@adjudicate/adapter-core 0.1.0 → 0.1.1

package/dist/bridge.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Bridge module — the boundary between provider tool-use blocks and
+ * adjudicate's `IntentEnvelope`s.
+ *
+ * Convention: intent-kind tool name (e.g. `pix.charge.create`) is
+ * translated to a wire-friendly form by replacing `.` with `_` (most
+ * provider APIs forbid dots in tool names). The renderer applies the
+ * translation outbound; `classifyIncomingToolUse` accepts either the
+ * translated form (live API path) or the raw dotted form (mocked-test
+ * path) so test harnesses that bypass the renderer continue to work.
+ *
+ * Taint is ALWAYS `"UNTRUSTED"` for envelopes derived from LLM tool_use
+ * blocks. There is no path from this module that raises taint upward;
+ * TRUSTED intents (e.g. webhook confirmations) come from elsewhere.
+ */
+import { type IntentEnvelope, type Taint } from "@adjudicate/core";
+import type { Plan } from "@adjudicate/core/llm";
+/**
+ * Translate an intent-kind / READ-tool name to its wire-API form.
+ * Replaces `.` with `_` so names like `pix.charge.create` become
+ * `pix_charge_create`, matching the lowest-common-denominator tool-name
+ * pattern (`^[a-zA-Z0-9_-]+$`) that both Anthropic and OpenAI accept.
+ * No-op for names that already contain only API-allowed characters.
+ *
+ * Reversibility caveat: an intent kind `a.b` and a READ tool `a_b` both
+ * translate to `a_b` and become indistinguishable on the wire. Adopters
+ * who hit this collision should rename one of them; the Pack-conformance
+ * check (P2) surfaces the collision at install time.
+ */
+export declare function intentKindToApiName(name: string): string;
+export type ToolUseClassification = {
+    readonly kind: "read";
+    readonly name: string;
+    readonly input: unknown;
+} | {
+    readonly kind: "intent";
+    readonly intentKind: string;
+    readonly payload: unknown;
+} | {
+    readonly kind: "out_of_plan";
+    readonly name: string;
+};
+/**
+ * Decide whether an incoming `tool_use` is a READ tool execution, an
+ * intent proposal, or a hallucinated tool the planner did not advertise.
+ *
+ * Out-of-plan tool_uses translate to `isError: true` tool-results so the
+ * loop never silently fails — the model gets a recoverable signal.
+ *
+ * The match is forgiving: the planner exposes the raw (dotted) intent
+ * kind, the renderer ships the translated (underscored) form to the
+ * provider API, and the model echoes back the translated form on
+ * `tool_use`. We compare both raw and translated against each candidate
+ * so mocked-test paths (which skip the renderer translation) and
+ * live-API paths (which round-trip through translation) both work.
+ */
+export declare function classifyIncomingToolUse(toolUse: {
+    readonly name: string;
+    readonly input: unknown;
+}, plan: Plan): ToolUseClassification;
+export interface BuildEnvelopeFromToolUseArgs {
+    readonly intentKind: string;
+    readonly payload: unknown;
+    readonly sessionId: string;
+    /**
+     * Taint of the proposing context. The loop pins this to `"UNTRUSTED"`
+     * for LLM-derived envelopes; this argument exists for symmetry with
+     * `buildEnvelope` and to keep the boundary explicit.
+     */
+    readonly taint: Taint;
+    readonly nonce: string;
+}
+/**
+ * Construct an IntentEnvelope from a provider-neutral tool_use. Wraps
+ * `buildEnvelope` from @adjudicate/core with adapter-specific defaults:
+ * principal = `"llm"`, taint as supplied (always `"UNTRUSTED"` from the
+ * loop).
+ */
+export declare function buildEnvelopeFromToolUse(args: BuildEnvelopeFromToolUseArgs): IntentEnvelope<string, unknown>;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAEjD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACzE;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,EAC3D,IAAI,EAAE,IAAI,GACT,qBAAqB,CAkBvB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,4BAA4B,GACjC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAQjC"}

package/dist/bridge.js

@@ -0,0 +1,78 @@
+/**
+ * Bridge module — the boundary between provider tool-use blocks and
+ * adjudicate's `IntentEnvelope`s.
+ *
+ * Convention: intent-kind tool name (e.g. `pix.charge.create`) is
+ * translated to a wire-friendly form by replacing `.` with `_` (most
+ * provider APIs forbid dots in tool names). The renderer applies the
+ * translation outbound; `classifyIncomingToolUse` accepts either the
+ * translated form (live API path) or the raw dotted form (mocked-test
+ * path) so test harnesses that bypass the renderer continue to work.
