patchwork-os 0.2.0-alpha.0

package/dist/recipesHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipesHttp.js","sourceRoot":"","sources":["../src/recipesHttp.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAmB7B,MAAM,UAAU,UAAU,CACxB,UAAkB,EAClB,KAAkB;IAElB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAkBD,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAAE,SAAS;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAK5B,CAAC;YACF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,SAAS,GAAG,GAAG,QAAQ,mBAAmB,CAAC;YACjD,IAAI,cAAc,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC;gBACH,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACpB,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;YACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACpD,IAAI,MAA+B,CAAC;YACpC,IACE,QAAQ,CAAC,UAAU,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC;gBAClD,QAAQ,KAAK,kBAAkB,EAC/B,CAAC;gBACD,MAAM,GAAG,MAAM,CAAC;YAClB,CAAC;iBAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,aAAa,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC;gBACxE,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;gBAC9C,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI;gBAC7B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAChE,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,IAAI,CAAC,OAAO;gBACzB,cAAc;gBACd,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,WAAmB;IAEnB,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAAE,SAAS;QACtE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAG5B,CAAC;YACF,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACxC,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;oBAC9C,IAAI,EAAE,WAAW;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,IAAY;IAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAExD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAU5B,CAAC;IACF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,yCAAyC,MAAM,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,WAAW;QACpB,KAAK,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,KAAK,CAAC,IAAI,CACR,wEAAwE,CACzE,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GACR,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CACR,yEAAyE,CAC1E,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,OAAgB;IAEhB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC;IAClB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC;IACpE,OAAO,GAAG,UAAU,qCAAqC,IAAI,UAAU,CAAC;AAC1E,CAAC"}

package/dist/resources.d.ts

@@ -0,0 +1,33 @@
+/** An MCP Resource object. */
+export interface McpResource {
+    uri: string;
+    name: string;
+    mimeType: string;
+    size?: number;
+}
+export interface ListResourcesResult {
+    resources: McpResource[];
+    nextCursor?: string;
+}
+/** Invalidate the walk cache (useful in tests when files are added mid-run). */
+export declare function invalidateResourcesCache(workspace?: string): void;
+/**
+ * List workspace files as MCP resources, with cursor-based pagination.
+ * Cursor is an opaque base64-encoded decimal offset (same pattern as tools/list).
+ */
+export declare function listResources(workspace: string, cursor?: string): ListResourcesResult;
+export type ReadResourceResult = {
+    contents: Array<{
+        uri: string;
+        text: string;
+        mimeType: string;
+    }>;
+} | {
+    error: string;
+    code: string;
+};
+/**
+ * Read a workspace file by URI.
+ * Returns an error object if the file is outside the workspace, too large, or unreadable.
+ */
+export declare function readResource(workspace: string, uri: string): ReadResourceResult;

package/dist/resources.js

@@ -0,0 +1,266 @@
+/**
+ * MCP resources/ implementation.
+ *
+ * Exposes workspace files as addressable MCP Resource objects.
+ * Security: all paths are workspace-confined (same rules as tools).
+ * Does not implement resources/subscribe or resources/templates/list (deferred).
