: external_exports.literal("revoke"), version: external_exports.literal(1), reason: external_exports.enum(["device_revoked", "account_revoked", "server_shutdown", "connection_replaced"]) }).strict()
 ]);
 var ClientFrameSchema = external_exports.discriminatedUnion("type", [
   external_exports.object({ type: external_exports.literal("ready"), version: external_exports.literal(1), safeSlots: external_exports.number().int().min(1).max(128), platform: external_exports.literal("win32"), agentVersion: external_exports.string().regex(/^[A-Za-z0-9._+-]{1,64}$/), supervisor: external_exports.boolean() }).strict(),
   external_exports.object({ type: external_exports.literal("heartbeat"), version: external_exports.literal(1), connectionEpoch: epoch }).strict(),
-  external_exports.object({ type: external_exports.literal("workspace_grant"), version: external_exports.literal(1), requestId: uuid5, workspaceGrantId: uuid5, rootHash: hash2, displayName: external_exports.string().min(1).max(120), policyVersion: external_exports.number().int().min(1).max(2147483647) }).strict(),
-  external_exports.object({ type: external_exports.literal("workspace_revoke"), version: external_exports.literal(1), requestId: uuid5, workspaceGrantId: uuid5 }).strict(),
+  external_exports.object({ type: external_exports.literal("workspace_grant"), version: external_exports.literal(1), requestId: uuid8, workspaceGrantId: uuid8, rootHash: hash2, displayName: external_exports.string().min(1).max(120), policyVersion: external_exports.number().int().min(1).max(2147483647) }).strict(),
+  external_exports.object({ type: external_exports.literal("workspace_revoke"), version: external_exports.literal(1), requestId: uuid8, workspaceGrantId: uuid8 }).strict(),
   external_exports.object({ type: external_exports.literal("prepared"), version: external_exports.literal(1), binding: ExecutionBindingSchema }).strict(),
   external_exports.object({ type: external_exports.literal("accepted"), version: external_exports.literal(1), binding: ExecutionBindingSchema }).strict(),
   external_exports.object({ type: external_exports.literal("running"), version: external_exports.literal(1), binding: ExecutionBindingSchema, pid: external_exports.number().int().positive().optional() }).strict(),
   external_exports.object({ type: external_exports.literal("result"), version: external_exports.literal(1), binding: ExecutionBindingSchema, result: ResultSchema }).strict(),
   external_exports.object({ type: external_exports.literal("not_accepted"), version: external_exports.literal(1), binding: ExecutionBindingSchema, code: external_exports.string().regex(/^[A-Z0-9_]{1,40}$/), provedNotStarted: external_exports.boolean() }).strict(),
-  external_exports.object({ type: external_exports.literal("control_result"), version: external_exports.literal(1), requestId: uuid5, binding: ExecutionBindingSchema, state: external_exports.enum(["prepared", "accepted", "running", "finished", "failed", "cancelled", "rejected", "unknown", "missing"]), result: ResultSchema.optional() }).strict()
+  external_exports.object({ type: external_exports.literal("control_result"), version: external_exports.literal(1), requestId: uuid8, binding: ExecutionBindingSchema, state: external_exports.enum(["prepared", "accepted", "running", "finished", "failed", "cancelled", "rejected", "unknown", "missing"]), result: ResultSchema.optional() }).strict()
 ]);
