localant 1.0.0

package/packages/gateway/dist/managers/git-manager.js

@@ -0,0 +1,67 @@
+import { execFileSafe } from "../util/exec.js";
+/** Git operations executed via execFile (no shell) inside allowed dirs. */
+export class GitManager {
+    guard;
+    constructor(guard) {
+        this.guard = guard;
+    }
+    async git(repo, args) {
+        const cwd = this.guard.assertAccess(repo, "read");
+        const res = await execFileSafe("git", args, { cwd, timeoutMs: 60_000, maxOutputBytes: 200_000 });
+        if (res.code !== 0) {
+            throw new Error(`git ${args.join(" ")} failed: ${res.stderr || res.stdout}`.trim());
+        }
+        return res.stdout;
+    }
+    status(repo) {
+        return this.git(repo, ["status", "--short", "--branch"]);
+    }
+    diff(repo) {
+        return this.git(repo, ["diff"]);
+    }
+    diffFile(repo, file) {
+        return this.git(repo, ["diff", "--", file]);
+    }
+    listChangedFiles(repo) {
+        return this.git(repo, ["status", "--porcelain"]);
+    }
+    branch(repo) {
+        return this.git(repo, ["branch", "--all"]);
+    }
+    log(repo, n = 20) {
+        return this.git(repo, ["log", `-n${n}`, "--oneline", "--decorate"]);
+    }
+    createPatch(repo) {
+        return this.git(repo, ["diff", "--patch"]);
+    }
+    // --- mutating (risk >= 2/3) ---
+    createBranch(repo, name) {
+        assertRef(name);
+        return this.git(repo, ["checkout", "-b", name]);
+    }
+    checkoutBranch(repo, name) {
+        assertRef(name);
+        return this.git(repo, ["checkout", name]);
+    }
+    async commit(repo, message, addAll) {
+        if (addAll)
+            await this.git(repo, ["add", "-A"]);
+        return this.git(repo, ["commit", "-m", message]);
+    }
+    restoreFile(repo, file) {
+        return this.git(repo, ["restore", "--", file]);
+    }
+    async isDirty(repo) {
+        const out = await this.listChangedFiles(repo);
+        return out.trim().length > 0;
+    }
+    async currentBranch(repo) {
+        return (await this.git(repo, ["rev-parse", "--abbrev-ref", "HEAD"])).trim();
+    }
+}
+function assertRef(name) {
+    if (!/^[A-Za-z0-9._\/-]+$/.test(name) || name.startsWith("-")) {
+        throw new Error(`Invalid git ref name: ${name}`);
+    }
+}
+//# sourceMappingURL=git-manager.js.map

package/packages/gateway/dist/managers/git-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-manager.js","sourceRoot":"","sources":["../../src/managers/git-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,2EAA2E;AAC3E,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,KAAgB;QAAhB,UAAK,GAAL,KAAK,CAAW;IAAG,CAAC;IAEzC,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,IAAc;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;QACjG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,QAAQ,CAAC,IAAY,EAAE,IAAY;QACjC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,gBAAgB,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,GAAG,CAAC,IAAY,EAAE,CAAC,GAAG,EAAE;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,WAAW,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,iCAAiC;IACjC,YAAY,CAAC,IAAY,EAAE,IAAY;QACrC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,cAAc,CAAC,IAAY,EAAE,IAAY;QACvC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,OAAe,EAAE,MAAe;QACzD,IAAI,MAAM;YAAE,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,WAAW,CAAC,IAAY,EAAE,IAAY;QACpC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,CAAC;CACF;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}

package/packages/gateway/dist/managers/mcp-bridge.d.ts

@@ -0,0 +1,26 @@
+import type { Config } from "@localant/shared";
+/**
+ * Manages live stdio MCP client connections to downstream servers.
+ * Each server gets its own Client + Transport, lazily initialized on first use.
+ * Tool calls are proxied through the gateway's approval pipeline.
+ */
+export declare class McpBridge {
+    private readonly config;
+    private servers;
+    constructor(config: () => Config);
+    /** Connect to a registered stdio server lazily. */
+    private connect;
+    private listToolsFrom;
+    /** List tools from a downstream server (connects lazily). */
+    listTools(name: string): Promise<{
+        name: string;
+        description?: string;
+    }[]>;
+    /** Call a tool on a downstream server. */
+    callTool(name: string, toolName: string, args: Record<string, unknown>): Promise<unknown>;
+    /** Disconnect a server. */
+    disconnect(name: string): Promise<void>;
+    /** Disconnect all servers. */
+    disconnectAll(): Promise<void>;
+}
+//# sourceMappingURL=mcp-bridge.d.ts.map

