@adonis-agora/agent 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,21 @@
+# @adonis-agora/agent
+
+## 0.2.0
+
+### Minor Changes
+
+- [`f1fea00`](https://github.com/DavideCarvalho/adonis-agent/commit/f1fea00e165ef6d106fa67ed9ceda6e03ddbca3b) - Suporta `@adonis-agora/durable` 0.8.x (o peer passa de `^0.7.0` para `^0.8.0`).
+
+  O durable 0.8.0 removeu o decorator `@Workflow`, que o `AgentRunWorkflow` usava, em favor de
+  `BaseWorkflow` + `static workflow = { name, version }`. Instalar agent 0.1.0 ao lado de durable
+  0.8.0 derrubava o modo durable inteiro — `TypeError: (0 , Workflow) is not a function` ao carregar
+  o módulo, com o provider caindo silenciosamente no runner inline. O `^0.7.0` barrava a combinação,
+  então ninguém instalou os dois juntos; o preço era ficar preso ao durable 0.7.
+
+  O `AgentRunWorkflow` agora estende `BaseWorkflow` e declara `static workflow`. O resto da
+  integração (`WorkflowEngine.start/signal/cancel`, `registerWorkflowClass`, `WorkflowSuspended`,
+  `ContinueAsNew`, `WorkflowCtx`) não mudou.
+
+  O bug nasceu de um vão de teste: o `durable` não era devDependency, então o lockfile resolvia
+  0.7.0 e a suíte exercitava o runner durable contra a versão antiga — verde e cega para o 0.8.0.
+  Agora é devDependency em `^0.8.0`, e os testes rodam contra a mesma versão que o peer promete.

package/dist/src/actor-resolver.js

@@ -0,0 +1,86 @@
+/**
+ * The default {@link ActorResolver} the provider installs when `config/agent.ts` sets no
+ * `actorResolver`. It throws on every request rather than inventing an identity — security by
+ * default. Wire a real resolver (e.g. {@link AuthActorResolver}) or the opt-in
+ * {@link HeaderActorResolver} via `defineConfig({ actorResolver })`.
+ */
+export class UnconfiguredActorResolver {
+    resolve() {
+        throw new Error('No actorResolver configured. @adonis-agora/agent refuses to fabricate a caller identity. ' +
+            'Set defineConfig({ actorResolver }) in config/agent.ts with a resolver that reads your ' +
+            'authenticated principal (e.g. AuthActorResolver over ctx.auth.user), or the built-in ' +
+            'HeaderActorResolver behind a trusted gateway.');
+    }
+}
+/** Read a string header off an Adonis-ish `HttpContext` without trusting its concrete shape. */
+function readHeader(ctx, name) {
+    const request = ctx.request;
+    const value = request?.header?.(name);
+    return typeof value === 'string' ? value : undefined;
+}
+/**
+ * A development / gateway {@link ActorResolver} that trusts request headers:
+ * `x-actor-id` (required), `x-actor-role` (comma-separated → `roles`), `x-tenant-ref`.
+ *
+ * **Security:** it throws when `x-actor-id` is absent — it never fabricates an identity and never
+ * grants a default role (an actor with no `x-actor-role` gets `roles: []`, i.e. no tools). Trusting
+ * client headers is only safe behind a gateway that strips and re-sets them from an authenticated
+ * principal. Real deployments should provide their own resolver (or {@link AuthActorResolver}) that
+ * reads a verified session/JWT instead.
+ */
+export class HeaderActorResolver {
+    resolve(ctx) {
+        const id = readHeader(ctx, 'x-actor-id');
+        if (id === undefined || id.length === 0) {
+            throw new Error('HeaderActorResolver: missing x-actor-id header. No default actor is fabricated. ' +
+                'Send x-actor-id from a trusted gateway, or configure defineConfig({ actorResolver }) ' +
+                'with a resolver that reads your authenticated principal.');
+        }
+        const roles = (readHeader(ctx, 'x-actor-role') ?? '')
+            .split(',')
+            .map((role) => role.trim())
+            .filter((role) => role.length > 0);
+        const tenantRef = readHeader(ctx, 'x-tenant-ref');
+        return {
+            id,
+            roles,
+            ...(tenantRef !== undefined ? { tenantRef } : {}),
+        };
+    }
+}
+/**
+ * Reads Adonis's authenticated principal (`ctx.auth.user`, populated by `@adonisjs/auth`) into an
+ * {@link Actor}. Fail-closed: throws when no user is authenticated rather than fabricating one. Pass
+ * a `toActor` mapper when your user model doesn't expose `id`/`roles`/`tenantRef` directly (e.g. to
+ * pull roles from a relation). This is the resolver most apps wire in `config/agent.ts`.
+ */
+export class AuthActorResolver {
+    options;
+    constructor(options = {}) {
+        this.options = options;
+    }
+    resolve(ctx) {
+        const user = ctx.auth?.user;
+        if (user === undefined || user === null) {
+            throw new Error('AuthActorResolver: no authenticated user on ctx.auth.user. Authenticate the request ' +
+                '(e.g. an auth middleware) before it reaches the agent routes; no identity is fabricated.');
+        }
+        if (this.options.toActor !== undefined) {
+            return this.options.toActor(user);
+        }
+        const record = user;
+        if (record.id === undefined || record.id === null) {
+            throw new Error('AuthActorResolver: ctx.auth.user has no id; pass a toActor mapper.');
+        }
+        const roles = Array.isArray(record.roles)
+            ? record.roles.filter((role) => typeof role === 'string')
+            : [];
+        const tenantRef = typeof record.tenantRef === 'string' ? record.tenantRef : undefined;
+        return {
+            id: String(record.id),
+            roles,
+            ...(tenantRef !== undefined ? { tenantRef } : {}),
+        };
+    }
+}
+//# sourceMappingURL=actor-resolver.js.map