+ *
+ * Taint is ALWAYS `"UNTRUSTED"` for envelopes derived from LLM tool_use
+ * blocks. There is no path from this module that raises taint upward;
+ * TRUSTED intents (e.g. webhook confirmations) come from elsewhere.
+ */
+import { buildEnvelope } from "@adjudicate/core";
+/**
+ * Translate an intent-kind / READ-tool name to its wire-API form.
+ * Replaces `.` with `_` so names like `pix.charge.create` become
+ * `pix_charge_create`, matching the lowest-common-denominator tool-name
+ * pattern (`^[a-zA-Z0-9_-]+$`) that both Anthropic and OpenAI accept.
+ * No-op for names that already contain only API-allowed characters.
+ *
+ * Reversibility caveat: an intent kind `a.b` and a READ tool `a_b` both
+ * translate to `a_b` and become indistinguishable on the wire. Adopters
+ * who hit this collision should rename one of them; the Pack-conformance
+ * check (P2) surfaces the collision at install time.
+ */
+export function intentKindToApiName(name) {
+    return name.replaceAll(".", "_");
+}
+/**
+ * Decide whether an incoming `tool_use` is a READ tool execution, an
+ * intent proposal, or a hallucinated tool the planner did not advertise.
+ *
+ * Out-of-plan tool_uses translate to `isError: true` tool-results so the
+ * loop never silently fails — the model gets a recoverable signal.
+ *
+ * The match is forgiving: the planner exposes the raw (dotted) intent
+ * kind, the renderer ships the translated (underscored) form to the
+ * provider API, and the model echoes back the translated form on
+ * `tool_use`. We compare both raw and translated against each candidate
+ * so mocked-test paths (which skip the renderer translation) and
+ * live-API paths (which round-trip through translation) both work.
+ */
+export function classifyIncomingToolUse(toolUse, plan) {
+    const matchesName = (candidate) => candidate === toolUse.name ||
+        intentKindToApiName(candidate) === toolUse.name;
+    const readMatch = plan.visibleReadTools.find(matchesName);
+    if (readMatch !== undefined) {
+        return { kind: "read", name: readMatch, input: toolUse.input };
+    }
+    const intentMatch = plan.allowedIntents.find(matchesName);
+    if (intentMatch !== undefined) {
+        return {
+            kind: "intent",
+            intentKind: intentMatch,
+            payload: toolUse.input,
+        };
+    }
+    return { kind: "out_of_plan", name: toolUse.name };
+}
+/**
+ * Construct an IntentEnvelope from a provider-neutral tool_use. Wraps
+ * `buildEnvelope` from @adjudicate/core with adapter-specific defaults:
+ * principal = `"llm"`, taint as supplied (always `"UNTRUSTED"` from the
+ * loop).
+ */
+export function buildEnvelopeFromToolUse(args) {
+    return buildEnvelope({
+        kind: args.intentKind,
+        payload: args.payload,
+        actor: { principal: "llm", sessionId: args.sessionId },
+        taint: args.taint,
+        nonce: args.nonce,
+    });
+}
+//# sourceMappingURL=bridge.js.map

package/dist/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAmC,MAAM,kBAAkB,CAAC;AAGlF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAWD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAA2D,EAC3D,IAAU;IAEV,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAW,EAAE,CACjD,SAAS,KAAK,OAAO,CAAC,IAAI;QAC1B,mBAAmB,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC;IAElD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,WAAW;YACvB,OAAO,EAAE,OAAO,CAAC,KAAK;SACvB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAeD;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAkC;IAElC,OAAO,aAAa,CAAC;QACnB,IAAI,EAAE,IAAI,CAAC,UAAU;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;QACtD,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;AACL,CAAC"}

package/dist/decisions.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Decision → provider-neutral tool-result + loop-action translator.
+ *
+ * One branch per `Decision.kind`. Returns:
+ * - `toolResult` — the provider-neutral `ToolResultBlock` that goes back
+ *   to the model in the next user-role message (or `null` if no tool-
+ *   result is sent).
+ * - `loopAction` — what the loop should do next: `continue` (next
+ *   iteration), `pause_for_user_confirmation` / `pause_for_defer`
+ *   (return outcome to adopter), or `complete_for_escalation`
+ *   (terminate the turn).
+ * - `events` — `AgentEvent`s to push for audit / transcript display.
