remote-access-mcp 3.1.2 → 4.1.0

package/dist/core/recovery-engine.d.ts

@@ -0,0 +1,37 @@
+export interface RecoveryRule {
+    id: string;
+    tokenFingerprint: string;
+    name: string;
+    failureType: string;
+    risk: 'low' | 'medium' | 'high' | 'critical';
+    action: {
+        tool: string;
+        args: Record<string, unknown>;
+    };
+    enabled: boolean;
+    maxAttempts: number;
+    cooldownSeconds: number;
+    attempts: number;
+    lastAttempt?: string;
+}
+export interface RecoveryIncident {
+    id: string;
+    tokenFingerprint: string;
+    ruleId: string;
+    failureType: string;
+    status: 'open' | 'recovered' | 'failed';
+    created: string;
+    updated: string;
+    error?: string;
+}
+export declare function createRecoveryRule(rule: Omit<RecoveryRule, 'id' | 'attempts'>): RecoveryRule;
+export declare function listRecoveryRules(token: string): RecoveryRule[];
+export declare function deleteRecoveryRule(token: string, id: string): boolean;
+export declare function listIncidents(token: string): RecoveryIncident[];
+export declare function markIncident(token: string, rule: RecoveryRule, status: RecoveryIncident['status'], error?: string): void;
+export declare function claimRecovery(token: string, id: string): RecoveryRule | undefined;
+export declare function resetRecoveryAttempts(token: string, id: string): void;
+export declare function recoveryCandidates(token: string, failureType: string): RecoveryRule[];
+export declare function attemptRecoveryForFailure(token: string, failureType: string, invoke: (tool: string, args: Record<string, unknown>) => Promise<any>, authorize: (rule: RecoveryRule) => boolean): Promise<number>;
+export declare function clearRecoveryForTests(): void;
+//# sourceMappingURL=recovery-engine.d.ts.map

package/dist/core/recovery-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-engine.d.ts","sourceRoot":"","sources":["../../src/core/recovery-engine.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,GAAC,QAAQ,GAAC,MAAM,GAAC,UAAU,CAAC;IAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAAE;AACnT,MAAM,WAAW,gBAAgB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAC,WAAW,GAAC,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAAE;AAcvM,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,GAAC,UAAU,CAAC,GAAG,YAAY,CAAsM;AACjS,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE,CAAqE;AACrI,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAgL;AACtP,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAA2H;AAC3L,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAsb;AAC/iB,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAA8Z;AAChf,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAwH;AAE9L,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,YAAY,EAAE,CAA8I;AAEpO,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBtN;AAED,wBAAgB,qBAAqB,IAAI,IAAI,CAA2H"}

