@adhd/agent-mcp 0.0.1

package/src/db/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../../packages/ai/agent-mcp/src/db/schema.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMtB,CAAC;AAKH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBxB,CAAC;AAKH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAexB,CAAC;AAKH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBrB,CAAC;AAKH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoB1B,CAAC"}

package/src/db/schema.js

@@ -0,0 +1,100 @@
+import { integer, sqliteTable, text } from "drizzle-orm/sqlite-core";
+// ──────────────────────────────────────────────
+// agents
+// ──────────────────────────────────────────────
+export const agentsTable = sqliteTable("agents", {
+    name: text("name").primaryKey(),
+    version: integer("version").notNull().default(1),
+    data: text("data").notNull(), // JSON blob: AgentDefinition
+    createdAt: text("created_at").notNull(),
+    updatedAt: text("updated_at").notNull(),
+});
+// ──────────────────────────────────────────────
+// sessions
+// ──────────────────────────────────────────────
+export const sessionsTable = sqliteTable("sessions", {
+    id: text("id").primaryKey(),
+    agentName: text("agent_name")
+        .notNull()
+        .references(() => agentsTable.name, {
+        onDelete: "cascade"
+    }),
+    agentVersion: integer("agent_version").notNull(),
+    // Full JSON snapshot of AgentDefinition at session creation time.
+    // Not exposed in the public Session type — accessed only via
+    // SessionStore.getAgentDefinition(sessionId).
+    agentData: text("agent_data").notNull(),
+    status: text("status", {
+        enum: ["active", "closed"]
+    }).notNull().default("active"),
+    createdAt: text("created_at").notNull(),
+    updatedAt: text("updated_at").notNull(),
+    closedAt: text("closed_at"),
+});
+// ──────────────────────────────────────────────
+// messages
+// ──────────────────────────────────────────────
+export const messagesTable = sqliteTable("messages", {
+    id: text("id").primaryKey(),
+    sessionId: text("session_id")
+        .notNull()
+        .references(() => sessionsTable.id, {
+        onDelete: "cascade"
+    }),
+    role: text("role", {
+        enum: ["system", "user", "assistant", "tool"]
+    }).notNull(),
+    content: text("content"),
+    // JSON blobs for tool call / result payloads
+    toolCalls: text("tool_calls"),
+    toolResults: text("tool_results"),
+    createdAt: text("created_at").notNull(),
+});
+// ──────────────────────────────────────────────
+// tasks
+// ──────────────────────────────────────────────
+export const tasksTable = sqliteTable("tasks", {
+    id: text("id").primaryKey(),
+    sessionId: text("session_id")
+        .notNull()
+        .references(() => sessionsTable.id, {
+        onDelete: "cascade"
+    }),
+    parentTaskId: text("parent_task_id"),
+    recursionDepth: integer("recursion_depth").notNull().default(0),
+    status: text("status", {
+        enum: ["pending", "running", "completed", "failed", "cancelled"]
+    }).notNull().default("pending"),
+    prompt: text("prompt").notNull(),
+    result: text("result"),
+    error: text("error"),
+    createdAt: text("created_at").notNull(),
+    updatedAt: text("updated_at").notNull(),
+    completedAt: text("completed_at"),
+    cancelledAt: text("cancelled_at"),
+});
+// ──────────────────────────────────────────────
+// task_events
+// ──────────────────────────────────────────────
+export const taskEventsTable = sqliteTable("task_events", {
+    id: text("id").primaryKey(),
+    taskId: text("task_id")
+        .notNull()
+        .references(() => tasksTable.id, {
+        onDelete: "cascade"
+    }),
+    type: text("type", {
+        enum: [
+            "MODEL_REQUEST",
+            "MODEL_RESPONSE",
+            "TOOL_CALL",
+            "TOOL_RESULT",
+            "TASK_COMPLETED",
+            "TASK_FAILED",
+            "TASK_CANCELLED"
+        ]
+    }).notNull(),
+    payload: text("payload"), // JSON
+    createdAt: text("created_at").notNull(),
+});
+//# sourceMappingURL=schema.js.map

