@adonis-agora/agent 0.52.0 → 0.53.0

package/dist/src/authorizer.d.ts

@@ -1,11 +1,12 @@
-import { DefaultRolesPolicy } from './tool-registry.js';
+import { DefaultRolesPolicy, type RolesPolicyOptions } from './tool-registry.js';
 import type { Actor, ToolSpec } from './types.js';
 /**
  * The default tool authorizer the provider binds when `config/agent.ts` sets no `authorizer` /
  * `rolesPolicy`. A tool that declares `roles` is offered (and invocable) only to an actor holding one
  * of them; a tool that declares none takes `defaultRoles` — `[]` unless configured, which means no
  * restriction (anyone the actor resolver resolved, an anonymous visitor included). Set
- * `defaultRoles: ['ADMIN']` for the old fail-closed posture.
+ * `defaultRoles: ['ADMIN']` for the old fail-closed posture, or `emptyRoles: 'deny'` to make an empty
+ * list reach nobody ({@link ClosedToolAuthorizer}).
  *
  * This is a thin, explicitly-named binding over core's {@link DefaultRolesPolicy} (the `RolesPolicy`
  * seam) so apps that plug an ability-aware gate (`@adonis-agora/authz` Bouncer adapter) swap ONLY the
@@ -13,7 +14,14 @@ import type { Actor, ToolSpec } from './types.js';
  * `ToolRegistry.invoke` — both run through this same `can(actor, tool)`.
  */
 export declare class DefaultToolAuthorizer extends DefaultRolesPolicy {
-    constructor(defaultRoles?: string[]);
+    constructor(defaultRoles?: string[], options?: RolesPolicyOptions);
     can(actor: Actor, tool: ToolSpec): boolean;
 }
+/**
+ * {@link DefaultToolAuthorizer} with `emptyRoles: 'deny'` — what `emptyRoles: 'deny'` in
+ * `config/agent.ts` / `config/mcp.ts` binds. An empty roles list reaches nobody.
+ */
+export declare class ClosedToolAuthorizer extends DefaultToolAuthorizer {
+    constructor(defaultRoles?: string[]);
+}
 //# sourceMappingURL=authorizer.d.ts.map

package/dist/src/authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorizer.d.ts","sourceRoot":"","sources":["../../src/authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAElD;;;;;;;;;;;GAWG;AACH,qBAAa,qBAAsB,SAAQ,kBAAkB;IAC3D,YAAY,YAAY,GAAE,MAAM,EAAO,EAEtC;IAEQ,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAElD;CACF"}
+{"version":3,"file":"authorizer.d.ts","sourceRoot":"","sources":["../../src/authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAElD;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAsB,SAAQ,kBAAkB;IAC3D,YAAY,YAAY,GAAE,MAAM,EAAO,EAAE,OAAO,GAAE,kBAAuB,EAExE;IAEQ,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAElD;CACF;AAED;;;GAGG;AACH,qBAAa,oBAAqB,SAAQ,qBAAqB;IAC7D,YAAY,YAAY,GAAE,MAAM,EAAO,EAEtC;CACF"}

package/dist/src/authorizer.js

@@ -4,7 +4,8 @@ import { DefaultRolesPolicy } from './tool-registry.js';
  * `rolesPolicy`. A tool that declares `roles` is offered (and invocable) only to an actor holding one
  * of them; a tool that declares none takes `defaultRoles` — `[]` unless configured, which means no
  * restriction (anyone the actor resolver resolved, an anonymous visitor included). Set
- * `defaultRoles: ['ADMIN']` for the old fail-closed posture.
+ * `defaultRoles: ['ADMIN']` for the old fail-closed posture, or `emptyRoles: 'deny'` to make an empty
+ * list reach nobody ({@link ClosedToolAuthorizer}).
  *
  * This is a thin, explicitly-named binding over core's {@link DefaultRolesPolicy} (the `RolesPolicy`
  * seam) so apps that plug an ability-aware gate (`@adonis-agora/authz` Bouncer adapter) swap ONLY the
@@ -12,11 +13,20 @@ import { DefaultRolesPolicy } from './tool-registry.js';
  * `ToolRegistry.invoke` — both run through this same `can(actor, tool)`.
  */
 export class DefaultToolAuthorizer extends DefaultRolesPolicy {
-    constructor(defaultRoles = []) {
-        super(defaultRoles);
+    constructor(defaultRoles = [], options = {}) {
+        super(defaultRoles, options);
     }
     can(actor, tool) {
         return super.can(actor, tool);
     }
 }
+/**
+ * {@link DefaultToolAuthorizer} with `emptyRoles: 'deny'` — what `emptyRoles: 'deny'` in
+ * `config/agent.ts` / `config/mcp.ts` binds. An empty roles list reaches nobody.
+ */
+export class ClosedToolAuthorizer extends DefaultToolAuthorizer {
+    constructor(defaultRoles = []) {
+        super(defaultRoles, { emptyRoles: 'deny' });
+    }
+}
 //# sourceMappingURL=authorizer.js.map