package/packages/gateway/dist/managers/mcp-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-bridge.d.ts","sourceRoot":"","sources":["../../src/managers/mcp-bridge.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAa/C;;;;GAIG;AACH,qBAAa,SAAS;IAGR,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,OAAO,CAAmC;gBAErB,MAAM,EAAE,MAAM,MAAM;IAEjD,mDAAmD;YACrC,OAAO;YA0BP,aAAa;IAS3B,6DAA6D;IACvD,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAKhF,0CAA0C;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAgB/F,2BAA2B;IACrB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C,8BAA8B;IACxB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;CAKrC"}

package/packages/gateway/dist/managers/mcp-bridge.js

@@ -0,0 +1,92 @@
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import { createLogger } from "@localant/shared";
+const log = createLogger("mcp-bridge");
+/**
+ * Manages live stdio MCP client connections to downstream servers.
+ * Each server gets its own Client + Transport, lazily initialized on first use.
+ * Tool calls are proxied through the gateway's approval pipeline.
+ */
+export class McpBridge {
+    config;
+    servers = new Map();
+    constructor(config) {
+        this.config = config;
+    }
+    /** Connect to a registered stdio server lazily. */
+    async connect(name) {
+        const cached = this.servers.get(name);
+        if (cached?.connected)
+            return cached;
+        const cfg = this.config().mcpServers[name];
+        if (!cfg)
+            throw new Error(`MCP server '${name}' not registered.`);
+        if (!cfg.enabled)
+            throw new Error(`MCP server '${name}' is disabled.`);
+        const client = new Client({ name: "localant-bridge", version: "1.0.0" });
+        const transport = new StdioClientTransport({ command: cfg.command, args: cfg.args });
+        try {
+            await client.connect(transport);
+            const tools = await this.listToolsFrom(client);
+            const server = { name, client, transport, tools, connected: true };
+            this.servers.set(name, server);
+            log.info(`connected to downstream MCP server '${name}' (${tools.length} tools)`);
+            return server;
+        }
+        catch (err) {
+            log.error(`failed to connect to '${name}'`, err);
+            try {
+                await transport.close();
+            }
+            catch { /* ignore */ }
+            throw new Error(`Failed to connect to MCP server '${name}': ${err.message}`);
+        }
+    }
+    async listToolsFrom(client) {
+        const result = await client.listTools({});
+        return (result.tools ?? []).map((t) => ({
+            name: t.name,
+            description: t.description,
+            inputSchema: t.inputSchema,
+        }));
+    }
+    /** List tools from a downstream server (connects lazily). */
+    async listTools(name) {
+        const server = await this.connect(name);
+        return server.tools.map((t) => ({ name: t.name, description: t.description }));
+    }
+    /** Call a tool on a downstream server. */
+    async callTool(name, toolName, args) {
+        const server = await this.connect(name);
+        const toolDef = server.tools.find((t) => t.name === toolName);
+        if (!toolDef) {
+            throw new Error(`Tool '${toolName}' not found on downstream server '${name}'. Available: ${server.tools.map((t) => t.name).join(", ")}`);
+        }
+        try {
+            const result = await server.client.callTool({ name: toolName, arguments: args });
+            return result;
+        }
+        catch (err) {
+            throw new Error(`Downstream tool '${name}.${toolName}' failed: ${err.message}`);
+        }
+    }
+    /** Disconnect a server. */
+    async disconnect(name) {
+        const server = this.servers.get(name);
+        if (!server)
+            return;
+        try {
+            await server.transport.close();
+        }
+        catch { /* ignore */ }
+        this.servers.delete(name);
+        log.info(`disconnected from '${name}'`);
+    }
+    /** Disconnect all servers. */
+    async disconnectAll() {
+        for (const name of this.servers.keys()) {
+            await this.disconnect(name);
+        }
+    }
+}
+//# sourceMappingURL=mcp-bridge.js.map