package/dist/src/actor-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor-resolver.js","sourceRoot":"","sources":["../../src/actor-resolver.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IACpC,OAAO;QACL,MAAM,IAAI,KAAK,CACb,2FAA2F;YACzF,yFAAyF;YACzF,uFAAuF;YACvF,+CAA+C,CAClD,CAAC;IACJ,CAAC;CACF;AAED,gGAAgG;AAChG,SAAS,UAAU,CAAC,GAAY,EAAE,IAAY;IAC5C,MAAM,OAAO,GAAI,GAAyD,CAAC,OAAO,CAAC;IACnF,MAAM,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,mBAAmB;IAC9B,OAAO,CAAC,GAAY;QAClB,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACzC,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,kFAAkF;gBAChF,uFAAuF;gBACvF,0DAA0D,CAC7D,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC;aAClD,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAClD,OAAO;YACL,EAAE;YACF,KAAK;YACL,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC;IACJ,CAAC;CACF;AAeD;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,UAAoC,EAAE;QAAtC,YAAO,GAAP,OAAO,CAA+B;IAAG,CAAC;IAEvE,OAAO,CAAC,GAAY;QAClB,MAAM,IAAI,GAAI,GAAqC,CAAC,IAAI,EAAE,IAAI,CAAC;QAC/D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,sFAAsF;gBACpF,0FAA0F,CAC7F,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,MAAM,GAAG,IAAoB,CAAC;QACpC,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YACvC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;YACzE,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,KAAK;YACL,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC;IACJ,CAAC;CACF"}

package/dist/src/agent-registry.js

@@ -0,0 +1,17 @@
+/** Holds the named agent definitions registered via `AgentModule.forFeature([...])`. */
+export class AgentRegistry {
+    definitions = new Map();
+    register(definition) {
+        this.definitions.set(definition.name, definition);
+    }
+    get(name) {
+        return this.definitions.get(name);
+    }
+    has(name) {
+        return this.definitions.has(name);
+    }
+    list() {
+        return [...this.definitions.values()];
+    }
+}
+//# sourceMappingURL=agent-registry.js.map

package/dist/src/agent-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-registry.js","sourceRoot":"","sources":["../../src/agent-registry.ts"],"names":[],"mappings":"AAEA,wFAAwF;AACxF,MAAM,OAAO,aAAa;IACP,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAC;IAElE,QAAQ,CAAC,UAA2B;QAClC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/src/ai-sdk/index.js

@@ -0,0 +1,2 @@
+export { aiSdkModel } from './ai-sdk-model.js';
+//# sourceMappingURL=index.js.map

package/dist/src/ai-sdk/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ai-sdk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAA0B,MAAM,mBAAmB,CAAC"}

package/dist/src/authorizer.js

@@ -0,0 +1,21 @@
+import { DefaultRolesPolicy } from './tool-registry.js';
+/**
+ * The default tool authorizer the provider binds when `config/agent.ts` sets no `authorizer` /
+ * `rolesPolicy`. Fail-closed and ADMIN-only by default: a tool that declares no `roles` is offered
+ * (and invocable) ONLY to an actor holding one of the configured `defaultRoles` (`['ADMIN']` unless
+ * overridden). Authorization is a plain set intersection of the actor's roles against the tool's.
+ *
+ * This is a thin, explicitly-named binding over core's {@link DefaultRolesPolicy} (the `RolesPolicy`
+ * seam) so apps that plug an ability-aware gate (`@adonis-agora/authz` Bouncer adapter) swap ONLY the
+ * binding, never the seam. The double check — offered-tools filter AND an invoke-time re-check inside
+ * `ToolRegistry.invoke` — both run through this same `can(actor, tool)`.
+ */
+export class DefaultToolAuthorizer extends DefaultRolesPolicy {
+    constructor(defaultRoles = ['ADMIN']) {
+        super(defaultRoles);
+    }
+    can(actor, tool) {
+        return super.can(actor, tool);
+    }
+}
+//# sourceMappingURL=authorizer.js.map

package/dist/src/authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer.js","sourceRoot":"","sources":["../../src/authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,qBAAsB,SAAQ,kBAAkB;IAC3D,YAAY,eAAyB,CAAC,OAAO,CAAC;QAC5C,KAAK,CAAC,YAAY,CAAC,CAAC;IACtB,CAAC;IAEQ,GAAG,CAAC,KAAY,EAAE,IAAc;QACvC,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;CACF"}

package/dist/src/durable/agent-run-workflow.d.ts

@@ -1,4 +1,4 @@
-import { type WorkflowCtx } from '@adonis-agora/durable';
+import { BaseWorkflow, type WorkflowCtx } from '@adonis-agora/durable';
 import type { AgentRunInput } from '../types.js';
 /**
  * The workflow input. A superset of {@link AgentRunInput} carrying the two fields only the durable
@@ -29,7 +29,11 @@ export interface DurableAgentRunInput extends AgentRunInput {
  *
  * Instantiated by the engine with no arguments; its deps come from {@link getDurableAgentContext}.
  */
-export declare class AgentRunWorkflow {
+export declare class AgentRunWorkflow extends BaseWorkflow {
+    static workflow: {
+        name: string;
+        version: string;
+    };
     run(ctx: WorkflowCtx, input: DurableAgentRunInput): Promise<{
         text: string;
     }>;

package/dist/src/durable/agent-run-workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-run-workflow.d.ts","sourceRoot":"","sources":["../../../src/durable/agent-run-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,WAAW,EAEjB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,KAAK,EAAE,aAAa,EAAY,MAAM,aAAa,CAAC;AAG3D;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAqB,SAAQ,aAAa;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AA+BD;;;;;;;;;;;;;;;GAeG;AACH,qBACa,gBAAgB;IACrB,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAuEpF"}
+{"version":3,"file":"agent-run-workflow.d.ts","sourceRoot":"","sources":["../../../src/durable/agent-run-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAEZ,KAAK,WAAW,EAEjB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,KAAK,EAAE,aAAa,EAAY,MAAM,aAAa,CAAC;AAG3D;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAqB,SAAQ,aAAa;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AA+BD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAgB,QAAQ;;;MAA6C;IAE/D,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAuEpF"}