package/dist/src/authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorizer.js","sourceRoot":"","sources":["../../src/authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,qBAAsB,SAAQ,kBAAkB;IAC3D,YAAY,YAAY,GAAa,EAAE;QACrC,KAAK,CAAC,YAAY,CAAC,CAAC;IACtB,CAAC;IAEQ,GAAG,CAAC,KAAY,EAAE,IAAc;QACvC,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;CACF"}
+{"version":3,"file":"authorizer.js","sourceRoot":"","sources":["../../src/authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAA2B,MAAM,oBAAoB,CAAC;AAGjF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qBAAsB,SAAQ,kBAAkB;IAC3D,YAAY,YAAY,GAAa,EAAE,EAAE,OAAO,GAAuB,EAAE;QACvE,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAEQ,GAAG,CAAC,KAAY,EAAE,IAAc;QACvC,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,qBAAqB;IAC7D,YAAY,YAAY,GAAa,EAAE;QACrC,KAAK,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/src/client/index.d.ts

@@ -1,3 +1,3 @@
 export { type AgentChatClient, type AgentChatClientOptions, AgentChatDisconnectedError, type AgentChatHandlers, AgentChatHttpError, type AgentChatQueued, type AgentChatRequestBody, type AgentChatResult, type AgentChatResumeOptions, type AgentChatSendOptions, AgentChatStreamError, createAgentChatClient, } from './chat-client.js';
-export { type ChatFrame, type ChatPart, decodeFrame, foldPart, parseSseEvent, readSseStream, type SseEvent, } from './sse.js';
+export { type ChatFrame, type ChatPart, decodeFrame, foldPart, parseSseEvent, readSseStream, type SseEvent, STEP_SEPARATOR, } from './sse.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,0BAA0B,EAC1B,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,WAAW,EACX,QAAQ,EACR,aAAa,EACb,aAAa,EACb,KAAK,QAAQ,GACd,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,0BAA0B,EAC1B,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,WAAW,EACX,QAAQ,EACR,aAAa,EACb,aAAa,EACb,KAAK,QAAQ,EACb,cAAc,GACf,MAAM,UAAU,CAAC"}

package/dist/src/client/index.js

@@ -1,3 +1,3 @@
 export { AgentChatDisconnectedError, AgentChatHttpError, AgentChatStreamError, createAgentChatClient, } from './chat-client.js';
-export { decodeFrame, foldPart, parseSseEvent, readSseStream, } from './sse.js';
+export { decodeFrame, foldPart, parseSseEvent, readSseStream, STEP_SEPARATOR, } from './sse.js';
 //# sourceMappingURL=index.js.map

package/dist/src/client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,0BAA0B,EAE1B,kBAAkB,EAMlB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAGL,WAAW,EACX,QAAQ,EACR,aAAa,EACb,aAAa,GAEd,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,0BAA0B,EAE1B,kBAAkB,EAMlB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAGL,WAAW,EACX,QAAQ,EACR,aAAa,EACb,aAAa,EAEb,cAAc,GACf,MAAM,UAAU,CAAC"}

package/dist/src/client/sse.d.ts

@@ -99,11 +99,15 @@ export declare function parseSseEvent(frame: string): SseEvent | null;
 export declare function decodeFrame(event: SseEvent): ChatFrame | null;
 /**
  * Folds a renderable {@link ChatFrame} (text or component) into the message's parts, concatenating
- * consecutive text deltas into the trailing text part and appending components in order.
+ * consecutive text deltas into the trailing text part and appending components in order. A
+ * `step-start` closes the text before it with a paragraph break ({@link STEP_SEPARATOR}), so two
+ * model steps never run into each other.
  * `meta`/`elicitation`/`approval`/`done` are control frames and are ignored here — a form to put to
  * the user is not a part of the assistant's message. Returns a new array (never mutates the input).
  */
 export declare function foldPart(parts: ChatPart[], frame: ChatFrame): ChatPart[];
+/** What separates the text of two consecutive model steps in one message: a paragraph break. */
+export declare const STEP_SEPARATOR = "\n\n";
 /**
  * Reads a byte {@link ReadableStream} (a `fetch` `response.body`) as a sequence of raw SSE events,
  * splitting on the `\n\n` frame separator and buffering partial frames across chunks. Yields only