-var TerminalEventSchema = external_exports.object({ type: external_exports.literal("executionResult"), protocolVersion: external_exports.literal(1), requestId: uuid5, tenantId: uuid5, deviceId: uuid5, connectionEpoch: epoch, binding: ExecutionBindingSchema, state: external_exports.enum(["finished", "failed", "cancelled", "unknown"]), resultCode: external_exports.string().regex(/^[A-Z0-9_]{1,40}$/) }).strict();
-var TerminalEventAckSchema = external_exports.object({ type: external_exports.literal("executionResultAck"), protocolVersion: external_exports.literal(1), requestId: uuid5, ok: external_exports.boolean() }).strict();
+var TerminalEventSchema = external_exports.object({ type: external_exports.literal("executionResult"), protocolVersion: external_exports.literal(1), requestId: uuid8, tenantId: uuid8, deviceId: uuid8, connectionEpoch: epoch, binding: ExecutionBindingSchema, state: external_exports.enum(["finished", "failed", "cancelled", "unknown"]), resultCode: external_exports.string().regex(/^[A-Z0-9_]{1,40}$/) }).strict();
+var TerminalEventAckSchema = external_exports.object({ type: external_exports.literal("executionResultAck"), protocolVersion: external_exports.literal(1), requestId: uuid8, ok: external_exports.boolean() }).strict();
 function canonicalJson(value) {
   function canonical2(v) {
     if (Array.isArray(v)) return v.map(canonical2);
@@ -24378,16 +24515,16 @@ var guardAdapter = AdapterDescriptorSchema.parse({
     detectsNativeBypass: false
   }
 });
-var uuid8 = external_exports.string().uuid().toLowerCase();
+var uuid9 = external_exports.string().uuid().toLowerCase();
 var GuardSettingsSchema = external_exports.object({
   policyId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,63}$/),
   keys: external_exports.array(external_exports.object({ keyId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,63}$/), publicKeyPem: external_exports.string().max(1024) }).strict()).min(1).max(8),
   environment: EnvironmentContextSchema
 }).strict();
 var GuardConfigurationSchema = GuardSettingsSchema.extend({
-  tenantId: uuid8,
-  deviceId: uuid8,
-  ownerAccountId: uuid8,
+  tenantId: uuid9,
+  deviceId: uuid9,
+  ownerAccountId: uuid9,
   ownerSid: external_exports.string().regex(/^S-1-(?:[0-9]+-)+[0-9]+$/).max(184)
 }).strict();
 function guardHash(value) {
@@ -24468,14 +24605,14 @@ var GuardEventSchema = external_exports.object({
   previousHash: hash3,
   hash: hash3
 }).strict();
-var uuid9 = external_exports.string().uuid().toLowerCase();
+var uuid10 = external_exports.string().uuid().toLowerCase();
 var GuardEvidenceRecordSchema = external_exports.object({
-  tenantId: uuid9,
-  deviceId: uuid9,
-  accountId: uuid9.optional(),
-  sessionId: uuid9,
-  operationId: uuid9,
-  executionId: uuid9,
+  tenantId: uuid10,
+  deviceId: uuid10,
+  accountId: uuid10.optional(),
+  sessionId: uuid10,
+  operationId: uuid10,
+  executionId: uuid10,
   state: external_exports.enum(["prepared", "accepted", "running", "finished", "failed", "cancelled", "rejected", "unknown"]),
   events: external_exports.array(GuardEventSchema).min(1).max(12)
 }).strict();
@@ -24494,8 +24631,8 @@ function appendGuardEvent(events, input2) {
 }
 var ExportSchema = external_exports.object({
   formatVersion: external_exports.literal(1),
-  tenantId: uuid9,
-  deviceId: uuid9,
+  tenantId: uuid10,
+  deviceId: uuid10,
   records: external_exports.array(GuardEvidenceRecordSchema).max(1e3)
 }).strict();
 var HeaderSchema = external_exports.object({ alg: external_exports.literal("EdDSA"), typ: external_exports.literal("lc-guard-evidence+jws"), kid: hash3 }).strict();