package/packages/gateway/dist/managers/mcp-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-bridge.js","sourceRoot":"","sources":["../../src/managers/mcp-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAUvC;;;;GAIG;AACH,MAAM,OAAO,SAAS;IAGS;IAFrB,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAElD,YAA6B,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAG,CAAC;IAErD,mDAAmD;IAC3C,KAAK,CAAC,OAAO,CAAC,IAAY;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,EAAE,SAAS;YAAE,OAAO,MAAM,CAAC;QAErC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,mBAAmB,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,gBAAgB,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAErF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAE/C,MAAM,MAAM,GAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YACjF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,uCAAuC,IAAI,MAAM,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;YACjF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,yBAAyB,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC;gBAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAc;QACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAkD;SAClE,CAAC,CAAC,CAAC;IACN,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,QAAgB,EAAE,IAA6B;QAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAExC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,qCAAqC,IAAI,iBAAiB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3I,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACjF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,IAAI,QAAQ,aAAc,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED,8BAA8B;IAC9B,KAAK,CAAC,aAAa;QACjB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF"}

package/packages/gateway/dist/managers/project-registry.d.ts

@@ -0,0 +1,17 @@
+import type { AppPaths, ProjectRecord } from "@localant/shared";
+import { PathGuard } from "../security/path-guard.js";
+/** Registry of known local projects. Paths must be inside allowed dirs. */
+export declare class ProjectRegistry {
+    private readonly guard;
+    private readonly file;
+    constructor(paths: AppPaths, guard: PathGuard);
+    private read;
+    private write;
+    list(): ProjectRecord[];
+    get(id: string): ProjectRecord | undefined;
+    register(projectPath: string, name?: string): ProjectRecord;
+    unregister(id: string): boolean;
+    update(id: string, patch: Partial<ProjectRecord>): ProjectRecord;
+    detectStack(dir: string): string[];
+}
+//# sourceMappingURL=project-registry.d.ts.map

package/packages/gateway/dist/managers/project-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-registry.d.ts","sourceRoot":"","sources":["../../src/managers/project-registry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAEtD,2EAA2E;AAC3E,qBAAa,eAAe;IAKxB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAJxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;gBAG5B,KAAK,EAAE,QAAQ,EACE,KAAK,EAAE,SAAS;IAKnC,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,KAAK;IAIb,IAAI,IAAI,aAAa,EAAE;IAGvB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAI1C,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,aAAa;IAqB3D,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAQ/B,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa;IAUhE,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;CAanC"}

package/packages/gateway/dist/managers/project-registry.js

@@ -0,0 +1,90 @@
+import fs from "node:fs";
+import path from "node:path";
+import { nanoid } from "nanoid";
+/** Registry of known local projects. Paths must be inside allowed dirs. */
+export class ProjectRegistry {
+    guard;
+    file;
+    constructor(paths, guard) {
+        this.guard = guard;
+        this.file = path.join(paths.root, "projects.json");
+    }
+    read() {
+        try {
+            return JSON.parse(fs.readFileSync(this.file, "utf8"));
+        }
+        catch {
+            return [];
+        }
+    }
+    write(items) {
+        fs.writeFileSync(this.file, JSON.stringify(items, null, 2), { mode: 0o600 });
+    }
+    list() {
+        return this.read();
+    }
+    get(id) {
+        return this.read().find((p) => p.id === id || p.name === id);
+    }
+    register(projectPath, name) {
+        const resolved = this.guard.assertAccess(projectPath, "read");
+        if (!fs.existsSync(resolved) || !fs.statSync(resolved).isDirectory()) {
+            throw new Error(`Not a directory: ${projectPath}`);
+        }
+        const items = this.read();
+        const existing = items.find((p) => p.path === resolved);
+        if (existing)
+            return existing;
+        const record = {
+            id: nanoid(8),
+            name: name ?? path.basename(resolved),
+            path: resolved,
+            registeredAt: new Date().toISOString(),
+            stack: this.detectStack(resolved),
+            defaultBranch: "main",
+        };
+        items.push(record);
+        this.write(items);
+        return record;
+    }
+    unregister(id) {
+        const items = this.read();
+        const next = items.filter((p) => p.id !== id && p.name !== id);
+        if (next.length === items.length)
+            return false;
+        this.write(next);
+        return true;
+    }
+    update(id, patch) {
+        const items = this.read();
+        const idx = items.findIndex((p) => p.id === id || p.name === id);
+        if (idx === -1)
+            throw new Error(`Project not found: ${id}`);
+        const updated = { ...items[idx], ...patch, id: items[idx].id, path: items[idx].path };
+        items[idx] = updated;
+        this.write(items);
+        return updated;
+    }
+    detectStack(dir) {
+        const stack = [];
+        const has = (f) => fs.existsSync(path.join(dir, f));
+        if (has("package.json"))
+            stack.push("node");
+        if (has("pnpm-lock.yaml"))
+            stack.push("pnpm");
+        if (has("tsconfig.json"))
+            stack.push("typescript");
+        if (has("Cargo.toml"))
+            stack.push("rust");
+        if (has("go.mod"))
+            stack.push("go");
+        if (has("requirements.txt") || has("pyproject.toml"))
+            stack.push("python");
+        if (has("pom.xml") || has("build.gradle") || has("build.gradle.kts"))
+            stack.push("jvm");
+        if (has("Gemfile"))
+            stack.push("ruby");
+        return stack;
+    }
+}
+//# sourceMappingURL=project-registry.js.map

