specrails-core 5.2.2 → 5.3.0

package/dist/agent-runtime/durable-store.js

@@ -0,0 +1,205 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { mkdir, open, readFile, rename, rm } from 'node:fs/promises';
+import { hostname } from 'node:os';
+import { join, resolve } from 'node:path';
+export class WorkflowStoreError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'WorkflowStoreError';
+    }
+}
+export const ENVELOPE_FORMAT = 2;
+function errorCode(error) {
+    return typeof error === 'object' && error !== null && 'code' in error ? String(error.code) : undefined;
+}
+/** Reject non-JSON data instead of silently changing the fingerprint on serialization. */
+export function fingerprint(value) {
+    const seen = new Set();
+    const canonical = (item) => {
+        if (item === null || typeof item === 'string' || typeof item === 'boolean')
+            return item;
+        if (typeof item === 'number' && Number.isFinite(item))
+            return item;
+        if (typeof item !== 'object' || item === null || seen.has(item))
+            throw new TypeError('Checkpoint values must be finite, acyclic JSON data');
+        if (!Array.isArray(item) && Object.getPrototypeOf(item) !== Object.prototype && Object.getPrototypeOf(item) !== null) {
+            throw new TypeError('Checkpoint values must be plain JSON objects');
+        }
+        seen.add(item);
+        const result = Array.isArray(item)
+            ? item.map(canonical)
+            : Object.fromEntries(Object.keys(item).sort().map(key => [key, canonical(item[key])]));
+        seen.delete(item);
+        return result;
+    };
+    return createHash('sha256').update(JSON.stringify(canonical(value))).digest('hex');
+}
+function runDirectory(directory, runId) {
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,127}$/.test(runId) || runId.endsWith('.') || /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/i.test(runId)) {
+        throw new WorkflowStoreError('INVALID_ID', 'Run ID must contain 1–128 letters, numbers, dots, underscores or dashes, start with a letter or number, and be a portable filename');
+    }
+    return join(resolve(directory), runId);
+}
+export async function readWorkflowEnvelope(directory, runId) {
+    let raw;
+    try {
+        raw = await readFile(join(runDirectory(directory, runId), 'checkpoint.json'), 'utf8');
+    }
+    catch (error) {
+        if (errorCode(error) === 'ENOENT')
+            return null;
+        throw error;
+    }
+    try {
+        const envelope = JSON.parse(raw);
+        const state = envelope.state;
+        if (envelope.format !== ENVELOPE_FORMAT || !state || state.schemaVersion !== 2 || state.runId !== runId || typeof state.traceId !== 'string' ||
+            !Array.isArray(state.events) || !Array.isArray(state.history) || !state.steps ||
+            envelope.checksum !== fingerprint({ state, graph: envelope.graph ?? null }))
+            throw new Error('Invalid envelope or checksum');
+        return { state, ...(envelope.graph ? { graph: envelope.graph } : {}) };
+    }
+    catch (error) {
+        throw new WorkflowStoreError('CORRUPT_STATE', `Cannot read checkpoint for ${runId}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/** Read-only view of the host ledger. */
+export async function readWorkflowState(directory, runId) {
+    return (await readWorkflowEnvelope(directory, runId))?.state ?? null;
+}
+/** Publish a complete checkpoint, receipt, usage, event ledger and graph history in one atomic rename. */
+export async function writeWorkflowEnvelope(directory, envelope) {
+    const root = runDirectory(directory, envelope.state.runId);
+    await mkdir(root, { recursive: true, mode: 0o700 });
+    // JSON removes absent optional fields; validate the actual stored representation.
+    const normalized = JSON.parse(JSON.stringify({ state: envelope.state, graph: envelope.graph ?? null }));
+    const payload = JSON.stringify({ format: ENVELOPE_FORMAT, checksum: fingerprint(normalized), state: normalized.state, ...(normalized.graph ? { graph: normalized.graph } : {}) });
+    const temporary = join(root, `.checkpoint-${randomUUID()}.tmp`);
+    const handle = await open(temporary, 'wx', 0o600);
+    try {