@@ -24538,7 +24675,7 @@ async function signGuardEvidence(records, identity) {
 }
 
 // agent/src/journal.ts
-var uuid10 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+var uuid11 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 var hash4 = /^[0-9a-f]{64}$/;
 var bindingKeys = ["executionId", "operationId", "sessionId", "tenantId", "grantId", "deviceId", "connectionEpoch", "payloadHash", "deadlineAt", "workspaceGrantId", "policyVersion", "accountId"];
 var terminal = /* @__PURE__ */ new Set(["finished", "failed", "cancelled", "rejected"]);
@@ -24558,10 +24695,10 @@ function canonicalTime(value) {
 }
 function validateInput(value) {
   if (!value || typeof value !== "object" || Object.keys(value).some((k) => !bindingKeys.includes(k))) throw failure2("JOURNAL_INPUT_INVALID");
-  for (const name of bindingKeys.slice(0, 6)) if (typeof value[name] !== "string" || !uuid10.test(value[name])) throw failure2("JOURNAL_INPUT_INVALID");
-  if (value.accountId !== void 0 && !uuid10.test(value.accountId)) throw failure2("JOURNAL_INPUT_INVALID");
+  for (const name of bindingKeys.slice(0, 6)) if (typeof value[name] !== "string" || !uuid11.test(value[name])) throw failure2("JOURNAL_INPUT_INVALID");
+  if (value.accountId !== void 0 && !uuid11.test(value.accountId)) throw failure2("JOURNAL_INPUT_INVALID");
   if (typeof value.connectionEpoch !== "string" || !/^[1-9]\d{0,18}$/.test(value.connectionEpoch) || BigInt(value.connectionEpoch) > 9223372036854775807n || typeof value.payloadHash !== "string" || !hash4.test(value.payloadHash) || !canonicalTime(value.deadlineAt)) throw failure2("JOURNAL_INPUT_INVALID");
-  if (value.workspaceGrantId === void 0 !== (value.policyVersion === void 0) || value.workspaceGrantId !== void 0 && (!uuid10.test(value.workspaceGrantId) || !Number.isInteger(value.policyVersion) || value.policyVersion < 1 || value.policyVersion > 2147483647)) throw failure2("JOURNAL_INPUT_INVALID");
+  if (value.workspaceGrantId === void 0 !== (value.policyVersion === void 0) || value.workspaceGrantId !== void 0 && (!uuid11.test(value.workspaceGrantId) || !Number.isInteger(value.policyVersion) || value.policyVersion < 1 || value.policyVersion > 2147483647)) throw failure2("JOURNAL_INPUT_INVALID");
 }
 function clone2(value) {
   return structuredClone(value);
@@ -24660,7 +24797,7 @@ var NativeJournal = class _NativeJournal {
     return path2.join(this.dir, id + ".entry");
   }
   need(id) {
-    if (!uuid10.test(id)) throw failure2("JOURNAL_INPUT_INVALID");
+    if (!uuid11.test(id)) throw failure2("JOURNAL_INPUT_INVALID");
     const e = this.entries.get(id);
     if (!e) throw failure2("EXECUTION_UNKNOWN");
     return clone2(e);
@@ -24683,7 +24820,7 @@ var NativeJournal = class _NativeJournal {
     for (const name of names) {
       if (!name.endsWith(".entry")) continue;
       const id = name.slice(0, -6);
-      if (!uuid10.test(id)) throw failure2("JOURNAL_CORRUPT");
+      if (!uuid11.test(id)) throw failure2("JOURNAL_CORRUPT");
       const envelope = await this.readOwned(id);
       this.totalBytes += envelope.length;
       if (this.totalBytes > this.options.maxBytes || this.entries.size >= this.options.maxEntries) throw failure2("JOURNAL_CAPACITY_EXCEEDED");
@@ -24830,7 +24967,7 @@ var NativeJournal = class _NativeJournal {
   }
   get(id) {
     return this.enqueue(async () => {
-      if (!uuid10.test(id)) throw failure2("JOURNAL_INPUT_INVALID");
