natroc 0.0.1

package/server/dist/agent/improvement-engine.js

@@ -0,0 +1,107 @@
+const validKinds = new Set(["memory", "knowledge", "skill"]);
+export function parseImprovementProposalResponse(response) {
+    const parsed = safeJsonParse(extractJson(response));
+    const proposals = getRecordArray(parsed, "proposals");
+    return proposals.flatMap((proposal) => {
+        const normalized = normalizeModelProposal(proposal);
+        return normalized ? [normalized] : [];
+    });
+}
+export function buildHeuristicImprovementProposals(input) {
+    const userMessage = input.userMessage.trim();
+    if (!asksToRemember(userMessage)) {
+        return [];
+    }
+    return [
+        {
+            kind: "memory",
+            title: "User requested memory",
+            content: userMessage
+                .replace(/^(tolong\s+)?(ingat|remember)\s+/i, "")
+                .trim(),
+            reason: "The user explicitly asked the agent to remember this.",
+            sourceConversationId: input.conversationId ?? null
+        }
+    ];
+}
+export async function generateImprovementProposals(input) {
+    const transcript = input.messages
+        .map((message) => `${message.role.toUpperCase()}: ${message.content}`)
+        .join("\n\n");
+    const response = await input.adapter.chat({
+        message: "Review this conversation and propose useful Natroc improvements.",
+        model: input.model,
+        messages: [
+            {
+                role: "system",
+                content: 'You are Natroc\'s self-improvement reviewer. Return JSON only. Propose durable memory, knowledge, or skill improvements that would help future sessions. Do not include secrets. If there is nothing durable, return {"proposals":[]}. Shape: {"proposals":[{"kind":"memory|knowledge|skill","title":"short title","content":"durable note","reason":"why this helps"}]}'
+            },
+            {
+                role: "user",
+                content: transcript
+            }
+        ]
+    });
+    return parseImprovementProposalResponse(response.content).map((proposal) => ({
+        ...proposal,
+        sourceConversationId: proposal.sourceConversationId ?? input.conversationId ?? null
+    }));
+}
+function asksToRemember(value) {
+    return /\b(ingat|remember|catat|simpan\s+memory|save\s+memory)\b/i.test(value);
+}
+function normalizeModelProposal(value) {
+    const kind = readString(value.kind);
+    const title = readString(value.title);
+    const content = readString(value.content);
+    const reason = readString(value.reason);
+    if (!validKinds.has(kind) || !content) {
+        return null;
+    }
+    return {
+        kind,
+        title: title || defaultTitle(kind),
+        content,
+        reason: reason || "Generated by Natroc self-improvement review.",
+        sourceConversationId: null
+    };
+}
+function defaultTitle(kind) {
+    if (kind === "knowledge")
+        return "Knowledge improvement";
+    if (kind === "skill")
+        return "Skill improvement";
+    return "Memory improvement";
+}
+function extractJson(value) {
+    const fenced = value.match(/```(?:json)?\s*([\s\S]*?)```/i)?.[1];
+    const raw = fenced ?? value;
+    const first = raw.indexOf("{");
+    const last = raw.lastIndexOf("}");
+    if (first === -1 || last === -1 || last < first) {
+        return "{}";
+    }
+    return raw.slice(first, last + 1);
+}
+function safeJsonParse(value) {
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        return {};
+    }
+}
+function getRecordArray(value, key) {
+    if (!isRecord(value)) {
+        return [];
+    }
+    const maybeArray = value[key];
+    return Array.isArray(maybeArray) ? maybeArray.filter(isRecord) : [];
+}
+function readString(value) {
+    return typeof value === "string" ? value.trim() : "";
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=improvement-engine.js.map