package/dist/src/client/sse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../../src/client/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,mGAAmG;AACnG,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,gEAAgE;AAChE,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE;AACrD,qFAAqF;GACnF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAClD,8EAA8E;GAC5E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE;AACtE;;;;;;;GAOG;GACD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE;AACzF;;;;GAIG;GACD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACzF;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,+FAA+F;AAC/F,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAiB5D;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAsC7D;AAgDD;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,QAAQ,EAAE,CAuBxE;AAED;;;;GAIG;AACH,wBAAuB,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAyB/F"}
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../../src/client/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,mGAAmG;AACnG,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,gEAAgE;AAChE,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE;AACrD,qFAAqF;GACnF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAClD,8EAA8E;GAC5E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE;AACtE;;;;;;;GAOG;GACD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE;AACzF;;;;GAIG;GACD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACzF;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,+FAA+F;AAC/F,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAiB5D;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAsC7D;AAgDD;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,QAAQ,EAAE,CAuCxE;AAED,gGAAgG;AAChG,eAAO,MAAM,cAAc,SAAS,CAAC;AAErC;;;;GAIG;AACH,wBAAuB,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAyB/F"}

package/dist/src/client/sse.js

@@ -85,7 +85,7 @@ export function decodeFrame(event) {
  * One frame of the agent stream protocol as a {@link ChatFrame}. The kinds this client folds into a
  * message or acts on (text, ui, elicitation, approval-requested) get their own frame; every other
  * kind (reasoning, tool calls, steps, title, …) arrives as `{ type: 'event' }`, which
- * {@link foldPart} ignores and `onFrame` still sees.
+ * {@link foldPart} ignores — but for a `step-start`, see there — and `onFrame` still sees.
  */
 function decodeAgentEvent(event) {
     if (event.kind === 'text') {
@@ -127,7 +127,9 @@ function decodeAgentEvent(event) {
 }
 /**
  * Folds a renderable {@link ChatFrame} (text or component) into the message's parts, concatenating
- * consecutive text deltas into the trailing text part and appending components in order.
+ * consecutive text deltas into the trailing text part and appending components in order. A
+ * `step-start` closes the text before it with a paragraph break ({@link STEP_SEPARATOR}), so two
+ * model steps never run into each other.
  * `meta`/`elicitation`/`approval`/`done` are control frames and are ignored here — a form to put to
  * the user is not a part of the assistant's message. Returns a new array (never mutates the input).
  */
@@ -152,8 +154,24 @@ export function foldPart(parts, frame) {
         }
         return [...parts, { type: 'text', text: frame.delta }];
     }
+    if (frame.type === 'event' && frame.event.kind === 'step-start') {
+        // A new model step. What it says is a new paragraph, not the continuation of a sentence: the
+        // step before it ended to call tools, so its text stops wherever the model stopped ("…before
+        // answering.") and the next one would otherwise be glued to it ("…before answering.Let me…").
+        // Only text the message already ends with is closed — a step that opens after a component, or
+        // first, has nothing to be separated from.
+        const last = parts[parts.length - 1];
+        if (last &&
+            last.type === 'text' &&
+            last.text.trim().length > 0 &&
+            !last.text.endsWith('\n\n')) {
+            return [...parts.slice(0, -1), { type: 'text', text: `${last.text}${STEP_SEPARATOR}` }];
+        }
+    }
     return parts;
 }
+/** What separates the text of two consecutive model steps in one message: a paragraph break. */
+export const STEP_SEPARATOR = '\n\n';
 /**
  * Reads a byte {@link ReadableStream} (a `fetch` `response.body`) as a sequence of raw SSE events,
  * splitting on the `\n\n` frame separator and buffering partial frames across chunks. Yields only