package/src/db/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../../../packages/ai/agent-mcp/src/db/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,OAAO,EACP,WAAW,EACX,IAAI,EACP,MAAM,yBAAyB,CAAC;AAEjC,iDAAiD;AACjD,SAAS;AACT,iDAAiD;AACjD,MAAM,CAAC,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,EAAE;IAC7C,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE;IAC/B,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,6BAA6B;IAC3D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CAC1C,CAAC,CAAC;AAEH,iDAAiD;AACjD,WAAW;AACX,iDAAiD;AACjD,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,EAAE;IACjD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SACxB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE;QAChC,QAAQ,EAAE,SAAS;KACtB,CAAC;IACN,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAChD,kEAAkE;IAClE,6DAA6D;IAC7D,8CAA8C;IAC9C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;QACnB,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;KAC7B,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC9B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;CAC9B,CAAC,CAAC;AAEH,iDAAiD;AACjD,WAAW;AACX,iDAAiD;AACjD,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,EAAE;IACjD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SACxB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE;QAChC,QAAQ,EAAE,SAAS;KACtB,CAAC;IACN,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACf,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC;KAChD,CAAC,CAAC,OAAO,EAAE;IACZ,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;IACxB,6CAA6C;IAC7C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CAC1C,CAAC,CAAC;AAEH,iDAAiD;AACjD,QAAQ;AACR,iDAAiD;AACjD,MAAM,CAAC,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,EAAE;IAC3C,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SACxB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE;QAChC,QAAQ,EAAE,SAAS;KACtB,CAAC;IACN,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACpC,cAAc,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;QACnB,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC;KACnE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IAC/B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IACtB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;CACpC,CAAC,CAAC;AAEH,iDAAiD;AACjD,cAAc;AACd,iDAAiD;AACjD,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAC,aAAa,EAAE;IACtD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SAClB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE;QAC7B,QAAQ,EAAE,SAAS;KACtB,CAAC;IACN,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACf,IAAI,EAAE;YACF,eAAe;YACf,gBAAgB;YAChB,WAAW;YACX,aAAa;YACb,gBAAgB;YAChB,aAAa;YACb,gBAAgB;SACnB;KACJ,CAAC,CAAC,OAAO,EAAE;IACZ,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO;IACjC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CAC1C,CAAC,CAAC"}

package/src/engine/orchestrator.d.ts

@@ -0,0 +1,24 @@
+import type { LLMProvider } from "../providers/types.js";
+import type { ExecutionContext, Message } from "../validation/index.js";
+import type { McpClientRegistry } from "../clients/registry.js";
+import type { PolicyEngine } from "./policy.js";
+import type { TaskStore } from "../store/task-store.js";
+import type { SessionStore } from "../store/session-store.js";
+export interface OrchestratorRunInput {
+    executionContext: ExecutionContext;
+    messages: Message[];
+    registry: McpClientRegistry;
+    provider: LLMProvider;
+    policy: PolicyEngine;
+    taskStore: TaskStore;
+    sessionStore: SessionStore;
+    signal: AbortSignal;
+    taskId: string;
+}
+export interface OrchestratorRunResult {
+    result: string;
+}
+export declare class Orchestrator {
+    run(input: OrchestratorRunInput): Promise<OrchestratorRunResult>;
+}
+//# sourceMappingURL=orchestrator.d.ts.map

package/src/engine/orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../../../../../../packages/ai/agent-mcp/src/engine/orchestrator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAKxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,MAAM,WAAW,oBAAoB;IACjC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,QAAQ,EAAE,WAAW,CAAC;IACtB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IAClC,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,YAAY;IACf,GAAG,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CA2SzE"}