package/dist/core/recovery-engine.js

@@ -0,0 +1,99 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { dataDir } from './platform.js';
+const file = path.join(dataDir(), 'recovery.json');
+const lock = `${file}.lock`;
+const MAX_RULES = 200;
+const MAX_INCIDENTS = 1000;
+function fpRows() { try {
+    const x = JSON.parse(fs.readFileSync(file, 'utf8'));
+    return { rules: Array.isArray(x.rules) ? x.rules : [], incidents: Array.isArray(x.incidents) ? x.incidents : [] };
+}
+catch {
+    return { rules: [], incidents: [] };
+} }
+function persist(mut) {
+    fs.mkdirSync(dataDir(), { recursive: true, mode: 0o700 });
+    const start = Date.now();
+    while (true) {
+        try {
+            fs.mkdirSync(lock, { mode: 0o700 });
+            break;
+        }
+        catch (e) {
+            if (e?.code !== 'EEXIST')
+                throw e;
+            try {
+                if (Date.now() - fs.statSync(lock).mtimeMs > 30_000) {
+                    fs.rmSync(lock, { recursive: true, force: true });
+                    continue;
+                }
+            }
+            catch { }
+            if (Date.now() - start > 5000)
+                throw new Error('timed out waiting for recovery persistence lock');
+            const until = Date.now() + 10;
+            while (Date.now() < until) { }
+        }
+    }
+    try {
+        const x = fpRows();
+        mut(x);
+        const tmp = `${file}.${process.pid}.${crypto.randomUUID()}.tmp`;
+        fs.writeFileSync(tmp, JSON.stringify({ rules: x.rules.slice(-MAX_RULES), incidents: x.incidents.slice(-MAX_INCIDENTS) }, null, 2), { mode: 0o600 });
+        fs.renameSync(tmp, file);
+    }
+    finally {
+        fs.rmSync(lock, { recursive: true, force: true });
+    }
+}
+export function createRecoveryRule(rule) { const out = { ...rule, id: crypto.randomUUID(), attempts: 0 }; persist(x => { if (x.rules.length >= MAX_RULES)
+    throw new Error('recovery rule limit reached'); x.rules.push(out); }); return out; }
+export function listRecoveryRules(token) { return fpRows().rules.filter(r => r.tokenFingerprint === token); }
+export function deleteRecoveryRule(token, id) { let ok = false; persist(x => { const n = x.rules.filter(r => !(r.id === id && r.tokenFingerprint === token)); ok = n.length !== x.rules.length; x.rules = n; }); return ok; }
+export function listIncidents(token) { return fpRows().incidents.filter(i => i.tokenFingerprint === token).sort((a, b) => b.updated.localeCompare(a.updated)); }
+export function markIncident(token, rule, status, error) { persist(x => { const existing = x.incidents.find(i => i.ruleId === rule.id && i.tokenFingerprint === token && i.status === 'open'); const now = new Date().toISOString(); if (existing) {
+    existing.status = status;
+    existing.updated = now;
+    existing.error = error;
+}
+else
+    x.incidents.push({ id: crypto.randomUUID(), tokenFingerprint: token, ruleId: rule.id, failureType: rule.failureType, status, created: now, updated: now, error }); }); }
+export function claimRecovery(token, id) { let claimed; persist(x => { const r = x.rules.find(v => v.id === id && v.tokenFingerprint === token && v.enabled); if (!r)
+    return; const now = Date.now(); if (r.attempts >= r.maxAttempts)
+    return; if (r.lastAttempt && now - Date.parse(r.lastAttempt) < r.cooldownSeconds * 1000)
+    return; r.attempts++; r.lastAttempt = new Date(now).toISOString(); claimed = { ...r }; }); return claimed; }
+export function resetRecoveryAttempts(token, id) { persist(x => { const r = x.rules.find(v => v.id === id && v.tokenFingerprint === token); if (r)
+    r.attempts = 0; }); }
+export function recoveryCandidates(token, failureType) { return fpRows().rules.filter(r => r.enabled && r.tokenFingerprint === token && (r.failureType === failureType || r.failureType === '*')); }
+export async function attemptRecoveryForFailure(token, failureType, invoke, authorize) {
+    let recovered = 0;
+    for (const candidate of recoveryCandidates(token, failureType)) {
+        if (!authorize(candidate))
+            continue;
+        const claimed = claimRecovery(token, candidate.id);
+        if (!claimed)
+            continue;
+        markIncident(token, claimed, 'open');
+        try {
+            const result = await invoke(claimed.action.tool, claimed.action.args);
+            if (result?.isError)
+                throw new Error('recovery action returned an error');
+            markIncident(token, claimed, 'recovered');
+            recovered++;
+        }
+        catch (e) {
+            markIncident(token, claimed, 'failed', e?.message || String(e));
+        }
+    }
+    return recovered;
+}
+export function clearRecoveryForTests() { try {
+    fs.rmSync(file, { force: true });
+}
+catch { } try {
+    fs.rmSync(lock, { recursive: true, force: true });
+}
+catch { } }
+//# sourceMappingURL=recovery-engine.js.map

