maestro-agent-sdk 0.1.3 → 0.1.5

package/dist/tools/builtin/write.d.ts

@@ -1,9 +1,5 @@
 import type { FileStateTracker } from "../../tools/file-state.js";
 import type { ToolHandler } from "../../tools/registry.js";
-/**
- * NOTE: filesystem sandboxing now lives in the `sandbox-fs` PreToolUse hook.
- * Standalone callers (tests, scripts) without the registry get NO sandbox.
- */
 /**
  * Write builtin — claude SDK `Write` tool parity for maestro.
  *
@@ -13,12 +9,10 @@ import type { ToolHandler } from "../../tools/registry.js";
  * additive writes should use the bash tool with `>>` for now (Phase 5 may add
  * a separate `Edit` builtin that handles the read-modify-write cycle).
  *
- * Path safety: absolute path is enforced. The write is NOT sandboxed under
- * the workspace dir here — the host's permission system (PreToolUse hooks
- * via `ToolRegistry`, or the optional `createSandboxFsHook`) plus the agent
- * loop's abort plumbing are the authoritative guardrails. A stricter check
- * can land later without breaking the schema (the model only sees the public
- * fields).
+ * Path safety: absolute path is enforced. Any further restriction (workspace
+ * allowlist, owner check, etc.) is the host's job — register a PreToolUse
+ * hook via `ToolRegistry.use()` and inspect `ctx.input.file_path` there.
+ * The agent loop's abort plumbing remains the authoritative cancel path.
  */
 export interface WriteToolOptions {
     /**

package/dist/tools/builtin/write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../../src/tools/builtin/write.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;;GAGG;AAEH;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B;AAED,wBAAgB,eAAe,CAAC,IAAI,GAAE,gBAAqB,GAAG,WAAW,CAkExE;AAED,mDAAmD;AACnD,eAAO,MAAM,SAAS,EAAE,WAA+B,CAAC"}
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../../src/tools/builtin/write.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B;AAED,wBAAgB,eAAe,CAAC,IAAI,GAAE,gBAAqB,GAAG,WAAW,CAkExE;AAED,mDAAmD;AACnD,eAAO,MAAM,SAAS,EAAE,WAA+B,CAAC"}

package/dist/tools/builtin/write.js.map

@@ -1 +1 @@
-{"version":3,"file":"write.js","sourceRoot":"","sources":["../../../src/tools/builtin/write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAqChD,MAAM,UAAU,eAAe,CAAC,OAAyB,EAAE;IACzD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzB,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,OAAO;YACb,WAAW,EACT,sEAAsE;gBACtE,uEAAuE;gBACvE,qEAAqE;YACvE,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE;wBACT,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,+DAA+D;qBAC7E;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,kDAAkD;qBAChE;iBACF;gBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC;aACnC;SACF;QACD,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,2CAA2C,QAAQ,GAAG;iBAC9D,CAAC,CAAC;YACL,CAAC;YACD,mEAAmE;YACnE,0EAA0E;YAC1E,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC7D,IAAI,OAAO;oBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,0CAA0C,OAAO,KAAK,CAAC,OAAO,EAAE;iBACxE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAE9B,IAAI,CAAC;gBACH,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,kBAAkB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;iBACtE,CAAC,CAAC;YACL,CAAC;YAED,qEAAqE;YACrE,uDAAuD;YACvD,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE1B,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,OAAO,iBAAiB,QAAQ,KAAK,KAAK,SAAS,CAAC;QACtD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,SAAS,GAAgB,eAAe,EAAE,CAAC"}
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../../src/tools/builtin/write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA8BhD,MAAM,UAAU,eAAe,CAAC,OAAyB,EAAE;IACzD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzB,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,OAAO;YACb,WAAW,EACT,sEAAsE;gBACtE,uEAAuE;gBACvE,qEAAqE;YACvE,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE;wBACT,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,+DAA+D;qBAC7E;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,kDAAkD;qBAChE;iBACF;gBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC;aACnC;SACF;QACD,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,2CAA2C,QAAQ,GAAG;iBAC9D,CAAC,CAAC;YACL,CAAC;YACD,mEAAmE;YACnE,0EAA0E;YAC1E,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC7D,IAAI,OAAO;oBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,0CAA0C,OAAO,KAAK,CAAC,OAAO,EAAE;iBACxE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAE9B,IAAI,CAAC;gBACH,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,kBAAkB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;iBACtE,CAAC,CAAC;YACL,CAAC;YAED,qEAAqE;YACrE,uDAAuD;YACvD,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE1B,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,OAAO,iBAAiB,QAAQ,KAAK,KAAK,SAAS,CAAC;QACtD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,SAAS,GAAgB,eAAe,EAAE,CAAC"}