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { mimeTypeFromPath } from "./tools/utils.js";
+const RESOURCES_PAGE_SIZE = 50;
+const MAX_RESOURCE_BYTES = 1 * 1024 * 1024; // 1 MB — same guard as getBufferContent
+/** Extensions we emit as resources. Binary files (images, pdfs) are listed but not read as text. */
+const TEXT_RESOURCE_EXTS = new Set([
+    ".ts",
+    ".tsx",
+    ".js",
+    ".jsx",
+    ".mjs",
+    ".cjs",
+    ".json",
+    ".yaml",
+    ".yml",
+    ".toml",
+    ".xml",
+    ".html",
+    ".htm",
+    ".css",
+    ".scss",
+    ".less",
+    ".md",
+    ".txt",
+    ".sh",
+    ".bash",
+    ".py",
+    ".rb",
+    ".rs",
+    ".go",
+    ".java",
+    ".c",
+    ".cpp",
+    ".h",
+    ".hpp",
+    ".sql",
+    ".graphql",
+    ".vue",
+    ".svelte",
+    ".gitignore",
+    ".editorconfig",
+]);
+const SKIP_DIRS = new Set([
+    "node_modules",
+    ".git",
+    ".svn",
+    ".hg",
+    "dist",
+    "build",
+    "out",
+    ".next",
+    ".nuxt",
+    "__pycache__",
+    ".pytest_cache",
+    ".tox",
+    "target",
+    ".cargo",
+    ".DS_Store",
+]);
+const MAX_WALK_DEPTH = 20; // prevent blocking on pathologically deep directory trees
+/**
+ * Recursively enumerate workspace files, skipping common non-source directories.
+ * Returns absolute paths sorted lexicographically.
+ */
+function collectWorkspaceFiles(workspace) {
+    const results = [];
+    function walk(dir, depth) {
+        if (depth > MAX_WALK_DEPTH)
+            return;
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            if (SKIP_DIRS.has(entry.name))
+                continue;
+            const full = path.join(dir, entry.name);
+            if (entry.isSymbolicLink())
+                continue; // skip symlinks for security
+            if (entry.isDirectory()) {
+                walk(full, depth + 1);
+            }
+            else if (entry.isFile()) {
+                results.push(full);
+            }
+        }
+    }
+    walk(workspace, 0);
+    results.sort();
+    return results;
+}
+function fileToResource(absPath, workspace) {
+    const relPath = absPath.startsWith(workspace + path.sep)
+        ? absPath.slice(workspace.length + 1)
+        : absPath;
+    const uri = `file://${absPath}`;
+    return {
+        uri,
+        name: relPath,
+        mimeType: mimeTypeFromPath(absPath),
+    };
+}
+// Simple in-memory snapshot to avoid re-walking the filesystem on every paginated call.
+// Invalidated after 5 seconds so the list stays reasonably fresh without constant I/O.
+// Keyed by workspace path so multi-root sessions don't share or evict each other's cache.
+const WALK_CACHE_TTL_MS = 5_000;
+const walkCache = new Map();
+function getCachedWorkspaceFiles(workspace) {
+    const now = Date.now();
+    const cached = walkCache.get(workspace);
+    if (cached && now < cached.expiresAt) {
+        return cached.files;
+    }
+    const files = collectWorkspaceFiles(workspace);
+    walkCache.set(workspace, { files, expiresAt: now + WALK_CACHE_TTL_MS });
+    return files;
+}
+/** Invalidate the walk cache (useful in tests when files are added mid-run). */
+export function invalidateResourcesCache(workspace) {
+    if (workspace) {
+        walkCache.delete(workspace);
+    }
+    else {
+        walkCache.clear();
+    }
+}
+/**
+ * List workspace files as MCP resources, with cursor-based pagination.
+ * Cursor is an opaque base64-encoded decimal offset (same pattern as tools/list).
+ */
+export function listResources(workspace, cursor) {
+    const allFiles = getCachedWorkspaceFiles(workspace);
+    let offset = 0;
+    if (typeof cursor === "string") {
+        try {
+            const decoded = Number.parseInt(Buffer.from(cursor, "base64").toString("utf-8"), 10);
+            if (Number.isFinite(decoded) && decoded >= 0)
+                offset = decoded;
+        }
+        catch {
+            // malformed cursor — start from beginning
+        }
+    }
+    const page = allFiles.slice(offset, offset + RESOURCES_PAGE_SIZE);
+    const nextOffset = offset + RESOURCES_PAGE_SIZE;
+    const hasMore = nextOffset < allFiles.length;
+    const nextCursor = hasMore
+        ? Buffer.from(String(nextOffset)).toString("base64")
+        : undefined;
+    return {
+        resources: page.map((f) => fileToResource(f, workspace)),
+        ...(nextCursor !== undefined && { nextCursor }),
+    };
+}
+/**
+ * Read a workspace file by URI.