+ *
+ * **REWRITE** runs the executor against the *rewritten* envelope (NOT
+ * the original) and surfaces a human-readable note in the tool-result
+ * by default.
+ *
+ * **First non-continue Decision wins**: if multiple tool_use blocks fire
+ * in the same assistant turn, the loop processes them in order but
+ * stops translating the moment a non-continue Decision arrives. The
+ * remaining blocks are surfaced as `not_processed_due_to_pause`.
+ */
+import type { Decision, IntentEnvelope } from "@adjudicate/core";
+import { AdapterError, AdapterErrorCode } from "./errors.js";
+import type { ConfirmationStore, DeferRedis, ParkRedis } from "./persistence.js";
+import type { AdopterExecutor, AgentEvent, AgentLogger, ToolResultBlock } from "./types.js";
+export interface DecisionTranslationContext<K extends string, P, S, H> {
+    readonly decision: Decision;
+    readonly envelope: IntentEnvelope<K, P>;
+    readonly toolUseId: string;
+    readonly sessionId: string;
+    readonly state: S;
+    readonly executor: AdopterExecutor<K, P, S>;
+    readonly deferStore: DeferRedis & ParkRedis;
+    readonly confirmationStore: ConfirmationStore<H>;
+    readonly historySnapshot: H;
+    readonly rk: (raw: string) => string;
+    readonly log?: AgentLogger;
+    /**
+     * Per-turn token generator. Adapter passes `crypto.randomUUID()` by
+     * default; tests can inject a deterministic generator.
+     */
+    readonly generateToken: () => string;
+}
+export type LoopAction = {
+    readonly kind: "continue";
+} | {
+    readonly kind: "pause_for_user_confirmation";
+    readonly prompt: string;
+    readonly token: string;
+} | {
+    readonly kind: "pause_for_defer";
+    readonly signal: string;
+    readonly intentHash: string;
+} | {
+    readonly kind: "complete_for_escalation";
+    readonly to: "human" | "supervisor";
+    readonly reason: string;
+};
+export interface DecisionTranslation {
+    readonly toolResult: ToolResultBlock | null;
+    readonly loopAction: LoopAction;
+    readonly extraEvents: ReadonlyArray<AgentEvent>;
+}
+/**
+ * Translate a `Decision` into a provider-neutral `ToolResultBlock` plus
+ * the next loop action. The caller (the send loop) appends the tool-
+ * result to the next user-role message and either continues or pauses
+ * based on `loopAction.kind`.
+ */
+export declare function translateDecision<K extends string, P, S, H>(ctx: DecisionTranslationContext<K, P, S, H>): Promise<DecisionTranslation>;
+/**
+ * Build the provider-neutral `ToolResultBlock` for an out-of-plan tool
+ * call. Re-exported so tests + adopters can construct one from outside
+ * the loop.
+ */
+export declare function makeOutOfPlanToolResult(toolUseId: string, toolName: string): ToolResultBlock;
+export { AdapterError, AdapterErrorCode };
+//# sourceMappingURL=decisions.d.ts.map

package/dist/decisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisions.d.ts","sourceRoot":"","sources":["../src/decisions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,KAAK,EACV,iBAAiB,EACjB,UAAU,EACV,SAAS,EACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EACV,eAAe,EACf,UAAU,EACV,WAAW,EACX,eAAe,EAChB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,0BAA0B,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACnE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,MAAM,CAAC;CACtC;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IACE,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,EAAE,EAAE,OAAO,GAAG,YAAY,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAEN,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;CACjD;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAC/D,GAAG,EAAE,0BAA0B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAC1C,OAAO,CAAC,mBAAmB,CAAC,CA4H9B;AAgED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,eAAe,CAMjB;AAED,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/decisions.js

@@ -0,0 +1,211 @@
+/**
+ * Decision → provider-neutral tool-result + loop-action translator.
+ *
+ * One branch per `Decision.kind`. Returns:
+ * - `toolResult` — the provider-neutral `ToolResultBlock` that goes back
+ *   to the model in the next user-role message (or `null` if no tool-
+ *   result is sent).
+ * - `loopAction` — what the loop should do next: `continue` (next
+ *   iteration), `pause_for_user_confirmation` / `pause_for_defer`
+ *   (return outcome to adopter), or `complete_for_escalation`
+ *   (terminate the turn).
+ * - `events` — `AgentEvent`s to push for audit / transcript display.
+ *
+ * **REWRITE** runs the executor against the *rewritten* envelope (NOT
+ * the original) and surfaces a human-readable note in the tool-result
+ * by default.
