@aisy/core 0.1.0

package/dist/runtime/budget.d.ts

@@ -0,0 +1,15 @@
+export interface BudgetTracker {
+    /** Configured cap in USD; 0 (or absent) means unlimited. */
+    capFor(agentId: string): number;
+    /** Live spend for the agent (from the ledger). */
+    spentFor(agentId: string): number;
+    /** Remaining USD; Infinity when uncapped, clamped to 0 at/over the cap. */
+    remainingFor(agentId: string): number;
+    /** True iff a cap is set and spend has reached it. */
+    over(agentId: string): boolean;
+}
+export declare function makeBudgetTracker(deps: {
+    caps: Record<string, number>;
+    spent: (agentId: string) => number;
+}): BudgetTracker;
+//# sourceMappingURL=budget.d.ts.map

package/dist/runtime/budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../../src/runtime/budget.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;IAC/B,kDAAkD;IAClD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;IACjC,2EAA2E;IAC3E,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;IACrC,sDAAsD;IACtD,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAA;CAC/B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAA;CACnC,GAAG,aAAa,CAchB"}

package/dist/runtime/budget.js

@@ -0,0 +1,24 @@
+// Per-agent budget tracker (runtime, ADR-0050 Phase 3).
+//
+// Caps come from config (providers.json agents[*].budgetUsd + the main agent);
+// `spent` is read live from the spend ledger (byAgent), so the tracker holds no
+// state of its own. The transport gates a turn when `budgetEnabled` is set and
+// the agent is over its cap (emitting budget.capped). Mid-turn enforcement and
+// sub-agent inheritance arrive with the delegation runtime (ADR-0039); the
+// tracker already keys on arbitrary agent ids so it is ready for both.
+export function makeBudgetTracker(deps) {
+    const capFor = (agentId) => deps.caps[agentId] ?? 0;
+    return {
+        capFor,
+        spentFor: (agentId) => deps.spent(agentId),
+        remainingFor: (agentId) => {
+            const cap = capFor(agentId);
+            return cap > 0 ? Math.max(0, cap - deps.spent(agentId)) : Infinity;
+        },
+        over: (agentId) => {
+            const cap = capFor(agentId);
+            return cap > 0 && deps.spent(agentId) >= cap;
+        },
+    };
+}
+//# sourceMappingURL=budget.js.map

package/dist/runtime/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../../src/runtime/budget.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,2EAA2E;AAC3E,uEAAuE;AAavE,MAAM,UAAU,iBAAiB,CAAC,IAGjC;IACC,MAAM,MAAM,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAC1C,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;YAC3B,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;QACpE,CAAC;QACD,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;YAChB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;YAC3B,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAA;QAC9C,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/runtime/delegation-driver.d.ts

@@ -0,0 +1,11 @@
+import type { DelegationManager, DelegationHandle, DelegationTask, TaskObservation } from '../orchestration/index.js';
+export interface DelegationDriverDeps {
+    manager: DelegationManager;
+    runTask: (handle: DelegationHandle, task: DelegationTask) => Promise<TaskObservation>;
+    onEvent?: (e: {
+        kind: string;
+        detail: unknown;
+    }) => void;
+}
+export declare function runDelegation(deps: DelegationDriverDeps): Promise<TaskObservation[]>;
+//# sourceMappingURL=delegation-driver.d.ts.map

package/dist/runtime/delegation-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-driver.d.ts","sourceRoot":"","sources":["../../src/runtime/delegation-driver.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAErH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,iBAAiB,CAAA;IAC1B,OAAO,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;IACrF,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAA;CACzD;AAmED,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CA6D1F"}