package/src/engine/orchestrator.js

@@ -0,0 +1,231 @@
+import { logger } from "../logger.js";
+import { ToolError } from "../validation/errors.js";
+import { generateId } from "../utils/ids.js";
+import { nowIso } from "../utils/timestamps.js";
+export class Orchestrator {
+    async run(input) {
+        const { executionContext, registry, provider, policy, taskStore, sessionStore, signal, taskId, } = input;
+        // Working copy of messages — we append to this as the loop progresses
+        const currentMessages = [...input.messages];
+        try {
+            // Mark task as running
+            taskStore.updateStatus(taskId, "running");
+            let finalContent = "";
+            // Tool-use loop — break on "completed" stop reason, throw on cancellation/policy
+            let looping = true;
+            while (looping) {
+                // Check for cancellation at the top of each iteration
+                if (signal.aborted) {
+                    throw new ToolError("PROVIDER_ERROR", "Task was cancelled");
+                }
+                // Compose per-iteration signal: task cancellation OR provider timeout
+                const composedSignal = AbortSignal.any([
+                    signal,
+                    AbortSignal.timeout(executionContext.agentDefinition.provider.timeoutMs ?? 60_000),
+                ]);
+                // Gather available tools from the registry
+                const tools = await registry.listAllTools();
+                // Emit MODEL_REQUEST event
+                taskStore.appendEvent({
+                    taskId,
+                    type: "MODEL_REQUEST",
+                    payload: { messageCount: currentMessages.length, toolCount: tools.length },
+                });
+                logger.debug({
+                    taskId,
+                    sessionId: executionContext.sessionId,
+                    agentName: executionContext.agentName,
+                    messageCount: currentMessages.length,
+                }, "MODEL_REQUEST");
+                // Call the LLM provider
+                let providerResponse;
+                try {
+                    providerResponse = await provider.chat({
+                        messages: currentMessages,
+                        tools: tools.length > 0 ? tools : undefined,
+                        signal: composedSignal,
+                    });
+                }
+                catch (error) {
+                    if (signal.aborted) {
+                        throw new ToolError("PROVIDER_ERROR", "Task was cancelled during provider call");
+                    }
+                    if (composedSignal.aborted ||
+                        (error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError"))) {
+                        const ms = executionContext.agentDefinition.provider.timeoutMs ?? 60_000;
+                        throw new ToolError("PROVIDER_ERROR", `Provider call timed out after ${ms}ms. Increase timeoutMs on the agent's provider config.`);
+                    }
+                    throw new ToolError("PROVIDER_ERROR", `Provider call failed: ${error instanceof Error ? error.message : String(error)}`);
+                }
+                const assistantMessage = {
+                    ...providerResponse.message,
+                    sessionId: executionContext.sessionId,
+                };
+                // Persist and append the assistant message
+                await sessionStore.appendMessage(executionContext.sessionId, assistantMessage);
+                currentMessages.push(assistantMessage);
+                // Emit MODEL_RESPONSE event
+                taskStore.appendEvent({
+                    taskId,
+                    type: "MODEL_RESPONSE",
+                    payload: {
+                        stopReason: providerResponse.stopReason,
+                        hasContent: !!assistantMessage.content,
+                        toolCallCount: assistantMessage.toolCalls?.length ?? 0,
+                    },
+                });
+                logger.debug({
+                    taskId,
+                    agentName: executionContext.agentName,
+                    stopReason: providerResponse.stopReason,
+                }, "MODEL_RESPONSE");
+                if (providerResponse.stopReason === "completed") {
+                    finalContent = assistantMessage.content ?? "";
+                    looping = false;
+                    continue;
+                }
+                // Process tool calls
+                const toolCalls = assistantMessage.toolCalls ?? [];
+                for (const toolCall of toolCalls) {
+                    // Check for cancellation before each tool call
+                    if (signal.aborted) {
+                        throw new ToolError("PROVIDER_ERROR", "Task was cancelled before tool call");
+                    }
+                    const qualifiedToolName = `${toolCall.server}__${toolCall.tool}`;
+                    // Policy check before executing the tool
+                    policy.check({
+                        executionContext,
+                        targetTool: qualifiedToolName,
+                        targetAgentName: qualifiedToolName === "agent-mcp__agent"
+                            ? toolCall.arguments?.name
+                            : undefined,
+                    });
+                    // Emit TOOL_CALL event
+                    taskStore.appendEvent({
+                        taskId,
+                        type: "TOOL_CALL",
+                        payload: {
+                            tool: qualifiedToolName,
+                            callId: toolCall.id,
+                        },
+                    });
+                    logger.info({
+                        taskId,
+                        agentName: executionContext.agentName,
+                        tool: qualifiedToolName,
+                        callId: toolCall.id,
+                    }, "TOOL_CALL");
+                    let toolResult;
+                    let isError = false;
+                    try {
+                        const client = await registry.getClient(toolCall.server);
+                        toolResult = await client.callTool(toolCall.tool, toolCall.arguments);
+                    }
+                    catch (error) {
+                        isError = true;
+                        toolResult = error instanceof Error ? error.message : String(error);
+                        logger.warn({
+                            taskId,
+                            tool: qualifiedToolName,
+                            error: toolResult,
+                        }, "TOOL_RESULT error");
+                        // Re-throw policy violations and cancellation — these are fatal
+                        if (error instanceof ToolError) {
+                            const fatalCodes = [
+                                "MAX_DEPTH_EXCEEDED",
+                                "MAX_TOOL_LOOPS_EXCEEDED",
+                                "DELEGATION_NOT_ALLOWED",
+                            ];
+                            if (fatalCodes.includes(error.code)) {
+                                throw error;
+                            }
+                        }
+                    }
+                    // Emit TOOL_RESULT event
+                    taskStore.appendEvent({
+                        taskId,
+                        type: "TOOL_RESULT",
+                        payload: {
+                            callId: toolCall.id,
+                            tool: qualifiedToolName,
+                            isError,
+                        },
+                    });
+                    logger.debug({
+                        taskId,
+                        tool: qualifiedToolName,
+                        isError,
+                    }, "TOOL_RESULT");
+                    // Append tool result message
+                    const toolResultMessage = {
+                        id: generateId(),
+                        sessionId: executionContext.sessionId,
+                        role: "tool",
+                        toolResults: [
+                            {
+                                toolCallId: toolCall.id,
+                                result: toolResult,
+                                isError,
+                            },
+                        ],
+                        createdAt: nowIso(),
+                    };
+                    await sessionStore.appendMessage(executionContext.sessionId, toolResultMessage);
+                    currentMessages.push(toolResultMessage);
+                    // Increment toolCallCount AFTER the result is appended
+                    // so the next policy check sees the updated value
+                    executionContext.toolCallCount++;
+                }
+            }
+            // Task completed successfully
+            taskStore.updateStatus(taskId, "completed", {
+                result: finalContent,
+                completedAt: nowIso(),
+            });
+            taskStore.appendEvent({
+                taskId,
+                type: "TASK_COMPLETED",
+                payload: { result: finalContent },
+            });
+            logger.info({ taskId, agentName: executionContext.agentName }, "TASK_COMPLETED");
+            return { result: finalContent };
+        }
+        catch (error) {
+            // Determine if this is a cancellation or a real failure
+            const isCancelled = signal.aborted ||
+                (error instanceof ToolError && error.code === "PROVIDER_ERROR" && error.message.includes("cancelled"));
+            if (isCancelled) {
+                // Status update handled by TaskStore.cancel() in most cases;
+                // update here only if not already cancelled
+                try {
+                    taskStore.updateStatus(taskId, "cancelled", {
+                        cancelledAt: nowIso(),
+                    });
+                }
+                catch {
+                    // already cancelled — ignore
+                }
+                taskStore.appendEvent({ taskId, type: "TASK_CANCELLED" });
+            }
+            else {
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                taskStore.updateStatus(taskId, "failed", {
+                    error: errorMessage,
+                });
+                taskStore.appendEvent({
+                    taskId,
+                    type: "TASK_FAILED",
+                    payload: { error: errorMessage },
+                });
+                logger.error({ taskId, agentName: executionContext.agentName, error }, "TASK_FAILED");
+            }
+            throw error;
+        }
+        finally {
+            // Per-task registry teardown — always runs
+            await registry.closeAll();
+            taskStore.unregisterCancellation(taskId);
+        }
+    }
+}
+//# sourceMappingURL=orchestrator.js.map