package/packages/gateway/dist/managers/project-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-registry.js","sourceRoot":"","sources":["../../src/managers/project-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIhC,2EAA2E;AAC3E,MAAM,OAAO,eAAe;IAKP;IAJF,IAAI,CAAS;IAE9B,YACE,KAAe,EACE,KAAgB;QAAhB,UAAK,GAAL,KAAK,CAAW;QAEjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACrD,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAoB,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACO,KAAK,CAAC,KAAsB;QAClC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;IACD,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,QAAQ,CAAC,WAAmB,EAAE,IAAa;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,oBAAoB,WAAW,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACxD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,MAAM,GAAkB;YAC5B,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;YACb,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrC,IAAI,EAAE,QAAQ;YACd,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YACjC,aAAa,EAAE,MAAM;SACtB,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,KAA6B;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;QACjE,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAE,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,CAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAE,CAAC,IAAI,EAAE,CAAC;QACzF,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,WAAW,CAAC,GAAW;QACrB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,GAAG,CAAC,cAAc,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,gBAAgB,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,eAAe,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,GAAG,CAAC,YAAY,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3E,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,kBAAkB,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxF,IAAI,GAAG,CAAC,SAAS,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/packages/gateway/dist/managers/shell-manager.d.ts

@@ -0,0 +1,48 @@
+import type { Config } from "@localant/shared";
+import { CommandGuard } from "../security/command-guard.js";
+import { PathGuard } from "../security/path-guard.js";
+/**
+ * Executes commands with no shell interpretation: the validated command is
+ * split into argv and run directly. Long-running processes are tracked so
+ * they can be polled and stopped.
+ */
+export declare class ShellManager {
+    private readonly guard;
+    private readonly pathGuard;
+    private readonly config;
+    private readonly processes;
+    constructor(guard: CommandGuard, pathGuard: PathGuard, config: () => Config);
+    private resolveCwd;
+    runAllowed(command: string, cwd?: string): Promise<{
+        code: number | null;
+        stdout: string;
+        stderr: string;
+    }>;
+    runApproved(command: string, cwd?: string): Promise<{
+        code: number | null;
+        stdout: string;
+        stderr: string;
+    }>;
+    private runArgv;
+    /** Spawn a long-running approved process and track it. */
+    startProcess(command: string, cwd?: string): string;
+    listProcesses(): {
+        id: string;
+        command: string;
+        status: "running" | "exited";
+        exitCode: number | null;
+        startedAt: string;
+    }[];
+    getOutput(id: string): {
+        id: string;
+        status: "running" | "exited";
+        exitCode: number | null;
+        stdout: string;
+        stderr: string;
+    };
+    stopProcess(id: string): {
+        id: string;
+        stopped: boolean;
+    };
+}
+//# sourceMappingURL=shell-manager.d.ts.map

package/packages/gateway/dist/managers/shell-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-manager.d.ts","sourceRoot":"","sources":["../../src/managers/shell-manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAgB,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AActD;;;;GAIG;AACH,qBAAa,YAAY;IAIrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;gBAG5C,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,MAAM,MAAM;IAGvC,OAAO,CAAC,UAAU;IAKZ,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAK3G,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;YAKpG,OAAO;IAcrB,0DAA0D;IAC1D,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM;IA+BnD,aAAa;;;;;;;IAUb,SAAS,CAAC,EAAE,EAAE,MAAM;;;;;;;IAMpB,WAAW,CAAC,EAAE,EAAE,MAAM;;;;CAMvB"}