+ *
+ * **First non-continue Decision wins**: if multiple tool_use blocks fire
+ * in the same assistant turn, the loop processes them in order but
+ * stops translating the moment a non-continue Decision arrives. The
+ * remaining blocks are surfaced as `not_processed_due_to_pause`.
+ */
+import { parkDeferredIntent } from "@adjudicate/runtime";
+import { AdapterError, AdapterErrorCode } from "./errors.js";
+/**
+ * Translate a `Decision` into a provider-neutral `ToolResultBlock` plus
+ * the next loop action. The caller (the send loop) appends the tool-
+ * result to the next user-role message and either continues or pauses
+ * based on `loopAction.kind`.
+ */
+export async function translateDecision(ctx) {
+    switch (ctx.decision.kind) {
+        case "EXECUTE":
+            return runExecute(ctx, ctx.envelope, null);
+        case "REWRITE":
+            return runExecute(ctx, ctx.decision.rewritten, ctx.decision.reason);
+        case "REFUSE": {
+            const text = ctx.decision.refusal.userFacing;
+            const result = {
+                toolUseId: ctx.toolUseId,
+                content: text,
+                isError: true,
+            };
+            return {
+                toolResult: result,
+                loopAction: { kind: "continue" },
+                extraEvents: [
+                    { kind: "tool_result", toolUseId: ctx.toolUseId, payload: result },
+                ],
+            };
+        }
+        case "REQUEST_CONFIRMATION": {
+            const token = ctx.generateToken();
+            await ctx.confirmationStore.put(token, {
+                envelope: ctx.envelope,
+                sessionId: ctx.sessionId,
+                assistantHistorySnapshot: ctx.historySnapshot,
+                toolUseId: ctx.toolUseId,
+                prompt: ctx.decision.prompt,
+            }, 24 * 60 * 60);
+            const result = {
+                toolUseId: ctx.toolUseId,
+                content: `Confirmation required: ${ctx.decision.prompt}`,
+            };
+            return {
+                toolResult: result,
+                loopAction: {
+                    kind: "pause_for_user_confirmation",
+                    prompt: ctx.decision.prompt,
+                    token,
+                },
+                extraEvents: [
+                    { kind: "tool_result", toolUseId: ctx.toolUseId, payload: result },
+                ],
+            };
+        }
+        case "ESCALATE": {
+            const result = {
+                toolUseId: ctx.toolUseId,
+                content: `Escalated to ${ctx.decision.to}: ${ctx.decision.reason}`,
+            };
+            return {
+                toolResult: result,
+                loopAction: {
+                    kind: "complete_for_escalation",
+                    to: ctx.decision.to,
+                    reason: ctx.decision.reason,
+                },
+                extraEvents: [
+                    { kind: "tool_result", toolUseId: ctx.toolUseId, payload: result },
+                ],
+            };
+        }
+        case "DEFER": {
+            const ttlSeconds = Math.max(ctx.decision.timeoutMs, 1000) / 1000 + 60;
+            const parkResult = await parkDeferredIntent({
+                envelope: {
+                    intentHash: ctx.envelope.intentHash,
+                    kind: ctx.envelope.kind,
+                    actor: { sessionId: ctx.envelope.actor.sessionId },
+                    payload: ctx.envelope.payload,
+                    // Hash-verification fields. The resume path re-derives intentHash
+                    // via sha256Canonical and asserts byte-equality with the stored
+                    // value — detects blob tampering between park and resume.
+                    version: ctx.envelope.version,
+                    nonce: ctx.envelope.nonce,
+                    taint: ctx.envelope.taint,
+                    actorPrincipal: ctx.envelope.actor.principal,
+                },
+                signal: ctx.decision.signal,
+                ttlSeconds,
+                redis: ctx.deferStore,
+                rk: ctx.rk,
+                log: ctx.log,
+            });
+            if (!parkResult.parked) {
+                const result = {
+                    toolUseId: ctx.toolUseId,
+                    content: `This action could not be queued (per-session quota exceeded; ${parkResult.observed}/${parkResult.limit}).`,
+                    isError: true,
+                };
+                return {
+                    toolResult: result,
+                    loopAction: { kind: "continue" },
+                    extraEvents: [
+                        { kind: "tool_result", toolUseId: ctx.toolUseId, payload: result },
+                    ],
+                };
+            }
+            const result = {
+                toolUseId: ctx.toolUseId,
+                content: `Action queued. Waiting for signal "${ctx.decision.signal}" (timeout ${ctx.decision.timeoutMs}ms).`,
+            };
+            return {
+                toolResult: result,
+                loopAction: {
+                    kind: "pause_for_defer",
+                    signal: ctx.decision.signal,
+                    intentHash: ctx.envelope.intentHash,
+                },
+                extraEvents: [
+                    { kind: "tool_result", toolUseId: ctx.toolUseId, payload: result },
+                ],
+            };
+        }
+    }
+}
+/**
+ * Shared EXECUTE / REWRITE path. Runs the adopter's executor against the
+ * envelope passed in (the original for EXECUTE, the rewritten one for
+ * REWRITE), serializes the result, and returns a continue-loop translation.