package/server/dist/agent/improvement-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"improvement-engine.js","sourceRoot":"","sources":["../../src/agent/improvement-engine.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAkB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;AAE7E,MAAM,UAAU,gCAAgC,CAC9C,QAAgB;IAEhB,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAErD,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM,UAAU,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAA;QAEnD,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAIlD;IACC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAA;IAE5C,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,CAAA;IACX,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,WAAW;iBACjB,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC;iBAChD,IAAI,EAAE;YACT,MAAM,EAAE,uDAAuD;YAC/D,oBAAoB,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;SACnD;KACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAKlD;IACC,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ;SAC9B,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;SACrE,IAAI,CAAC,MAAM,CAAC,CAAA;IAEf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACxC,OAAO,EAAE,kEAAkE;QAC3E,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,0WAA0W;aAC7W;YACD;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,UAAU;aACpB;SACF;KACF,CAAC,CAAA;IAEF,OAAO,gCAAgC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC3E,GAAG,QAAQ;QACX,oBAAoB,EAClB,QAAQ,CAAC,oBAAoB,IAAI,KAAK,CAAC,cAAc,IAAI,IAAI;KAChE,CAAC,CAAC,CAAA;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,2DAA2D,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,sBAAsB,CAAC,KAA8B;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAA;IACtD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACrC,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAEvC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC;QAClC,OAAO;QACP,MAAM,EAAE,MAAM,IAAI,8CAA8C;QAChE,oBAAoB,EAAE,IAAI;KACA,CAAA;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,IAAqB;IACzC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,uBAAuB,CAAA;IACxD,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,mBAAmB,CAAA;IAChD,OAAO,oBAAoB,CAAA;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAChE,MAAM,GAAG,GAAG,MAAM,IAAI,KAAK,CAAA;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IAEjC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QAChD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAA;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,KAAc,EACd,GAAW;IAEX,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;IAE7B,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACrE,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC"}

package/server/dist/agent/tools/index.d.ts

@@ -0,0 +1,14 @@
+import type { AgentTool, ToolContext, ToolMode, ToolResult } from "./types.js";
+declare const ALL_TOOLS: AgentTool[];
+/** Reads the configured tool execution mode from the environment. */
+export declare function getToolMode(): ToolMode;
+/** Resolves the default working directory for tool execution. */
+export declare function getAgentCwd(): string;
+/** Returns the tools the agent may use given the current mode. */
+export declare function getAvailableTools(mode: ToolMode): AgentTool[];
+export declare function findTool(name: string): AgentTool | undefined;
+export declare function executeTool(name: string, args: Record<string, unknown>, mode: ToolMode, context: ToolContext): Promise<ToolResult>;
+/** Builds the tool-usage section of the agent system prompt. */
+export declare function buildToolsPrompt(tools: AgentTool[]): string;
+export { ALL_TOOLS };
+export type { AgentTool, ToolContext, ToolMode, ToolResult } from "./types.js";