+      if (!uuid11.test(id)) throw failure2("JOURNAL_INPUT_INVALID");
       const e = this.entries.get(id);
       return e ? clone2(e) : null;
     });
@@ -25072,7 +25209,7 @@ import { createHash as createHash5, KeyObject as KeyObject2 } from "node:crypto"
 // packages/policy/src/evaluator.ts
 import { createHash as createHash4 } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
-var uuid11 = external_exports.string().uuid().toLowerCase();
+var uuid12 = external_exports.string().uuid().toLowerCase();
 var slug2 = external_exports.string().regex(/^[a-z][a-z0-9._-]{0,63}$/);
 var utc = external_exports.iso.datetime({ offset: false });
 var risk = external_exports.enum(["low", "moderate", "high", "critical"]);
@@ -25097,7 +25234,7 @@ var PolicyRuleSchema = external_exports.object({
   }
 });
 var PolicySnapshotSchema = external_exports.object({
-  tenantId: uuid11,
+  tenantId: uuid12,
   policyId: slug2,
   policyVersion: external_exports.string().trim().min(1).max(64),
   issuedAt: utc,
@@ -25211,14 +25348,14 @@ async function verifySignedPolicyBundle(candidate, authority, checkpointInput, n
 
 // packages/policy/src/approvals.ts
 import { createHash as createHash6, randomUUID as randomUUID2 } from "node:crypto";
-var uuid12 = TrustedActionBindingSchema.shape.tenantId;
+var uuid13 = TrustedActionBindingSchema.shape.tenantId;
 var utc3 = TrustedActionBindingSchema.shape.expiresAt;
 var digest3 = ResourceRefSchema.shape.locatorFingerprint;
 var requirement = PolicyDecisionSchema.shape.approval.unwrap();
 var ApprovalActionSchema = external_exports.object({ request: BoundActionRequestSchema, payloadHash: digest3 }).strict();
 var ApprovalAuthoritySchema = external_exports.object({
-  tenantId: uuid12,
-  accountId: uuid12,
+  tenantId: uuid13,
+  accountId: uuid13,
   approvalClass: requirement.shape.approvalClass,
   authenticatedAt: utc3,
   expiresAt: utc3
@@ -25230,11 +25367,11 @@ var ContextSchema = external_exports.object({
   policyExpiresAt: utc3
 }).strict();
 var GrantSchema = external_exports.object({
-  approvalId: uuid12,
-  requestId: uuid12,
-  decisionId: uuid12,
+  approvalId: uuid13,
+  requestId: uuid13,
+  decisionId: uuid13,
   bindingHash: digest3,
-  approverAccountId: uuid12,
+  approverAccountId: uuid13,
   approvalClass: requirement.shape.approvalClass,
   scope: requirement.shape.scope,
   issuedAt: utc3,
@@ -25243,8 +25380,8 @@ var GrantSchema = external_exports.object({
   uses: external_exports.number().int().min(0).max(Number.MAX_SAFE_INTEGER)
 }).strict().refine((value) => Date.parse(value.issuedAt) < Date.parse(value.expiresAt) && (value.scope === "once" ? value.uses === (value.state === "consumed" ? 1 : 0) : value.state !== "consumed"));
 var ApprovalLedgerSchema = external_exports.object({
-  tenantId: uuid12,
-  deviceId: uuid12,
+  tenantId: uuid13,
+  deviceId: uuid13,
   lastChangedAt: utc3,
   grants: external_exports.array(GrantSchema).max(128)
 }).strict().refine((value) => new Set(value.grants.map((grant) => grant.approvalId)).size === value.grants.length && new Set(value.grants.map((grant) => grant.requestId)).size === value.grants.length && value.grants.every((grant) => Date.parse(grant.issuedAt) <= Date.parse(value.lastChangedAt)));
@@ -25321,7 +25458,7 @@ function issueApproval(ledgerInput, context, authorityInput, now, expiresAt) {
 }
 function consumeApproval(ledgerInput, context, approvalId, now) {
   try {