package/dist/src/durable/agent-run-workflow.js

@@ -1,11 +1,4 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var AgentRunWorkflow_1;
-import { ContinueAsNew, Workflow, WorkflowSuspended, } from '@adonis-agora/durable';
+import { BaseWorkflow, ContinueAsNew, WorkflowSuspended, } from '@adonis-agora/durable';
 import { utcDay } from '../agent-deps.js';
 import { runAgentLoop } from '../agent-loop.js';
 import { getDurableAgentContext } from './agent-run-context.js';
@@ -52,7 +45,8 @@ function childSinkWriter(inner) {
  *
  * Instantiated by the engine with no arguments; its deps come from {@link getDurableAgentContext}.
  */
-let AgentRunWorkflow = AgentRunWorkflow_1 = class AgentRunWorkflow {
+export class AgentRunWorkflow extends BaseWorkflow {
+    static workflow = { name: 'agora.agent.run', version: '1' };
     async run(ctx, input) {
         const { factory, store } = getDurableAgentContext();
         const day = input.day ?? utcDay();
@@ -84,7 +78,7 @@ let AgentRunWorkflow = AgentRunWorkflow_1 = class AgentRunWorkflow {
                     });
                     return thread.id;
                 });
-                return ctx.child(AgentRunWorkflow_1, {
+                return ctx.child(AgentRunWorkflow, {
                     agentName,
                     threadId: subThreadId,
                     actor: input.actor,
@@ -120,9 +114,5 @@ let AgentRunWorkflow = AgentRunWorkflow_1 = class AgentRunWorkflow {
             throw error;
         }
     }
-};
-AgentRunWorkflow = AgentRunWorkflow_1 = __decorate([
-    Workflow({ name: 'agora.agent.run', version: '1' })
-], AgentRunWorkflow);
-export { AgentRunWorkflow };
+}
 //# sourceMappingURL=agent-run-workflow.js.map

package/dist/src/durable/agent-run-workflow.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-run-workflow.js","sourceRoot":"","sources":["../../../src/durable/agent-run-workflow.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EACL,aAAa,EACb,QAAQ,EAER,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAuB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAgBhE;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAI,KAAmC,EAAE,IAAI,CAAC;IACxD,OAAO,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,eAAe,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAiB;IACxC,OAAO;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QACpC,GAAG,EAAE,GAAG,EAAE;YACR,kCAAkC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AAEI,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAC3B,KAAK,CAAC,GAAG,CAAC,GAAgB,EAAE,KAA2B;QACrD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,sBAAsB,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;QAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC;QAE/C,MAAM,KAAK,GAAmB;YAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,IAAI;YACb,+FAA+F;YAC/F,8EAA8E;YAC9E,QAAQ,EAAE,KAAK,IAAI,EAAE,CACnB,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YACxF,+FAA+F;YAC/F,6FAA6F;YAC7F,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAW,QAAQ,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACpF,sFAAsF;YACtF,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,sFAAsF;YACtF,gFAAgF;YAChF,kBAAkB,EAAE,mBAAmB;YACvC,4FAA4F;YAC5F,qEAAqE;YACrE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;gBAClC,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,aAAa,SAAS,EAAE,EAAE,KAAK,IAAI,EAAE;oBAC3E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC;wBACtC,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,OAAO,EAAE,SAAS;wBAClB,SAAS,EAAE,IAAI;qBAChB,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC,EAAE,CAAC;gBACnB,CAAC,CAAC,CAAC;gBACH,OAAO,GAAG,CAAC,KAAK,CAAC,kBAAgB,EAAE;oBACjC,SAAS;oBACT,QAAQ,EAAE,WAAW;oBACrB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,QAAQ,EAAE,IAAI;oBACd,GAAG;oBACH,eAAe,EAAE,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC;oBACjD,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;SACF,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,MAAM,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yFAAyF;YACzF,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,KAAK,CAAC;YACd,CAAC;YACD,+FAA+F;YAC/F,6FAA6F;YAC7F,6FAA6F;YAC7F,2FAA2F;YAC3F,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,6FAA6F;YAC7F,0FAA0F;YAC1F,4FAA4F;YAC5F,MAAM,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAC3C,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAC3E,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC/C,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC,CAAC;gBACrE,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;YACrB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAxEY,gBAAgB;IAD5B,QAAQ,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;GACvC,gBAAgB,CAwE5B"}
+{"version":3,"file":"agent-run-workflow.js","sourceRoot":"","sources":["../../../src/durable/agent-run-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EAEb,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAuB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAgBhE;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAI,KAAmC,EAAE,IAAI,CAAC;IACxD,OAAO,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,eAAe,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAiB;IACxC,OAAO;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QACpC,GAAG,EAAE,GAAG,EAAE;YACR,kCAAkC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,gBAAiB,SAAQ,YAAY;IAChD,MAAM,CAAU,QAAQ,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAErE,KAAK,CAAC,GAAG,CAAC,GAAgB,EAAE,KAA2B;QACrD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,sBAAsB,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;QAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC;QAE/C,MAAM,KAAK,GAAmB;YAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,IAAI;YACb,+FAA+F;YAC/F,8EAA8E;YAC9E,QAAQ,EAAE,KAAK,IAAI,EAAE,CACnB,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YACxF,+FAA+F;YAC/F,6FAA6F;YAC7F,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAW,QAAQ,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACpF,sFAAsF;YACtF,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,sFAAsF;YACtF,gFAAgF;YAChF,kBAAkB,EAAE,mBAAmB;YACvC,4FAA4F;YAC5F,qEAAqE;YACrE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;gBAClC,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,aAAa,SAAS,EAAE,EAAE,KAAK,IAAI,EAAE;oBAC3E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC;wBACtC,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,OAAO,EAAE,SAAS;wBAClB,SAAS,EAAE,IAAI;qBAChB,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC,EAAE,CAAC;gBACnB,CAAC,CAAC,CAAC;gBACH,OAAO,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE;oBACjC,SAAS;oBACT,QAAQ,EAAE,WAAW;oBACrB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,QAAQ,EAAE,IAAI;oBACd,GAAG;oBACH,eAAe,EAAE,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC;oBACjD,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;SACF,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,MAAM,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yFAAyF;YACzF,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,KAAK,CAAC;YACd,CAAC;YACD,+FAA+F;YAC/F,6FAA6F;YAC7F,6FAA6F;YAC7F,2FAA2F;YAC3F,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,6FAA6F;YAC7F,0FAA0F;YAC1F,4FAA4F;YAC5F,MAAM,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAC3C,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAC3E,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC/C,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC,CAAC;gBACrE,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;YACrB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC"}