package/server/dist/agent/tools/index.js

@@ -0,0 +1,85 @@
+import os from "node:os";
+import { listDirectoryTool } from "./list-directory.js";
+import { readFileTool } from "./read-file.js";
+import { runCommandTool } from "./run-command.js";
+import { systemInfoTool } from "./system-info.js";
+import { writeFileTool } from "./write-file.js";
+const ALL_TOOLS = [
+    systemInfoTool,
+    listDirectoryTool,
+    readFileTool,
+    writeFileTool,
+    runCommandTool,
+];
+/** Reads the configured tool execution mode from the environment. */
+export function getToolMode() {
+    return process.env.NATROC_AGENT_TOOL_MODE === "readonly"
+        ? "readonly"
+        : "auto";
+}
+/** Resolves the default working directory for tool execution. */
+export function getAgentCwd() {
+    const configured = process.env.NATROC_AGENT_CWD?.trim();
+    return configured || os.homedir();
+}
+/** Returns the tools the agent may use given the current mode. */
+export function getAvailableTools(mode) {
+    if (mode === "readonly") {
+        return ALL_TOOLS.filter((tool) => tool.risk === "low");
+    }
+    return [...ALL_TOOLS];
+}
+export function findTool(name) {
+    return ALL_TOOLS.find((tool) => tool.name === name);
+}
+export async function executeTool(name, args, mode, context) {
+    const tool = getAvailableTools(mode).find((item) => item.name === name);
+    if (!tool) {
+        if (findTool(name)) {
+            return {
+                ok: false,
+                output: `Tool "${name}" is disabled because NATROC_AGENT_TOOL_MODE is set to "readonly".`,
+            };
+        }
+        return { ok: false, output: `Unknown tool "${name}".` };
+    }
+    try {
+        return await tool.execute(args, context);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            output: error instanceof Error
+                ? `Tool "${name}" failed: ${error.message}`
+                : `Tool "${name}" failed.`,
+        };
+    }
+}
+/** Builds the tool-usage section of the agent system prompt. */
+export function buildToolsPrompt(tools) {
+    if (tools.length === 0) {
+        return [
+            "## Computer Control Tools",
+            "No tools are currently available.",
+            "Do not call tools. Reply in plain text, and explain any limitation if the user's request requires unavailable tools.",
+        ].join("\n");
+    }
+    const toolLines = tools
+        .map((tool) => `- ${tool.name} [risk: ${tool.risk}]: ${tool.description}\n  arguments: ${tool.parameters}`)
+        .join("\n");
+    return [
+        "## Computer Control Tools",
+        "You can control this computer by calling tools. Available tools:",
+        toolLines,
+        "",
+        "To call a tool, reply with ONLY a single JSON object and nothing else:",
+        '{"tool": "<tool name>", "args": { ... }}',
+        "Only call tools listed above. Do not call a tool that is missing from this list or disabled by the current mode.",
+        "After a tool runs you receive its result as the next message. You may then call another tool, or, when the task is finished, reply with a normal plain-text answer for the user.",
+        "If a tool is unavailable, disabled, or returns an error, do not get stuck trying the same blocked call. Explain the limitation in plain text and answer as far as possible.",
+        "A plain-text reply (no JSON tool object) is always treated as your final answer.",
+        "Never claim a file was written, a command ran, or a system change happened unless you actually called the tool and saw a successful result.",
+    ].join("\n");
+}
+export { ALL_TOOLS };
+//# sourceMappingURL=index.js.map

package/server/dist/agent/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agent/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE/C,MAAM,SAAS,GAAgB;IAC7B,cAAc;IACd,iBAAiB;IACjB,YAAY;IACZ,aAAa;IACb,cAAc;CACf,CAAA;AAED,qEAAqE;AACrE,MAAM,UAAU,WAAW;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,UAAU;QACtD,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,MAAM,CAAA;AACZ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,WAAW;IACzB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAA;IACvD,OAAO,UAAU,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;AACnC,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAA;IACxD,CAAC;IAED,OAAO,CAAC,GAAG,SAAS,CAAC,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,IAA6B,EAC7B,IAAc,EACd,OAAoB;IAEpB,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;IAEvE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,SAAS,IAAI,oEAAoE;aAC1F,CAAA;QACH,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,IAAI,IAAI,EAAE,CAAA;IACzD,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,SAAS,IAAI,aAAa,KAAK,CAAC,OAAO,EAAE;gBAC3C,CAAC,CAAC,SAAS,IAAI,WAAW;SAC/B,CAAA;IACH,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAAC,KAAkB;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,2BAA2B;YAC3B,mCAAmC;YACnC,sHAAsH;SACvH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC;IAED,MAAM,SAAS,GAAG,KAAK;SACpB,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CACP,KAAK,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,WAAW,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAC9F;SACA,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,OAAO;QACL,2BAA2B;QAC3B,kEAAkE;QAClE,SAAS;QACT,EAAE;QACF,wEAAwE;QACxE,0CAA0C;QAC1C,kHAAkH;QAClH,kLAAkL;QAClL,6KAA6K;QAC7K,kFAAkF;QAClF,6IAA6I;KAC9I,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,OAAO,EAAE,SAAS,EAAE,CAAA"}