package/dist/tools/file-state.d.ts

@@ -63,7 +63,7 @@ export declare class FileStateTracker {
     /**
      * Check whether `absPath` may be Edit/Write'd. Returns null on allow,
      * or a string error on deny — callers stringify into `{error}` so the
-     * model sees the same shape as sandbox / arg-validation rejections.
+     * model sees the same shape as arg-validation rejections.
      *
      * Three reject paths:
      *   - "no_read": never Read this session. Forces the model to Read first.

package/dist/tools/file-state.js

@@ -29,7 +29,7 @@ export class FileStateTracker {
     /**
      * Check whether `absPath` may be Edit/Write'd. Returns null on allow,
      * or a string error on deny — callers stringify into `{error}` so the
-     * model sees the same shape as sandbox / arg-validation rejections.
+     * model sees the same shape as arg-validation rejections.
      *
      * Three reject paths:
      *   - "no_read": never Read this session. Forces the model to Read first.

package/dist/tools/registry.d.ts

@@ -8,7 +8,7 @@ import type { ProviderToolSchema } from "../providers/base.js";
  *
  * Phase 2 adds a hook chain around `dispatch` (PreToolUse / PostToolUse)
  * matching Claude Code's settings.json hook surface. Hooks centralize
- * policy that would otherwise be sprinkled across tools — sandbox gates,
+ * policy that would otherwise be sprinkled across tools — path allowlists,
  * automatic redaction, telemetry.
  */
 /**