package/dist/src/client/sse.js.map

@@ -1 +1 @@
-{"version":3,"file":"sse.js","sourceRoot":"","sources":["../../../src/client/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA8CH;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,KAAK,GAAG,SAAS,CAAC;IACtB,IAAI,EAAsB,CAAC;IAC3B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAe;IACzC,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAA4C,CAAC;YACjF,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,GAAG,CAAC,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,GAAG,CAAC,OAAO,MAAM,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAA0C,CAAC;YAC/E,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY;gBACnE,OAAO,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB;aAClF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,yDAAyD;IACzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAA8B,CAAC;QACnE,IAAI,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,gBAAgB,CAAC,MAAoD,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,KAAiD;IACzE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YACrC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC/D,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,KAAK,CAAC,SAAS;YACrB,IAAI,EAAE,KAAK,CAAC,KAAK;YACjB,GAAG,CAAC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACjE,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACrE,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,EAAE;YACpB,OAAO,EAAE,KAAK,CAAC,OAA6B;SAC7C,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,IAAI,KAAK,oBAAoB;QACnC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAClC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,EAAE;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAiB,EAAE,KAAgB;IAC1D,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAa;YACrB,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC;QACF,8FAA8F;QAC9F,MAAM,EAAE,GACN,KAAK,CAAC,EAAE,KAAK,SAAS;YACpB,CAAC,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,aAAa,CAAC,IAAgC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM;YACR,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5C,OAAO,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;gBAC9C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;gBAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,MAAM,CAAC;gBACf,CAAC;gBACD,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}
+{"version":3,"file":"sse.js","sourceRoot":"","sources":["../../../src/client/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA8CH;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,KAAK,GAAG,SAAS,CAAC;IACtB,IAAI,EAAsB,CAAC;IAC3B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAe;IACzC,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAA4C,CAAC;YACjF,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,GAAG,CAAC,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,GAAG,CAAC,OAAO,MAAM,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAA0C,CAAC;YAC/E,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY;gBACnE,OAAO,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB;aAClF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,yDAAyD;IACzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAA8B,CAAC;QACnE,IAAI,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,gBAAgB,CAAC,MAAoD,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,KAAiD;IACzE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YACrC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC/D,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,KAAK,CAAC,SAAS;YACrB,IAAI,EAAE,KAAK,CAAC,KAAK;YACjB,GAAG,CAAC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACjE,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACrE,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,EAAE;YACpB,OAAO,EAAE,KAAK,CAAC,OAA6B;SAC7C,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,IAAI,KAAK,oBAAoB;QACnC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAClC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,EAAE;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAiB,EAAE,KAAgB;IAC1D,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAa;YACrB,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC;QACF,8FAA8F;QAC9F,MAAM,EAAE,GACN,KAAK,CAAC,EAAE,KAAK,SAAS;YACpB,CAAC,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAChE,6FAA6F;QAC7F,6FAA6F;QAC7F,8FAA8F;QAC9F,8FAA8F;QAC9F,2CAA2C;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,IACE,IAAI;YACJ,IAAI,CAAC,IAAI,KAAK,MAAM;YACpB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC3B,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC3B,CAAC;YACD,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,cAAc,EAAE,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAErC;;;;GAIG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,aAAa,CAAC,IAAgC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM;YACR,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5C,OAAO,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;gBAC9C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;gBAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,MAAM,CAAC;gBACf,CAAC;gBACD,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/src/confirm-token.d.ts