package/src/engine/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../../../../../packages/ai/agent-mcp/src/engine/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAGtC,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAuBhD,MAAM,OAAO,YAAY;IACrB,KAAK,CAAC,GAAG,CAAC,KAA2B;QACjC,MAAM,EACF,gBAAgB,EAChB,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,SAAS,EACT,YAAY,EACZ,MAAM,EACN,MAAM,GACT,GAAG,KAAK,CAAC;QAEV,sEAAsE;QACtE,MAAM,eAAe,GAAc,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEvD,IAAI,CAAC;YACD,uBAAuB;YACvB,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAE1C,IAAI,YAAY,GAAG,EAAE,CAAC;YAEtB,iFAAiF;YACjF,IAAI,OAAO,GAAG,IAAI,CAAC;YACnB,OAAO,OAAO,EAAE,CAAC;gBACb,sDAAsD;gBACtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;gBAChE,CAAC;gBAED,sEAAsE;gBACtE,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC;oBACnC,MAAM;oBACN,WAAW,CAAC,OAAO,CACf,gBAAgB,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,IAAI,MAAM,CAChE;iBACJ,CAAC,CAAC;gBAEH,2CAA2C;gBAC3C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;gBAE5C,2BAA2B;gBAC3B,SAAS,CAAC,WAAW,CAAC;oBAClB,MAAM;oBACN,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,EAAE,YAAY,EAAE,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE;iBAC7E,CAAC,CAAC;gBAEH,MAAM,CAAC,KAAK,CACR;oBACI,MAAM;oBACN,SAAS,EAAE,gBAAgB,CAAC,SAAS;oBACrC,SAAS,EAAE,gBAAgB,CAAC,SAAS;oBACrC,YAAY,EAAE,eAAe,CAAC,MAAM;iBACvC,EACD,eAAe,CAClB,CAAC;gBAEF,wBAAwB;gBACxB,IAAI,gBAAgB,CAAC;gBACrB,IAAI,CAAC;oBACD,gBAAgB,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;wBACnC,QAAQ,EAAE,eAAe;wBACzB,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;wBAC3C,MAAM,EAAE,cAAc;qBACzB,CAAC,CAAC;gBACP,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACb,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACjB,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,yCAAyC,CAAC,CAAC;oBACrF,CAAC;oBACD,IACI,cAAc,CAAC,OAAO;wBACtB,CAAC,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,EAC5F,CAAC;wBACC,MAAM,EAAE,GAAG,gBAAgB,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,IAAI,MAAM,CAAC;wBACzE,MAAM,IAAI,SAAS,CACf,gBAAgB,EAChB,iCAAiC,EAAE,wDAAwD,CAC9F,CAAC;oBACN,CAAC;oBACD,MAAM,IAAI,SAAS,CACf,gBAAgB,EAChB,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAC;gBACN,CAAC;gBAED,MAAM,gBAAgB,GAAY;oBAC9B,GAAG,gBAAgB,CAAC,OAAO;oBAC3B,SAAS,EAAE,gBAAgB,CAAC,SAAS;iBACxC,CAAC;gBAEF,2CAA2C;gBAC3C,MAAM,YAAY,CAAC,aAAa,CAAC,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;gBAC/E,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAEvC,4BAA4B;gBAC5B,SAAS,CAAC,WAAW,CAAC;oBAClB,MAAM;oBACN,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE;wBACL,UAAU,EAAE,gBAAgB,CAAC,UAAU;wBACvC,UAAU,EAAE,CAAC,CAAC,gBAAgB,CAAC,OAAO;wBACtC,aAAa,EAAE,gBAAgB,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC;qBACzD;iBACJ,CAAC,CAAC;gBAEH,MAAM,CAAC,KAAK,CACR;oBACI,MAAM;oBACN,SAAS,EAAE,gBAAgB,CAAC,SAAS;oBACrC,UAAU,EAAE,gBAAgB,CAAC,UAAU;iBAC1C,EACD,gBAAgB,CACnB,CAAC;gBAEF,IAAI,gBAAgB,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;oBAC9C,YAAY,GAAG,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC;oBAC9C,OAAO,GAAG,KAAK,CAAC;oBAChB,SAAS;gBACb,CAAC;gBAED,qBAAqB;gBACrB,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,IAAI,EAAE,CAAC;gBAEnD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBAC/B,+CAA+C;oBAC/C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACjB,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;oBACjF,CAAC;oBAED,MAAM,iBAAiB,GAAG,GAAG,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAEjE,yCAAyC;oBACzC,MAAM,CAAC,KAAK,CAAC;wBACT,gBAAgB;wBAChB,UAAU,EAAE,iBAAiB;wBAC7B,eAAe,EACX,iBAAiB,KAAK,kBAAkB;4BACpC,CAAC,CAAE,QAAQ,CAAC,SAA+B,EAAE,IAAI;4BACjD,CAAC,CAAC,SAAS;qBACtB,CAAC,CAAC;oBAEH,uBAAuB;oBACvB,SAAS,CAAC,WAAW,CAAC;wBAClB,MAAM;wBACN,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE;4BACL,IAAI,EAAE,iBAAiB;4BACvB,MAAM,EAAE,QAAQ,CAAC,EAAE;yBACtB;qBACJ,CAAC,CAAC;oBAEH,MAAM,CAAC,IAAI,CACP;wBACI,MAAM;wBACN,SAAS,EAAE,gBAAgB,CAAC,SAAS;wBACrC,IAAI,EAAE,iBAAiB;wBACvB,MAAM,EAAE,QAAQ,CAAC,EAAE;qBACtB,EACD,WAAW,CACd,CAAC;oBAEF,IAAI,UAAmB,CAAC;oBACxB,IAAI,OAAO,GAAG,KAAK,CAAC;oBAEpB,IAAI,CAAC;wBACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBACzD,UAAU,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;oBAC1E,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACb,OAAO,GAAG,IAAI,CAAC;wBACf,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBAEpE,MAAM,CAAC,IAAI,CACP;4BACI,MAAM;4BACN,IAAI,EAAE,iBAAiB;4BACvB,KAAK,EAAE,UAAU;yBACpB,EACD,mBAAmB,CACtB,CAAC;wBAEF,gEAAgE;wBAChE,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;4BAC7B,MAAM,UAAU,GAAG;gCACf,oBAAoB;gCACpB,yBAAyB;gCACzB,wBAAwB;6BAClB,CAAC;4BACX,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAiC,CAAC,EAAE,CAAC;gCAC/D,MAAM,KAAK,CAAC;4BAChB,CAAC;wBACL,CAAC;oBACL,CAAC;oBAED,yBAAyB;oBACzB,SAAS,CAAC,WAAW,CAAC;wBAClB,MAAM;wBACN,IAAI,EAAE,aAAa;wBACnB,OAAO,EAAE;4BACL,MAAM,EAAE,QAAQ,CAAC,EAAE;4BACnB,IAAI,EAAE,iBAAiB;4BACvB,OAAO;yBACV;qBACJ,CAAC,CAAC;oBAEH,MAAM,CAAC,KAAK,CACR;wBACI,MAAM;wBACN,IAAI,EAAE,iBAAiB;wBACvB,OAAO;qBACV,EACD,aAAa,CAChB,CAAC;oBAEF,6BAA6B;oBAC7B,MAAM,iBAAiB,GAAY;wBAC/B,EAAE,EAAE,UAAU,EAAE;wBAChB,SAAS,EAAE,gBAAgB,CAAC,SAAS;wBACrC,IAAI,EAAE,MAAM;wBACZ,WAAW,EAAE;4BACT;gCACI,UAAU,EAAE,QAAQ,CAAC,EAAE;gCACvB,MAAM,EAAE,UAAU;gCAClB,OAAO;6BACV;yBACJ;wBACD,SAAS,EAAE,MAAM,EAAE;qBACtB,CAAC;oBAEF,MAAM,YAAY,CAAC,aAAa,CAAC,gBAAgB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;oBAChF,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;oBAExC,uDAAuD;oBACvD,kDAAkD;oBAClD,gBAAgB,CAAC,aAAa,EAAE,CAAC;gBACrC,CAAC;YACL,CAAC;YAED,8BAA8B;YAC9B,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE;gBACxC,MAAM,EAAE,YAAY;gBACpB,WAAW,EAAE,MAAM,EAAE;aACxB,CAAC,CAAC;YAEH,SAAS,CAAC,WAAW,CAAC;gBAClB,MAAM;gBACN,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;aACpC,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CACP,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE,EACjD,gBAAgB,CACnB,CAAC;YAEF,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,wDAAwD;YACxD,MAAM,WAAW,GACb,MAAM,CAAC,OAAO;gBACd,CAAC,KAAK,YAAY,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;YAE3G,IAAI,WAAW,EAAE,CAAC;gBACd,6DAA6D;gBAC7D,4CAA4C;gBAC5C,IAAI,CAAC;oBACD,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE;wBACxC,WAAW,EAAE,MAAM,EAAE;qBACxB,CAAC,CAAC;gBACP,CAAC;gBAAC,MAAM,CAAC;oBACL,6BAA6B;gBACjC,CAAC;gBAED,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACJ,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAE5E,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE;oBACrC,KAAK,EAAE,YAAY;iBACtB,CAAC,CAAC;gBAEH,SAAS,CAAC,WAAW,CAAC;oBAClB,MAAM;oBACN,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;iBACnC,CAAC,CAAC;gBAEH,MAAM,CAAC,KAAK,CACR,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE,KAAK,EAAE,EACxD,aAAa,CAChB,CAAC;YACN,CAAC;YAED,MAAM,KAAK,CAAC;QAChB,CAAC;gBAAS,CAAC;YACP,2CAA2C;YAC3C,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1B,SAAS,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;CACJ"}