+ * Returns an error object if the file is outside the workspace, too large, or unreadable.
+ */
+export function readResource(workspace, uri) {
+    // Accept file:// URIs only
+    if (!uri.startsWith("file://")) {
+        return { error: "Only file:// URIs are supported", code: "invalid_args" };
+    }
+    // Decode percent-encoding before resolving — paths with spaces are encoded
+    // as "file:///my%20dir/file.ts" and must be decoded or the workspace check fails.
+    let rawPath;
+    try {
+        rawPath = decodeURIComponent(uri.slice(7)); // strip "file://" then decode
+    }
+    catch {
+        return {
+            error: `URI "${uri}" contains invalid percent-encoding`,
+            code: "invalid_args",
+        };
+    }
+    const absPath = path.resolve(rawPath);
+    const normalizedWorkspace = path.resolve(workspace);
+    // Workspace confinement
+    if (absPath !== normalizedWorkspace &&
+        !absPath.startsWith(normalizedWorkspace + path.sep)) {
+        return {
+            error: `URI "${uri}" is outside the workspace`,
+            code: "workspace_escape",
+        };
+    }
+    // Stat to check size — use lstatSync so symlinks are not followed
+    let stat;
+    try {
+        stat = fs.lstatSync(absPath);
+    }
+    catch {
+        return { error: `Resource not found: ${uri}`, code: "file_not_found" };
+    }
+    // Reject symlinks — listing already skips them; read must too
+    if (stat.isSymbolicLink()) {
+        return {
+            error: `URI "${uri}" is a symlink — not supported`,
+            code: "invalid_args",
+        };
+    }
+    if (!stat.isFile()) {
+        return { error: `URI "${uri}" is not a file`, code: "invalid_args" };
+    }
+    if (stat.size > MAX_RESOURCE_BYTES) {
+        return {
+            error: `Resource "${uri}" is too large (${stat.size} bytes > ${MAX_RESOURCE_BYTES} byte limit)`,
+            code: "resource_too_large",
+        };
+    }
+    // Re-check containment after resolving any intermediate symlinks in ancestor directories
+    // e.g. workspace/dir/link -> /etc would be caught here
+    let realPath;
+    let realWorkspace;
+    try {
+        realPath = fs.realpathSync(absPath);
+        realWorkspace = fs.realpathSync(normalizedWorkspace);
+    }
+    catch {
+        return { error: `Resource not found: ${uri}`, code: "file_not_found" };
+    }
+    if (realPath !== realWorkspace &&
+        !realPath.startsWith(realWorkspace + path.sep)) {
+        return {
+            error: `URI "${uri}" is outside the workspace`,
+            code: "workspace_escape",
+        };
+    }
+    const ext = path.extname(absPath).toLowerCase();
+    if (!TEXT_RESOURCE_EXTS.has(ext)) {
+        return {
+            error: `Resource "${uri}" has a binary or unsupported extension "${ext}"`,
+            code: "invalid_args",
+        };
+    }
+    let text;
+    try {
+        text = fs.readFileSync(realPath, "utf-8");
+    }
+    catch (err) {
+        return {
+            error: `Failed to read resource: ${err instanceof Error ? err.message : String(err)}`,
+            code: "permission_denied",
+        };
+    }
+    return {
+        contents: [
+            {
+                uri,
+                text,
+                mimeType: mimeTypeFromPath(absPath),
+            },
+        ],
+    };
+}
+//# sourceMappingURL=resources.js.map