+        await handle.writeFile(payload, 'utf8');
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+    try {
+        // Node's rename replaces an existing file on supported macOS and Windows filesystems.
+        await renameReplacing(temporary, join(root, 'checkpoint.json'));
+        // POSIX directory sync makes the rename durable; Windows cannot open directories this way.
+        if (process.platform !== 'win32') {
+            const directoryHandle = await open(root, 'r');
+            try {
+                await directoryHandle.sync();
+            }
+            finally {
+                await directoryHandle.close();
+            }
+        }
+    }
+    finally {
+        await rm(temporary, { force: true });
+    }
+}
+// Windows reports EPERM/EBUSY when a scanner or reader briefly holds the target;
+// the rename is retried before it is reported as a persistence failure.
+async function renameReplacing(from, to) {
+    for (let attempt = 0;; attempt++) {
+        try {
+            await rename(from, to);
+            return;
+        }
+        catch (error) {
+            const code = errorCode(error);
+            if (process.platform !== 'win32' || attempt >= 10 || (code !== 'EPERM' && code !== 'EBUSY' && code !== 'EACCES'))
+                throw error;
+            await new Promise(resolve => setTimeout(resolve, 10 * (attempt + 1)));
+        }
+    }
+}
+export async function writeWorkflowState(directory, state, graph) {
+    await writeWorkflowEnvelope(directory, { state, ...(graph ? { graph } : {}) });
+}
+async function ownerAt(path) {
+    try {
+        const owner = JSON.parse(await readFile(join(path, 'owner.json'), 'utf8'));
+        return Number.isInteger(owner.pid) && owner.pid > 0 && typeof owner.hostname === 'string' && typeof owner.token === 'string' ? owner : null;
+    }
+    catch (error) {
+        if (error instanceof SyntaxError || errorCode(error) === 'ENOENT')
+            return null;
+        throw error;
+    }
+}
+function alive(owner) {
+    if (owner.hostname !== hostname())
+        return true; // Never steal leases from another machine.
+    try {
+        process.kill(owner.pid, 0);
+        return true;
+    }
+    catch (error) {
+        return errorCode(error) !== 'ESRCH';
+    }
+}
+/** Atomic directory leases avoid platform-specific flock and native dependencies. */
+export async function acquireWorkflowLease(directory, runId) {
+    const root = runDirectory(directory, runId);
+    const lease = join(root, '.lease');
+    const recovery = join(root, '.lease-recovery');
+    await mkdir(root, { recursive: true, mode: 0o700 });
+    const locked = () => new WorkflowStoreError('LOCKED', `Workflow ${runId} has an active or unverifiable lease`);
+    let created = false;
+    try {
+        await mkdir(lease);
+        created = true;
+    }
+    catch (error) {
+        if (errorCode(error) !== 'EEXIST')
+            throw error;
+    }
+    if (!created) {
+        // A separate election prevents two contenders from deleting each other's new lease.
+        try {
+            await mkdir(recovery);
+        }
+        catch (error) {
+            if (errorCode(error) === 'EEXIST')
+                throw locked();
+            throw error;
+        }
+        try {
+            const oldOwner = await ownerAt(lease);
+            if (!oldOwner || alive(oldOwner))
+                throw locked();
+            await rm(lease, { recursive: true, force: true });
+            await mkdir(lease);
+        }
+        finally {
+            await rm(recovery, { recursive: true, force: true });
+        }
+    }
+    const owner = { pid: process.pid, hostname: hostname(), token: randomUUID() };
+    try {
+        const handle = await open(join(lease, 'owner.json'), 'wx', 0o600);
+        try {
+            await handle.writeFile(JSON.stringify(owner));
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch (error) {
+        await rm(lease, { recursive: true, force: true });
+        throw error;
+    }
+    return async () => {
+        const current = await ownerAt(lease);
+        if (current?.token === owner.token)
+            await rm(lease, { recursive: true, force: true });
+    };
+}
+//# sourceMappingURL=durable-store.js.map