package/dist/runtime/delegation-driver.js

@@ -0,0 +1,132 @@
+// delegation-driver.ts — Tier-3 sub-agent delegation driver (ADR-0039, Task C1).
+//
+// Drives a DelegationManager's schedule: runs independent (write-disjoint) ready
+// tasks CONCURRENTLY and serializes write-overlapping ones.
+//
+// Overlap predicate: two tasks' `scope.owns` glob sets overlap if any glob in A
+// equals any glob in B, OR if one glob is a structural prefix of the other at a
+// path-segment boundary — delegating to the same `patternsMayOverlap` logic that
+// the manager itself uses. Practically, `['a/**']` vs `['b/**']` do NOT overlap
+// (different roots → same batch); `['shared/**']` vs `['shared/**']` DO overlap
+// (identical → different batches). This mirrors the manager's own spawn-time
+// disjointness assertion so the driver never attempts concurrent spawns the
+// manager would reject.
+// ---------------------------------------------------------------------------
+// Overlap predicate — mirrors orchestration/index.ts `patternsMayOverlap` so
+// the driver's batching decision matches the manager's spawn-time guard.
+// ---------------------------------------------------------------------------
+function globRoot(glob) {
+    const idx = glob.search(/[*?]/);
+    return idx === -1 ? glob : glob.slice(0, idx);
+}
+function patternsMayOverlap(a, b) {
+    if (a === b)
+        return true;
+    const ra = globRoot(a);
+    const rb = globRoot(b);
+    const [shorter, longer] = ra.length <= rb.length ? [ra, rb] : [rb, ra];
+    if (!longer.startsWith(shorter))
+        return false;
+    return longer.length === shorter.length || shorter.endsWith('/') || longer[shorter.length] === '/';
+}
+function ownsOverlap(ownsA, ownsB) {
+    for (const a of ownsA) {
+        for (const b of ownsB) {
+            if (patternsMayOverlap(a, b))
+                return true;
+        }
+    }
+    return false;
+}
+// ---------------------------------------------------------------------------
+// Greedy disjoint batching.
+//
+// Tasks are partitioned into ordered batches. A task joins the CURRENT batch
+// iff its scope.owns is write-disjoint from every task already in that batch.
+// A task that would overlap any member of the current batch is deferred to the
+// next batch. Each batch is then run with Promise.all (fully concurrent).
+//
+// Result: disjoint tasks share a batch (concurrent); overlapping tasks land in
+// separate batches (serialized across batches).
+// ---------------------------------------------------------------------------
+function greedyDisjointBatches(tasks) {
+    const batches = [];
+    for (const task of tasks) {
+        let placed = false;
+        for (const batch of batches) {
+            const fits = batch.every(b => !ownsOverlap(task.scope.owns, b.scope.owns));
+            if (fits) {
+                batch.push(task);
+                placed = true;
+                break;
+            }
+        }
+        if (!placed) {
+            batches.push([task]);
+        }
+    }
+    return batches;
+}
+// ---------------------------------------------------------------------------
+// runDelegation — main driver loop.
+// ---------------------------------------------------------------------------
+export async function runDelegation(deps) {
+    const { manager, runTask, onEvent } = deps;
+    const observations = [];
+    const attempted = new Set();
+    for (;;) {
+        // Filter to tasks that haven't been attempted yet.
+        const ready = manager.readySet().filter(t => !attempted.has(t.taskId));
+        if (ready.length === 0)
+            break;
+        // Termination guard: if we have ready tasks but all were already attempted,
+        // we're stuck (runTask failed to close them). Break to avoid infinite loop.
+        // (The filter above already handles this — if ready is empty after filter, we break.)
+        const batches = greedyDisjointBatches(ready);
+        for (const batch of batches) {
+            for (const t of batch)
+                attempted.add(t.taskId);
+            const settled = await Promise.allSettled(batch.map(async (t) => {
+                let handle;
+                try {
+                    handle = manager.spawn(t.taskId);
+                }
+                catch (err) {
+                    const msg = err instanceof Error ? err.message : String(err);
+                    onEvent?.({ kind: 'task-error', detail: { taskId: t.taskId, error: msg } });
+                    // spawn() threw (e.g. null assignedTo, unknown card) — synthesise a failed
+                    // observation so the manager can cascade-skip downstream tasks.
+                    return {
+                        delegationId: t.taskId,
+                        status: 'failed',
+                        summary: msg,
+                        touched: [],
+                        result: null,
+                        cost: { iterations: 0, spendUsd: 0, wallMs: 0 },
+                    };
+                }
+                try {
+                    return await runTask(handle, t);
+                }
+                catch (err) {
+                    const msg = err instanceof Error ? err.message : String(err);
+                    onEvent?.({ kind: 'task-error', detail: { taskId: t.taskId, error: msg } });
+                    // Convert an uncaught runTask error into a proper delegation failure so
+                    // the manager cascade-skips downstream; the driver never leaves a task open.
+                    return handle.fail(msg, { iterations: 0, spendUsd: 0, wallMs: 0 });
+                }
+            }));
+            for (const r of settled) {
+                if (r.status === 'fulfilled')
+                    observations.push(r.value);
+            }
+        }
+        // Advance state + record cascade-skips.
+        const sched = manager.schedule();
+        if (sched.cascadeSkipped.length > 0) {
+            onEvent?.({ kind: 'cascade-skip', detail: sched.cascadeSkipped });
+        }
+    }
+    return observations;
+}
+//# sourceMappingURL=delegation-driver.js.map