package/dist/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,wCAAwC;AAEpF,oGAAoG;AACpG,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,OAAO;IACP,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,MAAM;IACN,MAAM;IACN,UAAU;IACV,MAAM;IACN,SAAS;IACT,YAAY;IACZ,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,OAAO;IACP,KAAK;IACL,OAAO;IACP,OAAO;IACP,aAAa;IACb,eAAe;IACf,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAUH,MAAM,cAAc,GAAG,EAAE,CAAC,CAAC,0DAA0D;AAErF;;;GAGG;AACH,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,SAAS,IAAI,CAAC,GAAW,EAAE,KAAa;QACtC,IAAI,KAAK,GAAG,cAAc;YAAE,OAAO;QACnC,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS,CAAC,6BAA6B;YACnE,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACxB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,EAAE,CAAC;IACf,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,SAAiB;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;QACtD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,OAAO,CAAC;IACZ,MAAM,GAAG,GAAG,UAAU,OAAO,EAAE,CAAC;IAChC,OAAO;QACL,GAAG;QACH,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC;KACpC,CAAC;AACJ,CAAC;AAOD,wFAAwF;AACxF,uFAAuF;AACvF,0FAA0F;AAC1F,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkD,CAAC;AAE5E,SAAS,uBAAuB,CAAC,SAAiB;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC/C,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,iBAAiB,EAAE,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,wBAAwB,CAAC,SAAkB;IACzD,IAAI,SAAS,EAAE,CAAC;QACd,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,SAAiB,EACjB,MAAe;IAEf,MAAM,QAAQ,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAEpD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC/C,EAAE,CACH,CAAC;YACF,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,GAAG,OAAO,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,MAAM,GAAG,mBAAmB,CAAC;IAChD,MAAM,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC7C,MAAM,UAAU,GAAG,OAAO;QACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpD,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACxD,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAMD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,SAAiB,EACjB,GAAW;IAEX,2BAA2B;IAC3B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,KAAK,EAAE,iCAAiC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC5E,CAAC;IAED,2EAA2E;IAC3E,kFAAkF;IAClF,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,KAAK,EAAE,QAAQ,GAAG,qCAAqC;YACvD,IAAI,EAAE,cAAc;SACrB,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEpD,wBAAwB;IACxB,IACE,OAAO,KAAK,mBAAmB;QAC/B,CAAC,OAAO,CAAC,UAAU,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,EACnD,CAAC;QACD,OAAO;YACL,KAAK,EAAE,QAAQ,GAAG,4BAA4B;YAC9C,IAAI,EAAE,kBAAkB;SACzB,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,uBAAuB,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACzE,CAAC;IAED,8DAA8D;IAC9D,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,OAAO;YACL,KAAK,EAAE,QAAQ,GAAG,gCAAgC;YAClD,IAAI,EAAE,cAAc;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,OAAO,EAAE,KAAK,EAAE,QAAQ,GAAG,iBAAiB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACvE,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;QACnC,OAAO;YACL,KAAK,EAAE,aAAa,GAAG,mBAAmB,IAAI,CAAC,IAAI,YAAY,kBAAkB,cAAc;YAC/F,IAAI,EAAE,oBAAoB;SAC3B,CAAC;IACJ,CAAC;IAED,yFAAyF;IACzF,uDAAuD;IACvD,IAAI,QAAgB,CAAC;IACrB,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACpC,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,uBAAuB,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACzE,CAAC;IACD,IACE,QAAQ,KAAK,aAAa;QAC1B,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,EAC9C,CAAC;QACD,OAAO;YACL,KAAK,EAAE,QAAQ,GAAG,4BAA4B;YAC9C,IAAI,EAAE,kBAAkB;SACzB,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,KAAK,EAAE,aAAa,GAAG,4CAA4C,GAAG,GAAG;YACzE,IAAI,EAAE,cAAc;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YACrF,IAAI,EAAE,mBAAmB;SAC1B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE;YACR;gBACE,GAAG;gBACH,IAAI;gBACJ,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC;aACpC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/riskTier.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Risk tier registry — classifies MCP tools so the dashboard approval flow
+ * knows which calls need human sign-off before dispatch.