+ */
+async function runExecute(ctx, effectiveEnvelope, rewriteReason) {
+    let executorResult;
+    try {
+        executorResult = await ctx.executor.invokeIntent(effectiveEnvelope, ctx.state);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : "executor threw a non-Error value";
+        const errResult = {
+            toolUseId: ctx.toolUseId,
+            content: `Executor failed: ${message}`,
+            isError: true,
+        };
+        return {
+            toolResult: errResult,
+            loopAction: { kind: "continue" },
+            extraEvents: [
+                { kind: "tool_result", toolUseId: ctx.toolUseId, payload: errResult },
+            ],
+        };
+    }
+    const handlerEvent = {
+        kind: "handler_result",
+        toolUseId: ctx.toolUseId,
+        result: executorResult,
+    };
+    const body = rewriteReason === null
+        ? { ok: true, result: executorResult }
+        : {
+            ok: true,
+            result: executorResult,
+            note: `Note: kernel rewrote your proposal — ${rewriteReason}`,
+        };
+    const result = {
+        toolUseId: ctx.toolUseId,
+        content: JSON.stringify(body),
+    };
+    return {
+        toolResult: result,
+        loopAction: { kind: "continue" },
+        extraEvents: [
+            handlerEvent,
+            { kind: "tool_result", toolUseId: ctx.toolUseId, payload: result },
+        ],
+    };
+}
+/**
+ * Build the provider-neutral `ToolResultBlock` for an out-of-plan tool
+ * call. Re-exported so tests + adopters can construct one from outside
+ * the loop.
+ */
+export function makeOutOfPlanToolResult(toolUseId, toolName) {
+    return {
+        toolUseId,
+        content: `Tool "${toolName}" is not available in the current plan.`,
+        isError: true,
+    };
+}
+export { AdapterError, AdapterErrorCode };
+//# sourceMappingURL=decisions.js.map

package/dist/decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisions.js","sourceRoot":"","sources":["../src/decisions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAwD7D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAA2C;IAE3C,QAAQ,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1B,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7C,KAAK,SAAS;YACZ,OAAO,UAAU,CACf,GAAG,EACH,GAAG,CAAC,QAAQ,CAAC,SAAiC,EAC9C,GAAG,CAAC,QAAQ,CAAC,MAAM,CACpB,CAAC;QACJ,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YAC7C,MAAM,MAAM,GAAoB;gBAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;aACd,CAAC;YACF,OAAO;gBACL,UAAU,EAAE,MAAM;gBAClB,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAChC,WAAW,EAAE;oBACX,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;iBACnE;aACF,CAAC;QACJ,CAAC;QACD,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAC7B,KAAK,EACL;gBACE,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,wBAAwB,EAAE,GAAG,CAAC,eAAe;gBAC7C,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;aAC5B,EACD,EAAE,GAAG,EAAE,GAAG,EAAE,CACb,CAAC;YACF,MAAM,MAAM,GAAoB;gBAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,0BAA0B,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE;aACzD,CAAC;YACF,OAAO;gBACL,UAAU,EAAE,MAAM;gBAClB,UAAU,EAAE;oBACV,IAAI,EAAE,6BAA6B;oBACnC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;oBAC3B,KAAK;iBACN;gBACD,WAAW,EAAE;oBACX,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;iBACnE;aACF,CAAC;QACJ,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,MAAM,GAAoB;gBAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,gBAAgB,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE;aACnE,CAAC;YACF,OAAO;gBACL,UAAU,EAAE,MAAM;gBAClB,UAAU,EAAE;oBACV,IAAI,EAAE,yBAAyB;oBAC/B,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE;oBACnB,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;iBAC5B;gBACD,WAAW,EAAE;oBACX,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;iBACnE;aACF,CAAC;QACJ,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;YACtE,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC;gBAC1C,QAAQ,EAAE;oBACR,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU;oBACnC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI;oBACvB,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE;oBAClD,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO;oBAC7B,kEAAkE;oBAClE,gEAAgE;oBAChE,0DAA0D;oBAC1D,