package/dist/core/recovery-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-engine.js","sourceRoot":"","sources":["../../src/core/recovery-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAKxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AACnD,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,CAAC;AAC5B,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,SAAS,MAAM,KAA+D,IAAI,CAAC;IAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAAC,CAAC,CAAC,CAAC;AAE9S,SAAS,OAAO,CAAC,GAA+B;IAC9C,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,OAAO,IAAI,EAAE,CAAC;QAAC,IAAI,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAAC,IAAI,CAAC,EAAE,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC;gBAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;oBAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAC,KAAK,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA,CAAC;QAAC,CAAC;IAAC,CAAC;IAC/Z,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACpV,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,IAAyC,IAAkB,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS;IAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;AACjS,MAAM,UAAU,iBAAiB,CAAC,KAAa,IAAoB,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;AACrI,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,EAAU,IAAa,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,gBAAgB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACtP,MAAM,UAAU,aAAa,CAAC,KAAa,IAAwB,OAAO,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3L,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,IAAkB,EAAE,MAAkC,EAAE,KAAc,IAAU,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,gBAAgB,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;IAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,GAAG,GAAG,CAAC;IAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;AAAC,CAAC;;IAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/iB,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,EAAU,IAA8B,IAAI,OAAiC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,gBAAgB,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAAE,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW;IAAE,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,eAAe,GAAG,IAAI;IAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC;AAChf,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,EAAU,IAAU,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,gBAAgB,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9L,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,WAAmB,IAAoB,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,gBAAgB,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpO,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAAa,EAAE,WAAmB,EAAE,MAAqE,EAAE,SAA0C;IACnM,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,SAAS,IAAI,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;YAAE,SAAS;QACpC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtE,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC1E,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAC1C,SAAS,EAAE,CAAC;QACd,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,qBAAqB,KAAW,IAAI,CAAC;IAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC,CAAA,CAAC,CAAC,IAAI,CAAC;IAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC,CAAA,CAAC,CAAC,CAAC"}

package/dist/core/security-analysis.d.ts

@@ -0,0 +1,19 @@
+export interface SecurityFinding {
+    id: string;
+    severity: 'info' | 'low' | 'medium' | 'high' | 'critical';
+    message: string;
+}
+export interface SecurityReport {
+    score: number;
+    findings: SecurityFinding[];
+    checkedAt: string;
+}
+export declare function analyzeSecurity(input: {
+    scopes: string[];
+    readOnly: boolean;
+    shellEnabled: boolean;
+    allowedPaths: string[];
+    deniedPaths: string[];
+    configDir?: string;
+}): SecurityReport;
+//# sourceMappingURL=security-analysis.d.ts.map

package/dist/core/security-analysis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-analysis.d.ts","sourceRoot":"","sources":["../../src/core/security-analysis.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAC,KAAK,GAAC,QAAQ,GAAC,MAAM,GAAC,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CAAE;AACpH,MAAM,WAAW,cAAc;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;CAAE;AAIlG,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,cAAc,CAkBxL"}

package/dist/core/security-analysis.js

@@ -0,0 +1,39 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import { dataDir } from './platform.js';
+import { TOOL_SCOPES, MUTATING_TOOLS } from './policy.js';
+function clamp(n) { return Math.max(0, Math.min(100, n)); }
+export function analyzeSecurity(input) {
+    const findings = [];
+    const scopes = input.scopes;
+    const mutating = Object.entries(TOOL_SCOPES).filter(([group, tools]) => (scopes.length === 0 || scopes.includes(group)) && tools.some(t => MUTATING_TOOLS.has(t))).map(([g]) => g);
+    if (scopes.length === 0)
+        findings.push({ id: 'broad-scope', severity: 'high', message: 'Token has unrestricted tool scopes.' });
+    if (mutating.length && !input.readOnly)
+        findings.push({ id: 'mutation-enabled', severity: mutating.includes('shell') ? 'high' : 'medium', message: `Mutating capability groups enabled: ${mutating.join(', ')}.` });
+    if (input.shellEnabled && !input.readOnly && !input.allowedPaths.length)
+        findings.push({ id: 'shell-without-paths', severity: 'medium', message: 'Shell is enabled while the filesystem allowlist is empty.' });
+    if (!input.deniedPaths.length && input.allowedPaths.length)
+        findings.push({ id: 'no-deny-paths', severity: 'low', message: 'No explicit denied paths are configured.' });
+    const config = input.configDir || dataDir();
+    try {
+        const st = fs.statSync(config);
+        if ((st.mode & 0o077) !== 0)
+            findings.push({ id: 'data-dir-permissions', severity: 'high', message: `RAMCP data directory permissions are broader than 0700: ${((st.mode & 0o777).toString(8))}.` });
+    }
+    catch {
+        findings.push({ id: 'data-dir-missing', severity: 'low', message: 'RAMCP data directory does not exist yet.' });
+    }
+    const listeners = (() => { try {
+        return os.networkInterfaces();
+    }
+    catch {
+        return {};
+    } })();
+    const external = Object.values(listeners).flatMap(x => x || []).some(i => !i.internal);
+    if (external)
+        findings.push({ id: 'external-interface', severity: 'info', message: 'Host has non-loopback network interfaces; gateway binding should remain loopback.' });
+    const penalty = findings.reduce((n, f) => n + { info: 0, low: 3, medium: 10, high: 25, critical: 50 }[f.severity], 0);
+    return { score: clamp(100 - penalty), findings, checkedAt: new Date().toISOString() };
+}
+//# sourceMappingURL=security-analysis.js.map