package/dist/agent-runtime/durable-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable-store.js","sourceRoot":"","sources":["../../src/agent-runtime/durable-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAIzC,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACf;IAA5B,YAA4B,IAA+C,EAAE,OAAe;QAC1F,KAAK,CAAC,OAAO,CAAC,CAAA;QADY,SAAI,GAAJ,IAAI,CAA2C;QAEzE,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAA;IAClC,CAAC;CACF;AAOD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAA;AAEhC,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACxG,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,SAAS,GAAG,CAAC,IAAa,EAAa,EAAE;QAC7C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QACvF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAClE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAA;QAC3I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACrH,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAA;QACrE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACd,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YACrB,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAE,IAAgC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACrH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACjB,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACpF,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,KAAa;IACpD,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,iDAAiD,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9I,MAAM,IAAI,kBAAkB,CAAC,YAAY,EAAE,oIAAoI,CAAC,CAAA;IAClL,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAA;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,KAAa;IACzE,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAA;IACvF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC9C,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6F,CAAA;QAC5H,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAA;QAC5B,IAAI,QAAQ,CAAC,MAAM,KAAK,eAAe,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACxI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK;YAC7E,QAAQ,CAAC,QAAQ,KAAK,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAChI,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE,8BAA8B,KAAK,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACjJ,CAAC;AACH,CAAC;AAED,yCAAyC;AACzC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB,EAAE,KAAa;IACtE,OAAO,CAAC,MAAM,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAA;AACtE,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,QAA0B;IACvF,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1D,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,kFAAkF;IAClF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,CAAiE,CAAA;IACvK,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACjL,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,UAAU,EAAE,MAAM,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACvC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;IACrB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IACD,IAAI,CAAC;QACH,sFAAsF;QACtF,MAAM,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAA;QAC/D,2FAA2F;QAC3F,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YAC7C,IAAI,CAAC;gBAAC,MAAM,eAAe,CAAC,IAAI,EAAE,CAAA;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;QAChF,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACtC,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,wEAAwE;AACxE,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,EAAU;IACrD,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;YAC7B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAA;YAC7H,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACvE,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB,EAAE,KAAoB,EAAE,KAA4B;IAC5G,MAAM,qBAAqB,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;AAChF,CAAC;AAID,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAe,CAAA;QACxF,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IAC7I,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC9E,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,KAAiB;IAC9B,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE;QAAE,OAAO,IAAI,CAAA,CAAC,2CAA2C;IAC1F,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,OAAO,CAAA;IAAC,CAAC;AACvG,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,KAAa;IACzE,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;IAC9C,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,GAAuB,EAAE,CAAC,IAAI,kBAAkB,CAAC,QAAQ,EAAE,YAAY,KAAK,sCAAsC,CAAC,CAAA;IAClI,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,GAAG,IAAI,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IAAC,CAAC;IAC3G,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,oFAAoF;QACpF,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAAE,MAAM,MAAM,EAAE,CAAC;YAAC,MAAM,KAAK,CAAA;QAAC,CAAC;QAC9G,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;YACrC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC;gBAAE,MAAM,MAAM,EAAE,CAAA;YAChD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACjD,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAe,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAA;IACzF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QACjE,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IAC7G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,OAAO,EAAE,KAAK,KAAK,KAAK,CAAC,KAAK;YAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACvF,CAAC,CAAA;AACH,CAAC"}