package/dist/src/hooks/tools.d.ts

@@ -0,0 +1,45 @@
+import type { IndexGenerator } from '@adonisjs/assembler/index_generator';
+/**
+ * Where the generated tools barrel is written, relative to the app root. The agent provider imports
+ * THIS path at boot (build-time codegen) instead of scanning `app/agent_tools` with `readdir` at
+ * runtime. Kept in sync with the module the provider imports.
+ */
+export declare const GENERATED_TOOLS_OUTPUT = ".adonisjs/agent/tools.ts";
+/** Options for {@link toolsHook} — mirror the relevant `IndexGenerator.add` knobs. */
+export interface ToolsHookOptions {
+    /** Directory the generator scans for tool modules, relative to the app root. Default `app/agent_tools`. */
+    source?: string;
+    /** Import alias the generated barrel uses for each tool module. Default `#agent_tools`. */
+    importAlias?: string;
+    /** Output path for the generated barrel, relative to the app root. Default `.adonisjs/agent/tools.ts`. */
+    output?: string;
+}
+/**
+ * An AdonisJS **Assembler `init` hook** that generates a typed barrel of the app's `app/agent_tools/`
+ * directory at build/dev time — exactly how `@adonisjs/core` generates the controllers/events barrels
+ * and how `@adonis-agora/durable`'s steps hook does for `app/steps`. The provider imports the generated
+ * `.adonisjs/agent/tools.ts` at boot and registers every `@AiTool`/`defineTool` export it finds
+ * (falling back to the runtime scan when the barrel is absent).
+ *
+ * Register it in `adonisrc.ts`:
+ *
+ * ```ts
+ * export default defineConfig({
+ *   hooks: {
+ *     init: [() => import('@adonis-agora/agent/hooks/tools')],
+ *   },
+ * })
+ * ```
+ */
+export declare function toolsHook(options?: ToolsHookOptions): {
+    run(_parent: unknown, _hooks: unknown, indexGenerator: IndexGenerator): void;
+};
+/**
+ * The default export is the hook object itself, so `() => import('@adonis-agora/agent/hooks/tools')`
+ * in `adonisrc.ts` resolves to a ready hook (the assembler calls its `run`).
+ */
+declare const _default: {
+    run(_parent: unknown, _hooks: unknown, indexGenerator: IndexGenerator): void;
+};
+export default _default;
+//# sourceMappingURL=tools.d.ts.map

package/dist/src/hooks/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/hooks/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAE1E;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AAEjE,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,2GAA2G;IAC3G,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0GAA0G;IAC1G,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB;iBAMvC,OAAO,UAAU,OAAO,kBAAkB,cAAc,GAAG,IAAI;EAa/E;AAED;;;GAGG;;iBAlBc,OAAO,UAAU,OAAO,kBAAkB,cAAc,GAAG,IAAI;;AAmBhF,wBAA2B"}

package/dist/src/hooks/tools.js

@@ -0,0 +1,48 @@
+/**
+ * Where the generated tools barrel is written, relative to the app root. The agent provider imports
+ * THIS path at boot (build-time codegen) instead of scanning `app/agent_tools` with `readdir` at
+ * runtime. Kept in sync with the module the provider imports.
+ */
+export const GENERATED_TOOLS_OUTPUT = '.adonisjs/agent/tools.ts';
+/**
+ * An AdonisJS **Assembler `init` hook** that generates a typed barrel of the app's `app/agent_tools/`
+ * directory at build/dev time — exactly how `@adonisjs/core` generates the controllers/events barrels
+ * and how `@adonis-agora/durable`'s steps hook does for `app/steps`. The provider imports the generated
+ * `.adonisjs/agent/tools.ts` at boot and registers every `@AiTool`/`defineTool` export it finds
+ * (falling back to the runtime scan when the barrel is absent).
+ *
+ * Register it in `adonisrc.ts`:
+ *
+ * ```ts
+ * export default defineConfig({
+ *   hooks: {
+ *     init: [() => import('@adonis-agora/agent/hooks/tools')],
+ *   },
+ * })
+ * ```
+ */
+export function toolsHook(options = {}) {
+    const source = options.source ?? 'app/agent_tools';
+    const importAlias = options.importAlias ?? '#agent_tools';
+    const output = options.output ?? GENERATED_TOOLS_OUTPUT;
+    return {
+        run(_parent, _hooks, indexGenerator) {
+            indexGenerator.add('agent_tools', {
+                source,
+                as: 'barrelFile',
+                exportName: 'tools',
+                importAlias,
+                removeSuffix: 'tool',
+                skipSegments: ['agent_tools'],
+                output,
+                comment: true,
+            });
+        },
+    };
+}
+/**
+ * The default export is the hook object itself, so `() => import('@adonis-agora/agent/hooks/tools')`
+ * in `adonisrc.ts` resolves to a ready hook (the assembler calls its `run`).
+ */
+export default toolsHook();
+//# sourceMappingURL=tools.js.map

package/dist/src/hooks/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/hooks/tools.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AAYjE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,SAAS,CAAC,UAA4B,EAAE;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC;IACnD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,sBAAsB,CAAC;IAExD,OAAO;QACL,GAAG,CAAC,OAAgB,EAAE,MAAe,EAAE,cAA8B;YACnE,cAAc,CAAC,GAAG,CAAC,aAAa,EAAE;gBAChC,MAAM;gBACN,EAAE,EAAE,YAAY;gBAChB,UAAU,EAAE,OAAO;gBACnB,WAAW;gBACX,YAAY,EAAE,MAAM;gBACpB,YAAY,EAAE,CAAC,aAAa,CAAC;gBAC7B,MAAM;gBACN,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,eAAe,SAAS,EAAE,CAAC"}

package/dist/src/in-process-sink.d.ts

@@ -0,0 +1,16 @@
+import type { SinkWriter, TokenStreamSink } from './spi/token-stream-sink.js';
+/**
+ * The default {@link TokenStreamSink}: buffers chunks per run in-process so a reconnecting
+ * subscriber replays everything so far, then follows live until the run ends. Good for a single
+ * replica; a multi-replica deployment needs a shared (Redis) sink so any pod can serve any run's
+ * stream. Byte-identical to the `InMemoryTokenStreamSink` shipped from `./testing`.
+ */
+export declare class InProcessTokenStreamSink implements TokenStreamSink {
+    private readonly runs;
+    private buffer;
+    private wake;
+    open(runId: string): SinkWriter;
+    subscribe(runId: string): AsyncIterable<Uint8Array>;
+    close(runId: string): void;
+}
+//# sourceMappingURL=in-process-sink.d.ts.map

package/dist/src/in-process-sink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-process-sink.d.ts","sourceRoot":"","sources":["../../src/in-process-sink.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAQ9E;;;;;GAKG;AACH,qBAAa,wBAAyB,YAAW,eAAe;IAC9D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgC;IAErD,OAAO,CAAC,MAAM;IASd,OAAO,CAAC,IAAI;IAOZ,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU;IAcxB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC;IAkB1D,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAG3B"}