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO;oBAC7B,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK;oBACzB,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK;oBACzB,cAAc,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS;iBAC7C;gBACD,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;gBAC3B,UAAU;gBACV,KAAK,EAAE,GAAG,CAAC,UAAU;gBACrB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,GAAG,EAAE,GAAG,CAAC,GAAG;aACb,CAAC,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAoB;oBAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,OAAO,EAAE,gEAAgE,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,KAAK,IAAI;oBACpH,OAAO,EAAE,IAAI;iBACd,CAAC;gBACF,OAAO;oBACL,UAAU,EAAE,MAAM;oBAClB,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;oBAChC,WAAW,EAAE;wBACX,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;qBACnE;iBACF,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAoB;gBAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,sCAAsC,GAAG,CAAC,QAAQ,CAAC,MAAM,cAAc,GAAG,CAAC,QAAQ,CAAC,SAAS,MAAM;aAC7G,CAAC;YACF,OAAO;gBACL,UAAU,EAAE,MAAM;gBAClB,UAAU,EAAE;oBACV,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;oBAC3B,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU;iBACpC;gBACD,WAAW,EAAE;oBACX,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;iBACnE;aACF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACvB,GAA2C,EAC3C,iBAAuC,EACvC,aAA4B;IAE5B,IAAI,cAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,CAC9C,iBAAiB,EACjB,GAAG,CAAC,KAAK,CACV,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC;QAC1E,MAAM,SAAS,GAAoB;YACjC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,oBAAoB,OAAO,EAAE;YACtC,OAAO,EAAE,IAAI;SACd,CAAC;QACF,OAAO;YACL,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAChC,WAAW,EAAE;gBACX,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;aACtE;SACF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAe;QAC/B,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,cAAc;KACvB,CAAC;IAEF,MAAM,IAAI,GACR,aAAa,KAAK,IAAI;QACpB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE;QACtC,CAAC,CAAC;YACE,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,wCAAwC,aAAa,EAAE;SAC9D,CAAC;IAER,MAAM,MAAM,GAAoB;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC9B,CAAC;IACF,OAAO;QACL,UAAU,EAAE,MAAM;QAClB,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAChC,WAAW,EAAE;YACX,YAAY;YACZ,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;SACnE;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAiB,EACjB,QAAgB;IAEhB,OAAO;QACL,SAAS;QACT,OAAO,EAAE,SAAS,QAAQ,yCAAyC;QACnE,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Error taxonomy for the provider-neutral adapter loop.
+ *
+ * Most failures inside the loop become `isError: true` tool-results
+ * surfaced back to the model (so it can recover gracefully). Errors
+ * thrown out of the adapter are reserved for adopter-visible
+ * misconfiguration or contract violations.
+ */
+export declare const AdapterErrorCode: {
+    readonly OUT_OF_PLAN_TOOL_USE: "OUT_OF_PLAN_TOOL_USE";
+    readonly EXECUTOR_FAILED: "EXECUTOR_FAILED";
+    readonly INVALID_PAYLOAD: "INVALID_PAYLOAD";
+    readonly MAX_ITERATIONS_EXCEEDED: "MAX_ITERATIONS_EXCEEDED";
+    readonly CONFIRMATION_TOKEN_INVALID: "CONFIRMATION_TOKEN_INVALID";
+    readonly RESUME_NO_PARKED: "RESUME_NO_PARKED";
+};
+export type AdapterErrorCode = (typeof AdapterErrorCode)[keyof typeof AdapterErrorCode];
+export declare class AdapterError extends Error {
+    readonly code: AdapterErrorCode;
+    readonly details?: Record<string, unknown>;
+    constructor(code: AdapterErrorCode, message: string, details?: Record<string, unknown>);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAO,MAAM,gBAAgB;;;;;;;CAOnB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAC1B,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC;AAE3D,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGzC,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAOpC"}

package/dist/errors.js

@@ -0,0 +1,27 @@
+/**
+ * Error taxonomy for the provider-neutral adapter loop.
+ *
+ * Most failures inside the loop become `isError: true` tool-results
+ * surfaced back to the model (so it can recover gracefully). Errors
+ * thrown out of the adapter are reserved for adopter-visible
+ * misconfiguration or contract violations.