@@ -0,0 +1,52 @@
+import type { ConfirmTokenClaim, ConfirmTokenStore } from './spi/confirm-token-store.js';
+/** How long a preview stays confirmable unless the tool says otherwise. */
+export declare const DEFAULT_CONFIRM_TTL_MS: number;
+/** What a confirm token is bound to. Change any of it and the token stops matching. */
+export interface ConfirmTokenSubject {
+    /** The tool's name. */
+    tool: string;
+    /** `ctx.actor.id`. */
+    actorId: string;
+    /** `ctx.actor.tenantRef`; absent and `''` sign the same. */
+    tenantRef?: string;
+    /** The call's arguments, WITHOUT `confirm` / `confirmToken`. */
+    args: unknown;
+}
+/**
+ * JSON with object keys sorted at every depth, so two argument objects that differ only in key
+ * order produce the same text. `undefined` properties are dropped (as `JSON.stringify` does); a
+ * bare `undefined` and an `undefined` array element are `null`.
+ */
+export declare function canonicalJson(value: unknown): string;
+/**
+ * Issue a confirm token: `<expiresAt>.<signature>`, an HMAC-SHA256 (keyed by `secret`) over the tool,
+ * the actor, the tenant, the expiry and the canonical arguments. Stateless — nothing is stored — and
+ * useless for another actor, tenant, tool or argument, or after `expiresAt` (epoch-ms).
+ */
+export declare function signConfirmToken(subject: ConfirmTokenSubject, options: {
+    secret: string;
+    expiresAt: number;
+}): string;
+/** The expiry (epoch-ms) a token carries, or `undefined` for a malformed one. Not a verification. */
+export declare function confirmTokenExpiry(token: string): number | undefined;
+/** Was this token issued for exactly this subject, with this secret, and is it still valid at `now`? */
+export declare function verifyConfirmToken(token: string | null | undefined, subject: ConfirmTokenSubject, options: {
+    secret: string;
+    now?: number;
+}): boolean;
+/** SHA-256 (hex) of a token — what a {@link ConfirmTokenStore} keys on, so the token is never stored. */
+export declare function hashConfirmToken(token: string): string;
+/**
+ * A single-process {@link ConfirmTokenStore}: tests, scripts, and a deployment that runs ONE replica.
+ * With more than one, a token spent on replica A is still fresh on replica B — use the Lucid store.
+ * Expired marks are dropped lazily, on the next claim.
+ */
+export declare class InMemoryConfirmTokenStore implements ConfirmTokenStore {
+    private readonly claims;
+    claim(input: ConfirmTokenClaim): Promise<boolean>;
+    release(hash: string): Promise<void>;
+    purgeExpired(now?: number): Promise<number>;
+    /** How many tokens are currently marked as spent. */
+    get size(): number;
+}
+//# sourceMappingURL=confirm-token.d.ts.map

package/dist/src/confirm-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm-token.d.ts","sourceRoot":"","sources":["../../src/confirm-token.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEzF,2EAA2E;AAC3E,eAAO,MAAM,sBAAsB,QAAiB,CAAC;AAErD,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAWpD;AAqBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,mBAAmB,EAC5B,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC7C,MAAM,CAER;AAED,qGAAqG;AACrG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKpE;AAED,wGAAwG;AACxG,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,OAAO,EAAE,mBAAmB,EAC5B,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACxC,OAAO,CAOT;AAED,yGAAyG;AACzG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,iBAAiB;IACjE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAEzD,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAKtD;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzC;IAEK,YAAY,CAAC,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAS5D;IAED,qDAAqD;IACrD,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/src/confirm-token.js

