memeloop 0.0.1 → 0.1.1

package/dist/chunk-426CJUZP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sync/attachmentRpcCodec.ts","../src/sync/chatSyncEngine.ts","../src/sync/peerNodeAdapter.ts","../src/device-network/deviceOrchestrationTransport.ts","../src/device-network/libp2pSyncProtocol.ts","../src/device-network/libp2pDeviceSyncTransport.ts","../src/device-network/libp2pRpcProtocol.ts","../src/device-network/localTrustDeviceAuthorizer.ts","../src/device-network/pairingInvite.ts","../src/sync/protocol.ts"],"sourcesContent":["/**\n * 将节点 RPC `memeloop.storage.getAttachmentBlob` 的返回值解码为同步引擎可用的 BLOB。\n */\n\nexport function decodeAttachmentBlobRpc(\n  result: unknown,\n): { data: Uint8Array; filename: string; mimeType: string; size: number } | null {\n  if (result == null || typeof result !== 'object') return null;\n  const r = result as {\n    found?: boolean;\n    error?: string;\n    dataBase64?: string;\n    filename?: string;\n    mimeType?: string;\n    size?: number;\n  };\n  if (r.error || !r.found || typeof r.dataBase64 !== 'string') return null;\n  let data: Uint8Array;\n  try {\n    const binary = atob(r.dataBase64);\n    if (!binary.length) return null;\n    data = Uint8Array.from(binary, (character) => character.charCodeAt(0));\n  } catch {\n    return null;\n  }\n  return {\n    data,\n    filename: typeof r.filename === 'string' ? r.filename : 'attachment',\n    mimeType: typeof r.mimeType === 'string' ? r.mimeType : 'application/octet-stream',\n    size: typeof r.size === 'number' && r.size > 0 ? r.size : data.byteLength,\n  };\n}\n","import type { AttachmentReference, ChatMessage } from '../conversation/index.js';\nimport type { ConversationMeta } from './protocol.js';\n\nimport type { IAgentStorage } from '../types.js';\n\nexport interface ChatSyncPeer {\n  nodeId: string;\n  /**\n   * 取远端当前的 versionVector，并返回对方缺失的会话元数据。\n   */\n  exchangeVersionVector(localVersion: Record<string, number>): Promise<{\n    remoteVersion: Record<string, number>;\n    missingForRemote: ConversationMeta[];\n  }>;\n\n  /**\n   * 将本地缺失的 metadata 从该 peer 拉回来。\n   */\n  pullMissingMetadata(sinceVersion: Record<string, number>): Promise<ConversationMeta[]>;\n\n  /**\n   * 按需拉取消息正文（TidGi / 审查单 Phase 4：消息级同步）。\n   * 返回远端有而本地 unknownMessageIds 之外的新消息。\n   */\n  pullMissingMessages?(conversationId: string, knownMessageIds: string[]): Promise<ChatMessage[]>;\n\n  /**\n   * 按 contentHash 拉取附件二进制（与 `ChatMessage.attachments` / `AttachmentRef` 对齐）。\n   * 典型实现：对 peer 发 `memeloop.storage.getAttachmentBlob` RPC。\n   */\n  pullAttachmentBlob?(\n    contentHash: string,\n  ): Promise<{ data: Uint8Array; filename: string; mimeType: string; size: number } | null>;\n}\n\nexport interface ChatSyncEngineOptions {\n  nodeId: string;\n  storage: IAgentStorage;\n  peers: () => ChatSyncPeer[];\n}\n\nexport class ChatSyncEngine {\n  private readonly nodeId: string;\n  private readonly storage: IAgentStorage;\n  private readonly getPeers: () => ChatSyncPeer[];\n  private versionVector: Record<string, number> = {};\n\n  constructor(options: ChatSyncEngineOptions) {\n    this.nodeId = options.nodeId;\n    this.storage = options.storage;\n    this.getPeers = options.peers;\n    this.versionVector[this.nodeId] = 0;\n  }\n\n  /**\n   * 在本节点新产生一条消息时调用，增加本节点的 lamportClock。\n   */\n  public bumpLocalVersion(): void {\n    this.versionVector[this.nodeId] = (this.versionVector[this.nodeId] ?? 0) + 1;\n  }\n\n  /**\n   * 执行一次与所有 peer 的增量同步（metadata 级别），并尽力拉取缺失消息。\n   */\n  public async syncOnce(): Promise<void> {\n    const peers = this.getPeers();\n    if (peers.length === 0) return;\n\n    const localVersion = { ...this.versionVector };\n    const pulledConversations = new Set<string>();\n\n    for (const peer of peers) {\n      const { remoteVersion, missingForRemote } = await peer.exchangeVersionVector(localVersion);\n\n      const missingForLocal = await peer.pullMissingMetadata(this.versionVector);\n\n      for (const meta of missingForLocal) {\n        await this.storage.upsertConversationMetadata(meta);\n        pulledConversations.add(meta.conversationId);\n      }\n\n      for (const [nodeId, clock] of Object.entries(remoteVersion)) {\n        const current = this.versionVector[nodeId] ?? 0;\n        if (clock > current) {\n          this.versionVector[nodeId] = clock;\n        }\n      }\n\n      if (missingForRemote.length > 0) {\n        this.bumpLocalVersion();\n      }\n    }\n\n    for (const conversationId of pulledConversations) {\n      await this.pullMessagesForConversationFromPeers(conversationId, peers);\n    }\n  }\n\n  /**\n   * Anti-entropy：先 syncOnce，再对已知会话逐个向各 peer 拉取缺失消息（参考审查单「定期对账」）。\n   */\n  public async antiEntropyOnce(): Promise<void> {\n    await this.syncOnce();\n    const list = await this.storage.listConversations({ limit: 500 });\n    const peers = this.getPeers();\n    for (const meta of list) {\n      await this.pullMessagesForConversationFromPeers(meta.conversationId, peers);\n    }\n  }\n\n  private async pullMessagesForConversationFromPeers(\n    conversationId: string,\n    peers: ChatSyncPeer[],\n  ): Promise<void> {\n    const localMsgs = await this.storage.getMessages(conversationId, { mode: 'full-content' });\n    const knownIds = localMsgs.map((m) => m.messageId);\n\n    for (const peer of peers) {\n      if (!peer.pullMissingMessages) continue;\n      try {\n        const incoming = await peer.pullMissingMessages(conversationId, knownIds);\n        if (incoming.length > 0) {\n          await this.storage.insertMessagesIfAbsent(incoming);\n          await this.ensureAttachmentsFromMessages(incoming, peers);\n        }\n      } catch {\n        /* 单 peer 失败不阻塞 */\n      }\n    }\n  }\n\n  /** 从消息元数据收集 `attachments[].contentHash`，对本地缺失 BLOB 的哈希向各 peer 拉取并 `saveAttachment`。 */\n  private async ensureAttachmentsFromMessages(\n    messages: ChatMessage[],\n    peers: ChatSyncPeer[],\n  ): Promise<void> {\n    const hashes = new Set<string>();\n    for (const m of messages) {\n      for (const a of m.attachments ?? []) {\n        if (a.contentHash) hashes.add(a.contentHash);\n      }\n    }\n    for (const h of hashes) {\n      const reference = await this.storage.getAttachment(h);\n      if (reference) {\n        const reader = this.storage.readAttachmentData?.bind(this.storage);\n        if (!reader) continue;\n        const bytes = await reader(h);\n        if (bytes && bytes.length > 0) continue;\n      }\n\n      for (const peer of peers) {\n        const pull = peer.pullAttachmentBlob?.bind(peer);\n        if (!pull) continue;\n        try {\n          const blob = await pull(h);\n          if (blob?.data?.length) {\n            const ar: AttachmentReference = {\n              contentHash: h,\n              filename: blob.filename,\n              mimeType: blob.mimeType,\n              size: blob.size > 0 ? blob.size : blob.data.length,\n            };\n            await this.storage.saveAttachment(ar, blob.data);\n            break;\n          }\n        } catch {\n          /* try next peer */\n        }\n      }\n    }\n  }\n\n  public getVersionVector(): Record<string, number> {\n    return { ...this.versionVector };\n  }\n\n  public getStorage(): IAgentStorage {\n    return this.storage;\n  }\n}\n","import type { ChatMessage } from '../conversation/index.js';\nimport type { ConversationMeta } from './protocol.js';\n\nimport type { ChatSyncPeer } from './chatSyncEngine.js';\n\nexport interface PeerNodeTransport {\n  nodeId: string;\n  exchangeVersionVector(\n    targetNodeId: string,\n    localVersion: Record<string, number>,\n  ): Promise<{\n    remoteVersion: Record<string, number>;\n    missingForRemote: ConversationMeta[];\n  }>;\n  pullMissingMetadata(\n    targetNodeId: string,\n    sinceVersion: Record<string, number>,\n  ): Promise<ConversationMeta[]>;\n  pullMissingMessages?(\n    targetNodeId: string,\n    conversationId: string,\n    knownMessageIds: string[],\n  ): Promise<ChatMessage[]>;\n\n  /** 从指定节点拉取附件 BLOB（如 `memeloop.storage.getAttachmentBlob`）。 */\n  pullAttachmentBlob?