-    const ledger = current(ledgerInput, now), bound = binding(ledger, context, now), id = uuid12.parse(approvalId);
+    const ledger = current(ledgerInput, now), bound = binding(ledger, context, now), id = uuid13.parse(approvalId);
     const grant = ledger.grants.find((candidate) => candidate.approvalId === id);
     if (!grant || grant.state !== "active" || grant.bindingHash !== bound.bindingHash || grant.uses === Number.MAX_SAFE_INTEGER || Date.parse(now) < Date.parse(grant.issuedAt) || grant.scope === "once" && (grant.requestId !== bound.request.requestId || grant.decisionId !== bound.decision.decisionId)) throw Error();
     const consumed = { ...grant, uses: grant.uses + 1, state: grant.scope === "once" ? "consumed" : "active" };
@@ -25332,7 +25469,7 @@ function consumeApproval(ledgerInput, context, approvalId, now) {
 }
 function revokeApproval(ledgerInput, approvalId, now) {
   try {
-    const ledger = current(ledgerInput, now), id = uuid12.parse(approvalId);
+    const ledger = current(ledgerInput, now), id = uuid13.parse(approvalId);
     return { ...ledger, grants: ledger.grants.map((grant) => grant.approvalId === id && grant.state === "active" ? { ...grant, state: "revoked" } : grant) };
   } catch {
     throw Error("APPROVAL_INVALID");
@@ -26470,7 +26607,7 @@ var NativeTools = class {
           contents = pieces.join(call.args.newText);
         }
         const bytes3 = Buffer.from(contents, "utf8");
-        if (bytes3.length > 12e4) fail2("FILE_WRITE_LIMIT");
+        if (bytes3.length > MAX_FILE_WRITE_BYTES) fail2("FILE_WRITE_LIMIT");
         const temp = path7.join(path7.dirname(target), ".lc-write-" + randomUUID4() + ".tmp");
         const handle = await open4(temp, constants3.O_CREAT | constants3.O_EXCL | constants3.O_WRONLY, 384);
         try {
@@ -27183,17 +27320,17 @@ function unshapedResultTelemetry(result2) {
 
 // packages/optimization/src/live-telemetry.ts
 var LIVE_EFFICIENCY_EVENT_VERSION = 1;
-var uuid13 = external_exports.string().uuid().toLowerCase();
+var uuid14 = external_exports.string().uuid().toLowerCase();
 var bytes2 = external_exports.number().int().min(0).max(1e9);
 var utc4 = external_exports.iso.datetime({ offset: false });
 var LiveEfficiencyEventSchema = external_exports.object({
   version: external_exports.literal(LIVE_EFFICIENCY_EVENT_VERSION),
   occurredAt: utc4,
-  tenantId: uuid13,
-  accountId: uuid13.nullable(),
-  sessionId: uuid13,
-  operationId: uuid13,
-  executionId: uuid13,
+  tenantId: uuid14,
+  accountId: uuid14.nullable(),
+  sessionId: uuid14,
+  operationId: uuid14,
+  executionId: uuid14,
   toolName: external_exports.string().trim().min(1).max(120),
   outcome: external_exports.enum(["success", "failed", "timed_out", "cancelled", "unknown"]),
   parserId: external_exports.string().trim().min(1).max(120).nullable(),
@@ -27706,141 +27843,6 @@ var import_websocket = __toESM(require_websocket(), 1);
 var import_websocket_server = __toESM(require_websocket_server(), 1);
 var wrapper_default = import_websocket.default;
 
-// packages/contracts/src/index.ts
-var protocolVersion = 1;
-var uuid14 = external_exports.string().uuid().toLowerCase();
-var nonEmpty = external_exports.string().trim().min(1);
-var utcDateTime2 = external_exports.iso.datetime({ offset: false }).refine((value) => /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?Z$/.test(value), "Expected UTC timestamp with seconds");
-var units = external_exports.number().int().min(0).max(1e9);
-function validUsagePeriod(value) {