package/dist/src/in-process-sink.js

@@ -0,0 +1,57 @@
+/**
+ * The default {@link TokenStreamSink}: buffers chunks per run in-process so a reconnecting
+ * subscriber replays everything so far, then follows live until the run ends. Good for a single
+ * replica; a multi-replica deployment needs a shared (Redis) sink so any pod can serve any run's
+ * stream. Byte-identical to the `InMemoryTokenStreamSink` shipped from `./testing`.
+ */
+export class InProcessTokenStreamSink {
+    runs = new Map();
+    buffer(runId) {
+        let buf = this.runs.get(runId);
+        if (buf === undefined) {
+            buf = { chunks: [], ended: false, notify: new Set() };
+            this.runs.set(runId, buf);
+        }
+        return buf;
+    }
+    wake(buf) {
+        for (const resolve of buf.notify) {
+            resolve();
+        }
+        buf.notify.clear();
+    }
+    open(runId) {
+        const buf = this.buffer(runId);
+        return {
+            write: (chunk) => {
+                buf.chunks.push(chunk);
+                this.wake(buf);
+            },
+            end: () => {
+                buf.ended = true;
+                this.wake(buf);
+            },
+        };
+    }
+    async *subscribe(runId) {
+        const buf = this.buffer(runId);
+        let index = 0;
+        while (true) {
+            while (index < buf.chunks.length) {
+                const chunk = buf.chunks[index];
+                index += 1;
+                if (chunk !== undefined) {
+                    yield chunk;
+                }
+            }
+            if (buf.ended) {
+                return;
+            }
+            await new Promise((resolve) => buf.notify.add(resolve));
+        }
+    }
+    close(runId) {
+        this.runs.delete(runId);
+    }
+}
+//# sourceMappingURL=in-process-sink.js.map

package/dist/src/in-process-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-process-sink.js","sourceRoot":"","sources":["../../src/in-process-sink.ts"],"names":[],"mappings":"AAQA;;;;;GAKG;AACH,MAAM,OAAO,wBAAwB;IAClB,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE7C,MAAM,CAAC,KAAa;QAC1B,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,IAAI,CAAC,GAAc;QACzB,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO;YACL,KAAK,EAAE,CAAC,KAAiB,EAAE,EAAE;gBAC3B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;YACD,GAAG,EAAE,GAAG,EAAE;gBACR,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,SAAS,CAAC,KAAa;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChC,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/src/index.d.ts

@@ -1,4 +1,4 @@
-export declare const VERSION = "0.1.0";
+export declare const VERSION = "0.2.0";
 export * from './types.js';
 export * from './spi/tool.js';
 export * from './spi/model-provider.js';

package/dist/src/index.js

@@ -1,4 +1,4 @@
-export const VERSION = '0.1.0';
+export const VERSION = '0.2.0';
 export * from './types.js';
 export * from './spi/tool.js';
 export * from './spi/model-provider.js';

package/dist/src/personas.js

@@ -0,0 +1,14 @@
+/** First filter layer: drop tools the actor's role may not invoke. `can` may be async (authz). */
+export async function filterToolsByRole(tools, actor, policy) {
+    const checked = await Promise.all(tools.map(async (tool) => ({ tool, allowed: await policy.can(actor, tool) })));
+    return checked.filter((entry) => entry.allowed).map((entry) => entry.tool);
+}
+/** Second filter layer: if the persona pins an allow-list, keep only those tool names. */
+export function personaFilterTools(tools, allowedTools) {
+    if (allowedTools === undefined) {
+        return tools;
+    }
+    const allowed = new Set(allowedTools);
+    return tools.filter((tool) => allowed.has(tool.name));
+}
+//# sourceMappingURL=personas.js.map

package/dist/src/personas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personas.js","sourceRoot":"","sources":["../../src/personas.ts"],"names":[],"mappings":"AAGA,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAiB,EACjB,KAAY,EACZ,MAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAC9E,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,kBAAkB,CAChC,KAAiB,EACjB,YAAkC;IAElC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/src/spi/actor-resolver.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=actor-resolver.js.map

package/dist/src/spi/actor-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor-resolver.js","sourceRoot":"","sources":["../../../src/spi/actor-resolver.ts"],"names":[],"mappings":""}

package/dist/src/spi/agent-runner.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-runner.js.map

package/dist/src/spi/agent-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-runner.js","sourceRoot":"","sources":["../../../src/spi/agent-runner.ts"],"names":[],"mappings":""}

package/dist/src/spi/model-provider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=model-provider.js.map

package/dist/src/spi/model-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-provider.js","sourceRoot":"","sources":["../../../src/spi/model-provider.ts"],"names":[],"mappings":""}

package/dist/src/spi/quota-store.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=quota-store.js.map

package/dist/src/spi/quota-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-store.js","sourceRoot":"","sources":["../../../src/spi/quota-store.ts"],"names":[],"mappings":""}

package/dist/src/spi/roles-policy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=roles-policy.js.map

package/dist/src/spi/roles-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles-policy.js","sourceRoot":"","sources":["../../../src/spi/roles-policy.ts"],"names":[],"mappings":""}

package/dist/src/spi/token-stream-sink.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The "data plane": live token transport, decoupled from the durable control plane.
+ *
+ * The model turn writes deltas to a `SinkWriter` keyed by runId; the HTTP layer
+ * `subscribe`s by runId and pipes the chunks to the browser as SSE. A late subscriber
+ * (reconnect/resume) replays buffered chunks first, then follows live — which is what
+ * makes streaming survive a dropped connection or a pod restart.
+ */
+export interface SinkWriter {
+    write(chunk: Uint8Array): void | Promise<void>;
+    /** Mark the run's stream finished (no more chunks). */
+    end(): void | Promise<void>;
+}
+export interface TokenStreamSink {
+    /** Open (or reopen) the writer for a run. */
+    open(runId: string): SinkWriter | Promise<SinkWriter>;
+    /** Replay buffered chunks for the run, then yield live ones until `end()`. */
+    subscribe(runId: string): AsyncIterable<Uint8Array>;
+    /** Drop any buffer/resources for the run. */
+    close(runId: string): void | Promise<void>;
+}
+//# sourceMappingURL=token-stream-sink.d.ts.map

package/dist/src/spi/token-stream-sink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-stream-sink.d.ts","sourceRoot":"","sources":["../../../src/spi/token-stream-sink.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,uDAAuD;IACvD,GAAG,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,8EAA8E;IAC9E,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACpD,6CAA6C;IAC7C,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C"}

package/dist/src/spi/token-stream-sink.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=token-stream-sink.js.map