+ *
+ * Defaults are deliberately conservative. Unknown tools default to "medium"
+ * until someone classifies them (safer than auto-approving).
+ *
+ * ── Alignment with Claude Code permissions (https://code.claude.com/docs/en/permissions)
+ *
+ * CC classifies tools by *behavior*, not by abstract risk. Our tiers map to
+ * CC's built-in categories as follows:
+ *
+ *   low    → read-only    — CC never prompts (Read, Grep, Glob, etc.)
+ *   medium → file-mod     — CC prompts, remembered for the session
+ *   high   → shell-exec   — CC prompts, remembered permanently per command
+ *                         + external-side-effect (gitPush, sendHttpRequest,
+ *                           githubCreatePR) — always requires approval
+ *
+ * CC's decision precedence is `deny → ask → allow` via rules in
+ * `permissions.{allow,ask,deny}` (settings.json). Our ApprovalQueue +
+ * /approvals endpoint plug in as a PreToolUse hook backend so the dashboard
+ * can serve as a browser/phone approval UI for CC itself. See
+ * scripts/patchwork-approval-hook.sh.
+ */
+export type RiskTier = "low" | "medium" | "high";
+/** CC-native behavior class. Prefer this over RiskTier for new code. */
+export type ToolBehavior = "readOnly" | "localWrite" | "shellExec" | "externalEffect";
+/**
+ * Infer a risk tier from the tool name when the hardcoded map has no entry.
+ * Lets us classify newly-added tools without maintaining a parallel list.
+ * Heuristics ordered from most-specific to most-general; first match wins.
+ */
+export declare function inferTierFromName(toolName: string): RiskTier;
+export declare function classifyTool(toolName: string): RiskTier;
+export declare function requiresApproval(toolName: string, policy?: RiskTier[]): boolean;
+export declare function riskTierSummary(): Record<RiskTier, number>;
+/** Exposed for tests and the dashboard registry endpoint. */
+export declare function getRiskTierMap(): Readonly<Record<string, RiskTier>>;
+/** Derive CC-native behavior class from tool name. */
+export declare function classifyBehavior(toolName: string): ToolBehavior;

package/dist/riskTier.js

@@ -0,0 +1,142 @@
+/**
+ * Risk tier registry — classifies MCP tools so the dashboard approval flow
+ * knows which calls need human sign-off before dispatch.
+ *
+ * Defaults are deliberately conservative. Unknown tools default to "medium"
+ * until someone classifies them (safer than auto-approving).
+ *
+ * ── Alignment with Claude Code permissions (https://code.claude.com/docs/en/permissions)
+ *
+ * CC classifies tools by *behavior*, not by abstract risk. Our tiers map to
+ * CC's built-in categories as follows:
+ *
+ *   low    → read-only    — CC never prompts (Read, Grep, Glob, etc.)
+ *   medium → file-mod     — CC prompts, remembered for the session
+ *   high   → shell-exec   — CC prompts, remembered permanently per command
+ *                         + external-side-effect (gitPush, sendHttpRequest,
+ *                           githubCreatePR) — always requires approval
+ *
+ * CC's decision precedence is `deny → ask → allow` via rules in
+ * `permissions.{allow,ask,deny}` (settings.json). Our ApprovalQueue +
+ * /approvals endpoint plug in as a PreToolUse hook backend so the dashboard
+ * can serve as a browser/phone approval UI for CC itself. See
+ * scripts/patchwork-approval-hook.sh.