-  const start = new Date(value.periodStartUtc);
-  if (!Number.isFinite(start.getTime()) || start.getUTCDate() !== 1 || start.getUTCHours() !== 0 || start.getUTCMinutes() !== 0 || start.getUTCSeconds() !== 0 || start.getUTCMilliseconds() !== 0) return false;
-  const end = new Date(start);
-  end.setUTCMonth(end.getUTCMonth() + 1);
-  return Date.parse(value.periodEndUtc) === end.getTime();
-}
-var PermissionScopeSchema = external_exports.enum([
-  "devices:read",
-  "sessions:manage",
-  "files:read",
-  "files:write",
-  "commands:execute",
-  "processes:control",
-  "localhost:access"
-]);
-var OperationStateSchema = external_exports.enum([
-  "queued",
-  "prepared",
-  "accepted",
-  "running",
-  "finished",
-  "failed",
-  "cancel_requested",
-  "cancelled",
-  "rejected",
-  "unknown"
-]);
-var ErrorCodeSchema = external_exports.enum([
-  "AUTH_REQUIRED",
-  "GRANT_REVOKED",
-  "DEVICE_OFFLINE",
-  "SETUP_REQUIRED",
-  "DEVICE_NOT_OWNED",
-  "SESSION_EXPIRED",
-  "LOCAL_PERMISSION_REQUIRED",
-  "QUOTA_EXHAUSTED",
-  "CAPACITY_BUSY",
-  "RESOURCE_BUSY",
-  "POLICY_DENIED",
-  "TOOL_MISSING",
-  "TIMEOUT",
-  "CANCEL_REQUESTED",
-  "EXECUTION_UNKNOWN",
-  "OUTPUT_EXPIRED",
-  "INFRA_UNAVAILABLE",
-  "IDEMPOTENCY_CONFLICT"
-]);
-var LedgerEventKindSchema = external_exports.enum(["reserve", "charge", "release", "credit"]);
-var TrustedPrincipalSchema = external_exports.object({
-  protocolVersion: external_exports.literal(protocolVersion),
-  accountId: uuid14,
-  tenantId: uuid14,
-  grantId: uuid14,
-  scopes: external_exports.array(PermissionScopeSchema).min(1).max(32),
-  authenticatedAt: utcDateTime2,
-  expiresAt: utcDateTime2
-}).strict().refine((value) => Date.parse(value.authenticatedAt) < Date.parse(value.expiresAt), { path: ["expiresAt"], message: "Expiry must follow authentication" });
-var ExecutionSessionSchema = external_exports.object({
-  protocolVersion: external_exports.literal(protocolVersion),
-  executionSessionId: uuid14,
-  tenantId: uuid14,
-  grantId: uuid14,
-  deviceId: uuid14,
-  workspaceGrantId: uuid14.optional(),
-  policyVersion: external_exports.string().trim().min(1).max(64),
-  openedAt: utcDateTime2,
-  expiresAt: utcDateTime2,
-  state: external_exports.enum(["open", "closing", "closed", "expired"])
-}).strict().refine((value) => Date.parse(value.openedAt) < Date.parse(value.expiresAt), { path: ["expiresAt"], message: "Expiry must follow session creation" });
-var ChildCommandSchema = external_exports.object({
-  childExecutionId: uuid14,
-  executable: nonEmpty.max(260),
-  argv: external_exports.array(external_exports.string().max(8192)).max(128).default([]),
-  cwd: external_exports.string().trim().min(1).max(2048).optional(),
-  deadlineAt: utcDateTime2.optional()
-}).strict();
-var ClientCommandRequestSchema = external_exports.object({
-  protocolVersion: external_exports.literal(protocolVersion),
-  executionSessionId: uuid14,
-  operationId: uuid14,
-  idempotencyKey: external_exports.string().trim().min(8).max(128),
-  children: external_exports.array(ChildCommandSchema).min(2).max(32)
-}).strict().superRefine((value, ctx) => {
-  const seen = /* @__PURE__ */ new Set();
-  value.children.forEach((child, index) => {
-    if (seen.has(child.childExecutionId)) {
-      ctx.addIssue({ code: "custom", path: ["children", index, "childExecutionId"], message: "childExecutionId must be unique within a batch" });
-    }
-    seen.add(child.childExecutionId);
-  });
-});