package/dist/types.d.ts

@@ -84,6 +84,24 @@ export interface AgentQueryOptions {
     agent: AgentKind;
     prompt: string;
     sessionId?: string | null;
+    /**
+     * Working-directory hint for this session.
+     *
+     * The SDK uses this for two narrow purposes:
+     *  1. `mkdir -p` so the path exists when subsequent host code stats it
+     *     (e.g. resume flows that read files from the session's expected root).
+     *  2. Stamp it into the rollout `_meta` header (since v0.1.5) so a future
+     *     indexer / forensic sweep can attribute the on-disk JSONL to a project.
+     *
+     * Note: the SDK loop itself does **not** chdir, and the built-in tools
+     * (Read/Write/Edit) require absolute paths regardless of this value. The
+     * Bash tool's `cwd` is per-call input from the model, NOT auto-injected
+     * from this field. Future minor versions may evolve tools to respect this
+     * hint, but today it is treated as metadata.
+     *
+     * Pass the canonical project / workspace path the host wants associated
+     * with this session.
+     */
     cwd: string;
     systemPrompt: string;
     userId?: string;
@@ -106,5 +124,51 @@ export interface AgentQueryOptions {
     mcpExtra?: Record<string, unknown>;
     isCron?: boolean;
     silent?: boolean;
+    /**
+     * Named skill profile within the per-cwd `.skills/` directory. The SDK
+     * resolves the skill catalog source as:
+     *
+     *   - `<cwd>/.skills/<skillKey>/`            when set
+     *   - `<cwd>/.skills/<MAESTRO_DEFAULT_SKILL_KEY>/` when omitted (literally
+     *     `<cwd>/.skills/default/` — the constant is exported so hosts can
+     *     reference it symbolically).
+     *
+     * Every skill lives under a named key — the SDK never loads from the
+     * `.skills/` root directly. This keeps the layout uniform so a caller
+     * scanning the filesystem can answer "which profiles exist?" with one
+     * `readdir`.
+     *
+     * Use case: one workspace, multiple disjoint skill sets. A topic /
+     * session passes a key (e.g. "legal", "coding"); the agent's catalog
+     * is whatever lives under that subdirectory. New skills the agent
+     * writes during the session naturally land in the same subdir — the
+     * keyed dir IS the loader root, so created skills stay scoped to the
+     * key without extra plumbing.
+     *
+     * This is the only knob the SDK exposes for skill-source routing —
+     * `(cwd, skillKey)` is a deterministic pair, so two sessions with the
+     * same pair load the same catalog and there's no env-var / explicit-
+     * dir precedence chain to reason about.
+     */
+    skillKey?: string;
+    /**
+     * Whitelist of skill names this call may surface. When provided, the
+     * loaded catalog is filtered down to entries whose `name` matches one
+     * of the listed values BEFORE curation, index rendering, and
+     * `skill_view` registration. Unknown names in the list are silently
+     * ignored (no error) so a host can safely pass a superset.
+     *
+     * Omit (or pass `undefined`) to allow every loaded skill — the default
+     * pre-0.1.5 behavior.
+     */
+    allowedSkills?: string[];
+    /**
+     * Opaque host-controlled bag persisted alongside the session as part of
+     * the rollout `_meta` header. The SDK reads and writes this verbatim and
+     * never interprets its shape — useful for round-tripping `topicId`,
+     * `groupId`, or any other host-side identifiers that should follow the
+     * session across persistence.
+     */
+    sessionMetadata?: Record<string, unknown>;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,oDAAqD,CAAC;AACxF,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC;AAElF;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;AACvD,eAAO,MAAM,gBAAgB,EAAE,SAAS,SAAS,EAA4C,CAAC;AAC9F,eAAO,MAAM,cAAc,EAAE,SAAoB,CAAC;AAElD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D;AAED;;;GAGG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,UAAU,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,GAAG,WAAW,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,IAAI,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CACb,MAAM,EACN;QACE,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;KAC/B,CACF,CAAC;IACF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,oDAAqD,CAAC;AACxF,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC;AAElF;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;AACvD,eAAO,MAAM,gBAAgB,EAAE,SAAS,SAAS,EAA4C,CAAC;AAC9F,eAAO,MAAM,cAAc,EAAE,SAAoB,CAAC;AAElD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D;AAED;;;GAGG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,UAAU,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,GAAG,WAAW,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;;;;;;;;;;;;;OAiBG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,IAAI,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CACb,MAAM,EACN;QACE,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;KAC/B,CACF,CAAC;IACF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maestro-agent-sdk",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Embeddable, provider-agnostic TypeScript agent SDK — pluggable providers, built-in tools, skills, memory, and MCP.",
   "license": "MIT",
   "author": "Yeonwoo Jeong <aadd4020@gmail.com>",