(\n    targetNodeId: string,\n    contentHash: string,\n  ): Promise<{ data: Uint8Array; filename: string; mimeType: string; size: number } | null>;\n}\n\nexport class PeerNodeSyncAdapter implements ChatSyncPeer {\n  public readonly nodeId: string;\n  private readonly transport: PeerNodeTransport;\n\n  constructor(nodeId: string, transport: PeerNodeTransport) {\n    this.nodeId = nodeId;\n    this.transport = transport;\n  }\n\n  exchangeVersionVector(localVersion: Record<string, number>) {\n    return this.transport.exchangeVersionVector(this.nodeId, localVersion);\n  }\n\n  pullMissingMetadata(sinceVersion: Record<string, number>) {\n    return this.transport.pullMissingMetadata(this.nodeId, sinceVersion);\n  }\n\n  pullMissingMessages(conversationId: string, knownMessageIds: string[]): Promise<ChatMessage[]> {\n    const function_ = this.transport.pullMissingMessages?.bind(this.transport);\n    if (!function_) {\n      return Promise.resolve([]);\n    }\n    return function_(this.nodeId, conversationId, knownMessageIds);\n  }\n\n  pullAttachmentBlob(contentHash: string) {\n    const function_ = this.transport.pullAttachmentBlob?.bind(this.transport);\n    if (!function_) {\n      return Promise.resolve(null);\n    }\n    return function_(this.nodeId, contentHash);\n  }\n}\n","import { OrchestrationError } from '../orchestration/errors.js';\nimport type { RemoteOrchestrationRequest, RemoteOrchestrationResponse, RemoteOrchestrationTransport, RemoteOrchestrationTransportOptions } from '../orchestration/remoteClient.js';\nimport type { DeviceConnectionGrant, DeviceNetworkService, MemeLoopDuplexStream } from './types.js';\n\nexport const DEVICE_ORCHESTRATION_PROTOCOL = '/memeloop/orchestration/1.0.0' as const;\nconst DEFAULT_MAX_FRAME_BYTES = 1024 * 1024;\n\nexport interface DeviceOrchestrationTransportOptions {\n  deviceNetwork: Pick<DeviceNetworkService, 'openStream'>;\n  peerId: string;\n  grantProvider?: (\n    peerId: string,\n  ) => DeviceConnectionGrant | undefined | Promise<DeviceConnectionGrant | undefined>;\n  maxFrameBytes?: number;\n}\n\nexport interface DeviceOrchestrationStreamHandlerInput {\n  remotePeerId: string;\n  stream: MemeLoopDuplexStream;\n  authorize?: (presentedGrant: DeviceConnectionGrant | undefined) => boolean | Promise<boolean>;\n}\n\nexport type RemoteOrchestrationHandler = {\n  request(request: RemoteOrchestrationRequest): Promise<RemoteOrchestrationResponse>;\n  watch(\n    request: RemoteOrchestrationRequest,\n    options?: RemoteOrchestrationTransportOptions,\n  ): AsyncIterable<RemoteOrchestrationResponse>;\n};\n\nexport interface DeviceOrchestrationStreamHandlerOptions {\n  resolveHandler: (\n    remotePeerId: string,\n  ) => RemoteOrchestrationHandler | Promise<RemoteOrchestrationHandler>;\n  maxFrameBytes?: number;\n}\n\nexport type DeviceOrchestrationStreamHandler = (\n  input: DeviceOrchestrationStreamHandlerInput,\n) => Promise<void>;\n\ninterface DeviceOrchestrationRequestEnvelope {\n  type: 'memeloop-device-orchestration-request-v1';\n  request: RemoteOrchestrationRequest;\n  grant?: DeviceConnectionGrant;\n}\n\nfunction orchestrationTransportError(\n  code: 'CANCELLED' | 'EXHAUSTED' | 'INVALID' | 'UNAVAILABLE',\n  message: string,\n): OrchestrationError {\n  return new OrchestrationError({\n    code,\n    message,\n    retryable: code === 'UNAVAILABLE',\n  });\n}\n\nfunction assertFrameLimit(limit: number): void {\n  if (!Number.isSafeInteger(limit) || limit < 256) {\n    throw new TypeError('maxFrameBytes must be a safe integer of at least 256');\n  }\n}\n\nasync function* encodeLines(\n  values: AsyncIterable<unknown> | Iterable<unknown>,\n  maxFrameBytes: number,\n): AsyncIterable<Uint8Array> {\n  const encoder = new TextEncoder();\n  for await (const value of values) {\n    const frame = encoder.encode(`${JSON.stringify(value)}\\n`);\n    if (frame.byteLength > maxFrameBytes) {\n      throw orchestrationTransportError(\n        'EXHAUSTED',\n        `device orchestration frame exceeds ${maxFrameBytes} bytes`,\n      );\n    }\n    yield frame;\n  }\n}\n\nasync function* decodeLines(\n  source: AsyncIterable<Uint8Array>,\n  maxFrameBytes: number,\n): AsyncIterable<unknown> {\n  const decoder = new TextDecoder();\n  let buffered = '';\n  for await (const chunk of source) {\n    buffered += decoder.decode(chunk, { stream: true });\n    for (;;) {\n      const newline = buffered.indexOf('\\n');\n      if (newline < 0) break;\n      const line = buffered.slice(0, newline);\n      buffered = buffered.slice(newline + 1);\n      if (!line) continue;\n      if (new TextEncoder().encode(line).byteLength > maxFrameBytes) {\n        throw orchestrationTransportError(\n          'EXHAUSTED',\n          `device orchestration frame exceeds ${maxFrameBytes} bytes`,\n        );\n      }\n      try {\n        yield JSON.parse(line) as unknown;\n      } catch {\n        throw orchestrationTransportError(\n          'INVALID',\n          'device orchestration stream contains invalid JSON',\n        );\n      }\n    }\n    if (new TextEncoder().encode(buffered).byteLength > maxFrameBytes) {\n      throw orchestrationTransportError(\n        'EXHAUSTED',\n        `device orchestration frame exceeds ${maxFrameBytes} bytes`,\n      );\n    }\n  }\n  buffered += decoder.decode();\n  if (buffered.trim()) {\n    try {\n      yield JSON.parse(buffered) as unknown;\n    } catch {\n      throw orchestrationTransportError(\n        'INVALID',\n        'device orchestration stream contains invalid trailing JSON',\n      );\n    }\n  }\n}\n\nfunction throwIfAborted(signal: AbortSignal | undefined): void {\n  if (signal?.aborted) {\n    throw orchestrationTransportError('CANCELLED', 'device orchestration request was cancelled');\n  }\n}\n\nasync function openAuthenticatedStream(options: DeviceOrchestrationTransportOptions): Promise<{\n  stream: MemeLoopDuplexStream;\n  grant: DeviceConnectionGrant | undefined;\n}> {\n  const grant = await options.grantProvider?.(options.peerId);\n  return {\n    stream: await options.deviceNetwork.openStream(\n      options.peerId,\n      DEVICE_ORCHESTRATION_PROTOCOL,\n      grant,\n    ),\n    grant,\n  };\n}\n\nasync function writeRequest(\n  stream: MemeLoopDuplexStream,\n  request: RemoteOrchestrationRequest,\n  grant: DeviceConnectionGrant | undefined,\n  maxFrameBytes: number,\n): Promise<void> {\n  const envelope: DeviceOrchestrationRequestEnvelope = {\n    type: 'memeloop-device-orchestration-request-v1',\n    request,\n    ...(grant ? { grant } : {}),\n  };\n  await stream.sink(encodeLines([envelope], maxFrameBytes));\n}\n\n/**\n * Carry the portable resource protocol over an already authenticated and\n * encrypted device-network stream. No bearer credential crosses the link:\n * authorization is bound to the paired peer identity opening the protocol.\n */\nexport function createDeviceOrchestrationTransport(\n  options: DeviceOrchestrationTransportOptions,\n): RemoteOrchestrationTransport {\n  const maxFrameBytes = options.maxFrameBytes ?? DEFAULT_MAX_FRAME_BYTES;\n  assertFrameLimit(maxFrameBytes);\n\n  return {\n    async request(request, transportOptions = {}) {\n      throwIfAborted(transportOptions.signal);\n      const { stream, grant } = await openAuthenticatedStream(options);\n      const closeOnAbort = () => {\n        void stream.close();\n      };\n      transportOptions.signal?.addEventListener('abort', closeOnAbort, {\n        once: true,\n      });\n      try {\n        await writeRequest(stream, request, grant, maxFrameBytes);\n        let response: RemoteOrchestrationResponse | undefined;\n        for await (const value of decodeLines(stream.source, maxFrameBytes)) {\n          if (response) {\n            throw orchestrationTransportError(\n              'INVALID',\n              'device orchestration request returned multiple responses',\n            );\n          }\n          response = value as RemoteOrchestrationResponse;\n        }\n        throwIfAborted(transportOptions.signal);\n        if (!response) {\n          throw orchestrationTransportError(\n            'UNAVAILABLE',\n            'device orchestration request returned no response',\n          );\n        }\n        return response;\n      } finally {\n        transportOptions.signal?.removeEventListener('abort', closeOnAbort);\n        await stream.close().catch(() => undefined);\n      }\n    },\n    async *watch(request, transportOptions = {}) {\n      throwIfAborted(transportOptions.signal);\n      const { stream, grant } = await openAuthenticatedStream(options);\n      const closeOnAbort = () => {\n        void stream.close();\n      };\n      transportOptions.signal?.addEventListener('abort', closeOnAbort, {\n        once: true,\n      });\n      try {\n        await writeRequest(stream, request, grant, maxFrameBytes);\n        for await (const value of decodeLines(stream.source, maxFrameBytes)) {\n          throwIfAborted(transportOptions.signal);\n          yield value as RemoteOrchestrationResponse;\n        }\n        throwIfAborted(transportOptions.signal);\n      } finally {\n        transportOptions.signal?.removeEventListener('abort', closeOnAbort);\n        await stream.close().catch(() => undefined);\n      }\n    },\n  };\n}\n\nasync function readSingleRequest(\n  stream: MemeLoopDuplexStream,\n  maxFrameBytes: number,\n): Promise<DeviceOrchestrationRequestEnvelope> {\n  let envelope: DeviceOrchestrationRequestEnvelope | undefined;\n  for await (const value of decodeLines(stream.source, maxFrameBytes)) {\n    if (envelope) {\n      throw orchestrationTransportError(\n        'INVALID',\n        'device orchestration stream accepts exactly one request',\n      );\n    }\n    if (\n      value === null ||\n      typeof value !== 'object' ||\n      Array.isArray(value) ||\n      (value as Record<string, unknown>).type !== 'memeloop-device-orchestration-request-v1' ||\n      (value as Record<string, unknown>).request === null ||\n      typeof (value as Record<string, unknown>).request !