+ */
+const BEHAVIOR_FROM_TIER = {
+    low: "readOnly",
+    medium: "localWrite",
+    high: "externalEffect",
+};
+const TIER_MAP = {
+    // ── low: pure reads ───────────────────────────────────────────────────────
+    getBufferContent: "low",
+    getDiagnostics: "low",
+    getFileTree: "low",
+    findFiles: "low",
+    searchWorkspace: "low",
+    searchWorkspaceSymbols: "low",
+    goToDefinition: "low",
+    findReferences: "low",
+    getCallHierarchy: "low",
+    getDocumentSymbols: "low",
+    getHover: "low",
+    getHoverAtCursor: "low",
+    getGitStatus: "low",
+    getGitDiff: "low",
+    getGitLog: "low",
+    getBridgeStatus: "low",
+    getToolCapabilities: "low",
+    getActivityLog: "low",
+    getOpenEditors: "low",
+    contextBundle: "low",
+    getCodeLens: "low",
+    getSemanticTokens: "low",
+    getProjectInfo: "low",
+    captureScreenshot: "low",
+    gitBlame: "low",
+    // ── medium: local writes + reversible edits ───────────────────────────────
+    editText: "medium",
+    createFile: "medium",
+    saveDocument: "medium",
+    formatDocument: "medium",
+    formatAndSave: "medium",
+    organizeImports: "medium",
+    renameSymbol: "medium",
+    refactorExtractFunction: "medium",
+    searchAndReplace: "medium",
+    applyCodeAction: "medium",
+    fixAllLintErrors: "medium",
+    runTests: "medium",
+    setHandoffNote: "medium",
+    gitAdd: "medium",
+    gitStash: "medium",
+    gitStashPop: "medium",
+    gitCheckout: "medium",
+    // ── high: remote state, destructive, or side-effect externally ────────────
+    gitCommit: "high",
+    gitPush: "high",
+    gitPull: "high",
+    gitFetch: "high",
+    githubCreatePR: "high",
+    githubCommentIssue: "high",
+    githubCreateIssue: "high",
+    githubPostPRReview: "high",
+    runCommand: "high",
+    runInTerminal: "high",
+    sendTerminalCommand: "high",
+    deleteFile: "high",
+    renameFile: "high",
+    sendHttpRequest: "high",
+    executeVSCodeCommand: "high",
+    runClaudeTask: "high",
+    resumeClaudeTask: "high",
+    evaluateInDebugger: "high",
+};
+/**
+ * Infer a risk tier from the tool name when the hardcoded map has no entry.
+ * Lets us classify newly-added tools without maintaining a parallel list.
+ * Heuristics ordered from most-specific to most-general; first match wins.
+ */
+export function inferTierFromName(toolName) {
+    const n = toolName;
+    // Write / destructive / external
+    if (/^(git(Push|Pull|Fetch|Commit))$/.test(n) ||
+        /^github(Create|Comment|Post|Delete)/.test(n) ||
+        /^(delete|unlink|drop)[A-Z]/.test(n) ||
+        n === "renameFile" ||
+        /^(run|exec|spawn|send|start|stop|kill|launch|resume|cancel)[A-Z]/.test(n) ||
+        /^(open|execute|dispatch)[A-Z]/.test(n) ||
+        n === "sendHttpRequest")
+        return "high";
+    // Local writes
+    if (/^(edit|write|create|save|format|apply|fix|refactor|rename|organize|stage|commit|add|stash)[A-Z]/.test(n) ||
+        /(^set|^update|^replace)[A-Z]/.test(n) ||
+        /search[A-Z].*Replace/i.test(n))
+        return "medium";
+    // Reads
+    if (/^(get|find|search|list|read|describe|explain|goTo|hover|preview|capture|explore|resolve|probe|check|lookup|parse|classify|compute|compare|render|validate|ping|ready|detect|watch)/.test(n) ||
+        n === "contextBundle")
+        return "low";
+    return "medium";
+}
+export function classifyTool(toolName) {
+    return TIER_MAP[toolName] ?? inferTierFromName(toolName);
+}