package/dist/state/todos.d.ts

@@ -1,95 +0,0 @@
-/**
- * Per-session todo list backing TodoWrite.
- *
- * The model gets a single `todo_write` tool to upsert / mutate the list. There
- * is no `todo_list` tool — read-side surfaces via the per-turn system
- * reminder, which keeps the model from juggling two near-identical tools
- * (and saves a per-turn round-trip for what is fundamentally a snapshot view).
- *
- * Persistence: one JSON file at `~/.maestro/sessions/<sid>.todos.json` — a
- * snapshot of the current list, atomically written. Not JSONL: `todo_write`
- * semantically OVERWRITES the list each call, so an append-only stream
- * would accumulate dead entries the loader has to filter. A single JSON
- * snapshot matches the actual semantics and is cheaper to read.
- *
- * Lifecycle:
- *   - `getTodoStore(sid)` lazy-creates the store and hydrates from disk if
- *     a prior turn wrote one.
- *   - `dropTodoStore(sid)` is called from `deleteMaestroSession` and
- *     `cleanupStaleMaestroSessions` (same pattern as `file-state.ts`) so the
- *     module-level map can't outlive its sessions.
- *
- * Invariants enforced at upsert time:
- *   - At most one entry is `in_progress`. Setting a second one to
- *     `in_progress` flips any prior one to `pending` and warns the caller
- *     via the tool result. Mirrors Claude Code's TodoWrite contract.
- *   - IDs are auto-assigned (`task-1`, `task-2`, …) when omitted. Short IDs
- *     so the model can refer back to them in prose without bloat.
- */
-export type TodoStatus = "pending" | "in_progress" | "completed";
-export interface TodoEntry {
-    id: string;
-    content: string;
-    status: TodoStatus;
-    /** Optional present-continuous form for spinner/status display
-     *  ("Reading config" vs the imperative "Read config"). */
-    activeForm?: string;
-}
-export interface TodoUpsert {
-    id?: string;
-    content: string;
-    status: TodoStatus;
-    activeForm?: string;
-}
-export interface UpsertResult {
-    todos: TodoEntry[];
-    /** Set when the upsert had to flip a prior in_progress to pending to
-     *  enforce the 1-in-progress invariant. The tool surfaces this in its
-     *  result so the model knows the previously-active item was bumped. */
-    demotedId?: string;
-}
-export declare class TodoStore {
-    private readonly path;
-    private todos;
-    private nextCounter;
-    constructor(path: string);
-    /** Read the current list. Caller must not mutate. */
-    list(): readonly TodoEntry[];
-    /** True when the list is empty (no in-flight or pending work). */
-    isEmpty(): boolean;
-    /**
-     * Replace / upsert the entire list. Entries with an `id` that matches an
-     * existing one update that entry; entries without an id (or with an id
-     * not in the current list) become new entries with an auto-assigned id.
-     *
-     * The shape mirrors Claude Code's TodoWrite: the model passes a complete
-     * snapshot of "what I want the list to look like now," and we reconcile.
-     * That means an existing id NOT included in the incoming snapshot is
-     * dropped — TodoWrite is a snapshot replace, not a partial update.
-     *
-     * Returns `{todos, demotedId?}` so the tool can tell the model exactly
-     * what landed (incl. any in-progress demotion).
-     */
-    upsert(incoming: TodoUpsert[]): UpsertResult;
-    /** Drop the on-disk file. Called by deleteMaestroSession via dropTodoStore. */
-    unlinkFile(): void;
-    /** Test-only: snapshot the path the store is backed by. */
-    __path(): string;
-    private nextId;
-    private hydrate;
-    /** Recover the counter from existing IDs when the file lacked the field
-     *  (defensive — recent hydrate writes always include it). */
-    private deriveCounter;
-    private persist;
-}
-/** Resolve the absolute todos-file path for a session. Mirrors
- *  `maestroSessionPath` but with `.todos.json` instead of `.jsonl`. */
-export declare function todosPathFor(sessionId: string): string;
-export declare function getTodoStore(sessionId: string): TodoStore;
-/** Drop a session's store + unlink its on-disk file. */
-export declare function dropTodoStore(sessionId: string): void;
-/** Test-only. Reset every store. */
-export declare function __resetAllStores(): void;
-/** Test-only. Count of currently-tracked sessions. */
-export declare function __storeCount(): number;
-//# sourceMappingURL=todos.d.ts.map

package/dist/state/todos.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"todos.d.ts","sourceRoot":"","sources":["../../src/state/todos.ts"],"names":[],"mappings":"AAoBA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,WAAW,CAAC;AAEjE,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;IACnB;8DAC0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AASD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;;2EAEuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,SAAS;IAIR,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,OAAO,CAAC,KAAK,CAAmB;IAChC,OAAO,CAAC,WAAW,CAAK;gBAEK,IAAI,EAAE,MAAM;IAIzC,qDAAqD;IACrD,IAAI,IAAI,SAAS,SAAS,EAAE;IAI5B,kEAAkE;IAClE,OAAO,IAAI,OAAO;IAIlB;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,YAAY;IAwC5C,+EAA+E;IAC/E,UAAU,IAAI,IAAI;IAUlB,2DAA2D;IAC3D,MAAM,IAAI,MAAM;IAMhB,OAAO,CAAC,MAAM;IAMd,OAAO,CAAC,OAAO;IAgBf;iEAC6D;IAC7D,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,OAAO;CAQhB;AAqBD;uEACuE;AACvE,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEtD;AAeD,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAOzD;AAED,wDAAwD;AACxD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAMrD;AAED,oCAAoC;AACpC,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED,sDAAsD;AACtD,wBAAgB,YAAY,IAAI,MAAM,CAErC"}