package/dist/agent-runtime/executor-types.d.ts

@@ -0,0 +1,92 @@
+import type { VerificationCommand } from '../installer/runtime/pipeline-state.js';
+export type AgentRole = 'architect' | 'developer' | 'reviewer';
+export type CliProvider = 'claude' | 'codex' | 'gemini' | 'kimi';
+export type RuntimeProviderConfig = {
+    id: string;
+    kind: 'cli';
+    cli: CliProvider;
+} | {
+    id: string;
+    kind: 'openai-compatible';
+    baseUrl: string;
+    apiKeyEnv?: string;
+};
+export interface RuntimeAgentConfig {
+    provider: string;
+    model?: string;
+    maxTurns?: number;
+}
+export type ReviewAspectName = 'type_correctness' | 'pattern_adherence' | 'test_coverage' | 'security' | 'architectural_alignment';
+export interface RuntimeConfig {
+    schemaVersion: 1;
+    enabled: boolean;
+    providers: RuntimeProviderConfig[];
+    agents: Record<AgentRole, RuntimeAgentConfig>;
+    limits?: {
+        maxAttempts?: number;
+        maxTokens?: number;
+        maxCostUsd?: number;
+        timeoutMs?: number;
+    };
+    verification: VerificationCommand[];
+    approvalBeforeArchive?: boolean;
+    /** Review gate thresholds (0–100); unset fields keep Core's defaults. */
+    review?: {
+        minScore?: number;
+        aspects?: Partial<Record<ReviewAspectName, number>>;
+    };
+    /** What to do when the architect still reports low confidence after investigating: ask the requester (default) or proceed on stated assumptions. */
+    architect?: {
+        onLowConfidence?: 'ask' | 'proceed';
+    };
+}
+/** Null means unavailable, including when a CLI never reports billing. */
+export interface AgentUsage {
+    inputTokens: number | null;
+    outputTokens: number | null;
+    costUsd: number | null;
+}
+export interface AgentEvent {
+    kind: 'text' | 'tool-start' | 'tool-end' | 'usage';
+    text?: string;
+    tool?: string;
+    /** Short human-readable tool target, such as a file path or command. Never a complete transcript. */
+    detail?: string;
+    usage?: AgentUsage;
+}
+export interface AgentRequest {
+    role: AgentRole;
+    prompt: string;
+    cwd: string;
+    allowedRoots: string[];
+    model?: string;
+    maxTurns?: number;
+    timeoutMs?: number;
+    maxTokens?: number;
+    maxCostUsd?: number;
+    /** Continue an earlier provider session when the executor supports it. Executors without sessions ignore it. */
+    resumeSessionId?: string;
+    /** JSON Schema for the final structured reply. Executors with native structured output enforce it; the prompt remains authoritative elsewhere. */
+    outputSchema?: Record<string, unknown>;
+    signal?: AbortSignal;
+    onEvent?: (event: AgentEvent) => void;
+}
+export interface AgentResult {
+    text: string;
+    usage: AgentUsage;
+    sessionId?: string;
+    structured?: Record<string, unknown>;
+}
+export type AgentLimits = Pick<AgentRequest, 'maxTokens' | 'maxCostUsd'>;
+export interface AgentExecutor {
+    /** Side-effect-free preflight. Custom executors own their limit capabilities. */
+    validateLimits?(limits: AgentLimits): void;
+    execute(request: AgentRequest): Promise<AgentResult>;
+}
+export declare class AgentExecutionError extends Error {
+    readonly code: string;
+    readonly usage: AgentUsage;
+    constructor(message: string, code: string, usage?: AgentUsage);
+}
+export declare function unknownUsage(): AgentUsage;
+export declare function validateAgentRequest(request: AgentRequest): void;

package/dist/agent-runtime/executor-types.js

@@ -0,0 +1,29 @@
+export class AgentExecutionError extends Error {
+    code;
+    usage;
+    constructor(message, code, usage = unknownUsage()) {
+        super(message);
+        this.code = code;
+        this.usage = usage;
+        this.name = 'AgentExecutionError';
+    }
+}
+export function unknownUsage() { return { inputTokens: null, outputTokens: null, costUsd: null }; }
+export function validateAgentRequest(request) {
+    if (!['architect', 'developer', 'reviewer'].includes(request.role) || typeof request.prompt !== 'string' || !request.prompt.trim() || request.prompt.includes('\0'))
+        throw new AgentExecutionError('Invalid role request', 'invalid_request');
+    if (request.model !== undefined && (typeof request.model !== 'string' || !request.model.trim() || request.model.length > 256 || /^-/.test(request.model) || /[\0\r\n]/.test(request.model)))
+        throw new AgentExecutionError('Invalid model identifier', 'invalid_model');
+    for (const key of ['maxTurns', 'timeoutMs', 'maxTokens', 'maxCostUsd']) {
+        const value = request[key];
+        if (value !== undefined && (!Number.isFinite(value) || value <= 0 || (key !== 'maxCostUsd' && !Number.isSafeInteger(value))))
+            throw new AgentExecutionError(`Invalid ${key}`, 'invalid_limit');
+    }
+    if (request.resumeSessionId !== undefined && (typeof request.resumeSessionId !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/.test(request.resumeSessionId)))
+        throw new AgentExecutionError('Invalid session identifier', 'invalid_request');
+    if (request.outputSchema !== undefined && (!request.outputSchema || typeof request.outputSchema !== 'object' || Array.isArray(request.outputSchema)))
+        throw new AgentExecutionError('Invalid output schema', 'invalid_request');
+    if (request.signal?.aborted)
+        throw new AgentExecutionError('Agent cancelled', 'aborted');
+}
+//# sourceMappingURL=executor-types.js.map