package/dist/core/security-analysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-analysis.js","sourceRoot":"","sources":["../../src/core/security-analysis.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAK1D,SAAS,KAAK,CAAC,CAAS,IAAY,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3E,MAAM,UAAU,eAAe,CAAC,KAAwI;IACtK,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACnL,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;IAChI,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,uCAAuC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACpN,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,2DAA2D,EAAE,CAAC,CAAC;IAChN,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAC;IACzK,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,2DAA2D,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACvM,CAAC;IAAC,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAC;IAAC,CAAC;IAC5H,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,iBAAiB,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACvF,IAAI,QAAQ;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,mFAAmF,EAAE,CAAC,CAAC;IAC1K,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAI,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACjI,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AACxF,CAAC"}

package/dist/core/task-engine.d.ts

@@ -0,0 +1,76 @@
+import { type AgentProfileId } from './agent-profiles.js';
+import type { AgentResult, AutonomyLevel, TaskContext, TaskState } from './agent-contracts.js';
+export interface TaskAction {
+    id: string;
+    agent?: AgentProfileId;
+    tool: string;
+    arguments?: Record<string, unknown>;
+    dependsOn?: string[];
+    condition?: 'always' | 'on_success' | 'on_failure';
+    timeoutMs?: number;
+    retries?: number;
+    rollback?: {
+        tool: string;
+        arguments?: Record<string, unknown>;
+    };
+    verify?: {
+        tool: string;
+        arguments?: Record<string, unknown>;
+    };
+}
+export interface TaskDefinition {
+    goal: string;
+    actions: TaskAction[];
+    autonomy: AutonomyLevel;
+    dryRun?: boolean;
+}
+export interface TaskActionRecord extends TaskAction {
+    status: 'pending' | 'running' | 'succeeded' | 'failed' | 'skipped' | 'rolled_back';
+    attempts: number;
+    startedAt?: string;
+    finishedAt?: string;
+    result?: unknown;
+    error?: string;
+}
+export interface TaskRecord {
+    id: string;
+    tokenId: string;
+    goal: string;
+    autonomy: AutonomyLevel;
+    state: TaskState;
+    dryRun: boolean;
+    createdAt: string;
+    updatedAt: string;
+    actions: TaskActionRecord[];
+    error?: string;
+    approvalId?: string;
+    context: TaskContext;
+}
+type Invoke = (name: string, args: Record<string, unknown>) => Promise<any>;
+export declare class TaskEngine {
+    private readonly token;
+    private readonly invoke;
+    private readonly dir;
+    constructor(token: string, invoke: Invoke, options?: {
+        dataDirectory?: string;
+    });
+    create(def: TaskDefinition): TaskRecord;
+    get(id: string): TaskRecord | undefined;
+    list(limit?: number): TaskRecord[];
+    private save;
+    approve(id: string): Promise<TaskRecord>;
+    reject(id: string): TaskRecord;
+    resume(id: string): Promise<TaskRecord>;
+    private require;
+    run(id: string): Promise<TaskRecord>;
+    private execute;
+    private executeAction;
+    private rollback;
+}
+export declare function taskSummary(row: TaskRecord): AgentResult<{
+    id: string;
+    state: TaskState;
+    actions: TaskActionRecord[];
+}>;
+export {};
+//# sourceMappingURL=task-engine.d.ts.map