@@ -0,0 +1,103 @@
+import { createHash, createHmac, timingSafeEqual } from 'node:crypto';
+/** How long a preview stays confirmable unless the tool says otherwise. */
+export const DEFAULT_CONFIRM_TTL_MS = 15 * 60 * 1000;
+/**
+ * JSON with object keys sorted at every depth, so two argument objects that differ only in key
+ * order produce the same text. `undefined` properties are dropped (as `JSON.stringify` does); a
+ * bare `undefined` and an `undefined` array element are `null`.
+ */
+export function canonicalJson(value) {
+    if (value === undefined)
+        return 'null';
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value) ?? 'null';
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(',')}]`;
+    if (typeof value.toJSON === 'function') {
+        return canonicalJson(value.toJSON());
+    }
+    const entries = Object.entries(value)
+        .filter(([, entry]) => entry !== undefined)
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    return `{${entries.map(([key, entry]) => `${JSON.stringify(key)}:${canonicalJson(entry)}`).join(',')}}`;
+}
+/** The signed text is itself canonical JSON, so no field can bleed into its neighbour. */
+function signature(subject, expiresAt, secret) {
+    if (secret === '') {
+        throw new Error('confirm token: the secret is empty');
+    }
+    return createHmac('sha256', secret)
+        .update(canonicalJson([
+        'agent-confirm',
+        subject.tool,
+        subject.actorId,
+        subject.tenantRef ?? '',
+        expiresAt,
+        subject.args,
+    ]))
+        .digest('base64url');
+}
+/**
+ * Issue a confirm token: `<expiresAt>.<signature>`, an HMAC-SHA256 (keyed by `secret`) over the tool,
+ * the actor, the tenant, the expiry and the canonical arguments. Stateless — nothing is stored — and
+ * useless for another actor, tenant, tool or argument, or after `expiresAt` (epoch-ms).
+ */
+export function signConfirmToken(subject, options) {
+    return `${options.expiresAt}.${signature(subject, options.expiresAt, options.secret)}`;
+}
+/** The expiry (epoch-ms) a token carries, or `undefined` for a malformed one. Not a verification. */
+export function confirmTokenExpiry(token) {
+    const separator = token.indexOf('.');
+    if (separator <= 0)
+        return undefined;
+    const expiresAt = Number(token.slice(0, separator));
+    return Number.isSafeInteger(expiresAt) && expiresAt > 0 ? expiresAt : undefined;
+}
+/** Was this token issued for exactly this subject, with this secret, and is it still valid at `now`? */
+export function verifyConfirmToken(token, subject, options) {
+    if (typeof token !== 'string')
+        return false;
+    const expiresAt = confirmTokenExpiry(token);
+    if (expiresAt === undefined || expiresAt < (options.now ?? Date.now()))
+        return false;
+    const expected = Buffer.from(signature(subject, expiresAt, options.secret));
+    const given = Buffer.from(token.slice(token.indexOf('.') + 1));
+    return expected.length === given.length && timingSafeEqual(expected, given);
+}
+/** SHA-256 (hex) of a token — what a {@link ConfirmTokenStore} keys on, so the token is never stored. */
+export function hashConfirmToken(token) {
+    return createHash('sha256').update(token).digest('hex');
+}
+/**
+ * A single-process {@link ConfirmTokenStore}: tests, scripts, and a deployment that runs ONE replica.
+ * With more than one, a token spent on replica A is still fresh on replica B — use the Lucid store.
+ * Expired marks are dropped lazily, on the next claim.
+ */
+export class InMemoryConfirmTokenStore {
+    claims = new Map();
+    async claim(input) {
+        await this.purgeExpired();
+        if (this.claims.has(input.hash))
+            return false;
+        this.claims.set(input.hash, { ...input });
+        return true;
+    }
+    async release(hash) {
+        this.claims.delete(hash);
+    }
+    async purgeExpired(now = Date.now()) {
+        let purged = 0;
+        for (const [hash, claim] of this.claims) {
+            if (claim.expiresAt < now) {
+                this.claims.delete(hash);
+                purged += 1;
+            }
+        }
+        return purged;
+    }
+    /** How many tokens are currently marked as spent. */
+    get size() {
+        return this.claims.size;
+    }
+}
+//# sourceMappingURL=confirm-token.js.map

package/dist/src/confirm-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm-token.js","sourceRoot":"","sources":["../../src/confirm-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGtE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAcrD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,OAAQ,KAA8B,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACjE,OAAO,aAAa,CAAE,KAA+B,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1C,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC1G,CAAC;AAED,0FAA0F;AAC1F,SAAS,SAAS,CAAC,OAA4B,EAAE,SAAiB,EAAE,MAAc;IAChF,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CACL,aAAa,CAAC;QACZ,eAAe;QACf,OAAO,CAAC,IAAI;QACZ,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,SAAS,IAAI,EAAE;QACvB,SAAS;QACT,OAAO,CAAC,IAAI;KACb,CAAC,CACH;SACA,MAAM,CAAC,WAAW,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAA4B,EAC5B,OAA8C;IAE9C,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAClF,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,kBAAkB,CAChC,KAAgC,EAChC,OAA4B,EAC5B,OAAyC;IAEzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IAE/D,KAAK,CAAC,KAAK,CAAC,KAAwB;QAClC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;QACzC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzB,MAAM,IAAI,CAAC,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qDAAqD;IACrD,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;CACF"}