package/src/engine/policy.d.ts

@@ -0,0 +1,42 @@
+import type { ExecutionContext } from "../validation/index.js";
+export interface PolicyConfig {
+    /** Absolute maximum recursion depth. Agent definitions cannot exceed this. */
+    serverMaxDepth: number;
+    /** Absolute maximum tool call loops per task. Agent definitions cannot exceed this. */
+    serverMaxToolLoops: number;
+    /**
+     * Server-level allowed agents allowlist.
+     * - undefined → unrestricted (any agent may be called)
+     * - string[]  → only agents in this list may be called
+     * Per-agent allowedAgents takes full precedence over this when defined.
+     */
+    serverAllowedAgents?: string[];
+}
+export interface PolicyCheckInput {
+    executionContext: ExecutionContext;
+    /**
+     * The fully-qualified tool name being invoked: "<server>__<tool>".
+     * The allowedAgents check only applies when this is "agent-mcp__agent".
+     */
+    targetTool: string;
+    /**
+     * When targetTool === "agent-mcp__agent", the name of the target agent.
+     * Used for the allowedAgents check (#3).
+     */
+    targetAgentName?: string;
+}
+/**
+ * PolicyEngine enforces the three SPEC §9 safety invariants:
+ *
+ *  1. Recursion depth limit
+ *  2. Tool call loop limit
+ *  3. AllowedAgents list (per-agent override takes full precedence over server default)
+ *
+ * Throws ToolError on any violation. Does not mutate state.
+ */
+export declare class PolicyEngine {
+    private readonly config;
+    constructor(config: PolicyConfig);
+    check(input: PolicyCheckInput): void;
+}
+//# sourceMappingURL=policy.d.ts.map

package/src/engine/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../../../packages/ai/agent-mcp/src/engine/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,MAAM,WAAW,YAAY;IACzB,8EAA8E;IAC9E,cAAc,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC7B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,qBAAa,YAAY;IACT,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,YAAY;IAEjD,KAAK,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;CAkDvC"}

package/src/engine/policy.js

@@ -0,0 +1,45 @@
+import { ToolError } from "../validation/errors.js";
+/**
+ * PolicyEngine enforces the three SPEC §9 safety invariants:
+ *
+ *  1. Recursion depth limit
+ *  2. Tool call loop limit
+ *  3. AllowedAgents list (per-agent override takes full precedence over server default)
+ *
+ * Throws ToolError on any violation. Does not mutate state.
+ */
+export class PolicyEngine {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    check(input) {
+        const { executionContext, targetTool, targetAgentName } = input;
+        const callingAgent = executionContext.agentDefinition;
+        // ── Check 1: Recursion depth ──────────────────────────────────────
+        const effectiveMaxDepth = Math.min(callingAgent.maxToolLoops ?? this.config.serverMaxDepth, this.config.serverMaxDepth);
+        if (executionContext.recursionDepth >= effectiveMaxDepth) {
+            throw new ToolError("MAX_DEPTH_EXCEEDED", `Recursion depth ${executionContext.recursionDepth} has reached or exceeded the maximum of ${effectiveMaxDepth}`);
+        }
+        // ── Check 2: Tool call loop limit ─────────────────────────────────
+        const effectiveMaxToolLoops = Math.min(callingAgent.maxToolLoops ?? this.config.serverMaxToolLoops, this.config.serverMaxToolLoops);
+        if (executionContext.toolCallCount >= effectiveMaxToolLoops) {
+            throw new ToolError("MAX_TOOL_LOOPS_EXCEEDED", `Tool call count ${executionContext.toolCallCount} has reached or exceeded the maximum of ${effectiveMaxToolLoops}`);
+        }
+        // ── Check 3: AllowedAgents (only for agent delegation) ────────────
+        if (targetTool === "agent-mcp__agent" && targetAgentName !== undefined) {
+            // Per-agent allowedAgents takes FULL precedence over server default.
+            const agentAllowedAgents = callingAgent.permissions.allowedAgents;
+            const effectiveAllowedAgents = agentAllowedAgents !== undefined
+                ? agentAllowedAgents // agent-level: always wins
+                : this.config.serverAllowedAgents; // fall back to server default
+            // If effectiveAllowedAgents is undefined → unrestricted
+            if (effectiveAllowedAgents !== undefined) {
+                if (!effectiveAllowedAgents.includes(targetAgentName)) {
+                    throw new ToolError("DELEGATION_NOT_ALLOWED", `Agent '${executionContext.agentName}' is not allowed to delegate to '${targetAgentName}'`);
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=policy.js.map

