psyclaw 0.24.0

package/dist/src/index.js

@@ -0,0 +1,73 @@
+export * from "./agents/catalog.js";
+export * from "./agents/discover.js";
+export * from "./agents/import.js";
+export * from "./branding.js";
+export * from "./psyclaw-theme.js";
+export * from "./chat.js";
+export * from "./run.js";
+export * from "./setup.js";
+export * from "./core/contracts.js";
+export * from "./core/docx.js";
+export * from "./core/evidence-policy.js";
+export * from "./core/filekind.js";
+export * from "./core/hash.js";
+export * from "./core/redact.js";
+export * from "./core/schemas.js";
+export * from "./project/bootstrap.js";
+export * from "./project/jsonl.js";
+export * from "./project/paths.js";
+export * from "./project/versions.js";
+export * from "./project/hitl.js";
+export * from "./integrations/contracts.js";
+export * from "./orchestration/contracts.js";
+export * from "./research/ledger.js";
+export * from "./research/brief.js";
+export * from "./memory/store.js";
+export * from "./orchestration/scheduler.js";
+export * from "./orchestration/runner.js";
+export * from "./integrations/mcp.js";
+export * from "./install/installer.js";
+export * from "./panel/events.js";
+export * from "./panel/projection.js";
+export * from "./panel/server.js";
+export * from "./skills/contracts.js";
+export * from "./skills/preflight.js";
+export * from "./skills/registry.js";
+export * from "./trust/manifest.js";
+export * from "./trust/sbom.js";
+export * from "./workflows/spec.js";
+export * from "./workflows/literature-review.js";
+export * from "./workflows/analysis-delegation.js";
+export * from "./workflows/meta-analysis.js";
+export * from "./workflows/publish.js";
+export * from "./core/citations.js";
+export * from "./workflows/writing-review.js";
+export * from "./workflows/institutional-fulltext.js";
+export * from "./workflows/expert-review.js";
+export * from "./workflows/expert-review-runner.js";
+export * from "./workflows/style-contract.js";
+export * from "./style/contracts.js";
+export * from "./style/registry.js";
+export * from "./style/artifact.js";
+export * from "./literature/contracts.js";
+export * from "./literature/fulltext.js";
+export * from "./literature/ledger.js";
+export * from "./literature/knowledge-map.js";
+export * from "./literature/metadata.js";
+export { buildKnowledgeMap } from "./knowledge-map/index.js";
+export * from "./analysis/hooks.js";
+export * from "./analysis/pre-registration.js";
+export * from "./updates/registry.js";
+export * from "./updates/status.js";
+export * from "./updates/skills.js";
+export * from "./updates/manifest.js";
+export * from "./updates/check.js";
+export * from "./updates/update.js";
+export * from "./adapters/pi/model.js";
+export * from "./branding.js";
+export * from "./adapters/pi/resources.js";
+export * from "./adapters/pi/session.js";
+export * from "./adapters/pi/rpc.js";
+export * from "./orchestration/pi-executor.js";
+export { default as psyclawPanelExtension } from "./panel/extension.js";
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kCAAkC,CAAC;AACjD,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uCAAuC,CAAC;AACtD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/src/install/installer.d.ts