package/dist/core/task-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-engine.d.ts","sourceRoot":"","sources":["../../src/core/task-engine.ts"],"names":[],"mappings":"AAKA,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAE/F,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,QAAQ,GAAG,YAAY,GAAG,YAAY,CAAC;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACjE,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CAChE;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAClD,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,aAAa,CAAC;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;AAgF5E,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBACjB,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAO;IAInF,MAAM,CAAC,GAAG,EAAE,cAAc,GAAG,UAAU;IAgBvC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAIvC,IAAI,CAAC,KAAK,SAAK,GAAG,UAAU,EAAE;IAC9B,OAAO,CAAC,IAAI;IAEN,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAO9C,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU;IAOxB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAO7C,OAAO,CAAC,OAAO;IAET,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;YAc5B,OAAO;YAoCP,aAAa;YAqBb,QAAQ;CASvB;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG,WAAW,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC,CAEvH"}

package/dist/core/task-engine.js

@@ -0,0 +1,319 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { dataDir } from './platform.js';
+import { AuditLog } from './audit.js';
+import { getAgentProfile } from './agent-profiles.js';
+import { scopeOf } from './policy.js';
+const MAX_TASKS = 500;
+const MAX_ACTIONS = 64;
+function storePath(dir) { return path.join(dir, 'tasks.json'); }
+function lockPath(dir) { return path.join(dir, 'tasks.lock'); }
+function load(dir) {
+    try {
+        const value = JSON.parse(fs.readFileSync(storePath(dir), 'utf8'));
+        return Array.isArray(value) ? value : [];
+    }
+    catch {
+        return [];
+    }
+}
+function save(rows, dir = dataDir()) {
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const store = storePath(dir);
+    const lock = lockPath(dir);
+    const start = Date.now();
+    while (true) {
+        try {
+            fs.mkdirSync(lock, { mode: 0o700 });
+            try {
+                const current = new Map(load(dir).map(t => [t.id, t]));
+                for (const row of rows)
+                    current.set(row.id, row);
+                const retained = [...current.values()].sort((a, b) => a.createdAt.localeCompare(b.createdAt)).slice(-MAX_TASKS);
+                const tmp = `${store}.${process.pid}-${crypto.randomUUID()}.tmp`;
+                fs.writeFileSync(tmp, JSON.stringify(retained, null, 2), { mode: 0o600 });
+                fs.renameSync(tmp, store);
+            }
+            finally {
+                fs.rmSync(lock, { recursive: true, force: true });
+            }
+            return;
+        }
+        catch (e) {
+            if (e?.code !== 'EEXIST')
+                throw e;
+            try {
+                if (Date.now() - fs.statSync(lock).mtimeMs > 30_000)
+                    fs.rmSync(lock, { recursive: true, force: true });
+            }
+            catch { }
+            if (Date.now() - start > 10_000)
+                throw new Error('timed out waiting for task persistence lock');
+            const until = Date.now() + 10;
+            while (Date.now() < until) { }
+        }
+    }
+}
+function clone(v) { return v === undefined ? v : JSON.parse(JSON.stringify(v)); }
+function now() { return new Date().toISOString(); }
+function tokenId(token) { return AuditLog.fingerprint(token); }
+function validate(def) {
+    if (!def.goal.trim())
+        throw new Error('task goal must not be empty');
+    if (!Array.isArray(def.actions) || def.actions.length < 1 || def.actions.length > MAX_ACTIONS)
+        throw new Error(`task actions must contain 1-${MAX_ACTIONS} actions`);
+    const ids = new Set();
+    for (const a of def.actions) {
+        if (!a.id || !/^[A-Za-z0-9_-]{1,64}$/.test(a.id))
+            throw new Error(`invalid action id: ${a.id}`);
+        if (ids.has(a.id))