package/src/engine/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../../../packages/ai/agent-mcp/src/engine/policy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AA8BpD;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAY;IACQ;IAA7B,YAA6B,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAG,CAAC;IAErD,KAAK,CAAC,KAAuB;QACzB,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;QAChE,MAAM,YAAY,GAAG,gBAAgB,CAAC,eAAe,CAAC;QAEtD,qEAAqE;QACrE,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAC9B,YAAY,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EACvD,IAAI,CAAC,MAAM,CAAC,cAAc,CAC7B,CAAC;QAEF,IAAI,gBAAgB,CAAC,cAAc,IAAI,iBAAiB,EAAE,CAAC;YACvD,MAAM,IAAI,SAAS,CACf,oBAAoB,EACpB,mBAAmB,gBAAgB,CAAC,cAAc,2CAA2C,iBAAiB,EAAE,CACnH,CAAC;QACN,CAAC;QAED,qEAAqE;QACrE,MAAM,qBAAqB,GAAG,IAAI,CAAC,GAAG,CAClC,YAAY,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAC3D,IAAI,CAAC,MAAM,CAAC,kBAAkB,CACjC,CAAC;QAEF,IAAI,gBAAgB,CAAC,aAAa,IAAI,qBAAqB,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CACf,yBAAyB,EACzB,mBAAmB,gBAAgB,CAAC,aAAa,2CAA2C,qBAAqB,EAAE,CACtH,CAAC;QACN,CAAC;QAED,qEAAqE;QACrE,IAAI,UAAU,KAAK,kBAAkB,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YACrE,qEAAqE;YACrE,MAAM,kBAAkB,GAAG,YAAY,CAAC,WAAW,CAAC,aAAa,CAAC;YAClE,MAAM,sBAAsB,GACxB,kBAAkB,KAAK,SAAS;gBAC5B,CAAC,CAAC,kBAAkB,CAAS,2BAA2B;gBACxD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,8BAA8B;YAEzE,wDAAwD;YACxD,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;gBACvC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;oBACpD,MAAM,IAAI,SAAS,CACf,wBAAwB,EACxB,UAAU,gBAAgB,CAAC,SAAS,oCAAoC,eAAe,GAAG,CAC7F,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;CACJ"}

package/src/engine/queue.d.ts

@@ -0,0 +1,23 @@
+export type BackgroundTaskFn = () => Promise<void>;
+/**
+ * BackgroundQueue wraps p-queue to run async tasks with concurrency limiting.
+ *
+ * TaskStore is NOT a dependency of BackgroundQueue's constructor — it is
+ * injected into each enqueue call to avoid circular dependencies. The queue
+ * only knows how to run tasks; the caller controls persistence.
+ */
+export declare class BackgroundQueue {
+    private readonly queue;
+    constructor(concurrency?: number);
+    /**
+     * Enqueue a background task.
+     *
+     * The task function is responsible for calling
+     * `taskStore.updateStatus(taskId, ...)` on completion or failure.
+     * The orchestrator handles this internally via try/catch/finally.
+     */
+    enqueue(taskId: string, runFn: BackgroundTaskFn): void;
+    get pending(): number;
+    get size(): number;
+}
+//# sourceMappingURL=queue.d.ts.map

package/src/engine/queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../../../../packages/ai/agent-mcp/src/engine/queue.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnD;;;;;;GAMG;AACH,qBAAa,eAAe;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,WAAW,CAAC,EAAE,MAAM;IAQhC;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAetD,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,IAAI,IAAI,IAAI,MAAM,CAEjB;CACJ"}

package/src/engine/queue.js

@@ -0,0 +1,45 @@
+import PQueue from "p-queue";
+import { logger } from "../logger.js";
+/**
+ * BackgroundQueue wraps p-queue to run async tasks with concurrency limiting.
+ *
+ * TaskStore is NOT a dependency of BackgroundQueue's constructor — it is
+ * injected into each enqueue call to avoid circular dependencies. The queue
+ * only knows how to run tasks; the caller controls persistence.
+ */
+export class BackgroundQueue {
+    queue;
+    constructor(concurrency) {
+        const resolvedConcurrency = concurrency ??
+            parseInt(process.env["QUEUE_CONCURRENCY"] ?? "5", 10);
+        this.queue = new PQueue({ concurrency: resolvedConcurrency });
+    }
+    /**
+     * Enqueue a background task.
+     *
+     * The task function is responsible for calling
+     * `taskStore.updateStatus(taskId, ...)` on completion or failure.
+     * The orchestrator handles this internally via try/catch/finally.
+     */
+    enqueue(taskId, runFn) {
+        this.queue.add(async () => {
+            logger.debug({ taskId }, "Background task dequeued");
+            try {
+                await runFn();
+            }
+            catch (error) {
+                // The orchestrator's try/catch already updates the task status.
+                // Log here for observability, but don't rethrow (would crash the queue).
+                logger.error({ taskId, error }, "Background task failed");
+            }
+        });
+        logger.debug({ taskId, pending: this.queue.pending, size: this.queue.size }, "Background task enqueued");
+    }
+    get pending() {
+        return this.queue.pending;
+    }
+    get size() {
+        return this.queue.size;
+    }
+}
+//# sourceMappingURL=queue.js.map