== 'object'\n    ) {\n      throw orchestrationTransportError(\n        'INVALID',\n        'device orchestration request envelope is invalid',\n      );\n    }\n    envelope = value as DeviceOrchestrationRequestEnvelope;\n  }\n  if (!envelope) {\n    throw orchestrationTransportError('INVALID', 'device orchestration request is missing');\n  }\n  return envelope;\n}\n\n/** Bind a trusted peer identity to a policy-scoped orchestration handler. */\nexport function createDeviceOrchestrationStreamHandler(\n  options: DeviceOrchestrationStreamHandlerOptions,\n): DeviceOrchestrationStreamHandler {\n  const maxFrameBytes = options.maxFrameBytes ?? DEFAULT_MAX_FRAME_BYTES;\n  assertFrameLimit(maxFrameBytes);\n  return async ({ remotePeerId, stream, authorize }) => {\n    const abort = new AbortController();\n    try {\n      const envelope = await readSingleRequest(stream, maxFrameBytes);\n      if (authorize && !(await authorize(envelope.grant))) {\n        throw orchestrationTransportError('UNAVAILABLE', 'device_not_trusted');\n      }\n      const request = envelope.request;\n      const handler = await options.resolveHandler(remotePeerId);\n      if (request.operation === 'watch') {\n        await stream.sink(\n          encodeLines(handler.watch(request, { signal: abort.signal }), maxFrameBytes),\n        );\n      } else {\n        await stream.sink(encodeLines([await handler.request(request)], maxFrameBytes));\n      }\n    } finally {\n      abort.abort();\n      await stream.close().catch(() => undefined);\n    }\n  };\n}\n","import type { DeviceConnectionGrant } from './types.js';\n\nexport const LIBP2P_SYNC_REQUEST_TYPE = 'memeloop-sync-request-v1';\nexport const LIBP2P_SYNC_RESPONSE_TYPE = 'memeloop-sync-response-v1';\n\nexport type Libp2pSyncMethod =\n  | 'exchangeVersionVector'\n  | 'pullMissingMetadata'\n  | 'pullMissingMessages'\n  | 'pullAttachmentBlob';\n\nexport interface Libp2pSyncRequest {\n  type: typeof LIBP2P_SYNC_REQUEST_TYPE;\n  id: string;\n  method: Libp2pSyncMethod;\n  params: unknown;\n  grant?: DeviceConnectionGrant;\n}\n\nexport type Libp2pSyncResponse =\n  | {\n    type: typeof LIBP2P_SYNC_RESPONSE_TYPE;\n    id: string;\n    ok: true;\n    result: unknown;\n  }\n  | {\n    type: typeof LIBP2P_SYNC_RESPONSE_TYPE;\n    id: string;\n    ok: false;\n    error: string;\n  };\n\nexport interface AttachmentBlobWire {\n  dataBase64Url: string;\n  filename: string;\n  mimeType: string;\n  size: number;\n}\n\nconst syncMethods = new Set<Libp2pSyncMethod>([\n  'exchangeVersionVector',\n  'pullMissingMetadata',\n  'pullMissingMessages',\n  'pullAttachmentBlob',\n]);\n\nexport function isLibp2pSyncRequest(value: unknown): value is Libp2pSyncRequest {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) return false;\n  const record = value as Record<string, unknown>;\n  return (\n    record.type === LIBP2P_SYNC_REQUEST_TYPE &&\n    typeof record.id === 'string' &&\n    typeof record.method === 'string' &&\n    syncMethods.has(record.method as Libp2pSyncMethod)\n  );\n}\n\nexport function isLibp2pSyncResponse(value: unknown): value is Libp2pSyncResponse {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) return false;\n  const record = value as Record<string, unknown>;\n  if (record.type !== LIBP2P_SYNC_RESPONSE_TYPE || typeof record.id !== 'string' || typeof record.ok !== 'boolean') return false;\n  if (record.ok) return 'result' in record;\n  return typeof record.error === 'string';\n}\n\nfunction isAttachmentBlobWire(value: unknown): value is AttachmentBlobWire {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) return false;\n  const record = value as Record<string, unknown>;\n  return (\n    typeof record.dataBase64Url === 'string' &&\n    typeof record.filename === 'string' &&\n    typeof record.mimeType === 'string' &&\n    typeof record.size === 'number'\n  );\n}\n\nexport async function attachmentBlobFromWire(value: unknown): Promise<\n  {\n    data: Uint8Array;\n    filename: string;\n    mimeType: string;\n    size: number;\n  } | null\n> {\n  if (value === null) return null;\n  if (!isAttachmentBlobWire(value)) throw new Error('invalid_sync_response');\n  let data: Uint8Array;\n  try {\n    const base64 = value.dataBase64Url.replace(/-/g, '+').replace(/_/g, '/');\n    const paddedBase64 = base64.padEnd(Math.ceil(base64.length / 4) * 4, '=');\n    const binary = atob(paddedBase64);\n    data = Uint8Array.from(binary, (character) => character.charCodeAt(0));\n  } catch {\n    throw new Error('invalid_sync_response');\n  }\n  return {\n    data,\n    filename: value.filename,\n    mimeType: value.mimeType,\n    size: value.size,\n  };\n}\n","import type { ChatMessage } from '../conversation/index.js';\nimport type { ConversationMeta, VersionVector } from '../sync/protocol.js';\nimport { attachmentBlobFromWire, isLibp2pSyncResponse, LIBP2P_SYNC_REQUEST_TYPE, type Libp2pSyncMethod, type Libp2pSyncRequest } from './libp2pSyncProtocol.js';\nimport type { AttachmentBlob, Device, DeviceConnectionGrant, DeviceNetworkService, DeviceSyncTransport, ExchangeVersionVectorResult, MemeLoopDuplexStream } from './types.js';\n\nexport interface Libp2pDeviceSyncTransportOptions {\n  nodeId: string;\n  deviceNetwork: Pick<DeviceNetworkService, 'listDevices' | 'openStream'>;\n  grantProvider?: (peerId: string) => Promise<DeviceConnectionGrant | undefined>;\n}\n\nexport class Libp2pDeviceSyncTransport implements DeviceSyncTransport {\n  public readonly nodeId: string;\n  private readonly deviceNetwork: Pick<DeviceNetworkService, 'listDevices' | 'openStream'>;\n  private readonly grantProvider?: (peerId: string) => Promise<DeviceConnectionGrant | undefined>;\n\n  constructor(options: Libp2pDeviceSyncTransportOptions) {\n    this.nodeId = options.nodeId;\n    this.deviceNetwork = options.deviceNetwork;\n    this.grantProvider = options.grantProvider;\n  }\n\n  public listPeers(): Promise<Device[]> {\n    return this.deviceNetwork.listDevices();\n  }\n\n  public exchangeVersionVector(peerId: string, localVersion: VersionVector): Promise<ExchangeVersionVectorResult> {\n    return this.request(peerId, 'exchangeVersionVector', { localVersion }) as Promise<ExchangeVersionVectorResult>;\n  }\n\n  public pullMissingMetadata(peerId: string, sinceVersion: VersionVector): Promise<ConversationMeta[]> {\n    return this.request(peerId, 'pullMissingMetadata', { sinceVersion }) as Promise<ConversationMeta[]>;\n  }\n\n  public pullMissingMessages(peerId: string, conversationId: string, knownMessageIds: string[]): Promise<ChatMessage[]> {\n    return this.request(peerId, 'pullMissingMessages', { conversationId, knownMessageIds }) as Promise<ChatMessage[]>;\n  }\n\n  public async pullAttachmentBlob(peerId: string, contentHash: string): Promise<AttachmentBlob | null> {\n    const result = await this.request(peerId, 'pullAttachmentBlob', { contentHash });\n    return attachmentBlobFromWire(result);\n  }\n\n  private async request(peerId: string, method: Libp2pSyncMethod, parameters: unknown): Promise<unknown> {\n    const grant = await this.grantProvider?.(peerId);\n    const stream = await this.deviceNetwork.openStream(peerId, '/memeloop/sync/1.0.0', grant);\n    const request: Libp2pSyncRequest = {\n      type: LIBP2P_SYNC_REQUEST_TYPE,\n      id: crypto.randomUUID(),\n      method,\n      params: parameters,\n      grant,\n    };\n    await writeJsonToStream(stream, request);\n    const response = await readJsonFromStream(stream);\n    await stream.close();\n    if (!isLibp2pSyncResponse(response)) throw new Error('invalid_sync_response');\n    if (response.id !== request.id) throw new Error('sync_response_id_mismatch');\n    if (!response.ok) throw new Error(response.error);\n    return response.result;\n  }\n}\n\nasync function writeJsonToStream(stream: MemeLoopDuplexStream, message: unknown): Promise<void> {\n  const payload = new TextEncoder().encode(JSON.stringify(message));\n  await stream.sink(async function*() {\n    yield payload;\n  }());\n}\n\nasync function readJsonFromStream(stream: MemeLoopDuplexStream): Promise<unknown> {\n  const reader = stream.source[Symbol.asyncIterator]();\n  const result = await reader.next();\n  if (result.done || !result.value) throw new Error('sync_response_missing');\n  return JSON.parse(new TextDecoder().decode(result.value)) as unknown;\n}\n","import type { DeviceConnectionGrant } from './types.js';\n\nexport const LIBP2P_RPC_REQUEST_TYPE = 'memeloop-rpc-request-v1';\nexport const LIBP2P_RPC_RESPONSE_TYPE = 'memeloop-rpc-response-v1';\n\nexport interface Libp2pRpcRequest {\n  type: typeof LIBP2P_RPC_REQUEST_TYPE;\n  id: string;\n  method: string;\n  params: unknown;\n  grant?: DeviceConnectionGrant;\n}\n\nexport type Libp2pRpcResponse =\n  | {\n    type: typeof LIBP2P_RPC_RESPONSE_TYPE;\n    id: string;\n    ok: true;\n    result: unknown;\n  }\n  | {\n    type: typeof LIBP2P_RPC_RESPONSE_TYPE;\n    id: string;\n    ok: false;\n    error: string;\n  };\n\nexport function isLibp2pRpcRequest(value: unknown): value is Libp2pRpcRequest {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) return false;\n  const record = value as Record<string, unknown>;\n  return (\n    record.type === LIBP2P_RPC_REQUEST_TYPE &&\n    typeof record.id === 'string' &&\n    typeof record.method === 'string'\n  );\n}\n\nexport function isLibp2pRpcResponse(value: unknown): value is Libp2pRpcResponse {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) return false;\n  const record = value as Record<string, unknown>;\n  if (record.type !