package/dist/agent-runtime/executor-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor-types.js","sourceRoot":"","sources":["../../src/agent-runtime/executor-types.ts"],"names":[],"mappings":"AA8DA,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACC;IAA8B;IAA3E,YAAY,OAAe,EAAkB,IAAY,EAAkB,QAAoB,YAAY,EAAE;QAC3G,KAAK,CAAC,OAAO,CAAC,CAAA;QAD6B,SAAI,GAAJ,IAAI,CAAQ;QAAkB,UAAK,GAAL,KAAK,CAA6B;QAE3G,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AACD,MAAM,UAAU,YAAY,KAAiB,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA,CAAC,CAAC;AAC9G,MAAM,UAAU,oBAAoB,CAAC,OAAqB;IACxD,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAA;IAC7O,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,EAAE,eAAe,CAAC,CAAA;IACvQ,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAU,EAAE,CAAC;QAChF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,GAAG,EAAE,EAAE,eAAe,CAAC,CAAA;IAChM,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,EAAE,iBAAiB,CAAC,CAAA;IAClP,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,CAAA;IAC/N,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAA;AAC1F,CAAC"}

package/dist/agent-runtime/executors.d.ts

@@ -0,0 +1,22 @@
+import type { AgentExecutor, AgentLimits, AgentRequest, AgentResult, RuntimeConfig } from './executor-types.js';
+import { type CliExecutorOptions } from './cli-executor.js';
+import { type OpenAICompatibleOptions } from './openai-executor.js';
+export { CliExecutor, buildCliInvocation, parseCliOutput } from './cli-executor.js';
+export { OpenAICompatibleExecutor } from './openai-executor.js';
+export { AgentExecutionError } from './executor-types.js';
+export type * from './executor-types.js';
+export declare class ExecutorRegistry {
+    private readonly executors;
+    register(id: string, executor: AgentExecutor): this;
+    get(id: string): AgentExecutor;
+    ids(): string[];
+    validateLimits(id: string, limits: AgentLimits): void;
+    execute(id: string, request: AgentRequest): Promise<AgentResult>;
+}
+export interface ExecutorRegistryOptions {
+    cli?: CliExecutorOptions;
+    openai?: OpenAICompatibleOptions;
+    /** Programmatic registrations replace configured executors or add new provider aliases. */
+    executors?: Record<string, AgentExecutor>;
+}
+export declare function createExecutorRegistry(input: RuntimeConfig, options?: ExecutorRegistryOptions): ExecutorRegistry;

package/dist/agent-runtime/executors.js

@@ -0,0 +1,44 @@
+import { AgentExecutionError, validateAgentRequest } from './executor-types.js';
+import { validateRuntimeConfig } from './config.js';
+import { CliExecutor } from './cli-executor.js';
+import { OpenAICompatibleExecutor } from './openai-executor.js';
+export { CliExecutor, buildCliInvocation, parseCliOutput } from './cli-executor.js';
+export { OpenAICompatibleExecutor } from './openai-executor.js';
+export { AgentExecutionError } from './executor-types.js';
+export class ExecutorRegistry {
+    executors = new Map();
+    register(id, executor) {
+        if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(id) || typeof executor?.execute !== 'function')
+            throw new Error('Invalid executor registration');
+        this.executors.set(id, executor);
+        return this;
+    }
+    get(id) {
+        const executor = this.executors.get(id);
+        if (!executor)
+            throw new AgentExecutionError(`No executor registered for provider '${id}'`, 'provider_not_found');
+        return executor;
+    }
+    ids() { return [...this.executors.keys()]; }
+    validateLimits(id, limits) { this.get(id).validateLimits?.(limits); }
+    async execute(id, request) {
+        validateAgentRequest(request);
+        const result = await this.get(id).execute(request);
+        if (!result || typeof result.text !== 'string' || !result.text.trim() || !result.usage || ['inputTokens', 'outputTokens', 'costUsd'].some(key => {
+            const value = result.usage[key];
+            return value !== null && (typeof value !== 'number' || !Number.isFinite(value) || value < 0);
+        }))
+            throw new AgentExecutionError('Executor returned an invalid result', 'invalid_executor_result');
+        return result;
+    }
+}
+export function createExecutorRegistry(input, options = {}) {
+    const config = validateRuntimeConfig(input, { registeredProviderIds: Object.keys(options.executors ?? {}) });
+    const registry = new ExecutorRegistry();
+    for (const provider of config.providers)
+        registry.register(provider.id, provider.kind === 'cli' ? new CliExecutor(provider.cli, options.cli) : new OpenAICompatibleExecutor(provider, options.openai));
+    for (const [id, executor] of Object.entries(options.executors ?? {}))
+        registry.register(id, executor);
+    return registry;
+}
+//# sourceMappingURL=executors.js.map