-var ControlOperationSchema = external_exports.object({
-  protocolVersion: external_exports.literal(protocolVersion),
-  executionSessionId: uuid14,
-  operationId: uuid14,
-  kind: external_exports.enum(["status", "output", "cancel"]),
-  cursor: external_exports.string().trim().min(1).max(512).optional()
-}).strict();
-var LedgerEventSchema = external_exports.object({
-  protocolVersion: external_exports.literal(protocolVersion),
-  tenantId: uuid14,
-  executionId: uuid14,
-  eventKind: LedgerEventKindSchema,
-  units: external_exports.literal(1),
-  periodStartUtc: utcDateTime2,
-  periodEndUtc: utcDateTime2,
-  occurredAt: utcDateTime2,
-  adjustmentId: uuid14.optional()
-}).strict().refine(validUsagePeriod, { path: ["periodEndUtc"], message: "Expected one UTC calendar month" }).refine((value) => value.eventKind !== "credit" || value.adjustmentId !== void 0, { path: ["adjustmentId"], message: "Credit requires a unique adjustment ID" });
-var UsageCountersSchema = external_exports.object({
-  protocolVersion: external_exports.literal(protocolVersion),
-  tenantId: uuid14,
-  periodStartUtc: utcDateTime2,
-  periodEndUtc: utcDateTime2,
-  limitUnits: units,
-  reservedUnits: units,
-  consumedUnits: units,
-  creditedUnits: units
-}).strict().refine(validUsagePeriod, { path: ["periodEndUtc"], message: "Expected one UTC calendar month" });
-var OperationErrorSchema = external_exports.object({
-  protocolVersion: external_exports.literal(protocolVersion),
-  code: ErrorCodeSchema,
-  message: external_exports.string().trim().min(1).max(512),
-  retryable: external_exports.boolean(),
-  dispatched: external_exports.boolean(),
-  quotaEffect: external_exports.enum(["none", "reserved", "charged", "released", "credited", "unknown"])
-}).strict();
-
 // agent/src/relay-client.ts
 var RelayClientError = class extends Error {
   constructor(code) {
@@ -27853,7 +27855,7 @@ var RelayClientError = class extends Error {
 var DEFAULT_PROTOCOL_VERSION = 1;
 var DEFAULT_CONNECT_TIMEOUT_MS = 1e4;
 var DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
-var DEFAULT_MAX_FRAME_BYTES = 256 * 1024;
+var DEFAULT_MAX_FRAME_BYTES = MAX_RELAY_FRAME_BYTES;
 var UUID2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var EPOCH = /^[1-9]\d{0,18}$/;
 var AGENT_VERSION = /^[A-Za-z0-9._+-]{1,64}$/;
@@ -28070,7 +28072,7 @@ async function connectOnce(options) {
   if (!Number.isInteger(protocolVersion2) || protocolVersion2 < 1 || protocolVersion2 > 100) fail3("RELAY_PROTOCOL_INVALID");
   const connectTimeoutMs = boundedNumber(options.connectTimeoutMs, DEFAULT_CONNECT_TIMEOUT_MS, 100, 6e4, "CONNECT_TIMEOUT_INVALID");
   const requestTimeoutMs = boundedNumber(options.requestTimeoutMs, DEFAULT_REQUEST_TIMEOUT_MS, 100, 30 * 6e4, "REQUEST_TIMEOUT_INVALID");
-  const maxFrameBytes = boundedNumber(options.maxFrameBytes, DEFAULT_MAX_FRAME_BYTES, 1024, 1024 * 1024, "FRAME_LIMIT_INVALID");
+  const maxFrameBytes = boundedNumber(options.maxFrameBytes, DEFAULT_MAX_FRAME_BYTES, 1024, MAX_RELAY_FRAME_BYTES, "FRAME_LIMIT_INVALID");
   agentVersion(options.agentVersion);
   if (typeof options.handleRequest !== "function") fail3("HANDLER_INVALID");
   const identity = await options.store.load();
@@ -28975,7 +28977,7 @@ var OptimizationLedger = class _OptimizationLedger {
 };
 
 // agent/src/main.ts
-var AGENT_VERSION2 = true ? "0.3.2" : "0.3.2";
+var AGENT_VERSION2 = true ? "0.3.3" : "0.3.2";
 function processAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
   try {