== LIBP2P_RPC_RESPONSE_TYPE || typeof record.id !== 'string' || typeof record.ok !== 'boolean') return false;\n  if (record.ok) return 'result' in record;\n  return typeof record.error === 'string';\n}\n","import type { DeviceAuthorizer, MemeLoopProtocol, TrustedDeviceRecord } from './types.js';\n\nexport interface LocalTrustDeviceAuthorizerOptions {\n  trustedDevices?: Iterable<TrustedDeviceRecord>;\n  getTrustedDevice?: (peerId: string) => TrustedDeviceRecord | undefined;\n  allowPairingProtocol?: boolean;\n}\n\nconst PAIRING_PROTOCOL: MemeLoopProtocol = '/memeloop/pairing/1.0.0';\n\nexport class LocalTrustDeviceAuthorizer implements DeviceAuthorizer {\n  private readonly trustedDevices = new Map<string, TrustedDeviceRecord>();\n  private readonly allowPairingProtocol: boolean;\n\n  constructor(private readonly options: LocalTrustDeviceAuthorizerOptions = {}) {\n    this.allowPairingProtocol = options.allowPairingProtocol ?? true;\n    for (const record of options.trustedDevices ?? []) {\n      this.trustedDevices.set(record.peerId, record);\n    }\n  }\n\n  public setTrustedDevice(record: TrustedDeviceRecord): void {\n    this.trustedDevices.set(record.peerId, record);\n  }\n\n  public removeTrustedDevice(peerId: string): void {\n    this.trustedDevices.delete(peerId);\n  }\n\n  public async canOpenProtocol(input: {\n    remotePeerId: string;\n    protocol: MemeLoopProtocol;\n  }): Promise<boolean> {\n    const record = this.options.getTrustedDevice?.(input.remotePeerId) ?? this.trustedDevices.get(input.remotePeerId);\n    if (record?.revokedAt) return false;\n    if (input.protocol === PAIRING_PROTOCOL) return this.allowPairingProtocol;\n    return record !== undefined;\n  }\n}\n","import type { Device } from './types.js';\n\nexport const DEVICE_PAIRING_INVITE_PROTOCOL = 'memeloop-device-pairing-v1';\nexport const DEVICE_PAIRING_INVITE_TTL_MS = 5 * 60_000;\nconst MAX_INVITE_LENGTH = 16 * 1024;\nconst MAX_ADDRESSES = 8;\n\nexport interface DevicePairingInvite {\n  protocol: typeof DEVICE_PAIRING_INVITE_PROTOCOL;\n  peerId: string;\n  deviceName: string;\n  multiaddrs: string[];\n  createdAt: number;\n  expiresAt: number;\n}\n\nfunction requireText(value: string, name: string, maxLength: number): string {\n  const trimmed = value.trim();\n  if (!trimmed || trimmed.length > maxLength) {\n    throw new Error(`invalid device pairing invite ${name}`);\n  }\n  return trimmed;\n}\n\nfunction validateAddresses(addresses: readonly string[]): string[] {\n  const unique = [...new Set(addresses.map((address) => address.trim()))]\n    .filter(Boolean);\n  if (\n    unique.length === 0 ||\n    unique.length > MAX_ADDRESSES ||\n    unique.some((address) =>\n      address.length > 2048 ||\n      !address.startsWith('/') ||\n      (!address.includes('/ws') && !address.includes('/wss'))\n    )\n  ) {\n    throw new Error('device pairing invite requires WebSocket multiaddrs');\n  }\n  return unique;\n}\n\nexport function createDevicePairingInvite(\n  device: Pick<Device, 'peerId' | 'displayName' | 'multiaddrs'>,\n  options: { now?: number; ttlMs?: number } = {},\n): DevicePairingInvite {\n  const createdAt = options.now ?? Date.now();\n  const ttlMs = options.ttlMs ?? DEVICE_PAIRING_INVITE_TTL_MS;\n  if (!Number.isSafeInteger(createdAt) || !Number.isSafeInteger(ttlMs) || ttlMs <= 0 || ttlMs > DEVICE_PAIRING_INVITE_TTL_MS) {\n    throw new Error('invalid device pairing invite lifetime');\n  }\n  return {\n    protocol: DEVICE_PAIRING_INVITE_PROTOCOL,\n    peerId: requireText(device.peerId, 'peerId', 256),\n    deviceName: requireText(device.displayName, 'deviceName', 256),\n    multiaddrs: validateAddresses(device.multiaddrs ?? []),\n    createdAt,\n    expiresAt: createdAt + ttlMs,\n  };\n}\n\nexport function encodeDevicePairingInvite(invite: DevicePairingInvite): string {\n  const validated = parseDevicePairingInvite(JSON.stringify(invite), {\n    now: invite.createdAt,\n  });\n  return JSON.stringify(validated);\n}\n\nexport function parseDevicePairingInvite(\n  serialized: string,\n  options: { now?: number } = {},\n): DevicePairingInvite {\n  if (!serialized || serialized.length > MAX_INVITE_LENGTH) {\n    throw new Error('invalid device pairing invite length');\n  }\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(serialized);\n  } catch {\n    throw new Error('device pairing invite is not valid JSON');\n  }\n  if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {\n    throw new Error('invalid device pairing invite');\n  }\n  const record = parsed as Record<string, unknown>;\n  if (\n    record.protocol !== DEVICE_PAIRING_INVITE_PROTOCOL ||\n    typeof record.peerId !== 'string' ||\n    typeof record.deviceName !== 'string' ||\n    !Array.isArray(record.multiaddrs) ||\n    record.multiaddrs.some((address) => typeof address !== 'string') ||\n    typeof record.createdAt !== 'number' ||\n    typeof record.expiresAt !== 'number' ||\n    !Number.isSafeInteger(record.createdAt) ||\n    !Number.isSafeInteger(record.expiresAt) ||\n    record.expiresAt <= record.createdAt ||\n    record.expiresAt - record.createdAt > DEVICE_PAIRING_INVITE_TTL_MS\n  ) {\n    throw new Error('invalid device pairing invite');\n  }\n  if (record.expiresAt <= (options.now ?? Date.now())) {\n    throw new Error('device pairing invite has expired');\n  }\n  return {\n    protocol: DEVICE_PAIRING_INVITE_PROTOCOL,\n    peerId: requireText(record.peerId, 'peerId', 256),\n    deviceName: requireText(record.deviceName, 'deviceName', 256),\n    multiaddrs: validateAddresses(record.multiaddrs as string[]),\n    createdAt: record.createdAt,\n    expiresAt: record.expiresAt,\n  };\n}\n","export type VersionVector = Record<string, number>;\n\nexport interface ConversationMeta {\n  conversationId: string;\n  title: string;\n  lastMessagePreview: string;\n  lastMessageTimestamp: number;\n  messageCount: number;\n  originNodeId: string;\n  definitionId: string;\n  instanceDelta?: Record<string, unknown>;\n  isUserInitiated: boolean;\n  sourceChannel?: {\n    channelId: string;\n    platform: string;\n    imUserId: string;\n  };\n}\n\nexport function isConversationMeta(value: unknown): value is ConversationMeta {\n  if (value === null || typeof value !== 'object') return false;\n  const o = value as Record<string, unknown>;\n  return (\n    typeof o.conversationId === 'string' &&\n    typeof o.title === 'string' &&\n    typeof o.originNodeId === 'string' &&\n    typeof o.definitionId === 'string' &&\n    typeof o.messageCount === 'number' &&\n    typeof o.lastMessageTimestamp === 'number' &&\n    typeof o.isUserInitiated === 'boolean'\n  );\n}\n"],"mappings":";;;;;AAIO,SAAS,wBACd,QAC+E;AAC/E,MAAI,UAAU,QAAQ,OAAO,WAAW,SAAU,QAAO;AACzD,QAAM,IAAI;AAQV,MAAI,EAAE,SAAS,CAAC,EAAE,SAAS,OAAO,EAAE,eAAe,SAAU,QAAO;AACpE,MAAI;AACJ,MAAI;AACF,UAAM,SAAS,KAAK,EAAE,UAAU;AAChC,QAAI,CAAC,OAAO,OAAQ,QAAO;AAC3B,WAAO,WAAW,KAAK,QAAQ,CAAC,cAAc,UAAU,WAAW,CAAC,CAAC;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA,UAAU,OAAO,EAAE,aAAa,WAAW,EAAE,WAAW;AAAA,IACxD,UAAU,OAAO,EAAE,aAAa,WAAW,EAAE,WAAW;AAAA,IACxD,MAAM,OAAO,EAAE,SAAS,YAAY,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAAA,EACjE;AACF;;;ACUO,IAAM,iBAAN,MAAqB;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACT,gBAAwC,CAAC;AAAA,EAEjD,YAAY,SAAgC;AAC1C,SAAK,SAAS,QAAQ;AACtB,SAAK,UAAU,QAAQ;AACvB,SAAK,WAAW,QAAQ;AACxB,SAAK,cAAc,KAAK,MAAM,IAAI;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAKO,mBAAyB;AAC9B,SAAK,cAAc,KAAK,MAAM,KAAK,KAAK,cAAc,KAAK,MAAM,KAAK,KAAK;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,WAA0B;AACrC,UAAM,QAAQ,KAAK,SAAS;AAC5B,QAAI,MAAM,WAAW,EAAG;AAExB,UAAM,eAAe,EAAE,GAAG,KAAK,cAAc;AAC7C,UAAM,sBAAsB,oBAAI,IAAY;AAE5C,eAAW,QAAQ,OAAO;AACxB,YAAM,EAAE,eAAe,iBAAiB,IAAI,MAAM,KAAK,sBAAsB,YAAY;AAEzF,YAAM,kBAAkB,MAAM,KAAK,oBAAoB,KAAK,aAAa;AAEzE,iBAAW,QAAQ,iBAAiB;AAClC,cAAM,KAAK,QAAQ,2BAA2B,IAAI;AAClD,4BAAoB,IAAI,KAAK,cAAc;AAAA,MAC7C;AAEA,iBAAW,CAAC,QAAQ,KAAK,KAAK,OAAO,QAAQ,aAAa,GAAG;AAC3D,cAAM,UAAU,KAAK,cAAc,MAAM,KAAK;AAC9C,YAAI,QAAQ,SAAS;AACnB,eAAK,cAAc,MAAM,IAAI;AAAA,QAC/B;AAAA,MACF;AAEA,UAAI,iBAAiB,SAAS,GAAG;AAC/B,aAAK,iBAAiB;AAAA,MACxB;AAAA,IACF;AAEA,eAAW,kBAAkB,qBAAqB;AAChD,YAAM,KAAK,qCAAqC,gBAAgB,KAAK;AAAA,IACvE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,kBAAiC;AAC5C,UAAM,KAAK,SAAS;AACpB,UAAM,OAAO,MAAM,KAAK,QAAQ,kBAAkB,EAAE,OAAO,IAAI,CAAC;AAChE,UAAM,QAAQ,KAAK,SAAS;AAC5B,eAAW,QAAQ,MAAM;AACvB,YAAM,KAAK,qCAAqC,KAAK,gBAAgB,KAAK;AAAA,IAC5E;AAAA,EACF;AAAA,EAEA,MAAc,qCACZ,gBACA,OACe;AACf,UAAM,YAAY,MAAM,KAAK,QAAQ,YAAY,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACzF,UAAM,WAAW,UAAU,IAAI,CAAC,MAAM,EAAE,SAAS;AAEjD,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,oBAAqB;AAC/B,UAAI;AACF,cAAM,WAAW,MAAM,KAAK,oBAAoB,gBAAgB,QAAQ;AACxE,YAAI,SAAS,SAAS,GAAG;AACvB,gBAAM,KAAK,QAAQ,uBAAuB,QAAQ;AAClD,gBAAM,KAAK,8BAA8B,UAAU,KAAK;AAAA,QAC1D;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAc,8BACZ,UACA,OACe;AACf,UAAM,SAAS,oBAAI,IAAY;AAC/B,eAAW,KAAK,UAAU;AACxB,iBAAW,KAAK,EAAE,eAAe,CAAC,GAAG;AACnC,YAAI,EAAE,YAAa,QAAO,IAAI,EAAE,WAAW;AAAA,MAC7C;AAAA,IACF;AACA,eAAW,KAAK,