package/packages/gateway/dist/managers/shell-manager.js

@@ -0,0 +1,132 @@
+import { spawn } from "node:child_process";
+import { nanoid } from "nanoid";
+import { parseCommand } from "../security/command-guard.js";
+import { execFileSafe } from "../util/exec.js";
+/**
+ * Executes commands with no shell interpretation: the validated command is
+ * split into argv and run directly. Long-running processes are tracked so
+ * they can be polled and stopped.
+ */
+export class ShellManager {
+    guard;
+    pathGuard;
+    config;
+    processes = new Map();
+    constructor(guard, pathGuard, config) {
+        this.guard = guard;
+        this.pathGuard = pathGuard;
+        this.config = config;
+    }
+    resolveCwd(cwd) {
+        if (!cwd)
+            return this.pathGuard.allowed()[0] ?? process.cwd();
+        return this.pathGuard.assertAccess(cwd, "read");
+    }
+    async runAllowed(command, cwd) {
+        const normalized = this.guard.assertAllowed(command);
+        return this.runArgv(normalized, cwd);
+    }
+    async runApproved(command, cwd) {
+        const normalized = this.guard.assertNotBlocked(command);
+        return this.runArgv(normalized, cwd);
+    }
+    async runArgv(normalized, cwd) {
+        const { tokens } = parseCommand(normalized);
+        const [file, ...args] = splitArgs(normalized);
+        if (!file)
+            throw new Error("Empty command.");
+        void tokens;
+        const sec = this.config().security;
+        const res = await execFileSafe(file, args, {
+            cwd: this.resolveCwd(cwd),
+            timeoutMs: sec.commandTimeoutMs,
+            maxOutputBytes: sec.maxOutputBytes,
+        });
+        return { code: res.code, stdout: res.stdout, stderr: res.stderr };
+    }
+    /** Spawn a long-running approved process and track it. */
+    startProcess(command, cwd) {
+        const normalized = this.guard.assertNotBlocked(command);
+        const [file, ...args] = splitArgs(normalized);
+        if (!file)
+            throw new Error("Empty command.");
+        const child = spawn(file, args, { cwd: this.resolveCwd(cwd), shell: false });
+        const id = nanoid(8);
+        const proc = {
+            id,
+            command: normalized,
+            child,
+            stdout: "",
+            stderr: "",
+            startedAt: new Date().toISOString(),
+            exitCode: null,
+            status: "running",
+        };
+        const cap = this.config().security.maxOutputBytes;
+        child.stdout?.on("data", (d) => {
+            if (proc.stdout.length < cap)
+                proc.stdout += d.toString("utf8");
+        });
+        child.stderr?.on("data", (d) => {
+            if (proc.stderr.length < cap)
+                proc.stderr += d.toString("utf8");
+        });
+        child.on("close", (code) => {
+            proc.exitCode = code;
+            proc.status = "exited";
+        });
+        this.processes.set(id, proc);
+        return id;
+    }
+    listProcesses() {
+        return [...this.processes.values()].map((p) => ({
+            id: p.id,
+            command: p.command,
+            status: p.status,
+            exitCode: p.exitCode,
+            startedAt: p.startedAt,
+        }));
+    }
+    getOutput(id) {
+        const p = this.processes.get(id);
+        if (!p)
+            throw new Error(`Process not found: ${id}`);
+        return { id, status: p.status, exitCode: p.exitCode, stdout: p.stdout, stderr: p.stderr };
+    }
+    stopProcess(id) {
+        const p = this.processes.get(id);
+        if (!p)
+            throw new Error(`Process not found: ${id}`);
+        p.child.kill("SIGTERM");
+        return { id, stopped: true };
+    }
+}
+/** Split a normalized command string into argv, honoring simple quoting. */
+function splitArgs(command) {
+    const args = [];
+    let current = "";
+    let quote = null;
+    for (const ch of command) {
+        if (quote) {
+            if (ch === quote)
+                quote = null;
+            else
+                current += ch;
+        }
+        else if (ch === '"' || ch === "'") {
+            quote = ch;
+        }
+        else if (ch === " ") {
+            if (current)
+                args.push(current);
+            current = "";
+        }
+        else {
+            current += ch;
+        }
+    }
+    if (current)
+        args.push(current);
+    return args;
+}
+//# sourceMappingURL=shell-manager.js.map