package/dist/src/confirmed-tool.d.ts

@@ -0,0 +1,139 @@
+import type { StandardSchemaV1 } from '@standard-schema/spec';
+import { type AiToolOptions, type BrandedFunctionalTool } from './ai-tool-ref.js';
+import type { ConfirmTokenStore } from './spi/confirm-token-store.js';
+import type { AiToolCtx } from './spi/tool.js';
+/** The two fields {@link defineConfirmedTool} adds to a tool's input. */
+export interface ConfirmFields {
+    /** `true` to commit; absent (or `false`) to preview. */
+    confirm?: boolean;
+    /** The `confirmToken` the preview returned. */
+    confirmToken?: string;
+}
+/** The words a confirmed tool says to the model. Each has an English default. */
+export interface ConfirmedToolMessages {
+    /** Sent with every preview: how to confirm. `{minutes}` is replaced with the token's lifetime. */
+    confirm?: string;
+    /** Thrown for a missing, tampered, mismatched or expired token. */
+    invalid?: string;
+    /** Thrown for a token that already committed. */
+    used?: string;
+}
+/** Thrown by a confirmed tool that refused a confirmation. Nothing was written. */
+export declare class ConfirmTokenError extends Error {
+    /** `invalid`: missing, tampered, mismatched or expired. `used`: it already committed once. */
+    readonly reason: 'invalid' | 'used';
+    constructor(
+    /** `invalid`: missing, tampered, mismatched or expired. `used`: it already committed once. */
+    reason: 'invalid' | 'used', message: string);
+}
+/** What {@link defineConfirmedTool} takes besides the usual tool options. */
+export interface ConfirmedToolOptions extends Omit<AiToolOptions, 'kind'> {
+    name: string;
+    /**
+     * The HMAC key the tokens are signed with — the app key, or a secret of its own. A function is
+     * read on every call. Required: there is no default, and an empty one throws.
+     */
+    secret: string | (() => string);
+    /** How long a preview stays confirmable. Default 15 minutes. */
+    ttlMs?: number;
+    /**
+     * Makes a token single use. WITHOUT a store a token commits as many times as it is sent until it
+     * expires — a retry or a repeated call writes twice.
+     */
+    store?: ConfirmTokenStore;
+    messages?: ConfirmedToolMessages;
+}
+/** What a step reports: a sentence for the model to relay, and the structured detail behind it. */
+export interface ConfirmedToolOutcome {
+    summary: string;
+    data?: unknown;
+}
+/** The three steps of a confirmed write. */
+export interface ConfirmedToolSteps<Args, Prepared> {
+    /**
+     * Resolve and validate everything the write needs, applying the SAME rules the commit relies on.
+     * Throw to refuse. Writes nothing. Runs for the preview AND again for the confirmation — state may
+     * have changed in between — and a refusal here does not spend the token.
+     */
+    prepare(args: Args, ctx: AiToolCtx): Promise<Prepared> | Prepared;
+    /** What is about to happen. Writes nothing. */
+    preview(prepared: Prepared, ctx: AiToolCtx): Promise<ConfirmedToolOutcome> | ConfirmedToolOutcome;
+    /** Write, and say what was written. A throw gives the token back. */
+    commit(prepared: Prepared, ctx: AiToolCtx): Promise<ConfirmedToolOutcome> | ConfirmedToolOutcome;
+}
+/** A confirmed tool's answer to a call without `confirm`. */
+export interface ConfirmedToolPreview {
+    status: 'preview';
+    summary: string;
+    data?: unknown;
+    confirmToken: string;
+    /** ISO-8601 instant the token stops working. */
+    expiresAt: string;
+    /** Instructions for the model: show the preview, then call again with the token. */
+    confirm: string;
+}
+/** A confirmed tool's answer to a confirmation that committed. */
+export interface ConfirmedToolDone {
+    status: 'done';
+    summary: string;
+    data?: unknown;
+}
+export type ConfirmedToolResult = ConfirmedToolPreview | ConfirmedToolDone;
+/** The JSON Schema of {@link ConfirmFields}, merged into the schema the model is shown. */
+export declare const CONFIRM_JSON_SCHEMA_PROPERTIES: {
+    readonly confirm: {
+        readonly type: 'boolean';
+        readonly description: 'Omit to get a preview (nothing is written). Send true, with confirmToken, to commit.';
+    };
+    readonly confirmToken: {
+        readonly type: 'string';
+        readonly description: 'The confirmToken the preview returned. Required when confirm is true.';
+    };
+};
+/**
+ * Wrap a tool's input schema so it also accepts {@link ConfirmFields}, without the app declaring
+ * them. `validate` takes the two fields off, checks them itself, hands the REST to the app's schema
+ * (so a strict schema never sees a key it did not declare) and puts them back on the validated value.
+ *
+ * The wrapper always carries the Standard JSON Schema extension, because that is the only form the
+ * model gets to see: the app schema's own JSON Schema plus the two properties. A schema without the
+ * extension (Zod 3, a bare Standard Schema) degrades to a permissive object that still declares the
+ * two fields — `validate` stays the authority either way.
+ */
+export declare function withConfirmFields<Schema extends StandardSchemaV1>(schema: Schema): StandardSchemaV1<StandardSchemaV1.InferInput<Schema> & ConfirmFields, StandardSchemaV1.InferOutput<Schema> & ConfirmFields>;
+/**
+ * A write with a human gate that lives INSIDE the tool: preview first, commit on confirmation.
+ *
+ * - Called without `confirm`: runs `prepare`, writes nothing, and returns the `preview` with a signed
+ *   `confirmToken`.
+ * - Called again with the SAME arguments, `confirm: true` and that token: runs `prepare` again, then
+ *   `commit`.
+ *
+ * The token is an HMAC over the tool, `ctx.actor.id`, `ctx.actor.tenantRef`, the expiry and the
+ * canonical arguments, so it cannot be replayed by another actor, in another tenant, on another
+ * tool or with a changed argument. With a `store` it is also single use: it is claimed right before
+ * `commit` (a refusal in `prepare` does not spend it) and released if `commit` throws.
+ *
+ * Registered as `kind: 'read'` on purpose. An `action` parks on the loop's HITL approval, which an
+ * MCP caller cannot answer — `createMcpServer` keeps `action` tools off the surface, and MCP clients
+ * without elicitation have no other channel. The gate being in the handler is what lets the same
+ * tool serve the chat loop and MCP; the user sees the preview because the model has to relay it to
+ * get a token it can confirm with.
+ *
+ * ```ts
+ * export const refundOrder = defineConfirmedTool(
+ *   { name: 'refund_order', description: '...', input: z.object({ orderId: z.string() }),
+ *     secret: () => env.get('APP_KEY').release(), store: new LucidConfirmTokenStore(db) },
+ *   {
+ *     prepare: async ({ orderId }, ctx) => loadRefundableOrder(orderId, ctx.actor),
+ *     preview: (order) => ({ summary: `Refund ${order.total} to ${order.customer}?`, data: order }),
+ *     commit: async (order) => ({ summary: 'Refunded.', data: await refund(order) }),
+ *   },
+ * )
+ * ```
+ *
+ * `input` is the app's own schema: `confirm` and `confirmToken` are added by
+ * {@link withConfirmFields}, and `prepare` receives the arguments without them.
+ */
+export declare function defineConfirmedTool<Args = unknown, Prepared = unknown>(options: ConfirmedToolOptions, steps: ConfirmedToolSteps<Args, Prepared>): BrandedFunctionalTool;
+//# sourceMappingURL=confirmed-tool.d.ts.map