package/dist/src/spi/token-stream-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-stream-sink.js","sourceRoot":"","sources":["../../../src/spi/token-stream-sink.ts"],"names":[],"mappings":""}

package/dist/src/spi/tool.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tool.js.map

package/dist/src/spi/tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.js","sourceRoot":"","sources":["../../../src/spi/tool.ts"],"names":[],"mappings":""}

package/dist/src/testing/fake-model-provider.js

@@ -0,0 +1,36 @@
+/**
+ * A deterministic, offline `ModelProvider`. Drives the agent loop without any API key,
+ * streaming the scripted text to the sink and optionally requesting one tool call.
+ */
+export class FakeModelProvider {
+    script;
+    constructor(script) {
+        this.script = script;
+    }
+    async runTurn(args) {
+        const turnIndex = args.messages.filter((message) => message.role === 'assistant').length;
+        const turn = this.script(args, turnIndex);
+        const encoder = new TextEncoder();
+        await args.sink.write(encoder.encode(turn.text));
+        const toolCalls = turn.toolCall
+            ? [
+                {
+                    id: `call-${turnIndex}-${turn.toolCall.name}`,
+                    name: turn.toolCall.name,
+                    input: turn.toolCall.input,
+                },
+            ]
+            : [];
+        return {
+            text: turn.text,
+            toolCalls,
+            usage: { inputTokens: args.messages.length, outputTokens: turn.text.length },
+            ...(turn.costUsd !== undefined ? { costUsd: turn.costUsd } : {}),
+        };
+    }
+}
+/** A trivial script: stream a fixed reply and never call a tool. */
+export function echoScript(reply = 'ok') {
+    return () => ({ text: reply });
+}
+//# sourceMappingURL=fake-model-provider.js.map

package/dist/src/testing/fake-model-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-model-provider.js","sourceRoot":"","sources":["../../../src/testing/fake-model-provider.ts"],"names":[],"mappings":"AAiBA;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,MAAkB;QAAlB,WAAM,GAAN,MAAM,CAAY;IAAG,CAAC;IAEnD,KAAK,CAAC,OAAO,CAAC,IAAmB;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;QACzF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAE1C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEjD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ;YAC7B,CAAC,CAAC;gBACE;oBACE,EAAE,EAAE,QAAQ,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;oBAC7C,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;oBACxB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;iBAC3B;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS;YACT,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAC5E,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,UAAU,UAAU,CAAC,KAAK,GAAG,IAAI;IACrC,OAAO,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACjC,CAAC"}

package/dist/src/testing/in-memory-quota.js

@@ -0,0 +1,24 @@
+/** In-memory per-actor/day token budget for tests and the offline demo. */
+export class InMemoryQuotaStore {
+    limitTokens;
+    used = new Map();
+    constructor(limitTokens = 1_000_000) {
+        this.limitTokens = limitTokens;
+    }
+    key(actorRef, day) {
+        return `${actorRef}:${day}`;
+    }
+    async check(actorRef, day) {
+        const usedTokens = this.used.get(this.key(actorRef, day)) ?? 0;
+        return {
+            usedTokens,
+            limitTokens: this.limitTokens,
+            withinLimit: usedTokens < this.limitTokens,
+        };
+    }
+    async bump(actorRef, day, tokens) {
+        const key = this.key(actorRef, day);
+        this.used.set(key, (this.used.get(key) ?? 0) + tokens);
+    }
+}
+//# sourceMappingURL=in-memory-quota.js.map

package/dist/src/testing/in-memory-quota.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-quota.js","sourceRoot":"","sources":["../../../src/testing/in-memory-quota.ts"],"names":[],"mappings":"AAEA,2EAA2E;AAC3E,MAAM,OAAO,kBAAkB;IAGA;IAFZ,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElD,YAA6B,cAAc,SAAS;QAAvB,gBAAW,GAAX,WAAW,CAAY;IAAG,CAAC;IAEhD,GAAG,CAAC,QAAgB,EAAE,GAAW;QACvC,OAAO,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,GAAW;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/D,OAAO;YACL,UAAU;YACV,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,UAAU,GAAG,IAAI,CAAC,WAAW;SAC3C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,GAAW,EAAE,MAAc;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/src/testing/in-memory-sink.js

@@ -0,0 +1,55 @@
+/**
+ * In-memory `TokenStreamSink`. Buffers chunks per run so a late subscriber (reconnect)
+ * replays everything emitted so far, then follows live until the run ends.
+ */
+export class InMemoryTokenStreamSink {
+    runs = new Map();
+    buffer(runId) {
+        let buf = this.runs.get(runId);
+        if (buf === undefined) {
+            buf = { chunks: [], ended: false, notify: new Set() };
+            this.runs.set(runId, buf);
+        }
+        return buf;
+    }
+    wake(buf) {
+        for (const resolve of buf.notify) {
+            resolve();
+        }
+        buf.notify.clear();
+    }
+    open(runId) {
+        const buf = this.buffer(runId);
+        return {
+            write: (chunk) => {
+                buf.chunks.push(chunk);
+                this.wake(buf);
+            },
+            end: () => {
+                buf.ended = true;
+                this.wake(buf);
+            },
+        };
+    }
+    async *subscribe(runId) {
+        const buf = this.buffer(runId);
+        let index = 0;
+        while (true) {
+            while (index < buf.chunks.length) {
+                const chunk = buf.chunks[index];
+                index += 1;
+                if (chunk !== undefined) {
+                    yield chunk;
+                }
+            }
+            if (buf.ended) {
+                return;
+            }
+            await new Promise((resolve) => buf.notify.add(resolve));
+        }
+    }
+    close(runId) {
+        this.runs.delete(runId);
+    }
+}
+//# sourceMappingURL=in-memory-sink.js.map

package/dist/src/testing/in-memory-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-sink.js","sourceRoot":"","sources":["../../../src/testing/in-memory-sink.ts"],"names":[],"mappings":"AAQA;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IACjB,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE7C,MAAM,CAAC,KAAa;QAC1B,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,IAAI,CAAC,GAAc;QACzB,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO;YACL,KAAK,EAAE,CAAC,KAAiB,EAAE,EAAE;gBAC3B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;YACD,GAAG,EAAE,GAAG,EAAE;gBACR,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,SAAS,CAAC,KAAa;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChC,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/src/tool-discovery.js