package/server/dist/agent/tools/list-directory.d.ts

@@ -0,0 +1,2 @@
+import type { AgentTool } from "./types.js";
+export declare const listDirectoryTool: AgentTool;

package/server/dist/agent/tools/list-directory.js

@@ -0,0 +1,27 @@
+import { readdir } from "node:fs/promises";
+import { z } from "zod";
+import { resolveUserPath } from "./util.js";
+const schema = z.object({
+    path: z.string().optional(),
+});
+export const listDirectoryTool = {
+    name: "list_directory",
+    description: "List the files and folders inside a directory on the computer.",
+    parameters: '{ "path": string (optional, defaults to the working directory) }',
+    risk: "low",
+    execute: async (args, context) => {
+        const { path } = schema.parse(args);
+        const target = resolveUserPath(path, context.cwd);
+        const entries = await readdir(target, { withFileTypes: true });
+        const listing = entries
+            .map((entry) => `${entry.isDirectory() ? "[dir] " : "[file]"} ${entry.name}`)
+            .sort();
+        return {
+            ok: true,
+            output: listing.length > 0
+                ? `${target}\n${listing.join("\n")}`
+                : `${target} (empty directory)`,
+        };
+    },
+};
+//# sourceMappingURL=list-directory.js.map

package/server/dist/agent/tools/list-directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-directory.js","sourceRoot":"","sources":["../../../src/agent/tools/list-directory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAE1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE3C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAc;IAC1C,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,gEAAgE;IAClE,UAAU,EACR,kEAAkE;IACpE,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QAEjD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9D,MAAM,OAAO,GAAG,OAAO;aACpB,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CACR,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAC/D;aACA,IAAI,EAAE,CAAA;QAET,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EACJ,OAAO,CAAC,MAAM,GAAG,CAAC;gBAChB,CAAC,CAAC,GAAG,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACpC,CAAC,CAAC,GAAG,MAAM,oBAAoB;SACpC,CAAA;IACH,CAAC;CACF,CAAA"}

package/server/dist/agent/tools/read-file.d.ts

@@ -0,0 +1,2 @@
+import type { AgentTool } from "./types.js";
+export declare const readFileTool: AgentTool;

package/server/dist/agent/tools/read-file.js

@@ -0,0 +1,30 @@
+import { readFile, stat } from "node:fs/promises";
+import { z } from "zod";
+import { resolveUserPath, truncateOutput } from "./util.js";
+const schema = z.object({
+    path: z.string().min(1),
+});
+const MAX_FILE_BYTES = 256 * 1024;
+export const readFileTool = {
+    name: "read_file",
+    description: "Read the text content of a file on the computer.",
+    parameters: '{ "path": string (file path, absolute or relative to the working directory) }',
+    risk: "low",
+    execute: async (args, context) => {
+        const { path } = schema.parse(args);
+        const target = resolveUserPath(path, context.cwd);
+        const info = await stat(target);
+        if (!info.isFile()) {
+            return { ok: false, output: `${target} is not a file.` };
+        }
+        if (info.size > MAX_FILE_BYTES) {
+            return {
+                ok: false,
+                output: `${target} is too large to read (${info.size} bytes, limit ${MAX_FILE_BYTES} bytes).`,
+            };
+        }
+        const content = await readFile(target, "utf8");
+        return { ok: true, output: truncateOutput(content) };
+    },
+};
+//# sourceMappingURL=read-file.js.map

package/server/dist/agent/tools/read-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-file.js","sourceRoot":"","sources":["../../../src/agent/tools/read-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAEjD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAE3D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAA;AAEjC,MAAM,CAAC,MAAM,YAAY,GAAc;IACrC,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,kDAAkD;IAC/D,UAAU,EACR,+EAA+E;IACjF,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QAEjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAA;QAE/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAA;QAC1D,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;YAC/B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG,MAAM,0BAA0B,IAAI,CAAC,IAAI,iBAAiB,cAAc,UAAU;aAC9F,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAE9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAA;IACtD,CAAC;CACF,CAAA"}