package/dist/state/todos.js

@@ -1,198 +0,0 @@
-import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, join } from "node:path";
-import { logger } from "../platform/logger.js";
-/** Mirror of `maestroSessionsDir()` from session-store.ts — inlined here to
- *  avoid a circular import (session-store.ts needs to call
- *  `dropTodoStore` for cleanup). Two single-line copies are cheaper than
- *  extracting a shared util file for one path. */
-function sessionsDir() {
-    return join(homedir(), ".maestro", "sessions");
-}
-export class TodoStore {
-    path;
-    todos = [];
-    nextCounter = 1;
-    constructor(path) {
-        this.path = path;
-        this.hydrate();
-    }
-    /** Read the current list. Caller must not mutate. */
-    list() {
-        return this.todos;
-    }
-    /** True when the list is empty (no in-flight or pending work). */
-    isEmpty() {
-        return this.todos.length === 0;
-    }
-    /**
-     * Replace / upsert the entire list. Entries with an `id` that matches an
-     * existing one update that entry; entries without an id (or with an id
-     * not in the current list) become new entries with an auto-assigned id.
-     *
-     * The shape mirrors Claude Code's TodoWrite: the model passes a complete
-     * snapshot of "what I want the list to look like now," and we reconcile.
-     * That means an existing id NOT included in the incoming snapshot is
-     * dropped — TodoWrite is a snapshot replace, not a partial update.
-     *
-     * Returns `{todos, demotedId?}` so the tool can tell the model exactly
-     * what landed (incl. any in-progress demotion).
-     */
-    upsert(incoming) {
-        const out = [];
-        let demotedId;
-        // First pass: build the new list, assigning IDs to entries that need
-        // them. We do this BEFORE the 1-in-progress sweep so the auto-IDs are
-        // available for the warning message.
-        for (const item of incoming) {
-            const id = item.id?.trim() || this.nextId();
-            out.push({
-                id,
-                content: item.content,
-                status: item.status,
-                ...(item.activeForm ? { activeForm: item.activeForm } : {}),
-            });
-        }
-        // Second pass: enforce 1-in-progress. Walk in incoming order; the LAST
-        // in_progress wins (mirrors how a model batch-updates and the final
-        // entry expresses current intent). Earlier in_progress entries are
-        // flipped to pending and surfaced via `demotedId`.
-        let lastInProgressIdx = -1;
-        for (let i = 0; i < out.length; i++) {
-            if (out[i].status === "in_progress")
-                lastInProgressIdx = i;
-        }
-        if (lastInProgressIdx >= 0) {
-            for (let i = 0; i < out.length; i++) {
-                if (i === lastInProgressIdx)
-                    continue;
-                if (out[i].status === "in_progress") {
-                    out[i] = { ...out[i], status: "pending" };
-                    demotedId = out[i].id;
-                }
-            }
-        }
-        this.todos = out;
-        this.persist();
-        return demotedId !== undefined ? { todos: out, demotedId } : { todos: out };
-    }
-    /** Drop the on-disk file. Called by deleteMaestroSession via dropTodoStore. */
-    unlinkFile() {
-        try {
-            unlinkSync(this.path);
-        }
-        catch (e) {
-            if (e?.code !== "ENOENT") {
-                logger.warn({ err: e, path: this.path }, "TodoStore.unlinkFile failed");
-            }
-        }
-    }
-    /** Test-only: snapshot the path the store is backed by. */
-    __path() {
-        return this.path;