package/dist/runtime/delegation-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-driver.js","sourceRoot":"","sources":["../../src/runtime/delegation-driver.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,iFAAiF;AACjF,4DAA4D;AAC5D,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,6EAA6E;AAC7E,4EAA4E;AAC5E,wBAAwB;AAUxB,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC/B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC/C,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACxB,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;IACtB,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;IACtB,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IACtE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7C,OAAO,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAA;AACpG,CAAC;AAED,SAAS,WAAW,CAAC,KAAe,EAAE,KAAe;IACnD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,0EAA0E;AAC1E,EAAE;AACF,+EAA+E;AAC/E,gDAAgD;AAChD,8EAA8E;AAE9E,SAAS,qBAAqB,CAAC,KAAuB;IACpD,MAAM,OAAO,GAAuB,EAAE,CAAA;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,GAAG,KAAK,CAAA;QAClB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;YAC1E,IAAI,IAAI,EAAE,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAChB,MAAM,GAAG,IAAI,CAAA;gBACb,MAAK;YACP,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA0B;IAC5D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAC1C,MAAM,YAAY,GAAsB,EAAE,CAAA;IAC1C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IAEnC,SAAS,CAAC;QACR,mDAAmD;QACnD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;QACtE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAK;QAE7B,4EAA4E;QAC5E,4EAA4E;QAC5E,sFAAsF;QAEtF,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;QAE5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YAC9C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;gBACpB,IAAI,MAAM,CAAA;gBACV,IAAI,CAAC;oBACH,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;gBAClC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;oBAC5D,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;oBAC3E,2EAA2E;oBAC3E,gEAAgE;oBAChE,OAAO;wBACL,YAAY,EAAE,CAAC,CAAC,MAAM;wBACtB,MAAM,EAAE,QAAiB;wBACzB,OAAO,EAAE,GAAG;wBACZ,OAAO,EAAE,EAAE;wBACX,MAAM,EAAE,IAAI;wBACZ,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;qBAChD,CAAA;gBACH,CAAC;gBACD,IAAI,CAAC;oBACH,OAAO,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;gBACjC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;oBAC5D,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;oBAC3E,wEAAwE;oBACxE,6EAA6E;oBAC7E,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;gBACpE,CAAC;YACH,CAAC,CAAC,CACH,CAAA;YACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;oBAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YAC1D,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAA;QAChC,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAA;QACnE,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAA;AACrB,CAAC"}

package/dist/runtime/exact-cache.d.ts

@@ -0,0 +1,10 @@
+import type { ProviderAdapter, ModelResponse } from '../agent-loop/types.js';
+export interface ExactCacheStore {
+    get(key: string): ModelResponse | undefined;
+    set(key: string, value: ModelResponse): void;
+}
+export declare function makeMemoryExactCacheStore(): ExactCacheStore;
+/** Content-addressed exact-response cache. ONLY for deterministic, non-stateful
+ *  paths (eval-replay, nightly re-run). NEVER wrap the live agent loop (ADR-0055). */
+export declare function makeExactCache(inner: ProviderAdapter, store: ExactCacheStore, namespace: string): ProviderAdapter;
+//# sourceMappingURL=exact-cache.d.ts.map

package/dist/runtime/exact-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exact-cache.d.ts","sourceRoot":"","sources":["../../src/runtime/exact-cache.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAgB,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE1F,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAA;IAC3C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAAA;CAC7C;AAED,wBAAgB,yBAAyB,IAAI,eAAe,CAG3D;AAUD;sFACsF;AACtF,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,eAAe,CAWjH"}

package/dist/runtime/exact-cache.js

@@ -0,0 +1,30 @@
+import { createHash } from 'node:crypto';
+export function makeMemoryExactCacheStore() {
+    const m = new Map();
+    return { get: (k) => m.get(k), set: (k, v) => void m.set(k, v) };
+}
+function keyOf(namespace, req) {
+    const h = createHash('sha256');
+    h.update(namespace);
+    h.update('\0');
+    h.update(Buffer.from(req.prefixBytes));
+    h.update('\0');
+    h.update(JSON.stringify(req.spans));
+    return h.digest('hex');
+}
+/** Content-addressed exact-response cache. ONLY for deterministic, non-stateful
+ *  paths (eval-replay, nightly re-run). NEVER wrap the live agent loop (ADR-0055). */
+export function makeExactCache(inner, store, namespace) {
+    return {
+        async complete(req, signal) {
+            const key = keyOf(namespace, req);
+            const hit = store.get(key);
+            if (hit)
+                return hit;
+            const res = await inner.complete(req, signal);
+            store.set(key, res);
+            return res;
+        },
+    };
+}
+//# sourceMappingURL=exact-cache.js.map

package/dist/runtime/exact-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exact-cache.js","sourceRoot":"","sources":["../../src/runtime/exact-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAQxC,MAAM,UAAU,yBAAyB;IACvC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAyB,CAAA;IAC1C,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AAClE,CAAC;AAED,SAAS,KAAK,CAAC,SAAiB,EAAE,GAAiB;IACjD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC9B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACnC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACtD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;IACnC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED;sFACsF;AACtF,MAAM,UAAU,cAAc,CAAC,KAAsB,EAAE,KAAsB,EAAE,SAAiB;IAC9F,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM;YACxB,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;YACjC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAC1B,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAA;YACnB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YAC7C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YACnB,OAAO,GAAG,CAAA;QACZ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/runtime/execute-tool.d.ts