package/server/dist/agent/tools/run-command.d.ts

@@ -0,0 +1,2 @@
+import type { AgentTool } from "./types.js";
+export declare const runCommandTool: AgentTool;

package/server/dist/agent/tools/run-command.js

@@ -0,0 +1,72 @@
+import { spawn } from "node:child_process";
+import { z } from "zod";
+import { resolveUserPath, truncateOutput } from "./util.js";
+const schema = z.object({
+    command: z.string().min(1),
+    cwd: z.string().optional(),
+});
+const TIMEOUT_MS = 60_000;
+const MAX_BUFFER = 200_000;
+export const runCommandTool = {
+    name: "run_command",
+    description: "Run a shell command on the computer and return its stdout, stderr, and exit code. Use this for any system action not covered by another tool.",
+    parameters: '{ "command": string, "cwd": string (optional working directory) }',
+    risk: "high",
+    execute: async (args, context) => {
+        const { command, cwd } = schema.parse(args);
+        const workingDir = resolveUserPath(cwd, context.cwd);
+        return runShellCommand(command, workingDir);
+    },
+};
+function runShellCommand(command, cwd) {
+    return new Promise((resolvePromise) => {
+        const isWindows = process.platform === "win32";
+        const shell = isWindows ? "cmd.exe" : "/bin/sh";
+        const shellFlag = isWindows ? "/c" : "-c";
+        // The full command is passed as a single argument to the shell, so there
+        // is no string interpolation and no command-injection surface here.
+        const child = spawn(shell, [shellFlag, command], {
+            cwd,
+            timeout: TIMEOUT_MS,
+        });
+        let stdout = "";
+        let stderr = "";
+        child.stdout?.on("data", (chunk) => {
+            if (stdout.length < MAX_BUFFER) {
+                stdout += chunk.toString();
+            }
+        });
+        child.stderr?.on("data", (chunk) => {
+            if (stderr.length < MAX_BUFFER) {
+                stderr += chunk.toString();
+            }
+        });
+        child.on("error", (error) => {
+            resolvePromise({
+                ok: false,
+                output: `Failed to run command: ${error.message}`,
+            });
+        });
+        child.on("close", (code, signal) => {
+            const parts = [
+                `$ ${command}`,
+                `(working directory: ${cwd})`,
+                `exit code: ${code ?? "null"}${signal ? `, signal: ${signal}` : ""}`,
+            ];
+            if (stdout.trim()) {
+                parts.push(`--- stdout ---\n${truncateOutput(stdout.trim())}`);
+            }
+            if (stderr.trim()) {
+                parts.push(`--- stderr ---\n${truncateOutput(stderr.trim())}`);
+            }
+            if (signal === "SIGTERM") {
+                parts.push(`(command timed out after ${TIMEOUT_MS / 1000}s)`);
+            }
+            resolvePromise({
+                ok: code === 0,
+                output: parts.join("\n"),
+            });
+        });
+    });
+}
+//# sourceMappingURL=run-command.js.map