-    }
-    // --- internals ---------------------------------------------------------
-    nextId() {
-        const id = `task-${this.nextCounter}`;
-        this.nextCounter++;
-        return id;
-    }
-    hydrate() {
-        if (!existsSync(this.path))
-            return;
-        try {
-            const raw = readFileSync(this.path, "utf8");
-            const parsed = JSON.parse(raw);
-            if (parsed.version !== 1 || !Array.isArray(parsed.todos)) {
-                logger.warn({ path: this.path }, "TodoStore.hydrate: unsupported schema, ignoring");
-                return;
-            }
-            this.todos = parsed.todos.filter(isWellFormedEntry);
-            this.nextCounter = Math.max(1, parsed.nextCounter ?? this.deriveCounter());
-        }
-        catch (e) {
-            logger.warn({ err: e, path: this.path }, "TodoStore.hydrate: parse failed, starting empty");
-        }
-    }
-    /** Recover the counter from existing IDs when the file lacked the field
-     *  (defensive — recent hydrate writes always include it). */
-    deriveCounter() {
-        let max = 0;
-        for (const t of this.todos) {
-            const m = /^task-(\d+)$/.exec(t.id);
-            if (m)
-                max = Math.max(max, Number.parseInt(m[1], 10));
-        }
-        return max + 1;
-    }
-    persist() {
-        const file = {
-            version: 1,
-            nextCounter: this.nextCounter,
-            todos: this.todos,
-        };
-        writeAtomic(this.path, file);
-    }
-}
-/** Atomic write: tmp → rename. Same pattern as skills/usage.ts. */
-function writeAtomic(path, contents) {
-    mkdirSync(dirname(path), { recursive: true });
-    const tmp = `${path}.tmp-${process.pid}-${Date.now()}`;
-    writeFileSync(tmp, JSON.stringify(contents, null, 2));
-    renameSync(tmp, path);
-}
-function isWellFormedEntry(v) {
-    if (!v || typeof v !== "object")
-        return false;
-    const o = v;
-    if (typeof o.id !== "string" || typeof o.content !== "string")
-        return false;
-    if (o.status !== "pending" && o.status !== "in_progress" && o.status !== "completed") {
-        return false;
-    }
-    if (o.activeForm !== undefined && typeof o.activeForm !== "string")
-        return false;
-    return true;
-}
-/** Resolve the absolute todos-file path for a session. Mirrors
- *  `maestroSessionPath` but with `.todos.json` instead of `.jsonl`. */
-export function todosPathFor(sessionId) {
-    return join(sessionsDir(), `${sessionId}.todos.json`);
-}
-/**
- * Module-level registry — same pattern as `file-state.ts`.
- *
- * The maestroProvider rebuilds tools each turn but the sessionId persists
- * across turns. A registry-local store would re-hydrate every turn (cheap
- * but wasteful); a module-level cache keeps the in-memory list hot.
- *
- * Cleanup is wired into `deleteMaestroSession` and
- * `cleanupStaleMaestroSessions` (see session-store.ts) so the map can't
- * outlive its sessions.
- */
-const stores = new Map();
-export function getTodoStore(sessionId) {
-    let s = stores.get(sessionId);
-    if (!s) {
-        s = new TodoStore(todosPathFor(sessionId));
-        stores.set(sessionId, s);
-    }
-    return s;
-}
-/** Drop a session's store + unlink its on-disk file. */
-export function dropTodoStore(sessionId) {
-    const s = stores.get(sessionId);
-    if (s) {
-        s.unlinkFile();
-        stores.delete(sessionId);
-    }
-}
-/** Test-only. Reset every store. */
-export function __resetAllStores() {
-    stores.clear();
-}
-/** Test-only. Count of currently-tracked sessions. */
-export function __storeCount() {
-    return stores.size;
-}
-//# sourceMappingURL=todos.js.map