package/dist/agent-runtime/executors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executors.js","sourceRoot":"","sources":["../../src/agent-runtime/executors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,WAAW,EAA2B,MAAM,mBAAmB,CAAA;AACxE,OAAO,EAAE,wBAAwB,EAAgC,MAAM,sBAAsB,CAAA;AAE7F,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAEzD,MAAM,OAAO,gBAAgB;IACV,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAA;IAC7D,QAAQ,CAAC,EAAU,EAAE,QAAuB;QAC1C,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAC/I,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QAChC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,GAAG,CAAC,EAAU;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACvC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,mBAAmB,CAAC,wCAAwC,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAA;QACjH,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,GAAG,KAAe,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAA,CAAC,CAAC;IACrD,cAAc,CAAC,EAAU,EAAE,MAAmB,IAAU,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAA,CAAC,CAAC;IAC/F,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,OAAqB;QAC7C,oBAAoB,CAAC,OAAO,CAAC,CAAA;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAClD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAC9I,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAgC,CAAC,CAAA;YAC5D,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAA;QAC9F,CAAC,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,qCAAqC,EAAE,yBAAyB,CAAC,CAAA;QACnG,OAAO,MAAM,CAAA;IACf,CAAC;CACF;AAOD,MAAM,UAAU,sBAAsB,CAAC,KAAoB,EAAE,UAAmC,EAAE;IAChG,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,EAAE,EAAE,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;IAC5G,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAA;IACvC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS;QAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,wBAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;IACtM,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;IACrG,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/agent-runtime/gemini-policy.d.ts

@@ -0,0 +1,8 @@
+/** Admin rules outrank Gemini's persisted user approvals. No mode filter: the
+ * policy still applies when user settings disable plan and Gemini falls back
+ * to default mode. All tools outside this read-only set remain denied. */
+export declare const GEMINI_READONLY_POLICY = "[[rule]]\ntoolName = [\"read_file\", \"read_many_files\", \"list_directory\", \"glob\", \"grep_search\"]\ndecision = \"allow\"\npriority = 999\n\n[[rule]]\ntoolName = \"*\"\ndecision = \"deny\"\npriority = 998\n";
+export declare function assertGeminiAdminPolicyAvailable(options?: {
+    platform?: NodeJS.Platform;
+    readDirectory?: (directory: string) => string[];
+}): void;