+            throw new Error(`duplicate action id: ${a.id}`);
+        ids.add(a.id);
+        if (!a.tool || a.tool === 'task' || a.tool === 'task_approve')
+            throw new Error(`invalid task action tool: ${a.tool}`);
+        if (a.agent) {
+            const profile = getAgentProfile(a.agent);
+            if (!profile)
+                throw new Error(`unknown agent profile: ${a.agent}`);
+            const scope = scopeOf(a.tool);
+            if (scope && !profile.allowedScopes.includes(scope))
+                throw new Error(`agent ${a.agent} is not permitted to use ${a.tool}`);
+            if (autonomyRank(def.autonomy) > autonomyRank(profile.defaultAutonomy))
+                throw new Error(`agent ${a.agent} cannot run at ${def.autonomy} autonomy`);
+        }
+        if (a.retries !== undefined && (!Number.isInteger(a.retries) || a.retries < 0 || a.retries > 5))
+            throw new Error(`invalid retries for ${a.id}`);
+        if (a.timeoutMs !== undefined && (!Number.isInteger(a.timeoutMs) || a.timeoutMs < 100 || a.timeoutMs > 600_000))
+            throw new Error(`invalid timeout for ${a.id}`);
+        for (const dep of a.dependsOn || [])
+            if (!ids.has(dep) && !def.actions.some(x => x.id === dep))
+                throw new Error(`unknown dependency ${dep} for ${a.id}`);
+    }
+    const graph = new Map(def.actions.map(a => [a.id, a.dependsOn || []]));
+    const visiting = new Set();
+    const visited = new Set();
+    const visit = (id) => {
+        if (visiting.has(id))
+            throw new Error('task dependency graph contains a cycle');
+        if (visited.has(id))
+            return;
+        visiting.add(id);
+        for (const dep of graph.get(id) || [])
+            visit(dep);
+        visiting.delete(id);
+        visited.add(id);
+    };
+    for (const a of def.actions)
+        visit(a.id);
+}
+function autonomyRank(value) { return { readonly: 0, safe: 1, supervised: 2, autonomous: 3 }[value]; }
+function isMutationLike(tool) {
+    return new Set(['write_file', 'edit_file', 'delete_path', 'run_command', 'kill_process', 'git', 'sqlite_query', 'allow_path', 'deny_path', 'package_install', 'package_remove', 'service_action', 'schedule_command', 'cancel_scheduled_task', 'workspace_snapshot', 'rollback_changes', 'run_background', 'job_cancel', 'run_parallel', 'upload_file', 'change_set_begin', 'change_set_add', 'change_set_commit', 'change_set_rollback', 'health_watch', 'health_stop', 'plugin_install', 'plugin_remove', 'context_snapshot', 'context_clear', 'approval_decide', 'task_approve']).has(tool);
+}
+export class TaskEngine {
+    token;
+    invoke;
+    dir;
+    constructor(token, invoke, options = {}) {
+        this.token = token;
+        this.invoke = invoke;
+        this.dir = options.dataDirectory || dataDir();
+    }
+    create(def) {
+        validate(def);
+        const id = crypto.randomUUID();
+        const created = now();
+        const actions = def.actions.map(a => ({ ...clone(a), status: 'pending', attempts: 0 }));
+        const context = {
+            taskId: id, goal: def.goal, autonomy: def.autonomy,
+            budget: { total: 32_000, history: 4_000, tools: 12_000, memory: 8_000, reserved: 8_000 },
+            facts: [], decisions: [], constraints: [], completedActions: [],
+        };
+        const row = { id, tokenId: tokenId(this.token), goal: def.goal, autonomy: def.autonomy, state: def.dryRun ? 'completed' : 'queued', dryRun: Boolean(def.dryRun), createdAt: created, updatedAt: created, actions, context };
+        if (def.dryRun)
+            row.context.decisions.push('dry-run: no action executed');
+        this.save(row);
+        return clone(row);
+    }
+    get(id) {
+        const row = load(this.dir).find(t => t.id === id && t.tokenId === tokenId(this.token));
+        return row ? clone(row) : undefined;
+    }
+    list(limit = 20) { return load(this.dir).filter(t => t.tokenId === tokenId(this.token)).sort((a, b) => b.createdAt.localeCompare(a.createdAt)).slice(0, Math.min(100, Math.max(1, limit))).map(clone); }
+    save(row) { save([row], this.dir); }
+    async approve(id) {