package/dist/state/todos.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"todos.js","sourceRoot":"","sources":["../../src/state/todos.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C;;;kDAGkD;AAClD,SAAS,WAAW;IAClB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AACjD,CAAC;AAgED,MAAM,OAAO,SAAS;IAIS;IAHrB,KAAK,GAAgB,EAAE,CAAC;IACxB,WAAW,GAAG,CAAC,CAAC;IAExB,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,qDAAqD;IACrD,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,kEAAkE;IAClE,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,QAAsB;QAC3B,MAAM,GAAG,GAAgB,EAAE,CAAC;QAC5B,IAAI,SAA6B,CAAC;QAElC,qEAAqE;QACrE,sEAAsE;QACtE,qCAAqC;QACrC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE;gBACF,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5D,CAAC,CAAC;QACL,CAAC;QAED,uEAAuE;QACvE,oEAAoE;QACpE,mEAAmE;QACnE,mDAAmD;QACnD,IAAI,iBAAiB,GAAG,CAAC,CAAC,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa;gBAAE,iBAAiB,GAAG,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,iBAAiB,IAAI,CAAC,EAAE,CAAC;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,IAAI,CAAC,KAAK,iBAAiB;oBAAE,SAAS;gBACtC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;oBACpC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBAC1C,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC9E,CAAC;IAED,+EAA+E;IAC/E,UAAU;QACR,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,6BAA6B,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,0EAA0E;IAElE,MAAM;QACZ,MAAM,EAAE,GAAG,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;YACpD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,iDAAiD,CAAC,CAAC;gBACpF,OAAO;YACT,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACpD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,iDAAiD,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED;iEAC6D;IACrD,aAAa;QACnB,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC;gBAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,GAAG,GAAG,CAAC,CAAC;IACjB,CAAC;IAEO,OAAO;QACb,MAAM,IAAI,GAAa;YACrB,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;QACF,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,mEAAmE;AACnE,SAAS,WAAW,CAAC,IAAY,EAAE,QAAkB;IACnD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAU;IACnC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5E,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;uEACuE;AACvE,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,SAAS,aAAa,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;AAE5C,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG,IAAI,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC;QACN,CAAC,CAAC,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,gBAAgB;IAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,YAAY;IAC1B,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/tools/builtin/sandbox.d.ts