package/server/dist/agent/tools/run-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-command.js","sourceRoot":"","sources":["../../../src/agent/tools/run-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAE3D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAA;AAEF,MAAM,UAAU,GAAG,MAAM,CAAA;AACzB,MAAM,UAAU,GAAG,OAAO,CAAA;AAE1B,MAAM,CAAC,MAAM,cAAc,GAAc;IACvC,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,+IAA+I;IACjJ,UAAU,EACR,mEAAmE;IACrE,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC3C,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QAEpD,OAAO,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAC7C,CAAC;CACF,CAAA;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,GAAW;IACnD,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;QACpC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAA;QAC9C,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/C,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;QAEzC,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE;YAC/C,GAAG;YACH,OAAO,EAAE,UAAU;SACpB,CAAC,CAAA;QAEF,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,MAAM,GAAG,EAAE,CAAA;QAEf,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;YAC5B,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;YAC5B,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,cAAc,CAAC;gBACb,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,0BAA0B,KAAK,CAAC,OAAO,EAAE;aAClD,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACjC,MAAM,KAAK,GAAG;gBACZ,KAAK,OAAO,EAAE;gBACd,uBAAuB,GAAG,GAAG;gBAC7B,cAAc,IAAI,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;aACrE,CAAA;YAED,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,mBAAmB,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;YAChE,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,mBAAmB,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;YAChE,CAAC;YAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,4BAA4B,UAAU,GAAG,IAAI,IAAI,CAAC,CAAA;YAC/D,CAAC;YAED,cAAc,CAAC;gBACb,EAAE,EAAE,IAAI,KAAK,CAAC;gBACd,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;aACzB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/server/dist/agent/tools/system-info.d.ts

@@ -0,0 +1,2 @@
+import type { AgentTool } from "./types.js";
+export declare const systemInfoTool: AgentTool;

package/server/dist/agent/tools/system-info.js

@@ -0,0 +1,28 @@
+import os from "node:os";
+export const systemInfoTool = {
+    name: "system_info",
+    description: "Get information about the host computer: operating system, architecture, hostname, current user, home directory, working directory, CPU count, memory, and Node.js version.",
+    parameters: "{} (no arguments required)",
+    risk: "low",
+    execute: async (_args, context) => {
+        const info = {
+            platform: os.platform(),
+            arch: os.arch(),
+            release: os.release(),
+            hostname: os.hostname(),
+            user: os.userInfo().username,
+            homedir: os.homedir(),
+            workingDirectory: context.cwd,
+            nodeVersion: process.version,
+            cpuCount: os.cpus().length,
+            totalMemoryMb: Math.round(os.totalmem() / 1024 / 1024),
+            freeMemoryMb: Math.round(os.freemem() / 1024 / 1024),
+            uptimeSeconds: Math.round(os.uptime()),
+        };
+        return {
+            ok: true,
+            output: JSON.stringify(info, null, 2),
+        };
+    },
+};
+//# sourceMappingURL=system-info.js.map

package/server/dist/agent/tools/system-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-info.js","sourceRoot":"","sources":["../../../src/agent/tools/system-info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AAIxB,MAAM,CAAC,MAAM,cAAc,GAAc;IACvC,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,6KAA6K;IAC/K,UAAU,EAAE,4BAA4B;IACxC,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;YACvB,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;YACf,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE;YACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;YACvB,IAAI,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ;YAC5B,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE;YACrB,gBAAgB,EAAE,OAAO,CAAC,GAAG;YAC7B,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM;YAC1B,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;YACtD,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;YACpD,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;SACvC,CAAA;QAED,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;SACtC,CAAA;IACH,CAAC;CACF,CAAA"}

package/server/dist/agent/tools/types.d.ts

@@ -0,0 +1,18 @@
+export type ToolRisk = "low" | "high";
+export type ToolMode = "auto" | "readonly";
+export type ToolContext = {
+    /** Default working directory used to resolve relative paths. */
+    cwd: string;
+};
+export type ToolResult = {
+    ok: boolean;
+    output: string;
+};
+export type AgentTool = {
+    name: string;
+    description: string;
+    /** Human-readable argument shape, shown to the model in the system prompt. */
+    parameters: string;
+    risk: ToolRisk;
+    execute: (args: Record<string, unknown>, context: ToolContext) => Promise<ToolResult>;
+};

package/server/dist/agent/tools/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/server/dist/agent/tools/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/agent/tools/types.ts"],"names":[],"mappings":""}

package/server/dist/agent/tools/util.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Resolves a user-supplied path. Supports `~` expansion and resolves relative
+ * paths against the agent working directory.
+ */
+export declare function resolveUserPath(path: string | undefined, cwd: string): string;
+/** Truncates long tool output so it stays within a reasonable prompt budget. */
+export declare function truncateOutput(value: string, max?: number): string;