+ */
+export const AdapterErrorCode = {
+    OUT_OF_PLAN_TOOL_USE: "OUT_OF_PLAN_TOOL_USE",
+    EXECUTOR_FAILED: "EXECUTOR_FAILED",
+    INVALID_PAYLOAD: "INVALID_PAYLOAD",
+    MAX_ITERATIONS_EXCEEDED: "MAX_ITERATIONS_EXCEEDED",
+    CONFIRMATION_TOKEN_INVALID: "CONFIRMATION_TOKEN_INVALID",
+    RESUME_NO_PARKED: "RESUME_NO_PARKED",
+};
+export class AdapterError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.name = "AdapterError";
+        this.code = code;
+        this.details = details;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,oBAAoB,EAAE,sBAAsB;IAC5C,eAAe,EAAE,iBAAiB;IAClC,eAAe,EAAE,iBAAiB;IAClC,uBAAuB,EAAE,yBAAyB;IAClD,0BAA0B,EAAE,4BAA4B;IACxD,gBAAgB,EAAE,kBAAkB;CAC5B,CAAC;AAKX,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IACvB,OAAO,CAA2B;IAE3C,YACE,IAAsB,EACtB,OAAe,EACf,OAAiC;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `@adjudicate/adapter-core` — provider-neutral orchestration for
+ * adjudicate-backed LLM agents.
+ *
+ * The loop, bridge, decision translator, persistence shims, and error
+ * taxonomy live here. Provider adapters (`@adjudicate/anthropic`,
+ * `@adjudicate/openai`, …) implement a `ProviderBridge<H>` against
+ * their SDK and re-export a thin `createAdjudicatedAgent` that wires
+ * it into this loop.
+ *
+ * Invariants the loop preserves:
+ *   - Every intent envelope crosses `adjudicateAndAudit()`. No bypass,
+ *     no taint elevation, no guard-ordering short-circuit.
+ *   - First non-continue Decision wins per assistant turn.
+ *   - History `H` is opaque to the loop; the bridge owns its shape.
+ *   - REWRITE executes the rewritten envelope, never the original.
+ *   - DEFER persists full envelope fields so resume can re-derive the
+ *     intentHash and detect tampering.
+ *
+ * Provider adapters MUST NOT bypass this loop. The kernel-side audit
+ * + ledger guarantees only hold when every adjudication flows here.
+ */
+export { createAdjudicatedAgent } from "./loop.js";
+export type { AdjudicatedAgent, AdjudicatedAgentOptions, AdopterExecutor, AgentEvent, AgentLogger, AgentOutcome, AgentTurnResult, AssistantTurn, ConfirmArgs, ProviderBridge, ProviderRequest, ResumeArgs, SendInput, ToolResultBlock, ToolUseRequest, } from "./types.js";
+export { buildEnvelopeFromToolUse, classifyIncomingToolUse, intentKindToApiName, } from "./bridge.js";
+export type { BuildEnvelopeFromToolUseArgs, ToolUseClassification, } from "./bridge.js";
+export { makeOutOfPlanToolResult, translateDecision, } from "./decisions.js";
+export type { DecisionTranslation, DecisionTranslationContext, LoopAction, } from "./decisions.js";
+export { createInMemoryConfirmationStore, createInMemoryDeferStore, } from "./persistence.js";
+export type { ConfirmationStore, DeferRedis, ParkRedis, PendingConfirmation, } from "./persistence.js";
+export { createRedisConfirmationStore, type ConfirmationRedisClient, type CreateRedisConfirmationStoreOptions, } from "./persistence-redis.js";
+export { noopTraceSink, createInMemoryTraceSink, type AdapterPauseReason, type AdapterTraceEvent, type AdapterTracePhase, type TraceSink, } from "./trace.js";
+export { AdapterError, AdapterErrorCode } from "./errors.js";
+/**
+ * In-memory Execution Ledger — re-export from `@adjudicate/audit` for
+ * zero-import-friction in tests, quickstarts, and local development.
+ *
+ * NOT for distributed or persistent production deployments. Production
+ * adopters wire `createRedisLedger` (or any backing store with SET-NX,
+ * EX, INCR, DECR) from `@adjudicate/audit`.
+ */
+export { createMemoryLedger } from "@adjudicate/audit";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnD,YAAY,EACV,gBAAgB,EAChB,uBAAuB,EACvB,eAAe,EACf,UAAU,EACV,WAAW,EACX,YAAY,EACZ,eAAe,EACf,aAAa,EACb,WAAW,EACX,cAAc,EACd,eAAe,EACf,UAAU,EACV,SAAS,EACT,eAAe,EACf,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,4BAA4B,EAC5B,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,UAAU,GACX,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,+BAA+B,EAC/B,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,4BAA4B,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,mCAAmC,GACzC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,SAAS,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE7D;;;;;;;GAOG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,39 @@
+/**
+ * `@adjudicate/adapter-core` — provider-neutral orchestration for
+ * adjudicate-backed LLM agents.