@@ -1,16 +0,0 @@
-/**
- * Check whether `filePath` is allowed by the sandbox. Returns null on allow,
- * or an error message string on deny. Callers stringify the error into a
- * `{error}` payload so the model sees a structured rejection.
- *
- * The path is normalized (`..` collapsed) but symlinks are NOT followed.
- * Caller is responsible for ensuring `filePath` is already absolute — the
- * Read/Write/Edit tools enforce that at the top of `execute`.
- */
-export declare function checkFilesystemAccess(filePath: string): string | null;
-/** Whether the sandbox is currently active. Default is OFF; the operator
- *  opts in by exporting `MAESTRO_FS_SANDBOX_ENABLED=1`. Read each call so a
- *  test can toggle it without restarting the process. */
-export declare function isSandboxEnabled(): boolean;
-export declare const __ENV_ENABLED = "MAESTRO_FS_SANDBOX_ENABLED";
-//# sourceMappingURL=sandbox.d.ts.map

package/dist/tools/builtin/sandbox.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/tools/builtin/sandbox.ts"],"names":[],"mappings":"AA+BA;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYrE;AAED;;yDAEyD;AACzD,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED,eAAO,MAAM,aAAa,+BAAc,CAAC"}

package/dist/tools/builtin/sandbox.js

@@ -1,59 +0,0 @@
-import { resolve as resolvePath } from "node:path";
-import { WORKSPACE_DIR } from "../../platform/config.js";
-/**
- * Maestro builtin filesystem sandbox.
- *
- * Optional gate Read/Write/Edit (and any PreToolUse hook that consults it)
- * can use to constrain file access to `${WORKSPACE_DIR}`. Default is
- * **disabled** — claude/codex providers grant unconstrained FS access via
- * `bypassPermissions` / `danger-full-access`, and forcing a stricter posture
- * on maestro alone silently breaks any workflow that legitimately reaches
- * outside the workspace (reading `~/.config`, writing into a sibling repo,
- * etc.). The single-tenant Mac deployments maestro targets trust the model
- * with the whole UID anyway.
- *
- * Opt-in: set `MAESTRO_FS_SANDBOX_ENABLED=1` to enforce. Only paths under
- * `${WORKSPACE_DIR}` (defaults to `~/maestro-workspace`, override via
- * `MAESTRO_WORKSPACE_DIR`) are allowed when enabled; system paths
- * (`~/.ssh`, `/etc`, `/usr`, sibling project clones, etc.) are rejected.
- * Useful for multi-tenant or hardened setups where the model should not be
- * trusted with arbitrary FS access.
- *
- * Symlink note: we resolve `..` segments via `path.resolve` but do NOT
- * follow symlinks (no `realpathSync`) — a symlink inside the workspace
- * pointing OUT is still considered inside (the link target is what gets
- * written/read, and the user explicitly placed that link there). Tightening
- * this is a follow-up if it ever matters.
- */
-const ENV_ENABLED = "MAESTRO_FS_SANDBOX_ENABLED";
-/**
- * Check whether `filePath` is allowed by the sandbox. Returns null on allow,
- * or an error message string on deny. Callers stringify the error into a
- * `{error}` payload so the model sees a structured rejection.
- *
- * The path is normalized (`..` collapsed) but symlinks are NOT followed.
- * Caller is responsible for ensuring `filePath` is already absolute — the
- * Read/Write/Edit tools enforce that at the top of `execute`.
- */
-export function checkFilesystemAccess(filePath) {
-    if (!isSandboxEnabled())
-        return null;
-    const resolved = resolvePath(filePath);
-    // Allow path === root and any descendant. The separator suffix avoids
-    // `WORKSPACE_DIR-sibling` style false-allows.
-    if (resolved === WORKSPACE_DIR)
-        return null;
-    const prefix = WORKSPACE_DIR.endsWith("/") ? WORKSPACE_DIR : `${WORKSPACE_DIR}/`;
-    if (resolved.startsWith(prefix))
-        return null;
-    return (`Sandbox: path '${filePath}' is outside the workspace root (${WORKSPACE_DIR}). ` +
-        `Unset ${ENV_ENABLED} or scope the operation under the workspace.`);
-}
-/** Whether the sandbox is currently active. Default is OFF; the operator
- *  opts in by exporting `MAESTRO_FS_SANDBOX_ENABLED=1`. Read each call so a
- *  test can toggle it without restarting the process. */
-export function isSandboxEnabled() {
-    return process.env[ENV_ENABLED] === "1";
-}
-export const __ENV_ENABLED = ENV_ENABLED;
-//# sourceMappingURL=sandbox.js.map

package/dist/tools/builtin/sandbox.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/tools/builtin/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,IAAI,CAAC,gBAAgB,EAAE;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACvC,sEAAsE;IACtE,8CAA8C;IAC9C,IAAI,QAAQ,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,GAAG,CAAC;IACjF,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,CACL,kBAAkB,QAAQ,oCAAoC,aAAa,KAAK;QAChF,SAAS,WAAW,8CAA8C,CACnE,CAAC;AACJ,CAAC;AAED;;yDAEyD;AACzD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC"}

package/dist/tools/builtin/todo_write.d.ts

@@ -1,29 +0,0 @@
-import type { TodoStore } from "../../state/todos.js";
-import type { ToolHandler } from "../../tools/registry.js";
-/**
- * `todo_write` builtin — TodoWrite-style task tracking for maestro.
- *
- * One tool, snapshot-replace semantics: the model passes the COMPLETE list
- * it wants in place, and the store reconciles (upsert by id, drop entries
- * absent from the snapshot, auto-assign ids on new items).
- *
- * Claude Code parity:
- *   - No separate `todo_list`. Read-side surfaces via the per-turn system
- *     reminder, which renders the current list each turn — no extra
- *     round-trip + no decision surface for "which tool do I call?".
- *   - 1-in-progress invariant. The LAST `in_progress` in the incoming
- *     snapshot wins; earlier in_progress entries are flipped to `pending`
- *     and the demoted id is reported back so the model knows.
- *
- * Side-effecting: every call mutates the store + persists to disk.
- * `parallelSafe: false` is the right default — running two `todo_write`
- * calls in parallel would race the snapshot.
- */
-export interface TodoWriteToolOptions {
-    /** Required. The per-session store. Built by maestroProvider via
-     *  `getTodoStore(sessionId)` so the same instance is shared across
-     *  every tool call in this turn. */
-    store: TodoStore;
-}
-export declare function createTodoWriteTool(opts: TodoWriteToolOptions): ToolHandler;
-//# sourceMappingURL=todo_write.d.ts.map

package/dist/tools/builtin/todo_write.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"todo_write.d.ts","sourceRoot":"","sources":["../../../src/tools/builtin/todo_write.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAc,MAAM,eAAe,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,oBAAoB;IACnC;;wCAEoC;IACpC,KAAK,EAAE,SAAS,CAAC;CAClB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,WAAW,CA+E3E"}