+export function requiresApproval(toolName, policy = ["high"]) {
+    return policy.includes(classifyTool(toolName));
+}
+export function riskTierSummary() {
+    const counts = { low: 0, medium: 0, high: 0 };
+    for (const t of Object.values(TIER_MAP))
+        counts[t]++;
+    return counts;
+}
+/** Exposed for tests and the dashboard registry endpoint. */
+export function getRiskTierMap() {
+    return TIER_MAP;
+}
+/** Derive CC-native behavior class from tool name. */
+export function classifyBehavior(toolName) {
+    return BEHAVIOR_FROM_TIER[classifyTool(toolName)];
+}
+//# sourceMappingURL=riskTier.js.map

package/dist/riskTier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"riskTier.js","sourceRoot":"","sources":["../src/riskTier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAWH,MAAM,kBAAkB,GAAmC;IACzD,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,YAAY;IACpB,IAAI,EAAE,gBAAgB;CACvB,CAAC;AAEF,MAAM,QAAQ,GAA6B;IACzC,6EAA6E;IAC7E,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,KAAK;IACrB,WAAW,EAAE,KAAK;IAClB,SAAS,EAAE,KAAK;IAChB,eAAe,EAAE,KAAK;IACtB,sBAAsB,EAAE,KAAK;IAC7B,cAAc,EAAE,KAAK;IACrB,cAAc,EAAE,KAAK;IACrB,gBAAgB,EAAE,KAAK;IACvB,kBAAkB,EAAE,KAAK;IACzB,QAAQ,EAAE,KAAK;IACf,gBAAgB,EAAE,KAAK;IACvB,YAAY,EAAE,KAAK;IACnB,UAAU,EAAE,KAAK;IACjB,SAAS,EAAE,KAAK;IAChB,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,KAAK;IAC1B,cAAc,EAAE,KAAK;IACrB,cAAc,EAAE,KAAK;IACrB,aAAa,EAAE,KAAK;IACpB,WAAW,EAAE,KAAK;IAClB,iBAAiB,EAAE,KAAK;IACxB,cAAc,EAAE,KAAK;IACrB,iBAAiB,EAAE,KAAK;IACxB,QAAQ,EAAE,KAAK;IAEf,6EAA6E;IAC7E,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,QAAQ;IACpB,YAAY,EAAE,QAAQ;IACtB,cAAc,EAAE,QAAQ;IACxB,aAAa,EAAE,QAAQ;IACvB,eAAe,EAAE,QAAQ;IACzB,YAAY,EAAE,QAAQ;IACtB,uBAAuB,EAAE,QAAQ;IACjC,gBAAgB,EAAE,QAAQ;IAC1B,eAAe,EAAE,QAAQ;IACzB,gBAAgB,EAAE,QAAQ;IAC1B,QAAQ,EAAE,QAAQ;IAClB,cAAc,EAAE,QAAQ;IACxB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,QAAQ;IAClB,WAAW,EAAE,QAAQ;IACrB,WAAW,EAAE,QAAQ;IAErB,6EAA6E;IAC7E,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,MAAM;IACf,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,MAAM;IACtB,kBAAkB,EAAE,MAAM;IAC1B,iBAAiB,EAAE,MAAM;IACzB,kBAAkB,EAAE,MAAM;IAC1B,UAAU,EAAE,MAAM;IAClB,aAAa,EAAE,MAAM;IACrB,mBAAmB,EAAE,MAAM;IAC3B,UAAU,EAAE,MAAM;IAClB,UAAU,EAAE,MAAM;IAClB,eAAe,EAAE,MAAM;IACvB,oBAAoB,EAAE,MAAM;IAC5B,aAAa,EAAE,MAAM;IACrB,gBAAgB,EAAE,MAAM;IACxB,kBAAkB,EAAE,MAAM;CAC3B,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,CAAC,GAAG,QAAQ,CAAC;IACnB,iCAAiC;IACjC,IACE,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,qCAAqC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC,KAAK,YAAY;QAClB,kEAAkE,CAAC,IAAI,CACrE,CAAC,CACF;QACD,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,CAAC,KAAK,iBAAiB;QAEvB,OAAO,MAAM,CAAC;IAEhB,eAAe;IACf,IACE,iGAAiG,CAAC,IAAI,CACpG,CAAC,CACF;QACD,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/B,OAAO,QAAQ,CAAC;IAElB,QAAQ;IACR,IACE,oLAAoL,CAAC,IAAI,CACvL,CAAC,CACF;QACD,CAAC,KAAK,eAAe;QAErB,OAAO,KAAK,CAAC;IAEf,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,SAAqB,CAAC,MAAM,CAAC;IAE7B,OAAO,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAA6B,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACxE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,cAAc;IAC5B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,kBAAkB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/runLog.d.ts

@@ -0,0 +1,90 @@
+import type { Logger } from "./logger.js";
+/**
+ * RecipeRunLog — persistent audit trail of every recipe execution.