@@ -0,0 +1,126 @@
+import { readdir } from 'node:fs/promises';
+import { extname, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { isBrandedFunctionalTool, readAiToolMeta, } from './ai-tool-ref.js';
+/**
+ * Register one module export into the registry if it is an `@AiTool` class or a `defineTool(...)`
+ * functional tool; ignore anything else. A name already present is skipped (first wins). Returns the
+ * registered descriptor, or `null` when the export was not a tool / duplicated a registered name.
+ */
+export function registerToolExport(registry, exported, defaultRoles) {
+    // A functional tool: a branded { spec, handler } from `defineTool`.
+    if (isBrandedFunctionalTool(exported)) {
+        return registerFunctionalTool(registry, exported, defaultRoles);
+    }
+    // An `@AiTool` class: read its stamped metadata, instantiate once, bind `execute`.
+    const meta = readAiToolMeta(exported);
+    if (meta === undefined || typeof exported !== 'function') {
+        return null;
+    }
+    const instance = instantiate(exported);
+    if (instance === null || typeof instance.execute !== 'function') {
+        return null;
+    }
+    if (registry.has(meta.name)) {
+        return null;
+    }
+    registry.register(specFromMeta(meta, defaultRoles), {
+        execute: (input, ctx) => instance.execute(input, ctx),
+    });
+    return { name: meta.name, source: 'class' };
+}
+/** Register a `defineTool` functional tool, applying `defaultRoles` when it declares none. */
+export function registerFunctionalTool(registry, tool, defaultRoles) {
+    if (registry.has(tool.spec.name)) {
+        return null;
+    }
+    const spec = tool.spec.roles === undefined ? { ...tool.spec, roles: defaultRoles } : tool.spec;
+    registry.register(spec, tool.handler);
+    return { name: tool.spec.name, source: 'functional' };
+}
+function specFromMeta(meta, defaultRoles) {
+    return {
+        name: meta.name,
+        kind: meta.kind,
+        description: meta.description,
+        inputSchema: meta.input,
+        roles: meta.roles ?? defaultRoles,
+        ...(meta.ability !== undefined ? { ability: meta.ability } : {}),
+    };
+}
+function instantiate(cls) {
+    try {
+        const Ctor = cls;
+        return new Ctor();
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Pick the module extension for the running environment so a built app (`.js`) and a dev/ts app
+ * (`.ts`, run under a loader) never double-register the same tool — matching the durable scanner.
+ */
+const MODULE_EXT = extname(import.meta.url || '') === '.ts' ? '.ts' : '.js';
+/**
+ * Scan `dir` RECURSIVELY for modules and register every exported `@AiTool` class / `defineTool`
+ * tool into `registry` — the `app/agent_tools` convention. Only the environment-appropriate extension
+ * is imported and each export is visited once (deduped), so a built `.js` and a dev `.ts` of the same
+ * module never both register. Missing directory → no-op (the convention is opt-in). `defaultRoles`
+ * fills a tool that declares no `roles` (ADMIN-only by default).
+ */
+export async function discoverTools(registry, dir, defaultRoles) {
+    let entries;
+    try {
+        entries = await readdir(dir, { recursive: true });
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            return [];
+        }
+        throw err;
+    }
+    const registered = [];
+    const seen = new Set();
+    for (const entry of entries.sort()) {
+        if (extname(entry) !== MODULE_EXT || entry.endsWith(`.d${MODULE_EXT}`)) {
+            continue;
+        }
+        const mod = (await import(pathToFileURL(join(dir, entry)).href));
+        for (const exported of Object.values(mod)) {
+            if (seen.has(exported)) {
+                continue;
+            }
+            seen.add(exported);
+            const result = registerToolExport(registry, exported, defaultRoles);
+            if (result !== null) {
+                registered.push(result);
+            }
+        }
+    }
+    return registered;
+}
+/**
+ * Register every `@AiTool` / `defineTool` reachable from a generated {@link ToolsBarrel} — the
+ * build-time equivalent of {@link discoverTools} with no runtime `readdir`. Each module is imported
+ * once and each export registered once (deduped).
+ */
+export async function registerToolsFromBarrel(registry, barrel, defaultRoles) {
+    const registered = [];
+    const seen = new Set();
+    for (const load of Object.values(barrel)) {
+        const mod = await load();
+        for (const exported of Object.values(mod)) {
+            if (seen.has(exported)) {
+                continue;
+            }
+            seen.add(exported);
+            const result = registerToolExport(registry, exported, defaultRoles);
+            if (result !== null) {
+                registered.push(result);
+            }
+        }
+    }
+    return registered;
+}
+//# sourceMappingURL=tool-discovery.js.map

package/dist/src/tool-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-discovery.js","sourceRoot":"","sources":["../../src/tool-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAIL,uBAAuB,EACvB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAW1B;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAsB,EACtB,QAAiB,EACjB,YAAsB;IAEtB,oEAAoE;IACpE,IAAI,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC;IACD,mFAAmF;IACnF,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAqB,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE;QAClD,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;KACtD,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,sBAAsB,CACpC,QAAsB,EACtB,IAAoB,EACpB,YAAsB;IAEtB,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GACR,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACpF,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,IAAgB,EAAE,YAAsB;IAC5D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,KAAK;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,YAAY;QACjC,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAc;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAuC,CAAC;QACrD,OAAO,IAAI,IAAI,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAsB,EACtB,GAAW,EACX,YAAsB;IAEtB,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,UAAU,EAAE,CAAC,EAAE,CAAC;YACvE,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAA4B,CAAC;QAC5F,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YACpE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAsB,EACtB,MAAmB,EACnB,YAAsB;IAEtB,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;QACzB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YACpE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/src/tool-registry.js