QAAQ;AACtB,YAAM,YAAY,MAAM,KAAK,QAAQ,cAAc,CAAC;AACpD,UAAI,WAAW;AACb,cAAM,SAAS,KAAK,QAAQ,oBAAoB,KAAK,KAAK,OAAO;AACjE,YAAI,CAAC,OAAQ;AACb,cAAM,QAAQ,MAAM,OAAO,CAAC;AAC5B,YAAI,SAAS,MAAM,SAAS,EAAG;AAAA,MACjC;AAEA,iBAAW,QAAQ,OAAO;AACxB,cAAM,OAAO,KAAK,oBAAoB,KAAK,IAAI;AAC/C,YAAI,CAAC,KAAM;AACX,YAAI;AACF,gBAAM,OAAO,MAAM,KAAK,CAAC;AACzB,cAAI,MAAM,MAAM,QAAQ;AACtB,kBAAM,KAA0B;AAAA,cAC9B,aAAa;AAAA,cACb,UAAU,KAAK;AAAA,cACf,UAAU,KAAK;AAAA,cACf,MAAM,KAAK,OAAO,IAAI,KAAK,OAAO,KAAK,KAAK;AAAA,YAC9C;AACA,kBAAM,KAAK,QAAQ,eAAe,IAAI,KAAK,IAAI;AAC/C;AAAA,UACF;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEO,mBAA2C;AAChD,WAAO,EAAE,GAAG,KAAK,cAAc;AAAA,EACjC;AAAA,EAEO,aAA4B;AACjC,WAAO,KAAK;AAAA,EACd;AACF;;;ACrJO,IAAM,sBAAN,MAAkD;AAAA,EACvC;AAAA,EACC;AAAA,EAEjB,YAAY,QAAgB,WAA8B;AACxD,SAAK,SAAS;AACd,SAAK,YAAY;AAAA,EACnB;AAAA,EAEA,sBAAsB,cAAsC;AAC1D,WAAO,KAAK,UAAU,sBAAsB,KAAK,QAAQ,YAAY;AAAA,EACvE;AAAA,EAEA,oBAAoB,cAAsC;AACxD,WAAO,KAAK,UAAU,oBAAoB,KAAK,QAAQ,YAAY;AAAA,EACrE;AAAA,EAEA,oBAAoB,gBAAwB,iBAAmD;AAC7F,UAAM,YAAY,KAAK,UAAU,qBAAqB,KAAK,KAAK,SAAS;AACzE,QAAI,CAAC,WAAW;AACd,aAAO,QAAQ,QAAQ,CAAC,CAAC;AAAA,IAC3B;AACA,WAAO,UAAU,KAAK,QAAQ,gBAAgB,eAAe;AAAA,EAC/D;AAAA,EAEA,mBAAmB,aAAqB;AACtC,UAAM,YAAY,KAAK,UAAU,oBAAoB,KAAK,KAAK,SAAS;AACxE,QAAI,CAAC,WAAW;AACd,aAAO,QAAQ,QAAQ,IAAI;AAAA,IAC7B;AACA,WAAO,UAAU,KAAK,QAAQ,WAAW;AAAA,EAC3C;AACF;;;AC3DO,IAAM,gCAAgC;AAC7C,IAAM,0BAA0B,OAAO;AA0CvC,SAAS,4BACP,MACA,SACoB;AACpB,SAAO,IAAI,mBAAmB;AAAA,IAC5B;AAAA,IACA;AAAA,IACA,WAAW,SAAS;AAAA,EACtB,CAAC;AACH;AAEA,SAAS,iBAAiB,OAAqB;AAC7C,MAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,KAAK;AAC/C,UAAM,IAAI,UAAU,sDAAsD;AAAA,EAC5E;AACF;AAEA,gBAAgB,YACd,QACA,eAC2B;AAC3B,QAAM,UAAU,IAAI,YAAY;AAChC,mBAAiB,SAAS,QAAQ;AAChC,UAAM,QAAQ,QAAQ,OAAO,GAAG,KAAK,UAAU,KAAK,CAAC;AAAA,CAAI;AACzD,QAAI,MAAM,aAAa,eAAe;AACpC,YAAM;AAAA,QACJ;AAAA,QACA,sCAAsC,aAAa;AAAA,MACrD;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAEA,gBAAgB,YACd,QACA,eACwB;AACxB,QAAM,UAAU,IAAI,YAAY;AAChC,MAAI,WAAW;AACf,mBAAiB,SAAS,QAAQ;AAChC,gBAAY,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAClD,eAAS;AACP,YAAM,UAAU,SAAS,QAAQ,IAAI;AACrC,UAAI,UAAU,EAAG;AACjB,YAAM,OAAO,SAAS,MAAM,GAAG,OAAO;AACtC,iBAAW,SAAS,MAAM,UAAU,CAAC;AACrC,UAAI,CAAC,KAAM;AACX,UAAI,IAAI,YAAY,EAAE,OAAO,IAAI,EAAE,aAAa,eAAe;AAC7D,cAAM;AAAA,UACJ;AAAA,UACA,sCAAsC,aAAa;AAAA,QACrD;AAAA,MACF;AACA,UAAI;AACF,cAAM,KAAK,MAAM,IAAI;AAAA,MACvB,QAAQ;AACN,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,QAAI,IAAI,YAAY,EAAE,OAAO,QAAQ,EAAE,aAAa,eAAe;AACjE,YAAM;AAAA,QACJ;AAAA,QACA,sCAAsC,aAAa;AAAA,MACrD;AAAA,IACF;AAAA,EACF;AACA,cAAY,QAAQ,OAAO;AAC3B,MAAI,SAAS,KAAK,GAAG;AACnB,QAAI;AACF,YAAM,KAAK,MAAM,QAAQ;AAAA,IAC3B,QAAQ;AACN,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,eAAe,QAAuC;AAC7D,MAAI,QAAQ,SAAS;AACnB,UAAM,4BAA4B,aAAa,4CAA4C;AAAA,EAC7F;AACF;AAEA,eAAe,wBAAwB,SAGpC;AACD,QAAM,QAAQ,MAAM,QAAQ,gBAAgB,QAAQ,MAAM;AAC1D,SAAO;AAAA,IACL,QAAQ,MAAM,QAAQ,cAAc;AAAA,MAClC,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,aACb,QACA,SACA,OACA,eACe;AACf,QAAM,WAA+C;AAAA,IACnD,MAAM;AAAA,IACN;AAAA,IACA,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,EAC3B;AACA,QAAM,OAAO,KAAK,YAAY,CAAC,QAAQ,GAAG,aAAa,CAAC;AAC1D;AAOO,SAAS,mCACd,SAC8B;AAC9B,QAAM,gBAAgB,QAAQ,iBAAiB;AAC/C,mBAAiB,aAAa;AAE9B,SAAO;AAAA,IACL,MAAM,QAAQ,SAAS,mBAAmB,CAAC,GAAG;AAC5C,qBAAe,iBAAiB,MAAM;AACtC,YAAM,EAAE,QAAQ,MAAM,IAAI,MAAM,wBAAwB,OAAO;AAC/D,YAAM,eAAe,MAAM;AACzB,aAAK,OAAO,MAAM;AAAA,MACpB;AACA,uBAAiB,QAAQ,iBAAiB,SAAS,cAAc;AAAA,QAC/D,MAAM;AAAA,MACR,CAAC;AACD,UAAI;AACF,cAAM,aAAa,QAAQ,SAAS,OAAO,aAAa;AACxD,YAAI;AACJ,yBAAiB,SAAS,YAAY,OAAO,QAAQ,aAAa,GAAG;AACnE,cAAI,UAAU;AACZ,kBAAM;AAAA,cACJ;AAAA,cACA;AAAA,YACF;AAAA,UACF;AACA,qBAAW;AAAA,QACb;AACA,uBAAe,iBAAiB,MAAM;AACtC,YAAI,CAAC,UAAU;AACb,gBAAM;AAAA,YACJ;AAAA,YACA;AAAA,UACF;AAAA,QACF;AACA,eAAO;AAAA,MACT,UAAE;AACA,yBAAiB,QAAQ,oBAAoB,SAAS,YAAY;AAClE,cAAM,OAAO,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,MAC5C;AAAA,IACF;AAAA,IACA,OAAO,MAAM,SAAS,mBAAmB,CAAC,GAAG;AAC3C,qBAAe,iBAAiB,MAAM;AACtC,YAAM,EAAE,QAAQ,MAAM,IAAI,MAAM,wBAAwB,OAAO;AAC/D,YAAM,eAAe,MAAM;AACzB,aAAK,OAAO,MAAM;AAAA,MACpB;AACA,uBAAiB,QAAQ,iBAAiB,SAAS,cAAc;AAAA,QAC/D,MAAM;AAAA,MACR,CAAC;AACD,UAAI;AACF,cAAM,aAAa,QAAQ,SAAS,OAAO,aAAa;AACxD,yBAAiB,SAAS,YAAY,OAAO,QAAQ,aAAa,GAAG;AACnE,yBAAe,iBAAiB,MAAM;AACtC,gBAAM;AAAA,QACR;AACA,uBAAe,iBAAiB,MAAM;AAAA,MACxC,UAAE;AACA,yBAAiB,QAAQ,oBAAoB,SAAS,YAAY;AAClE,cAAM,OAAO,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAe,kBACb,QACA,eAC6C;AAC7C,MAAI;AACJ,mBAAiB,SAAS,YAAY,OAAO,QAAQ,aAAa,GAAG;AACnE,QAAI,UAAU;AACZ,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,QACE,UAAU,QACV,OAAO,UAAU,YACjB,MAAM,QAAQ,KAAK,KAClB,MAAkC,SAAS,8CAC3C,MAAkC,YAAY,QAC/C,OAAQ,MAAkC,YAAY,UACtD;AACA,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,eAAW;AAAA,EACb;AACA,MAAI,CAAC,UAAU;AACb,UAAM,4BAA4B,WAAW,yCAAyC;AAAA,EACxF;AACA,SAAO;AACT;AAGO,SAAS,uCACd,SACkC;AAClC,QAAM,gBAAgB,QAAQ,iBAAiB;AAC/C,mBAAiB,aAAa;AAC9B,SAAO,OAAO,EAAE,cAAc,QAAQ,UAAU,MAAM;AACpD,UAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAI;AACF,YAAM,WAAW,MAAM,kBAAkB,QAAQ,aAAa;AAC9D,UAAI,aAAa,CAAE,MAAM,UAAU,SAAS,KAAK,GAAI;AACnD,cAAM,4BAA4B,eAAe,oBAAoB;AAAA,MACvE;AACA,YAAM,UAAU,SAAS;AACzB,YAAM,UAAU,MAAM,QAAQ,eAAe,YAAY;AACzD,UAAI,QAAQ,cAAc,SAAS;AACjC,cAAM,OAAO;AAAA,UACX,YAAY,QAAQ,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,CAAC,GAAG,aAAa;AAAA,QAC7E;AAAA,MACF,OAAO;AACL,cAAM,OAAO,KAAK,YAAY,CAAC,MAAM,QAAQ,QAAQ,OAAO,CAAC,GAAG,aAAa,CAAC;AAAA,MAChF;AAAA,IACF,UAAE;AACA,YAAM,MAAM;AACZ,YAAM,OAAO,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,IAC5C;AAAA,EACF;AACF;;;ACrSO,IAAM,2BAA2B;AACjC,IAAM,4BAA4B;AAqCzC,IAAM,cAAc,oBAAI,IAAsB;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,oBAAoB,OAA4C;AAC9E,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,SAAS;AACf,SACE,OAAO,SAAS,4BAChB,OAAO,OAAO,OAAO,YACrB,OAAO,OAAO,WAAW,YACzB,YAAY,IAAI,OAAO,MAA0B;AAErD;AAEO,SAAS,qBAAqB,OAA6C;AAChF,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,SAAS;AACf,MAAI,OAAO,SAAS,6BAA6B,OAAO,OAAO,OAAO,YAAY,OAAO,OAAO,OAAO,UAAW,QAAO;AACzH,MAAI,OAAO,GAAI,QAAO,YAAY;AAClC,SAAO,OAAO,OAAO,UAAU;AACjC;AAEA,SAAS,qBAAqB,OAA6C;AACzE,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,SAAS;AACf,SACE,OAAO,OAAO,kBAAkB,YAChC,OAAO,OAAO,aAAa,YAC3B,OAAO,OAAO,aAAa,YAC3B,OAAO,OAAO,SAAS;AAE3B;AAEA,eAAsB,uBAAuB,OAO3C;AACA,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,CAAC,qBAAqB,KAAK,EAAG,OAAM,IAAI,MAAM,uBAAuB;AACzE,MAAI;AACJ,MAAI;AACF,UAAM,SAAS,MAAM,cAAc,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AACvE,UAAM,eAAe,OAAO,OAAO,KAAK,KAAK,OAAO,SAAS,CAAC,IAAI,GAAG,GAAG;AACxE,UAAM,SAAS,KAAK,YAAY;AAChC,WAAO,WAAW,KAAK,QAAQ,CAAC,cAAc,UAAU,WAAW,CAAC,CAAC;AAAA,EACvE,QAAQ;AACN,UAAM,IAAI,MAAM,uBAAuB;AAAA,EACzC;AACA,SAAO;AAAA,IACL;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,UAAU,MAAM;AAAA,IAChB,MAAM,MAAM;AAAA,EACd;AACF;;;AC3FO,IAAM,4BAAN,MAA+D;AAAA,EACpD;AAAA,EACC;AAAA,EACA;AAAA,EAEjB,YAAY,SAA2C;AACrD,SAAK,SAAS,QAAQ;AACtB,SAAK,gBAAgB,QAAQ;AAC7B,SAAK,gBAAgB,QAAQ;AAAA,EAC/B;AAAA,EAEO,YAA+B;AACpC,WAAO,KAAK,cAAc,YAAY;AAAA,EACxC;AAAA,EAEO,sBAAsB,QAAgB,cAAmE;AAC9G,WAAO,KAAK,QAAQ,QAAQ,yBAAyB,EAAE,aAAa,CAAC;AAAA,EACvE;AAAA,EAEO,oBAAoB,QAAgB,cAA0D;AACnG,WAAO,KAAK,QAAQ,QAAQ,uBAAuB,EAAE,aAAa,CAAC;AAAA,EACrE;AAAA,EAEO,oBAAoB,QAAgB,gBAAwB,iBAAmD;AACpH,WAAO,KAAK,QAAQ,QAAQ,uBAAuB,EAAE,gBAAgB,gBAAgB,CAAC;AAAA,EACxF;AAAA,EAEA,MAAa,mBAAmB,QAAgB,aAAqD;AACnG,UAAM,SAAS,MAAM,KAAK,QAAQ,QAAQ,sBAAsB,EAAE,YAAY,CAAC;AAC/E,WAAO,uBAAuB,MAAM;AAAA,EACtC;AAAA,EAEA,MAAc,QAAQ,QAAgB,QAA0B,YAAuC;AACrG,UAAM,QAAQ,MAAM,KAAK,gBAAgB,MAAM;AAC/C,UAAM,SAAS,MAAM,KAAK,cAAc,WAAW,QAAQ,wBAAwB,KAAK;AACxF,UAAM,UAA6B;AAAA,MACjC,MAAM;AAAA,MACN,IAAI,OAAO,WAAW;AAAA,MACtB;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,IACF;AACA,UAAM,kBAAkB,QAAQ,OAAO;AACvC,UAAM,WAAW,MAAM,mBAAmB,MAAM;AAChD,UAAM,OAAO,MAAM;AACnB,QAAI,CAAC,qBAAqB,QAAQ,EAAG,OAAM,IAAI,MAAM,uBAAuB;AAC5E,QAAI,SAAS,OAAO,QAAQ,GAAI,OAAM,IAAI,MAAM,2BAA2B;AAC3E,QAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,SAAS,KAAK;AAChD,WAAO,SAAS;AAAA,EAClB;AACF;AAEA,eAAe,kBAAkB,QAA8B,SAAiC;AAC9F,QAAM,UAAU,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,OAAO,CAAC;AAChE,QAAM,OAAO,MAAK,mBAAkB;AAClC,UAAM;AAAA,EACR,GAAE,CAAC;AACL;AAEA,eAAe,mBAAmB,QAAgD;AAChF,QAAM,SAAS,OAAO,OAAO,OAAO,aAAa,EAAE;AACnD,QAAM,SAAS,MAAM,OAAO,KAAK;AACjC,MAAI,OAAO,QAAQ,CAAC,OAAO,MAAO,OAAM,IAAI,MAAM,uBAAuB;AACzE,SAAO,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,OAAO,KAAK,CAAC;AAC1D;;;ACzEO,IAAM,0BAA0B;AAChC,IAAM,2BAA2B;AAwBjC,SAAS,mBAAmB,OAA2C;AAC5E,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,SAAS;AACf,SACE,OAAO,SAAS,2BAChB,OAAO,OAAO,OAAO,YACrB,OAAO,OAAO,WAAW;AAE7B;AAEO,SAAS,oBAAoB,OAA4C;AAC9E,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,SAAS;AACf,MAAI,OAAO,SAAS,4BAA4B,OAAO,OAAO,OAAO,YAAY,OAAO,OAAO,OAAO,UAAW,QAAO;AACxH,MAAI,OAAO,GAAI,QAAO,YAAY;AAClC,SAAO,OAAO,OAAO,UAAU;AACjC;;;ACnCA,IAAM,mBAAqC;AAEpC,IAAM,6BAAN,MAA6D;AAAA,EAIlE,YAA6B,UAA6C,CAAC,GAAG;AAAjD;AAC3B,SAAK,uBAAuB,QAAQ,wBAAwB;AAC5D,eAAW,UAAU,QAAQ,kBAAkB,CAAC,GAAG;AACjD,WAAK,eAAe,IAAI,OAAO,QAAQ,MAAM;AAAA,IAC/C;AAAA,EACF;AAAA,EARiB,iBAAiB,oBAAI,IAAiC;AAAA,EACtD;AAAA,EASV,iBAAiB,QAAmC;AACzD,SAAK,eAAe,IAAI,OAAO,QAAQ,MAAM;AAAA,EAC/C;AAAA,EAEO,oBAAoB,QAAsB;AAC/C,SAAK,eAAe,OAAO,MAAM;AAAA,EACnC;AAAA,EAEA,MAAa,gBAAgB,OAGR;AACnB,UAAM,SAAS,KAAK,QAAQ,mBAAmB,MAAM,YAAY,KAAK,KAAK,eAAe,IAAI,MAAM,YAAY;AAChH,QAAI,QAAQ,UAAW,QAAO;AAC9B,QAAI,MAAM,aAAa,iBAAkB,QAAO,KAAK;AACrD,WAAO,WAAW;AAAA,EACpB;AACF;;;ACpCO,IAAM,iCAAiC;AACvC,IAAM,+BAA+B,IAAI;AAChD,IAAM,oBAAoB,KAAK;AAC/B,IAAM,gBAAgB;AAWtB,SAAS,YAAY,OAAe,MAAc,WAA2B;AAC3E,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,WAAW,QAAQ,SAAS,WAAW;AAC1C,UAAM,IAAI,MAAM,iCAAiC,IAAI,EAAE;AAAA,EACzD;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,WAAwC;AACjE,QAAM,SAAS,CAAC,GAAG,IAAI,IAAI,UAAU,IAAI,CAAC,YAAY,QAAQ,KAAK,CAAC,CAAC,CAAC,EACnE,OAAO,OAAO;AACjB,MACE,OAAO,WAAW,KAClB,OAAO,SAAS,iBAChB,OAAO;AAAA,IAAK,CAAC,YACX,QAAQ,SAAS,QACjB,CAAC,QAAQ,WAAW,GAAG,KACtB,CAAC,QAAQ,SAAS,KAAK,KAAK,CAAC,QAAQ,SAAS,MAAM;AAAA,EACvD,GACA;AACA,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA,SAAO;AACT;AAEO,SAAS,0BACd,QACA,UAA4C,CAAC,GACxB;AACrB,QAAM,YAAY,QAAQ,OAAO,KAAK,IAAI;AAC1C,QAAM,QAAQ,QAAQ,SAAS;AAC/B,MAAI,CAAC,OAAO,cAAc,SAAS,KAAK,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,KAAK,QAAQ,8BAA8B;AAC1H,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AACA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,QAAQ,YAAY,OAAO,QAAQ,UAAU,GAAG;AAAA,IAChD,YAAY,YAAY,OAAO,aAAa,cAAc,GAAG;AAAA,IAC7D,YAAY,kBAAkB,OAAO,cAAc,CAAC,CAAC;AAAA,IACrD;AAAA,IACA,WAAW,YAAY;AAAA,EACzB;AACF;AAEO,SAAS,0BAA0B,QAAqC;AAC7E,QAAM,YAAY,yBAAyB,KAAK,UAAU,MAAM,GAAG;AAAA,IACjE,KAAK,OAAO;AAAA,EACd,CAAC;AACD,SAAO,KAAK,UAAU,SAAS;AACjC;AAEO,SAAS,yBACd,YACA,UAA4B,CAAC,GACR;AACrB,MAAI,CAAC,cAAc,WAAW,SAAS,mBAAmB;AACxD,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,UAAU;AAAA,EAChC,QAAQ;AACN,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAClE,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AACA,QAAM,SAAS;AACf,MACE,OAAO,aAAa,kCACpB,OAAO,OAAO,WAAW,YACzB,OAAO,OAAO,eAAe,YAC7B,CAAC,MAAM,QAAQ,OAAO,UAAU,KAChC,OAAO,WAAW,KAAK,CAAC,YAAY,OAAO,YAAY,QAAQ,KAC/D,OAAO,OAAO,cAAc,YAC5B,OAAO,OAAO,cAAc,YAC5B,CAAC,OAAO,cAAc,OAAO,SAAS,KACtC,CAAC,OAAO,cAAc,OAAO,SAAS,KACtC,OAAO,aAAa,OAAO,aAC3B,OAAO,YAAY,OAAO,YAAY,8BACtC;AACA,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AACA,MAAI,OAAO,cAAc,QAAQ,OAAO,KAAK,IAAI,IAAI;AACnD,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,QAAQ,YAAY,OAAO,QAAQ,UAAU,GAAG;AAAA,IAChD,YAAY,YAAY,OAAO,YAAY,cAAc,GAAG;AAAA,IAC5D,YAAY,kBAAkB,OAAO,UAAsB;AAAA,IAC3D,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,EACpB;AACF;;;AC3FO,SAAS,mBAAmB,OAA2C;AAC5E,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO;AACxD,QAAM,IAAI;AACV,SACE,OAAO,EAAE,mBAAmB,YAC5B,OAAO,EAAE,UAAU,YACnB,OAAO,EAAE,iBAAiB,YAC1B,OAAO,EAAE,iBAAiB,YAC1B,OAAO,EAAE,iBAAiB,YAC1B,OAAO,EAAE,yBAAyB,YAClC,OAAO,EAAE,oBAAoB;AAEjC;","names":[]}

package/dist/chunk-7ZDTB4VZ.js

@@ -0,0 +1,63 @@
+// src/agent/categories.ts
+var CATEGORY_CONFIGS = {
+  "visual-engineering": {
+    model: "default",
+    temperature: 0.3,
+    description: "UI/UX visual engineering tasks requiring precise rendering and layout"
+  },
+  ultrabrain: {
+    model: "default",
+    temperature: 0.1,
+    description: "Deep logical reasoning, architecture decisions, and complex problem-solving"
+  },
+  artistry: {
+    model: "default",
+    temperature: 0.8,
+    description: "Creative writing, design, and artistic generation tasks"
+  },
+  quick: {
+    model: "default",
+    temperature: 0.2,
+    description: "Fast, straightforward tasks with minimal deliberation needed"
+  },
+  "unspecified-low": {
+    model: "default",
+    temperature: 0.5,
+    description: "Unclassified tasks of moderate complexity and effort"
+  },
+  "unspecified-high": {
+    model: "default",
+    temperature: 0.4,
+    description: "Unclassified tasks requiring substantial effort across multiple systems"
+  },
+  writing: {
+    model: "default",
+    temperature: 0.7,
+    description: "Documentation, prose, technical writing, and content generation"
+  }
+};
+function getCategoryConfig(category) {
+  const config = CATEGORY_CONFIGS[category];
+  if (!config) {
+    throw new Error(`Unknown task category: ${category}`);
+  }
+  return { ...config };
+}
+function isTaskCategory(value) {
+  return value in CATEGORY_CONFIGS;
+}
+var ALL_CATEGORIES = Object.keys(CATEGORY_CONFIGS);
+function resolveCategory(category) {
+  if (isTaskCategory(category)) {
+    return getCategoryConfig(category);
+  }
+  return getCategoryConfig("unspecified-low");
+}
+
+export {
+  getCategoryConfig,
+  isTaskCategory,
+  ALL_CATEGORIES,
+  resolveCategory
+};
+//# sourceMappingURL=chunk-7ZDTB4VZ.js.map

package/dist/chunk-7ZDTB4VZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agent/categories.ts"],"sourcesContent":["/**\n * Task category system for routing tasks to appropriate agent configurations.\n * Each category maps to a model, temperature, and description for delegation decisions.\n */\n\nexport type TaskCategory =\n  | 'visual-engineering'\n  | 'ultrabrain'\n  | 'artistry'\n  | 'quick'\n  | 'unspecified-low'\n  | 'unspecified-high'\n  | 'writing';\n\nexport interface CategoryConfig {\n  /** Model identifier (e.g., \"default\", \"gpt-4o\", \"claude-opus\") */\n  model: string;\n  /** LLM temperature (0.0 = deterministic, 1.0 = creative) */\n  temperature: number;\n  /** Human-readable description of the category's purpose */\n  description: string;\n}\n\nconst CATEGORY_CONFIGS: Record<TaskCategory, CategoryConfig> = {\n  'visual-engineering': {\n    model: 'default',\n    temperature: 0.3,\n    description: 'UI/UX visual engineering tasks requiring precise rendering and layout',\n  },\n  ultrabrain: {\n    model: 'default',\n    temperature: 0.1,\n    description: 'Deep logical reasoning, architecture decisions, and complex problem-solving',\n  },\n  artistry: {\n    model: 'default',\n    temperature: 0.8,\n    description: 'Creative writing, design, and artistic generation tasks',\n  },\n  quick: {\n    model: 'default',\n    temperature: 0.2,\n    description: 'Fast, straightforward tasks with minimal deliberation needed',\n  },\n  'unspecified-low': {\n    model: 'default',\n    temperature: 0.5,\n    description: 'Unclassified tasks of moderate complexity and effort',\n  },\n  'unspecified-high': {\n    model: 'default',\n    temperature: 0.4,\n    description: 'Unclassified tasks requiring substantial effort across multiple systems',\n  },\n  writing: {\n    model: 'default',\n    temperature: 0.7,\n    description: 'Documentation, prose, technical writing, and content generation',\n  },\n};\n\n/**\n * Get the configuration for a task category.\n * @throws {Error} if the category is unknown\n */\nexport function getCategoryConfig(category: TaskCategory): CategoryConfig {\n  const config = CATEGORY_CONFIGS[category];\n  if (!config) {\n    throw new Error(`Unknown task category: ${category}`);\n  }\n  return { ...config };\n}\n\n/**\n * Type guard: check if a string is a valid TaskCategory.\n */\nexport function isTaskCategory(value: string): value is TaskCategory {\n  return value in CATEGORY_CONFIGS;\n}\n\n/** All registered category identifiers (read-only). */\nexport const ALL_CATEGORIES = Object.keys(CATEGORY_CONFIGS) as TaskCategory[];\n\n/**\n * Resolve a category string (or fallback to \"unspecified-low\").\n * Never throws; always returns a valid config.\n */\nexport function resolveCategory(category: string): CategoryConfig {\n  if (isTaskCategory(category)) {\n    return getCategoryConfig(category);\n  }\n  return getCategoryConfig('unspecified-low');\n}\n"],"mappings":";AAuBA,IAAM,mBAAyD;AAAA,EAC7D,sBAAsB;AAAA,IACpB,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa;AAAA,EACf;AAAA,EACA,YAAY;AAAA,IACV,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa;AAAA,EACf;AAAA,EACA,UAAU;AAAA,IACR,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa;AAAA,EACf;AAAA,EACA,OAAO;AAAA,IACL,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa;AAAA,EACf;AAAA,EACA,mBAAmB;AAAA,IACjB,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa;AAAA,EACf;AAAA,EACA,oBAAoB;AAAA,IAClB,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa;AAAA,EACf;AAAA,EACA,SAAS;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,IACb,aAAa;AAAA,EACf;AACF;AAMO,SAAS,kBAAkB,UAAwC;AACxE,QAAM,SAAS,iBAAiB,QAAQ;AACxC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,0BAA0B,QAAQ,EAAE;AAAA,EACtD;AACA,SAAO,EAAE,GAAG,OAAO;AACrB;AAKO,SAAS,eAAe,OAAsC;AACnE,SAAO,SAAS;AAClB;AAGO,IAAM,iBAAiB,OAAO,KAAK,gBAAgB;AAMnD,SAAS,gBAAgB,UAAkC;AAChE,MAAI,eAAe,QAAQ,GAAG;AAC5B,WAAO,kBAAkB,QAAQ;AAAA,EACnC;AACA,SAAO,kBAAkB,iBAAiB;AAC5C;","names":[]}

package/dist/chunk-AZFYDWIN.js

@@ -0,0 +1,98 @@
+// src/orchestration/security/secretRedaction.ts
+var SECRET_KEY_PATTERN = /api[-_]?key|secret|passwd|password|authorization|auth[-_]?token|access[-_]?token|refresh[-_]?token|id[-_]?token|private[-_]?key|client[-_]?secret|credential|bearer/i;
+var SECRET_VALUE_PATTERNS = [
+  // OpenAI-style keys.
+  /\bsk-[A-Za-z0-9_-]{8,}\b/g,
+  // Anthropic-style keys.
+  /\bsk-ant-[A-Za-z0-9_-]{8,}\b/g,
+  // AWS access key ids.
+  /\bAKIA[0-9A-Z]{16}\b/g,
+  // GitHub personal access tokens.
+  /\bgh[pousr]_[A-Za-z0-9]{16,}\b/g,
+  // Slack tokens.
+  /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g,
+  // Model access handles (mlh1.<payload>.<signature>).