package/server/dist/agent/tools/util.js

@@ -0,0 +1,24 @@
+import { homedir } from "node:os";
+import { isAbsolute, resolve } from "node:path";
+/**
+ * Resolves a user-supplied path. Supports `~` expansion and resolves relative
+ * paths against the agent working directory.
+ */
+export function resolveUserPath(path, cwd) {
+    if (!path || !path.trim()) {
+        return cwd;
+    }
+    let trimmed = path.trim();
+    if (trimmed === "~" || trimmed.startsWith("~/")) {
+        trimmed = resolve(homedir(), trimmed.slice(1).replace(/^\/+/, ""));
+    }
+    return isAbsolute(trimmed) ? trimmed : resolve(cwd, trimmed);
+}
+/** Truncates long tool output so it stays within a reasonable prompt budget. */
+export function truncateOutput(value, max = 12000) {
+    if (value.length <= max) {
+        return value;
+    }
+    return `${value.slice(0, max)}\n…[output truncated, ${value.length - max} more characters]`;
+}
+//# sourceMappingURL=util.js.map

package/server/dist/agent/tools/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../src/agent/tools/util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAE/C;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAwB,EACxB,GAAW;IAEX,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAEzB,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;IACpE,CAAC;IAED,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;AAC9D,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,GAAG,GAAG,KAAK;IACvD,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACxB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,yBAC3B,KAAK,CAAC,MAAM,GAAG,GACjB,mBAAmB,CAAA;AACrB,CAAC"}

package/server/dist/agent/tools/write-file.d.ts

@@ -0,0 +1,2 @@
+import type { AgentTool } from "./types.js";
+export declare const writeFileTool: AgentTool;

package/server/dist/agent/tools/write-file.js

@@ -0,0 +1,25 @@
+import { mkdir, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { z } from "zod";
+import { resolveUserPath } from "./util.js";
+const schema = z.object({
+    path: z.string().min(1),
+    content: z.string(),
+});
+export const writeFileTool = {
+    name: "write_file",
+    description: "Create or overwrite a file on the computer with the given text content. Missing parent folders are created automatically.",
+    parameters: '{ "path": string, "content": string }',
+    risk: "high",
+    execute: async (args, context) => {
+        const { path, content } = schema.parse(args);
+        const target = resolveUserPath(path, context.cwd);
+        await mkdir(dirname(target), { recursive: true });
+        await writeFile(target, content, "utf8");
+        return {
+            ok: true,
+            output: `Wrote ${content.length} characters to ${target}.`,
+        };
+    },
+};
+//# sourceMappingURL=write-file.js.map

package/server/dist/agent/tools/write-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-file.js","sourceRoot":"","sources":["../../../src/agent/tools/write-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE3C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAc;IACtC,IAAI,EAAE,YAAY;IAClB,WAAW,EACT,2HAA2H;IAC7H,UAAU,EAAE,uCAAuC;IACnD,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QAEjD,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAExC,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,SAAS,OAAO,CAAC,MAAM,kBAAkB,MAAM,GAAG;SAC3D,CAAA;IACH,CAAC;CACF,CAAA"}

package/server/dist/app.d.ts

@@ -0,0 +1,8 @@
+import Fastify from "fastify";
+import type { RuntimeState } from "./runtime.js";
+export type BuildAppOptions = {
+    runtime?: RuntimeState;
+};
+export declare function buildApp(options?: BuildAppOptions): Fastify.FastifyInstance<import("node:http").Server<typeof import("node:http").IncomingMessage, typeof import("node:http").ServerResponse>, import("node:http").IncomingMessage, import("node:http").ServerResponse<import("node:http").IncomingMessage>, Fastify.FastifyBaseLogger, Fastify.FastifyTypeProviderDefault> & PromiseLike<Fastify.FastifyInstance<import("node:http").Server<typeof import("node:http").IncomingMessage, typeof import("node:http").ServerResponse>, import("node:http").IncomingMessage, import("node:http").ServerResponse<import("node:http").IncomingMessage>, Fastify.FastifyBaseLogger, Fastify.FastifyTypeProviderDefault>> & {
+    __linterBrands: "SafePromiseLike";
+};