package/packages/gateway/dist/managers/shell-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-manager.js","sourceRoot":"","sources":["../../src/managers/shell-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAAgB,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE1E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAa/C;;;;GAIG;AACH,MAAM,OAAO,YAAY;IAIJ;IACA;IACA;IALF,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE/D,YACmB,KAAmB,EACnB,SAAoB,EACpB,MAAoB;QAFpB,UAAK,GAAL,KAAK,CAAc;QACnB,cAAS,GAAT,SAAS,CAAW;QACpB,WAAM,GAAN,MAAM,CAAc;IACpC,CAAC;IAEI,UAAU,CAAC,GAAY;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,GAAY;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,GAAY;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,UAAkB,EAAE,GAAY;QACpD,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE;YACzC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACzB,SAAS,EAAE,GAAG,CAAC,gBAAgB;YAC/B,cAAc,EAAE,GAAG,CAAC,cAAc;SACnC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACpE,CAAC;IAED,0DAA0D;IAC1D,YAAY,CAAC,OAAe,EAAE,GAAY;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,IAAI,GAAmB;YAC3B,EAAE;YACF,OAAO,EAAE,UAAU;YACnB,KAAK;YACL,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,SAAS;SAClB,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;QAClD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG;gBAAE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG;gBAAE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,aAAa;QACX,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5F,CAAC;IAED,WAAW,CAAC,EAAU;QACpB,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/B,CAAC;CACF;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAqB,IAAI,CAAC;IACnC,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,EAAE,KAAK,KAAK;gBAAE,KAAK,GAAG,IAAI,CAAC;;gBAC1B,OAAO,IAAI,EAAE,CAAC;QACrB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACpC,KAAK,GAAG,EAAE,CAAC;QACb,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChC,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/packages/gateway/dist/managers/skill-runtime.d.ts

@@ -0,0 +1,37 @@
+import { type AppPaths, type SkillManifest, type SkillState, type RiskLevel } from "@localant/shared";
+/**
+ * Loads, validates, enables/disables, runs and generates local skills.
+ * Generated skills are always saved disabled.
+ */
+export declare class SkillRuntime {
+    private readonly paths;
+    private readonly secretResolver;
+    private readonly stateFile;
+    constructor(paths: AppPaths, secretResolver: (names: string[]) => Record<string, string>);
+    private loadState;
+    private saveState;
+    /** Directories that may contain skills: the user skills dir + bundled examples. */
+    private skillDirs;
+    list(): SkillState[];
+    get(name: string): SkillState | undefined;
+    private installedAt;
+    private readManifest;
+    validate(name: string): {
+        valid: boolean;
+        errors: string[];
+    };
+    setEnabled(name: string, enabled: boolean): SkillState;
+    /** Execute a tool inside a skill in an isolated subprocess. */
+    run(name: string, tool: string, input: unknown): Promise<unknown>;
+    /** Create a skill skeleton on disk (always disabled). */
+    generate(input: {
+        name: string;
+        description: string;
+        requirements?: string[];
+        permissions?: Partial<SkillManifest["permissions"]>;
+        riskLevel?: RiskLevel;
+        fromPrompt?: boolean;
+    }): SkillState;
+    uninstall(name: string): boolean;
+}
+//# sourceMappingURL=skill-runtime.d.ts.map

package/packages/gateway/dist/managers/skill-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-runtime.d.ts","sourceRoot":"","sources":["../../src/managers/skill-runtime.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,SAAS,EACf,MAAM,kBAAkB,CAAC;AAS1B;;;GAGG;AACH,qBAAa,YAAY;IAIrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAJjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAGhB,KAAK,EAAE,QAAQ,EACf,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAK9E,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,SAAS;IAIjB,mFAAmF;IACnF,OAAO,CAAC,SAAS;IAQjB,IAAI,IAAI,UAAU,EAAE;IA6BpB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAIzC,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,YAAY;IAmCpB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE;IAU5D,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,UAAU;IAatD,+DAA+D;IACzD,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IA8BvE,yDAAyD;IACzD,QAAQ,CAAC,KAAK,EAAE;QACd,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;QACpD,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,GAAG,UAAU;IAsDd,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAYjC"}