+ *
+ * The loop, bridge, decision translator, persistence shims, and error
+ * taxonomy live here. Provider adapters (`@adjudicate/anthropic`,
+ * `@adjudicate/openai`, …) implement a `ProviderBridge<H>` against
+ * their SDK and re-export a thin `createAdjudicatedAgent` that wires
+ * it into this loop.
+ *
+ * Invariants the loop preserves:
+ *   - Every intent envelope crosses `adjudicateAndAudit()`. No bypass,
+ *     no taint elevation, no guard-ordering short-circuit.
+ *   - First non-continue Decision wins per assistant turn.
+ *   - History `H` is opaque to the loop; the bridge owns its shape.
+ *   - REWRITE executes the rewritten envelope, never the original.
+ *   - DEFER persists full envelope fields so resume can re-derive the
+ *     intentHash and detect tampering.
+ *
+ * Provider adapters MUST NOT bypass this loop. The kernel-side audit
+ * + ledger guarantees only hold when every adjudication flows here.
+ */
+export { createAdjudicatedAgent } from "./loop.js";
+export { buildEnvelopeFromToolUse, classifyIncomingToolUse, intentKindToApiName, } from "./bridge.js";
+export { makeOutOfPlanToolResult, translateDecision, } from "./decisions.js";
+export { createInMemoryConfirmationStore, createInMemoryDeferStore, } from "./persistence.js";
+export { createRedisConfirmationStore, } from "./persistence-redis.js";
+export { noopTraceSink, createInMemoryTraceSink, } from "./trace.js";
+export { AdapterError, AdapterErrorCode } from "./errors.js";
+/**
+ * In-memory Execution Ledger — re-export from `@adjudicate/audit` for
+ * zero-import-friction in tests, quickstarts, and local development.
+ *
+ * NOT for distributed or persistent production deployments. Production
+ * adopters wire `createRedisLedger` (or any backing store with SET-NX,
+ * EX, INCR, DECR) from `@adjudicate/audit`.
+ */
+export { createMemoryLedger } from "@adjudicate/audit";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAmBnD,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAMrB,OAAO,EACL,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EACL,+BAA+B,EAC/B,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAO1B,OAAO,EACL,4BAA4B,GAG7B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,aAAa,EACb,uBAAuB,GAKxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE7D;;;;;;;GAOG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/loop.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `createAdjudicatedAgent` — the provider-neutral message-loop orchestrator.
+ *
+ * Wires the planner, renderer, provider bridge, kernel, and Decision
+ * translator into a single send/resume/confirm surface.
+ *
+ * Invariants the loop preserves:
+ * - `pack.planner.plan(state, context)` is called every iteration. State
+ *   may change mid-turn (a refund executes, freeing a previously-locked
+ *   tool); the visible-tool surface MUST update accordingly.
+ * - The Pack passed in MUST already be `safePlan` + `withBasisAudit`
+ *   wrapped (Pack-author convention). The loop does NOT double-wrap.
+ * - Every intent envelope crosses `adjudicateAndAudit()` from
+ *   `@adjudicate/core/kernel`. The loop never bypasses the kernel,
+ *   never raises taint, and never short-circuits the guard ordering.
+ * - First non-continue Decision wins: subsequent tool_use blocks in the
+ *   same assistant turn are surfaced as `not_processed_due_to_pause`.
+ * - History `H` is opaque. The bridge is the only thing that knows the
+ *   conversation-history shape; the loop threads it.
+ */
+import type { AdjudicatedAgent, AdjudicatedAgentOptions } from "./types.js";
+export declare function createAdjudicatedAgent<K extends string, P, S, C, H>(options: AdjudicatedAgentOptions<K, P, S, C, H>): AdjudicatedAgent<K, P, S, C, H>;
+//# sourceMappingURL=loop.d.ts.map

package/dist/loop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop.d.ts","sourceRoot":"","sources":["../src/loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAqBH,OAAO,KAAK,EACV,gBAAgB,EAChB,uBAAuB,EAQxB,MAAM,YAAY,CAAC;AAIpB,wBAAgB,sBAAsB,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EACjE,OAAO,EAAE,uBAAuB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAC9C,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CA8djC"}