+        const row = this.require(id);
+        if (row.state !== 'awaiting_approval')
+            throw new Error(`task ${id} is not awaiting approval`);
+        row.state = 'executing';
+        row.updatedAt = now();
+        row.approvalId = undefined;
+        this.save(row);
+        return this.execute(row);
+    }
+    reject(id) {
+        const row = this.require(id);
+        if (row.state !== 'awaiting_approval')
+            throw new Error(`task ${id} is not awaiting approval`);
+        row.state = 'cancelled';
+        row.error = 'task rejected during approval';
+        row.approvalId = undefined;
+        row.updatedAt = now();
+        this.save(row);
+        return clone(row);
+    }
+    async resume(id) {
+        const row = this.require(id);
+        if (!['queued', 'executing', 'verifying', 'failed'].includes(row.state))
+            throw new Error(`task ${id} cannot be resumed from ${row.state}`);
+        row.state = row.state === 'failed' ? 'planning' : row.state;
+        row.updatedAt = now();
+        this.save(row);
+        return this.execute(row);
+    }
+    require(id) { const row = this.get(id); if (!row)
+        throw new Error(`Task ${id} not found`); return row; }
+    async run(id) {
+        const row = this.require(id);
+        if (row.dryRun)
+            return row;
+        if (row.state !== 'queued' && row.state !== 'planning')
+            throw new Error(`task ${id} cannot run from ${row.state}`);
+        const hasMutation = row.actions.some(a => isMutationLike(a.tool));
+        if (row.autonomy === 'readonly' && hasMutation) {
+            row.state = 'failed';
+            row.error = 'readonly autonomy cannot execute mutating actions';
+            row.updatedAt = now();
+            this.save(row);
+            return clone(row);
+        }
+        if (row.autonomy === 'supervised' && hasMutation) {
+            row.state = 'awaiting_approval';
+            row.approvalId = `task-${crypto.randomUUID().slice(0, 12)}`;
+            row.updatedAt = now();
+            row.context.decisions.push(`approval required: ${row.approvalId}`);
+            this.save(row);
+            return clone(row);
+        }
+        row.state = 'executing';
+        row.updatedAt = now();
+        this.save(row);
+        return this.execute(row);
+    }
+    async execute(row) {
+        try {
+            while (row.actions.some(a => a.status === 'pending' || a.status === 'running')) {
+                const ready = row.actions.filter(a => a.status === 'pending' && (a.dependsOn || []).every(dep => {
+                    const status = row.actions.find(x => x.id === dep)?.status;
+                    if (a.condition === 'on_failure')
+                        return status === 'failed';
+                    if (a.condition === 'always')
+                        return ['succeeded', 'failed', 'skipped', 'rolled_back'].includes(status || '');
+                    return status === 'succeeded' || status === 'skipped';
+                }));
+                const blocked = row.actions.filter(a => a.status === 'pending' && (a.dependsOn || []).some(dep => {
+                    const status = row.actions.find(x => x.id === dep)?.status;
+                    return ['failed', 'rolled_back'].includes(status || '') && a.condition !== 'on_failure';
+                }));
+                for (const a of blocked) {
+                    a.status = 'skipped';
+                    a.finishedAt = now();
+                }
+                if (!ready.length) {
+                    if (row.actions.some(a => a.status === 'running')) {
+                        await new Promise(r => setTimeout(r, 10));
+                        continue;
+                    }
+                    if (row.actions.some(a => a.status === 'pending'))
+                        throw new Error('task graph is blocked by unresolved dependencies');
+                    break;
+                }
+                row.state = 'executing';
+                row.updatedAt = now();
+                this.save(row);
+                await Promise.all(ready.map(a => this.executeAction(row, a)));