package/dist/agent-runtime/gemini-policy.js

@@ -0,0 +1,36 @@
+import { readdirSync } from 'node:fs';
+import path from 'node:path';
+import { AgentExecutionError } from './executor-types.js';
+/** Admin rules outrank Gemini's persisted user approvals. No mode filter: the
+ * policy still applies when user settings disable plan and Gemini falls back
+ * to default mode. All tools outside this read-only set remain denied. */
+export const GEMINI_READONLY_POLICY = `[[rule]]
+toolName = ["read_file", "read_many_files", "list_directory", "glob", "grep_search"]
+decision = "allow"
+priority = 999
+
+[[rule]]
+toolName = "*"
+decision = "deny"
+priority = 998
+`;
+export function assertGeminiAdminPolicyAvailable(options = {}) {
+    const platform = options.platform ?? process.platform;
+    const directory = platform === 'win32'
+        ? path.win32.join('C:\\ProgramData\\gemini-cli', 'policies')
+        : platform === 'darwin' ? '/Library/Application Support/GeminiCli/policies' : '/etc/gemini-cli/policies';
+    let entries;
+    try {
+        entries = (options.readDirectory ?? (directory => readdirSync(directory)))(directory);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return;
+        throw new AgentExecutionError('Cannot verify Gemini system policies for a read-only role. Check access to ' + directory, 'provider_capability_unsupported');
+    }
+    // Gemini deliberately ignores --admin-policy in the presence of system
+    // policy files. Refuse that environment instead of bypassing its policies.
+    if (entries.some(file => file.endsWith('.toml')))
+        throw new AgentExecutionError('Gemini system policies disable per-run admin policy enforcement. Select another provider for architect/reviewer, or ask the system administrator to configure a compatible environment: ' + directory, 'provider_capability_unsupported');
+}
+//# sourceMappingURL=gemini-policy.js.map

package/dist/agent-runtime/gemini-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-policy.js","sourceRoot":"","sources":["../../src/agent-runtime/gemini-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAEzD;;0EAE0E;AAC1E,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;CASrC,CAAA;AAED,MAAM,UAAU,gCAAgC,CAAC,UAA2F,EAAE;IAC5I,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAA;IACrD,MAAM,SAAS,GAAG,QAAQ,KAAK,OAAO;QACpC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,EAAE,UAAU,CAAC;QAC5D,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,iDAAiD,CAAC,CAAC,CAAC,0BAA0B,CAAA;IAC1G,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QAAC,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAAC,CAAC;IAC7F,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAM;QAC9D,MAAM,IAAI,mBAAmB,CAAC,6EAA6E,GAAG,SAAS,EAAE,iCAAiC,CAAC,CAAA;IAC7J,CAAC;IACD,uEAAuE;IACvE,2EAA2E;IAC3E,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,0LAA0L,GAAG,SAAS,EAAE,iCAAiC,CAAC,CAAA;AAC5T,CAAC"}

package/dist/agent-runtime/graph/artifacts.d.ts

@@ -0,0 +1,40 @@
+import { type PipelineContext, type PipelineState, type VerificationCommand } from '../../installer/runtime/pipeline-state.js';
+import type { DesignConfidence } from './state.js';
+export declare const SLUG: RegExp;
+export declare function object(value: unknown): Record<string, unknown>;
+/** Accepts the object wherever the model put it: bare, fenced, or surrounded by commentary. */
+export declare function parseAgentObject(text: string): Record<string, unknown>;
+/** All generated paths are relative and reject symlink ancestors, including
+ * already-existing archive/spec directories. */
+export declare function child(root: string, relative: string): string;
+export declare function write(file: string, content: string): void;
+export declare function journal(context: PipelineContext): PipelineState;
+export interface Architecture {
+    proposal: string;
+    design: string;
+    tasks: string[];
+    specs: Array<{
+        name: string;
+        content: string;
+    }>;
+    confidence: DesignConfidence;
+    question?: string;
+    verification: unknown;
+}
+/** Validates the architect's structured reply; throws `Invalid …` so the role gets one repair turn. */
+export declare function parseArchitecture(raw: Record<string, unknown>): Architecture;
+/**
+ * Writes the reviewed architecture artifacts. A low-confidence design that the
+ * project chose to proceed with is recorded as `medium` (the contract for a
+ * design resting on one named assumption) with its provenance kept alongside,
+ * because Core's design gate admits only high or medium confidence.
+ */
+export declare function writeArchitecture(context: PipelineContext, change: string, architecture: Architecture, options?: {
+    assumed?: boolean;
+}): void;
+/** Commands the architect proposed for repositories the configuration leaves uncovered. */
+export declare function proposedVerification(context: PipelineContext, configured: VerificationCommand[], verification: unknown): VerificationCommand[];
+export declare function openTasks(context: PipelineContext, change: string): string[];
+/** Archive is deterministic and replayable only with explicit write recovery.
+ * The reviewed specification documents are complete replacements, not deltas. */
+export declare function archive(context: PipelineContext, change: string): void;