package/server/dist/app.js

@@ -0,0 +1,39 @@
+import cors from "@fastify/cors";
+import Fastify from "fastify";
+import { ZodError } from "zod";
+import { createGateway, registerGatewayWebSocket } from "./gateway/index.js";
+export function buildApp(options = {}) {
+    const app = Fastify({
+        logger: process.env.NODE_ENV !== "test",
+    });
+    app.setErrorHandler((error, request, reply) => {
+        request.log.error(error);
+        if (error instanceof ZodError) {
+            return reply.code(400).send({
+                error: "Invalid request body.",
+                issues: error.issues,
+            });
+        }
+        return reply.code(500).send({
+            error: error instanceof Error ? error.message : "Internal server error.",
+        });
+    });
+    app.register(cors, {
+        origin: true,
+    });
+    if (options.runtime) {
+        registerGatewayWebSocket(app, createGateway(options.runtime));
+    }
+    app.get("/__natroc__/canvas/", async () => ({
+        type: "canvas",
+        status: "not_implemented",
+        message: "Canvas surface is not yet implemented.",
+    }));
+    app.get("/__natroc__/a2ui/", async () => ({
+        type: "a2ui",
+        status: "not_implemented",
+        message: "A2UI surface is not yet implemented.",
+    }));
+    return app;
+}
+//# sourceMappingURL=app.js.map

package/server/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,eAAe,CAAC;AACjC,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAG/B,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAM7E,MAAM,UAAU,QAAQ,CAAC,UAA2B,EAAE;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC;QAClB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;KACxC,CAAC,CAAC;IAEH,GAAG,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEzB,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,uBAAuB;gBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;SACzE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,wBAAwB,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,wCAAwC;KAClD,CAAC,CAAC,CAAC;IACJ,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,sCAAsC;KAChD,CAAC,CAAC,CAAC;IAEJ,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/auth/password.d.ts

@@ -0,0 +1,7 @@
+/** Hashes a password with scrypt and a fresh random salt. */
+export declare function hashPassword(password: string): Promise<{
+    hash: string;
+    salt: string;
+}>;
+/** Verifies a password against a stored scrypt hash using a constant-time compare. */
+export declare function verifyPassword(password: string, hash: string, salt: string): Promise<boolean>;

package/server/dist/auth/password.js

@@ -0,0 +1,20 @@
+import { randomBytes, scrypt, timingSafeEqual } from "node:crypto";
+import { promisify } from "node:util";
+const scryptAsync = promisify(scrypt);
+const KEY_LENGTH = 64;
+/** Hashes a password with scrypt and a fresh random salt. */
+export async function hashPassword(password) {
+    const salt = randomBytes(16).toString("hex");
+    const derived = (await scryptAsync(password, salt, KEY_LENGTH));
+    return { hash: derived.toString("hex"), salt };
+}
+/** Verifies a password against a stored scrypt hash using a constant-time compare. */
+export async function verifyPassword(password, hash, salt) {
+    const derived = (await scryptAsync(password, salt, KEY_LENGTH));
+    const expected = Buffer.from(hash, "hex");
+    if (expected.length !== derived.length) {
+        return false;
+    }
+    return timingSafeEqual(expected, derived);
+}
+//# sourceMappingURL=password.js.map

package/server/dist/auth/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/auth/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;AACrC,MAAM,UAAU,GAAG,EAAE,CAAA;AAErB,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB;IAEhB,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC5C,MAAM,OAAO,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAW,CAAA;IAEzE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAA;AAChD,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,IAAY,EACZ,IAAY;IAEZ,MAAM,OAAO,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAW,CAAA;IACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAEzC,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;AAC3C,CAAC"}