+  /\bmlh1\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g
+];
+var BEARER_VALUE_PATTERN = /(bearer\s+)[A-Za-z0-9._~+/=-]{8,}/gi;
+var DEFAULT_REPLACEMENT = "[REDACTED]";
+function isPlainObject(value) {
+  return value != null && typeof value === "object" && !Array.isArray(value);
+}
+function freshPatterns(patterns) {
+  return patterns.map((pattern) => new RegExp(pattern.source, pattern.flags));
+}
+function redactString(value, valuePatterns, replacement) {
+  let result = value;
+  for (const pattern of valuePatterns) {
+    result = result.replace(pattern, replacement);
+  }
+  return result.replace(BEARER_VALUE_PATTERN, `$1${replacement}`);
+}
+function keyIsSecret(key, keyPatterns) {
+  return keyPatterns.some((pattern) => pattern.test(key));
+}
+function redactSecrets(value, options = {}) {
+  const replacement = options.replacement ?? DEFAULT_REPLACEMENT;
+  const keyPatterns = [SECRET_KEY_PATTERN, ...options.additionalKeyPatterns ?? []];
+  const valuePatterns = [...freshPatterns(SECRET_VALUE_PATTERNS), ...options.additionalValuePatterns ?? []];
+  function walk(input, keyHint) {
+    if (typeof input === "string") {
+      if (keyHint !== void 0 && keyIsSecret(keyHint, keyPatterns)) {
+        return replacement;
+      }
+      return redactString(input, valuePatterns, replacement);
+    }
+    if (Array.isArray(input)) {
+      return input.map((item) => walk(item));
+    }
+    if (input instanceof Map) {
+      return new Map(Array.from(input.entries(), ([k, v]) => [k, walk(v, typeof k === "string" ? k : void 0)]));
+    }
+    if (input instanceof Set) {
+      return new Set(Array.from(input.values(), (item) => walk(item)));
+    }
+    if (isPlainObject(input)) {
+      const output = {};
+      for (const [key, item] of Object.entries(input)) {
+        output[key] = keyIsSecret(key, keyPatterns) ? replacement : walk(item, key);
+      }
+      return output;
+    }
+    return input;
+  }
+  return walk(value);
+}
+function containsSecrets(value, options = {}) {
+  const keyPatterns = [SECRET_KEY_PATTERN, ...options.additionalKeyPatterns ?? []];
+  const valuePatterns = [...freshPatterns(SECRET_VALUE_PATTERNS), BEARER_VALUE_PATTERN, ...options.additionalValuePatterns ?? []];
+  function walk(input, keyHint) {
+    if (typeof input === "string") {
+      if (keyHint !== void 0 && keyIsSecret(keyHint, keyPatterns)) return true;
+      return valuePatterns.some((pattern) => {
+        pattern.lastIndex = 0;
+        return pattern.test(input);
+      });
+    }
+    if (Array.isArray(input)) {
+      return input.some((item) => walk(item));
+    }
+    if (input instanceof Map) {
+      return Array.from(input.entries()).some(([k, v]) => walk(v, typeof k === "string" ? k : void 0));
+    }
+    if (input instanceof Set) {
+      return Array.from(input.values()).some((item) => walk(item));
+    }
+    if (isPlainObject(input)) {
+      return Object.entries(input).some(([key, item]) => keyIsSecret(key, keyPatterns) || walk(item, key));
+    }
+    return false;
+  }
+  return walk(value);
+}
+
+export {
+  redactSecrets,
+  containsSecrets
+};
+//# sourceMappingURL=chunk-AZFYDWIN.js.map

package/dist/chunk-AZFYDWIN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/orchestration/security/secretRedaction.ts"],"sourcesContent":["/**\n * Secret redaction for logs, status, checkpoints, and crash diagnostics.\n *\n * Hosts must run any value through `redactSecrets` before it crosses into\n * persistent or observable surfaces. Redaction covers both secret-shaped keys\n * (apiKey, authorization, ...) and secret-shaped values (provider key formats,\n * model access handles). Redaction is best-effort defense in depth — the\n * primary guarantee comes from never passing secrets to untrusted contexts in\n * the first place.\n */\n\nexport interface SecretRedactionOptions {\n  /** Extra key-name patterns treated as secret. */\n  additionalKeyPatterns?: RegExp[];\n  /** Extra value patterns treated as secret. */\n  additionalValuePatterns?: RegExp[];\n  /** Replacement text (default `[REDACTED]`). */\n  replacement?: string;\n}\n\nconst SECRET_KEY_PATTERN =\n  /api[-_]?key|secret|passwd|password|authorization|auth[-_]?token|access[-_]?token|refresh[-_]?token|id[-_]?token|private[-_]?key|client[-_]?secret|credential|bearer/i;\n\nconst SECRET_VALUE_PATTERNS: RegExp[] = [\n  // OpenAI-style keys.\n  /\\bsk-[A-Za-z0-9_-]{8,}\\b/g,\n  // Anthropic-style keys.\n  /\\bsk-ant-[A-Za-z0-9_-]{8,}\\b/g,\n  // AWS access key ids.\n  /\\bAKIA[0-9A-Z]{16}\\b/g,\n  // GitHub personal access tokens.\n  /\\bgh[pousr]_[A-Za-z0-9]{16,}\\b/g,\n  // Slack tokens.\n  /\\bxox[baprs]-[A-Za-z0-9-]{10,}\\b/g,\n  // Model access handles (mlh1.<payload>.<signature>).\n  /\\bmlh1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/g,\n];\n\n// Authorization headers keep their scheme prefix when redacted.\nconst BEARER_VALUE_PATTERN = /(bearer\\s+)[A-Za-z0-9._~+/=-]{8,}/gi;\n\nconst DEFAULT_REPLACEMENT = '[REDACTED]';\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n  return value != null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction freshPatterns(patterns: RegExp[]): RegExp[] {\n  return patterns.map((pattern) => new RegExp(pattern.source, pattern.flags));\n}\n\nfunction redactString(value: string, valuePatterns: RegExp[], replacement: string): string {\n  let result = value;\n  for (const pattern of valuePatterns) {\n    result = result.replace(pattern, replacement);\n  }\n  return result.replace(BEARER_VALUE_PATTERN, `$1${replacement}`);\n}\n\nfunction keyIsSecret(key: string, keyPatterns: RegExp[]): boolean {\n  return keyPatterns.some((pattern) => pattern.test(key));\n}\n\n/**\n * Deep-clone `value` with secrets masked. Secret-shaped keys are replaced\n * wholesale; strings are scanned for secret-shaped values. Handles Map/Set\n * via their entries; class instances are traversed as plain objects.\n */\nexport function redactSecrets<T>(value: T, options: SecretRedactionOptions = {}): T {\n  const replacement = options.replacement ?? DEFAULT_REPLACEMENT;\n  const keyPatterns = [SECRET_KEY_PATTERN, ...(options.additionalKeyPatterns ?? [])];\n  const valuePatterns = [...freshPatterns(SECRET_VALUE_PATTERNS), ...(options.additionalValuePatterns ?? [])];\n\n  function walk(input: unknown, keyHint?: string): unknown {\n    if (typeof input === 'string') {\n      if (keyHint !== undefined && keyIsSecret(keyHint, keyPatterns)) {\n        return replacement;\n      }\n      return redactString(input, valuePatterns, replacement);\n    }\n    if (Array.isArray(input)) {\n      return input.map((item) => walk(item));\n    }\n    if (input instanceof Map) {\n      return new Map(Array.from(input.entries(), ([k, v]) => [k, walk(v, typeof k === 'string' ? k : undefined)]));\n    }\n    if (input instanceof Set) {\n      return new Set(Array.from(input.values(), (item) => walk(item)));\n    }\n    if (isPlainObject(input)) {\n      const output: Record<string, unknown> = {};\n      for (const [key, item] of Object.entries(input)) {\n        output[key] = keyIsSecret(key, keyPatterns) ? replacement : walk(item, key);\n      }\n      return output;\n    }\n    return input;\n  }\n\n  return walk(value) as T;\n}\n\n/**\n * True when the value contains a secret-shaped key or value. Useful as a\n * final assertion before persisting worker-visible artifacts.\n */\nexport function containsSecrets(value: unknown, options: SecretRedactionOptions = {}): boolean {\n  const keyPatterns = [SECRET_KEY_PATTERN, ...(options.additionalKeyPatterns ?? [])];\n  const valuePatterns = [...freshPatterns(SECRET_VALUE_PATTERNS), BEARER_VALUE_PATTERN, ...(options.additionalValuePatterns ?? [])];\n\n  function walk(input: unknown, keyHint?: string): boolean {\n    if (typeof input === 'string') {\n      if (keyHint !== undefined && keyIsSecret(keyHint, keyPatterns)) return true;\n      return valuePatterns.some((pattern) => {\n        pattern.lastIndex = 0;\n        return pattern.test(input);\n      });\n    }\n    if (Array.isArray(input)) {\n      return input.some((item) => walk(item));\n    }\n    if (input instanceof Map) {\n      return Array.from(input.entries()).some(([k, v]) => walk(v, typeof k === 'string' ? k : undefined));\n    }\n    if (input instanceof Set) {\n      return Array.from(input.values()).some((item) => walk(item));\n    }\n    if (isPlainObject(input)) {\n      return Object.entries(input).some(([key, item]) => keyIsSecret(key, keyPatterns) || walk(item, key));\n    }\n    return false;\n  }\n\n  return walk(value);\n}\n"],"mappings":";AAoBA,IAAM,qBACJ;AAEF,IAAM,wBAAkC;AAAA;AAAA,EAEtC;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AACF;AAGA,IAAM,uBAAuB;AAE7B,IAAM,sBAAsB;AAE5B,SAAS,cAAc,OAAkD;AACvE,SAAO,SAAS,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC3E;AAEA,SAAS,cAAc,UAA8B;AACnD,SAAO,SAAS,IAAI,CAAC,YAAY,IAAI,OAAO,QAAQ,QAAQ,QAAQ,KAAK,CAAC;AAC5E;AAEA,SAAS,aAAa,OAAe,eAAyB,aAA6B;AACzF,MAAI,SAAS;AACb,aAAW,WAAW,eAAe;AACnC,aAAS,OAAO,QAAQ,SAAS,WAAW;AAAA,EAC9C;AACA,SAAO,OAAO,QAAQ,sBAAsB,KAAK,WAAW,EAAE;AAChE;AAEA,SAAS,YAAY,KAAa,aAAgC;AAChE,SAAO,YAAY,KAAK,CAAC,YAAY,QAAQ,KAAK,GAAG,CAAC;AACxD;AAOO,SAAS,cAAiB,OAAU,UAAkC,CAAC,GAAM;AAClF,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,cAAc,CAAC,oBAAoB,GAAI,QAAQ,yBAAyB,CAAC,CAAE;AACjF,QAAM,gBAAgB,CAAC,GAAG,cAAc,qBAAqB,GAAG,GAAI,QAAQ,2BAA2B,CAAC,CAAE;AAE1G,WAAS,KAAK,OAAgB,SAA2B;AACvD,QAAI,OAAO,UAAU,UAAU;AAC7B,UAAI,YAAY,UAAa,YAAY,SAAS,WAAW,GAAG;AAC9D,eAAO;AAAA,MACT;AACA,aAAO,aAAa,OAAO,eAAe,WAAW;AAAA,IACvD;AACA,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,aAAO,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;AAAA,IACvC;AACA,QAAI,iBAAiB,KAAK;AACxB,aAAO,IAAI,IAAI,MAAM,KAAK,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,GAAG,OAAO,MAAM,WAAW,IAAI,MAAS,CAAC,CAAC,CAAC;AAAA,IAC7G;AACA,QAAI,iBAAiB,KAAK;AACxB,aAAO,IAAI,IAAI,MAAM,KAAK,MAAM,OAAO,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;AAAA,IACjE;AACA,QAAI,cAAc,KAAK,GAAG;AACxB,YAAM,SAAkC,CAAC;AACzC,iBAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC/C,eAAO,GAAG,IAAI,YAAY,KAAK,WAAW,IAAI,cAAc,KAAK,MAAM,GAAG;AAAA,MAC5E;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAEA,SAAO,KAAK,KAAK;AACnB;AAMO,SAAS,gBAAgB,OAAgB,UAAkC,CAAC,GAAY;AAC7F,QAAM,cAAc,CAAC,oBAAoB,GAAI,QAAQ,yBAAyB,CAAC,CAAE;AACjF,QAAM,gBAAgB,CAAC,GAAG,cAAc,qBAAqB,GAAG,sBAAsB,GAAI,QAAQ,2BAA2B,CAAC,CAAE;AAEhI,WAAS,KAAK,OAAgB,SAA2B;AACvD,QAAI,OAAO,UAAU,UAAU;AAC7B,UAAI,YAAY,UAAa,YAAY,SAAS,WAAW,EAAG,QAAO;AACvE,aAAO,cAAc,KAAK,CAAC,YAAY;AACrC,gBAAQ,YAAY;AACpB,eAAO,QAAQ,KAAK,KAAK;AAAA,MAC3B,CAAC;AAAA,IACH;AACA,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,aAAO,MAAM,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC;AAAA,IACxC;AACA,QAAI,iBAAiB,KAAK;AACxB,aAAO,MAAM,KAAK,MAAM,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,OAAO,MAAM,WAAW,IAAI,MAAS,CAAC;AAAA,IACpG;AACA,QAAI,iBAAiB,KAAK;AACxB,aAAO,MAAM,KAAK,MAAM,OAAO,CAAC,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC;AAAA,IAC7D;AACA,QAAI,cAAc,KAAK,GAAG;AACxB,aAAO,OAAO,QAAQ,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,IAAI,MAAM,YAAY,KAAK,WAAW,KAAK,KAAK,MAAM,GAAG,CAAC;AAAA,IACrG;AACA,WAAO;AAAA,EACT;AAEA,SAAO,KAAK,KAAK;AACnB;","names":[]}

package/dist/chunk-BGPU4RR7.js

@@ -0,0 +1,367 @@
+// src/orchestration/resources.ts