package/src/engine/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","sourceRoot":"","sources":["../../../../../../packages/ai/agent-mcp/src/engine/queue.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,SAAS,CAAC;AAE7B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAItC;;;;;;GAMG;AACH,MAAM,OAAO,eAAe;IACP,KAAK,CAAS;IAE/B,YAAY,WAAoB;QAC5B,MAAM,mBAAmB,GACrB,WAAW;YACX,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,MAAc,EAAE,KAAuB;QAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtB,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;YACrD,IAAI,CAAC;gBACD,MAAM,KAAK,EAAE,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,gEAAgE;gBAChE,yEAAyE;gBACzE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,wBAAwB,CAAC,CAAC;YAC9D,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,0BAA0B,CAAC,CAAC;IAC7G,CAAC;IAED,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,IAAI,IAAI;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IAC3B,CAAC;CACJ"}

package/src/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import "dotenv/config";
+//# sourceMappingURL=index.d.ts.map

package/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../packages/ai/agent-mcp/src/index.ts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC"}

package/src/index.js

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+import "dotenv/config";
+import { db } from "./db/client.js";
+import { runMigrations } from "./db/migrate.js";
+import { logger } from "./logger.js";
+import { AgentStore, SessionStore, TaskStore } from "./store/index.js";
+import { BackgroundQueue } from "./engine/queue.js";
+import { Orchestrator } from "./engine/orchestrator.js";
+import { PolicyEngine } from "./engine/policy.js";
+import { startServer } from "./server.js";
+async function main() {
+    // Run DB migrations synchronously before advertising tools
+    runMigrations();
+    // Instantiate stores
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const dbAny = db;
+    const agentStore = new AgentStore(dbAny);
+    const sessionStore = new SessionStore(dbAny);
+    const taskStore = new TaskStore(dbAny);
+    // Instantiate engine components
+    const queue = new BackgroundQueue();
+    const orchestrator = new Orchestrator();
+    const policy = new PolicyEngine({
+        serverMaxDepth: parseInt(process.env["MAX_DEPTH"] ?? "5", 10),
+        serverMaxToolLoops: parseInt(process.env["MAX_TOOL_LOOPS"] ?? "10", 10),
+        serverAllowedAgents: process.env["ALLOWED_AGENTS"]
+            ?.split(",")
+            .map(s => s.trim())
+            .filter(Boolean),
+    });
+    const { close } = await startServer({
+        agentStore,
+        sessionStore,
+        taskStore,
+        queue,
+        orchestrator,
+        policy,
+    });
+    const shutdown = async (signal) => {
+        logger.info({ signal }, "Server shutdown");
+        await close();
+        process.exit(0);
+    };
+    process.on("SIGTERM", () => void shutdown("SIGTERM"));
+    process.on("SIGINT", () => void shutdown("SIGINT"));
+}
+main().catch(err => {
+    logger.fatal({ err }, "Fatal startup error");
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/ai/agent-mcp/src/index.ts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAEvB,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,KAAK,UAAU,IAAI;IACf,2DAA2D;IAC3D,aAAa,EAAE,CAAC;IAEhB,qBAAqB;IACrB,8DAA8D;IAC9D,MAAM,KAAK,GAAG,EAAS,CAAC;IACxB,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;IAEvC,gCAAgC;IAChC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC5B,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;QAC7D,kBAAkB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACvE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAC9C,EAAE,KAAK,CAAC,GAAG,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAClB,MAAM,CAAC,OAAO,CAAC;KACvB,CAAC,CAAC;IAEH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC;QAChC,UAAU;QACV,YAAY;QACZ,SAAS;QACT,KAAK;QACL,YAAY;QACZ,MAAM;KACT,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACtC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAC3C,MAAM,KAAK,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IACf,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC,CAAC,CAAC"}

package/src/logger.d.ts

@@ -0,0 +1,11 @@
+import pino from "pino";
+/**
+ * Application logger.
+ *
+ * CRITICAL: All output goes to fd 2 (stderr).
+ * When TRANSPORT=stdio, stdout is the MCP JSON-RPC stream — any write
+ * to stdout would corrupt the framing. Never use console.log or pino's
+ * default stdout destination.
+ */
+export declare const logger: pino.Logger<never, boolean>;
+//# sourceMappingURL=logger.d.ts.map