+ *
+ * A "run" is any orchestrator task whose triggerSource identifies it as recipe-
+ * derived (prefix `cron:`, `webhook:`, or `recipe:`). Runs are appended to a
+ * JSONL file so overnight/background activity survives bridge restarts, and
+ * mirrored into a bounded in-memory ring for quick dashboard reads.
+ *
+ * Schema is deliberately minimal + additive: extra fields go in without a
+ * migration. Consumers must tolerate unknown keys.
+ */
+export type RunTrigger = "cron" | "webhook" | "recipe";
+export type RunStatus = "done" | "error" | "cancelled" | "interrupted";
+export interface RecipeRun {
+    /** Monotonic sequence id within the process — stable for pagination. */
+    seq: number;
+    /** Orchestrator task id — useful for cross-referencing /tasks. */
+    taskId: string;
+    /** Recipe name extracted from triggerSource. */
+    recipeName: string;
+    /** Trigger kind: how the recipe fired. */
+    trigger: RunTrigger;
+    /** Terminal task status. */
+    status: RunStatus;
+    /** Task creation time (ms epoch). */
+    createdAt: number;
+    /** Task start time (ms epoch) — undefined if cancelled before spawn. */
+    startedAt?: number;
+    /** Task completion time (ms epoch). */
+    doneAt: number;
+    /** Model used, if known. */
+    model?: string;
+    /** Truncated output tail — first 2KB, enough for a "RECIPE DONE:" line. */
+    outputTail?: string;
+    /** Error message for failed runs. */
+    errorMessage?: string;
+    /** Duration ms = doneAt - (startedAt ?? createdAt). */
+    durationMs: number;
+}
+export interface RunLogOptions {
+    /** Directory holding runs.jsonl. Created if missing. */
+    dir: string;
+    logger?: Logger;
+    /** Cap on in-memory ring. File is not truncated. */
+    memoryCap?: number;
+    /** Test hook — default Date.now. */
+    now?: () => number;
+}
+export interface RunQuery {
+    limit?: number;
+    trigger?: RunTrigger;
+    status?: RunStatus;
+    recipe?: string;
+    /** Runs with seq > after. */
+    after?: number;
+}
+export declare class RecipeRunLog {
+    private readonly opts;
+    private runs;
+    private seq;
+    private readonly file;
+    private readonly memoryCap;
+    private readonly now;
+    constructor(opts: RunLogOptions);
+    /**
+     * Parse triggerSource into `{trigger, recipeName}`. Returns null for non-recipe
+     * triggers (e.g. automation hooks like "onFileSave") so the caller can ignore them.
+     */
+    static parseTrigger(triggerSource: string | undefined): {
+        trigger: RunTrigger;
+        recipeName: string;
+    } | null;
+    record(task: {
+        id: string;
+        triggerSource?: string;
+        status: string;
+        createdAt: number;
+        startedAt?: number;
+        doneAt?: number;
+        model?: string;
+        output?: string;
+        errorMessage?: string;
+    }): RecipeRun | null;
+    query(q?: RunQuery): RecipeRun[];
+    /** Test/inspection helper — current in-memory size. */
+    size(): number;
+    private append;
+    private loadExisting;
+}