@@ -0,0 +1,147 @@
+import type { Effect, ToolReceipt } from "../core/contracts.js";
+import type { AgentInstallSpec } from "../agents/catalog.js";
+export type InstallKind = "agent" | "skill" | "package";
+export interface InstallDependency {
+    name: string;
+    version: string;
+    license?: string;
+    sha256?: string;
+    status?: "ready" | "missing" | "blocked";
+}
+export interface InstallSbom {
+    format: "CycloneDX";
+    specVersion: "1.5";
+    /** Relative path inside the staging directory. */
+    path: string;
+    sha256: string;
+}
+export interface InstallPlan {
+    schemaVersion: "psyclaw/install-plan/v1";
+    id: string;
+    kind: InstallKind;
+    targetId: string;
+    sourceRef: string;
+    /** Pinned version/ref. `unpinned` is never a verified install. */
+    ref: string;
+    command: string;
+    effect: Effect;
+    /** Activation target path. Required for skill/package installs. */
+    target?: string;
+    /** Controlled staging directory the runner must download into. */
+    stagingDir?: string;
+    /** File inside `stagingDir` whose SHA-256 is the content pin. */
+    contentFile?: string;
+    expectedSha256?: string;
+    license?: string;
+    /** Optional license evidence file inside staging. */
+    licenseFile?: string;
+    licenseSha256?: string;
+    /** Exact dependency pins audited before activation. */
+    dependencies?: readonly InstallDependency[];
+    /** Optional CycloneDX 1.5 SBOM descriptor for the staged package. */
+    sbom?: InstallSbom;
+    /** Optional project root used to enforce containment and symlink checks. */
+    projectRoot?: string;
+}
+export interface InstallApproval {
+    approved: boolean;
+    actor: string;
+    reason: string;
+}
+export interface InstallRunner {
+    (command: string, context?: {
+        plan: InstallPlan;
+        stagingDir?: string;
+        target?: string;
+    }): Promise<{
+        exitCode: number;
+    }>;
+}
+/** Idempotency ledger: a given install identity must execute at most once. */
+export interface InstallLedger {
+    alreadyRecorded(key: string): Promise<boolean>;
+    record(key: string): Promise<void>;
+    /** Atomically reserve a key before an external command is started. */
+    reserve?(key: string): Promise<boolean>;
+    /** Release a reservation when the command fails before it is recorded. */
+    release?(key: string): Promise<void>;
+}
+export declare class InMemoryInstallLedger implements InstallLedger {
+    private readonly keys;
+    private readonly reservations;
+    alreadyRecorded(key: string): Promise<boolean>;
+    reserve(key: string): Promise<boolean>;
+    record(key: string): Promise<void>;
+    release(key: string): Promise<void>;
+}
+/** Project-local append-only install ledger (`.psyclaw/installs.jsonl`). */
+export declare class FileInstallLedger implements InstallLedger {
+    private readonly root;
+    constructor(root: string);
+    private path;
+    private lockPath;
+    alreadyRecorded(key: string): Promise<boolean>;
+    reserve(key: string): Promise<boolean>;
+    record(key: string): Promise<void>;
+    release(key: string): Promise<void>;
+}
+export interface SkillInstallPlanOptions {
+    targetId: string;
+    sourceRef: string;
+    /** A commit/tag/package version. Omitted only for the deprecated legacy path. */
+    ref?: string;
+    command: string;
+    target?: string;
+    stagingDir?: string;
+    contentFile?: string;
+    expectedSha256?: string;
+    license?: string;
+    licenseFile?: string;
+    licenseSha256?: string;
+    dependencies?: readonly InstallDependency[];
+    sbom?: InstallSbom;
+    projectRoot?: string;
+}
+export declare function planAgentInstall(agent: {
+    id: string;
+    name: string;
+    install?: AgentInstallSpec;
+}, options?: {
+    projectRoot?: string;
+}): InstallPlan;
+export declare function planSkillInstall(options: SkillInstallPlanOptions): InstallPlan;
+/** Verify a downloaded file against an expected SHA-256 before trusting it. */
+export declare function verifyFileSha256(path: string, expected: string): Promise<{
+    ok: boolean;
+    reason?: string;
+}>;
+export interface InstallRecord {
+    schemaVersion: "psyclaw/install-record/v1";
+    status: "installed" | "already-recorded" | "blocked" | "failed";
+    plan: InstallPlan;
+    receipt: ToolReceipt;
+    verified: boolean;
+    verificationReason?: string;
+    recordedAt: string;
+    contentSha256?: string;
+    sbomSha256?: string;
+}
+/**
+ * Execute an approved agent install through an injectable runner. Reservation
+ * happens before the runner starts; an unknown runner exception keeps the
+ * reservation so a retry cannot repeat an unobserved side effect.
+ */
+export declare function runInstall(plan: InstallPlan, approval: InstallApproval, runner: InstallRunner, options?: {
+    now?: () => string;
+    ledger?: InstallLedger;
+}): Promise<ToolReceipt>;
+/**
+ * Download a skill/package into a fresh controlled staging directory, verify
+ * hash, license, exact dependencies and CycloneDX SBOM, then atomically
+ * activate it. Verification failures never activate or overwrite a target.
+ */
+export declare function installSkillPackage(plan: InstallPlan, approval: InstallApproval, runner: InstallRunner, options: {
+    now?: () => string;
+    ledger?: InstallLedger;
+    downloadPath?: string;
+}): Promise<InstallRecord>;