@@ -0,0 +1,90 @@
+import { filterToolsByRole, personaFilterTools } from './personas.js';
+/** Thrown when an actor invokes a tool their role is not allowed. */
+export class ToolForbiddenError extends Error {
+    toolName;
+    constructor(toolName) {
+        super(`Tool "${toolName}" is not allowed for this role`);
+        this.toolName = toolName;
+        this.name = 'ToolForbiddenError';
+    }
+}
+/** Thrown when a tool is invoked that was never registered. */
+export class ToolNotFoundError extends Error {
+    toolName;
+    constructor(toolName) {
+        super(`Tool "${toolName}" is not registered`);
+        this.toolName = toolName;
+        this.name = 'ToolNotFoundError';
+    }
+}
+/** Thrown when a tool's input fails its Standard Schema validation. */
+export class ToolInputInvalidError extends Error {
+    toolName;
+    issues;
+    constructor(toolName, issues) {
+        super(`Invalid input for tool "${toolName}": ${issues.map((issue) => issue.message).join('; ')}`);
+        this.toolName = toolName;
+        this.issues = issues;
+        this.name = 'ToolInputInvalidError';
+    }
+}
+/**
+ * Holds every registered tool and gates invocation.
+ *
+ * Note: `definitionsFor` returns NEUTRAL definitions (no `execute`). The agent loop runs
+ * each tool itself as a (durable) step — so even read tools are not auto-executed by the
+ * model. `action` tools additionally require HITL approval before the loop runs them.
+ */
+export class ToolRegistry {
+    entries = new Map();
+    register(spec, handler) {
+        this.entries.set(spec.name, { spec, handler });
+    }
+    has(name) {
+        return this.entries.has(name);
+    }
+    spec(name) {
+        return this.entries.get(name)?.spec;
+    }
+    allSpecs() {
+        return [...this.entries.values()].map((entry) => entry.spec);
+    }
+    /** The tools to offer the model for this actor+persona, after the two filter layers. */
+    async definitionsFor(actor, policy, allowedTools) {
+        const roleScoped = await filterToolsByRole(this.allSpecs(), actor, policy);
+        const personaScoped = personaFilterTools(roleScoped, allowedTools);
+        return personaScoped.map((spec) => ({
+            name: spec.name,
+            kind: spec.kind,
+            description: spec.description,
+            inputSchema: spec.inputSchema,
+        }));
+    }
+    /** Run a tool. Re-checks the role (defense-in-depth) and re-parses the input via Zod. */
+    async invoke(name, input, ctx, policy) {
+        const entry = this.entries.get(name);
+        if (entry === undefined) {
+            throw new ToolNotFoundError(name);
+        }
+        if (!(await policy.can(ctx.actor, entry.spec))) {
+            throw new ToolForbiddenError(name);
+        }
+        const validation = await entry.spec.inputSchema['~standard'].validate(input);
+        if (validation.issues !== undefined) {
+            throw new ToolInputInvalidError(name, validation.issues);
+        }
+        return entry.handler.execute(validation.value, ctx);
+    }
+}
+/** Default gate: one of the actor's roles must be in spec.roles (defaulting to ADMIN-only). */
+export class DefaultRolesPolicy {
+    defaultRoles;
+    constructor(defaultRoles = ['ADMIN']) {
+        this.defaultRoles = defaultRoles;
+    }
+    can(actor, tool) {
+        const allowed = tool.roles ?? this.defaultRoles;
+        return (actor.roles ?? []).some((role) => allowed.includes(role));
+    }
+}
+//# sourceMappingURL=tool-registry.js.map

package/dist/src/tool-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry.js","sourceRoot":"","sources":["../../src/tool-registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAKtE,qEAAqE;AACrE,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACf;IAA5B,YAA4B,QAAgB;QAC1C,KAAK,CAAC,SAAS,QAAQ,gCAAgC,CAAC,CAAC;QAD/B,aAAQ,GAAR,QAAQ,CAAQ;QAE1C,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,+DAA+D;AAC/D,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACd;IAA5B,YAA4B,QAAgB;QAC1C,KAAK,CAAC,SAAS,QAAQ,qBAAqB,CAAC,CAAC;QADpB,aAAQ,GAAR,QAAQ,CAAQ;QAE1C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAE5B;IACA;IAFlB,YACkB,QAAgB,EAChB,MAAyC;QAEzD,KAAK,CACH,2BAA2B,QAAQ,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3F,CAAC;QALc,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAmC;QAKzD,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAOD;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IACN,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IAEpD,QAAQ,CAAC,IAAc,EAAE,OAAoB;QAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACtC,CAAC;IAED,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,cAAc,CAClB,KAAY,EACZ,MAAmB,EACnB,YAAuB;QAEvB,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,kBAAkB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACnE,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,MAAM,CACV,IAAY,EACZ,KAAc,EACd,GAAc,EACd,MAAmB;QAEnB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,qBAAqB,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,eAAyB,CAAC,OAAO,CAAC;QAAlC,iBAAY,GAAZ,YAAY,CAAsB;IAAG,CAAC;IAEnE,GAAG,CAAC,KAAY,EAAE,IAAc;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC;QAChD,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,CAAC;CACF"}

package/dist/stubs/main.d.ts

@@ -0,0 +1,3 @@
+/** Absolute path to the published stubs directory (`dist/stubs/main.js`). */
+export declare const stubsRoot: string;
+//# sourceMappingURL=main.d.ts.map

package/dist/stubs/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../stubs/main.ts"],"names":[],"mappings":"AAEA,6EAA6E;AAC7E,eAAO,MAAM,SAAS,QAAgD,CAAC"}

package/dist/stubs/main.js

@@ -0,0 +1,4 @@
+import { fileURLToPath } from 'node:url';
+/** Absolute path to the published stubs directory (`dist/stubs/main.js`). */
+export const stubsRoot = fileURLToPath(new URL('./', import.meta.url));
+//# sourceMappingURL=main.js.map

package/dist/stubs/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../stubs/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adonis-agora/agent",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Governed, durable-backed AI agent (chat + tool-calling + governance) for AdonisJS — part of the Agora ecosystem.",
   "license": "MIT",
   "repository": {
@@ -89,14 +89,14 @@
     "@standard-schema/spec": "^1.0.0"
   },
   "peerDependencies": {
+    "@adonis-agora/authz": "^0.4.0",
+    "@adonis-agora/diagnostics": "^0.1.0",
+    "@adonis-agora/durable": "^0.8.0",
+    "@adonis-agora/telescope": "^0.4.0",
     "@adonisjs/assembler": "^8.4.0",
     "@adonisjs/core": "^7.3.0",
     "@adonisjs/lucid": "^22.4.0",
     "@adonisjs/redis": "^9.2.0",
-    "@adonis-agora/durable": "^0.7.0",
-    "@adonis-agora/diagnostics": "^0.1.0",
-    "@adonis-agora/authz": "^0.4.0",
-    "@adonis-agora/telescope": "^0.4.0",
     "ai": "^7.0.0",
     "node-sql-parser": "^5.3.0",
     "zod": "^3.23.0 || ^4.0.0"
@@ -137,6 +137,7 @@
     }
   },
   "devDependencies": {
+    "@adonis-agora/durable": "^0.8.0",
     "@adonisjs/assembler": "^8.4.0",
     "@adonisjs/core": "^7.3.0",
     "@adonisjs/lucid": "^22.4.0",