package/dist/src/confirmed-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmed-tool.d.ts","sourceRoot":"","sources":["../../src/confirmed-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,qBAAqB,EAAc,MAAM,kBAAkB,CAAC;AAQ9F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,kGAAkG;IAClG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAUD,mFAAmF;AACnF,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM;IAFrC;IACE,8FAA8F;IACrF,MAAM,EAAE,SAAS,GAAG,MAAM,EACnC,OAAO,EAAE,MAAM,EAIhB;CACF;AAED,6EAA6E;AAC7E,MAAM,WAAW,oBAAqB,SAAQ,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC;IACvE,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IAChC,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC;AAED,mGAAmG;AACnG,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB,CAAC,IAAI,EAAE,QAAQ;IAChD;;;;OAIG;IACH,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;IAClE,+CAA+C;IAC/C,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,oBAAoB,CAAC,GAAG,oBAAoB,CAAC;IAClG,qEAAqE;IACrE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,oBAAoB,CAAC,GAAG,oBAAoB,CAAC;CAClG;AAED,6DAA6D;AAC7D,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,kEAAkE;AAClE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAE3E,2FAA2F;AAC3F,eAAO,MAAM,8BAA8B;aACzC,OAAO;iBACL,IAAI,EAAE,SAAS;iBACf,WAAW,EACT,sFAAsF;;aAE1F,YAAY;iBACV,IAAI,EAAE,QAAQ;iBACd,WAAW,EAAE,uEAAuE;;CAE9E,CAAC;AA8BX;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,SAAS,gBAAgB,EAC/D,MAAM,EAAE,MAAM,GACb,gBAAgB,CACjB,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,aAAa,EACnD,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,aAAa,CACrD,CA+CA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,GAAG,OAAO,EAAE,QAAQ,GAAG,OAAO,EACpE,OAAO,EAAE,oBAAoB,EAC7B,KAAK,EAAE,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,GACxC,qBAAqB,CAiEvB"}