+var AGENT_WORKLOAD_API_VERSION = "workload.memeloop.io/v1alpha1";
+var AGENT_WORKLOAD_KIND = "AgentWorkload";
+var AGENT_RUN_API_VERSION = "run.memeloop.io/v1alpha1";
+var AGENT_RUN_KIND = "AgentRun";
+function createAgentWorkloadManifest(name, spec) {
+  return {
+    apiVersion: AGENT_WORKLOAD_API_VERSION,
+    kind: AGENT_WORKLOAD_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function createAgentRunManifest(name, spec) {
+  return {
+    apiVersion: AGENT_RUN_API_VERSION,
+    kind: AGENT_RUN_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function isAgentWorkload(resource) {
+  return resource.apiVersion === AGENT_WORKLOAD_API_VERSION && resource.kind === AGENT_WORKLOAD_KIND;
+}
+function isAgentRun(resource) {
+  return resource.apiVersion === AGENT_RUN_API_VERSION && resource.kind === AGENT_RUN_KIND;
+}
+function agentWorkloadReference(name, namespace) {
+  return {
+    apiVersion: AGENT_WORKLOAD_API_VERSION,
+    kind: AGENT_WORKLOAD_KIND,
+    name,
+    namespace
+  };
+}
+var TOOL_OPERATION_API_VERSION = "execution.memeloop.io/v1alpha1";
+var TOOL_OPERATION_KIND = "ToolOperation";
+function createToolOperationManifest(name, spec) {
+  return {
+    apiVersion: TOOL_OPERATION_API_VERSION,
+    kind: TOOL_OPERATION_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function isToolOperation(resource) {
+  return resource.apiVersion === TOOL_OPERATION_API_VERSION && resource.kind === TOOL_OPERATION_KIND;
+}
+function agentRunReference(name, namespace) {
+  return {
+    apiVersion: AGENT_RUN_API_VERSION,
+    kind: AGENT_RUN_KIND,
+    name,
+    namespace
+  };
+}
+var TOOL_CLASS_API_VERSION = "tool.memeloop.io/v1alpha1";
+var TOOL_CLASS_KIND = "ToolClass";
+var TOOL_EXECUTOR_API_VERSION = "tool.memeloop.io/v1alpha1";
+var TOOL_EXECUTOR_KIND = "ToolExecutor";
+function createToolClassManifest(name, spec) {
+  return {
+    apiVersion: TOOL_CLASS_API_VERSION,
+    kind: TOOL_CLASS_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function createToolExecutorManifest(name, spec) {
+  return {
+    apiVersion: TOOL_EXECUTOR_API_VERSION,
+    kind: TOOL_EXECUTOR_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function isToolClass(resource) {
+  return resource.apiVersion === TOOL_CLASS_API_VERSION && resource.kind === TOOL_CLASS_KIND;
+}
+function isToolExecutor(resource) {
+  return resource.apiVersion === TOOL_EXECUTOR_API_VERSION && resource.kind === TOOL_EXECUTOR_KIND;
+}
+var MODEL_CLASS_API_VERSION = "models.memeloop.io/v1alpha1";
+var MODEL_CLASS_KIND = "ModelClass";
+var MODEL_ENDPOINT_API_VERSION = "models.memeloop.io/v1alpha1";
+var MODEL_ENDPOINT_KIND = "ModelEndpoint";
+var MODEL_CALL_RECORD_API_VERSION = "models.memeloop.io/v1alpha1";
+var MODEL_CALL_RECORD_KIND = "ModelCallRecord";
+function createModelClassManifest(name, spec) {
+  return {
+    apiVersion: MODEL_CLASS_API_VERSION,
+    kind: MODEL_CLASS_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function createModelEndpointManifest(name, spec) {
+  return {
+    apiVersion: MODEL_ENDPOINT_API_VERSION,
+    kind: MODEL_ENDPOINT_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function createModelCallRecordManifest(name, spec) {
+  return {
+    apiVersion: MODEL_CALL_RECORD_API_VERSION,
+    kind: MODEL_CALL_RECORD_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function isModelClass(resource) {
+  return resource.apiVersion === MODEL_CLASS_API_VERSION && resource.kind === MODEL_CLASS_KIND;
+}
+function isModelEndpoint(resource) {
+  return resource.apiVersion === MODEL_ENDPOINT_API_VERSION && resource.kind === MODEL_ENDPOINT_KIND;
+}
+function isModelCallRecord(resource) {
+  return resource.apiVersion === MODEL_CALL_RECORD_API_VERSION && resource.kind === MODEL_CALL_RECORD_KIND;
+}
+var SECURITY_PROFILE_API_VERSION = "security.memeloop.io/v1alpha1";
+var SECURITY_PROFILE_KIND = "SecurityProfile";
+function createSecurityProfileManifest(name, spec) {
+  return {
+    apiVersion: SECURITY_PROFILE_API_VERSION,
+    kind: SECURITY_PROFILE_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function isSecurityProfile(resource) {
+  return resource.apiVersion === SECURITY_PROFILE_API_VERSION && resource.kind === SECURITY_PROFILE_KIND;
+}
+var POLICY_DECISION_API_VERSION = "security.memeloop.io/v1alpha1";
+var POLICY_DECISION_KIND = "PolicyDecision";
+function createPolicyDecisionManifest(name, spec) {
+  return {
+    apiVersion: POLICY_DECISION_API_VERSION,
+    kind: POLICY_DECISION_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function isPolicyDecision(resource) {
+  return resource.apiVersion === POLICY_DECISION_API_VERSION && resource.kind === POLICY_DECISION_KIND;
+}
+var AUDIT_RECORD_API_VERSION = "audit.memeloop.io/v1alpha1";
+var AUDIT_RECORD_KIND = "AuditRecord";
+function createAuditRecordManifest(name, spec) {
+  return {
+    apiVersion: AUDIT_RECORD_API_VERSION,
+    kind: AUDIT_RECORD_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function isAuditRecord(resource) {
+  return resource.apiVersion === AUDIT_RECORD_API_VERSION && resource.kind === AUDIT_RECORD_KIND;
+}
+var NETWORK_CLASS_API_VERSION = "network.memeloop.io/v1alpha1";
+var NETWORK_CLASS_KIND = "NetworkClass";
+var NETWORK_ATTACHMENT_API_VERSION = "network.memeloop.io/v1alpha1";
+var NETWORK_ATTACHMENT_KIND = "NetworkAttachment";
+function createNetworkClassManifest(name, spec) {
+  return {
+    apiVersion: NETWORK_CLASS_API_VERSION,
+    kind: NETWORK_CLASS_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function createNetworkAttachmentManifest(name, spec) {
+  return {
+    apiVersion: NETWORK_ATTACHMENT_API_VERSION,
+    kind: NETWORK_ATTACHMENT_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function isNetworkClass(resource) {
+  return resource.apiVersion === NETWORK_CLASS_API_VERSION && resource.kind === NETWORK_CLASS_KIND;
+}
+function isNetworkAttachment(resource) {
+  return resource.apiVersion === NETWORK_ATTACHMENT_API_VERSION && resource.kind === NETWORK_ATTACHMENT_KIND;
+}
+var STORAGE_CLASS_API_VERSION = "storage.memeloop.io/v1alpha1";
+var STORAGE_CLASS_KIND = "StorageClass";
+var VOLUME_CLAIM_API_VERSION = "storage.memeloop.io/v1alpha1";
+var VOLUME_CLAIM_KIND = "AgentVolumeClaim";
+var VOLUME_API_VERSION = "storage.memeloop.io/v1alpha1";
+var VOLUME_KIND = "AgentVolume";
+var SNAPSHOT_API_VERSION = "storage.memeloop.io/v1alpha1";
+var SNAPSHOT_KIND = "AgentSnapshot";
+function createStorageClassManifest(name, spec) {
+  return {
+    apiVersion: STORAGE_CLASS_API_VERSION,
+    kind: STORAGE_CLASS_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function createVolumeClaimManifest(name, spec) {
+  return {
+    apiVersion: VOLUME_CLAIM_API_VERSION,
+    kind: VOLUME_CLAIM_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function createVolumeManifest(name, spec) {
+  return {
+    apiVersion: VOLUME_API_VERSION,
+    kind: VOLUME_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function createSnapshotManifest(name, spec) {
+  return {
+    apiVersion: SNAPSHOT_API_VERSION,
+    kind: SNAPSHOT_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function isStorageClass(resource) {
+  return resource.apiVersion === STORAGE_CLASS_API_VERSION && resource.kind === STORAGE_CLASS_KIND;
+}
+function isVolumeClaim(resource) {
+  return resource.apiVersion === VOLUME_CLAIM_API_VERSION && resource.kind === VOLUME_CLAIM_KIND;
+}
+function isVolume(resource) {
+  return resource.apiVersion === VOLUME_API_VERSION && resource.kind === VOLUME_KIND;
+}
+function isSnapshot(resource) {
+  return resource.apiVersion === SNAPSHOT_API_VERSION && resource.kind === SNAPSHOT_KIND;
+}
+var CREDENTIAL_GRANT_API_VERSION = "security.memeloop.io/v1alpha1";
+var CREDENTIAL_GRANT_KIND = "CredentialGrant";
+function createCredentialGrantManifest(name, spec) {
+  return {
+    apiVersion: CREDENTIAL_GRANT_API_VERSION,
+    kind: CREDENTIAL_GRANT_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function isCredentialGrant(resource) {
+  return resource.apiVersion === CREDENTIAL_GRANT_API_VERSION && resource.kind === CREDENTIAL_GRANT_KIND;
+}
+var ARTIFACT_RECORD_API_VERSION = "artifacts.memeloop.io/v1alpha1";
+var ARTIFACT_RECORD_KIND = "ArtifactRecord";
+function createArtifactRecordManifest(name, spec) {
+  return {
+    apiVersion: ARTIFACT_RECORD_API_VERSION,
+    kind: ARTIFACT_RECORD_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function isArtifactRecord(resource) {
+  return resource.apiVersion === ARTIFACT_RECORD_API_VERSION && resource.kind === ARTIFACT_RECORD_KIND;
+}
+var DRIVER_MANIFEST_API_VERSION = "drivers.memeloop.io/v1alpha1";
+var DRIVER_MANIFEST_KIND = "DriverManifest";
+function createDriverManifestManifest(name, spec) {
+  return {
+    apiVersion: DRIVER_MANIFEST_API_VERSION,
+    kind: DRIVER_MANIFEST_KIND,
+    metadata: { name },
+    spec
+  };
+}
+function isDriverManifest(resource) {
+  return resource.apiVersion === DRIVER_MANIFEST_API_VERSION && resource.kind === DRIVER_MANIFEST_KIND;
+}
+function isDriverManifestAdmitted(resource) {
+  return resource.status?.phase === "Ready" && resource.spec.conformance.status === "passed";
+}
+
+export {
+  AGENT_WORKLOAD_API_VERSION,
+  AGENT_WORKLOAD_KIND,
+  AGENT_RUN_API_VERSION,
+  AGENT_RUN_KIND,
+  createAgentWorkloadManifest,
+  createAgentRunManifest,
+  isAgentWorkload,
+  isAgentRun,
+  agentWorkloadReference,
+  TOOL_OPERATION_API_VERSION,
+  TOOL_OPERATION_KIND,
+  createToolOperationManifest,
+  isToolOperation,
+  agentRunReference,
+  TOOL_CLASS_API_VERSION,
+  TOOL_CLASS_KIND,
+  TOOL_EXECUTOR_API_VERSION,
+  TOOL_EXECUTOR_KIND,
+  createToolClassManifest,
+  createToolExecutorManifest,
+  isToolClass,
+  isToolExecutor,
+  MODEL_CLASS_API_VERSION,
+  MODEL_CLASS_KIND,
+  MODEL_ENDPOINT_API_VERSION,
+  MODEL_ENDPOINT_KIND,
+  MODEL_CALL_RECORD_API_VERSION,
+  MODEL_CALL_RECORD_KIND,
+  createModelClassManifest,
+  createModelEndpointManifest,
+  createModelCallRecordManifest,
+  isModelClass,
+  isModelEndpoint,
+  isModelCallRecord,
+  SECURITY_PROFILE_API_VERSION,
+  SECURITY_PROFILE_KIND,
+  createSecurityProfileManifest,
+  isSecurityProfile,
+  POLICY_DECISION_API_VERSION,
+  POLICY_DECISION_KIND,
+  createPolicyDecisionManifest,
+  isPolicyDecision,
+  AUDIT_RECORD_API_VERSION,
+  AUDIT_RECORD_KIND,
+  createAuditRecordManifest,
+  isAuditRecord,
+  NETWORK_CLASS_API_VERSION,
+  NETWORK_CLASS_KIND,
+  NETWORK_ATTACHMENT_API_VERSION,
+  NETWORK_ATTACHMENT_KIND,
+  createNetworkClassManifest,
+  createNetworkAttachmentManifest,
+  isNetworkClass,
+  isNetworkAttachment,
+  STORAGE_CLASS_API_VERSION,
+  STORAGE_CLASS_KIND,
+  VOLUME_CLAIM_API_VERSION,
+  VOLUME_CLAIM_KIND,
+  VOLUME_API_VERSION,
+  VOLUME_KIND,
+  SNAPSHOT_API_VERSION,
+  SNAPSHOT_KIND,
+  createStorageClassManifest,
+  createVolumeClaimManifest,
+  createVolumeManifest,
+  createSnapshotManifest,
+  isStorageClass,
+  isVolumeClaim,
+  isVolume,
+  isSnapshot,
+  CREDENTIAL_GRANT_API_VERSION,
+  CREDENTIAL_GRANT_KIND,
+  createCredentialGrantManifest,
+  isCredentialGrant,
+  ARTIFACT_RECORD_API_VERSION,
+  ARTIFACT_RECORD_KIND,
+  createArtifactRecordManifest,
+  isArtifactRecord,
+  DRIVER_MANIFEST_API_VERSION,
+  DRIVER_MANIFEST_KIND,
+  createDriverManifestManifest,
+  isDriverManifest,
+  isDriverManifestAdmitted
+};
+//# sourceMappingURL=chunk-BGPU4RR7.js.map