+                row.context.completedActions = row.actions.filter(a => a.status === 'succeeded').map(a => a.id);
+                this.save(row);
+            }
+            row.state = 'verifying';
+            row.updatedAt = now();
+            this.save(row);
+            const failed = row.actions.some(a => a.status === 'failed');
+            if (failed)
+                throw new Error('task verification failed');
+            row.state = 'completed';
+            row.updatedAt = now();
+            this.save(row);
+            return clone(row);
+        }
+        catch (e) {
+            row.error = e?.message || String(e);
+            row.state = 'failed';
+            row.updatedAt = now();
+            this.save(row);
+            await this.rollback(row, row.actions.filter(a => a.status === 'succeeded'));
+            return clone(row);
+        }
+    }
+    async executeAction(row, action) {
+        action.status = 'running';
+        action.startedAt = now();
+        action.attempts += 1;
+        this.save(row);
+        const max = 1 + (action.retries || 0);
+        while (action.attempts <= max) {
+            try {
+                const result = await withTimeout(this.invoke(action.tool, action.arguments || {}), action.timeoutMs || 600_000);
+                if (result?.isError)
+                    throw new Error(extractText(result) || `tool ${action.tool} returned an error`);
+                if (action.verify) {
+                    const verification = await withTimeout(this.invoke(action.verify.tool, action.verify.arguments || {}), action.timeoutMs || 600_000);
+                    if (verification?.isError)
+                        throw new Error(extractText(verification) || `verification failed for ${action.id}`);
+                    row.context.decisions.push(`verified: ${action.id} via ${action.verify.tool}`);
+                }
+                action.status = 'succeeded';
+                action.result = result;
+                action.finishedAt = now();
+                this.save(row);
+                return;
+            }
+            catch (e) {
+                action.error = e?.message || String(e);
+                if (action.attempts >= max) {
+                    action.status = 'failed';
+                    action.finishedAt = now();
+                    this.save(row);
+                    return;
+                }
+                action.attempts += 1;
+                this.save(row);
+            }
+        }
+    }
+    async rollback(row, succeeded) {
+        row.context.decisions.push('rollback started after task failure');
+        for (const action of [...succeeded].reverse()) {
+            if (!action.rollback)
+                continue;
+            try {
+                await withTimeout(this.invoke(action.rollback.tool, action.rollback.arguments || {}), action.timeoutMs || 600_000);
+                action.status = 'rolled_back';
+            }
+            catch (e) {
+                row.context.decisions.push(`rollback failed for ${action.id}: ${e?.message || e}`);
+            }
+        }
+        row.updatedAt = now();
+        this.save(row);
+    }
+}
+export function taskSummary(row) {
+    return { ok: row.state === 'completed', summary: `Task ${row.id} is ${row.state}`, data: { id: row.id, state: row.state, actions: clone(row.actions) }, warnings: row.state === 'failed' ? [row.error || 'task failed'] : [], errors: row.state === 'failed' ? [row.error || 'task failed'] : [], nextActions: row.state === 'awaiting_approval' ? ['approve the task'] : row.state === 'failed' ? ['resume the task or inspect the failed action'] : [] };
+}
+function extractText(result) { return Array.isArray(result?.content) ? result.content.filter((x) => x?.type === 'text').map((x) => x.text).join('\n').slice(0, 2000) : ''; }
+function withTimeout(promise, ms) {
+    return new Promise((resolve, reject) => { const timer = setTimeout(() => reject(new Error(`action timed out after ${ms}ms`)), ms); promise.then(v => { clearTimeout(timer); resolve(v); }, e => { clearTimeout(timer); reject(e); }); });
+}
+//# sourceMappingURL=task-engine.js.map