@@ -0,0 +1,29 @@
+import type { ToolCall } from '../agent-loop/types.js';
+import type { TaskObservation } from '../orchestration/index.js';
+export interface ToolResult {
+    ok: boolean;
+    output: string;
+}
+export interface FsPort {
+    readFile(path: string): string;
+    writeFile(path: string, content: string): void;
+    listDir(path: string): string[];
+    exists(path: string): boolean;
+}
+export interface ExecuteToolDeps {
+    fs: FsPort;
+    /** Workspace root; file paths are resolved under it and may not escape. */
+    workspaceRoot: string;
+    /** Sandbox shell port (Safety 05). Absent ⇒ bash reports unavailable. */
+    runBash?: (cmd: string) => Promise<{
+        stdout: string;
+        stderr: string;
+        exitCode: number;
+    }>;
+    /** Memory FTS read port. Absent ⇒ search_memory reports unavailable. */
+    searchMemory?: (query: string) => Promise<string> | string;
+    /** Sub-agent delegation runner. Absent ⇒ spawn_subagent reports unavailable. */
+    spawnSubagent?: (planJson: string) => Promise<TaskObservation[]>;
+}
+export declare function makeToolExecutor(deps: ExecuteToolDeps): (call: ToolCall) => Promise<ToolResult>;
+//# sourceMappingURL=execute-tool.d.ts.map

package/dist/runtime/execute-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute-tool.d.ts","sourceRoot":"","sources":["../../src/runtime/execute-tool.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAEhE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;IAC9B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9C,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAC/B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxF,wEAAwE;IACxE,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAA;IAC1D,gFAAgF;IAChF,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;CACjE;AAOD,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,eAAe,GACpB,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC,UAAU,CAAC,CAgEzC"}

package/dist/runtime/execute-tool.js

@@ -0,0 +1,80 @@
+// Tool executor (runtime).
+//
+// Maps an approved ToolCall to a real implementation via injected ports. This is
+// the agent-loop's `executeTool` seam; it runs ONLY after hookGate.pre has
+// allowed the call, so it is not a security boundary — but it still confines
+// filesystem operations to the workspace as defense-in-depth. Side-effecting
+// tools (bash) are injected ports so the sandbox stays swappable/testable.
+import { isAbsolute, normalize, resolve } from 'node:path';
+function arg(call, key) {
+    const v = call.args[key];
+    return typeof v === 'string' ? v : '';
+}
+export function makeToolExecutor(deps) {
+    const root = resolve(deps.workspaceRoot);
+    /** Resolve a tool-supplied path under the workspace root; null if it escapes. */
+    const confine = (p) => {
+        if (p.length === 0)
+            return null;
+        const abs = isAbsolute(p) ? normalize(p) : resolve(root, p);
+        if (abs !== root && !abs.startsWith(root + '/'))
+            return null;
+        return abs;
+    };
+    return async (call) => {
+        switch (call.name) {
+            case 'read_file': {
+                const path = confine(arg(call, 'path'));
+                if (!path)
+                    return { ok: false, output: 'read_file: path outside workspace' };
+                if (!deps.fs.exists(path))
+                    return { ok: false, output: `read_file: not found: ${path}` };
+                return { ok: true, output: deps.fs.readFile(path) };
+            }
+            case 'write_file': {
+                const path = confine(arg(call, 'path'));
+                if (!path)
+                    return { ok: false, output: 'write_file: path outside workspace' };
+                deps.fs.writeFile(path, arg(call, 'content'));
+                return { ok: true, output: `wrote ${path}` };
+            }
+            case 'list_dir': {
+                const path = confine(arg(call, 'path') || '.');
+                if (!path)
+                    return { ok: false, output: 'list_dir: path outside workspace' };
+                if (!deps.fs.exists(path))
+                    return { ok: false, output: `list_dir: not found: ${path}` };
+                return { ok: true, output: deps.fs.listDir(path).join('\n') };
+            }
+            case 'bash': {
+                if (!deps.runBash)
+                    return { ok: false, output: 'bash: sandbox unavailable' };
+                const r = await deps.runBash(arg(call, 'cmd'));
+                const body = [r.stdout, r.stderr].filter((s) => s.length > 0).join('\n');
+                return { ok: r.exitCode === 0, output: `${body}\n(exit ${r.exitCode})`.trim() };
+            }
+            case 'search_memory': {
+                if (!deps.searchMemory)
+                    return { ok: false, output: 'search_memory: unavailable' };
+                return { ok: true, output: await deps.searchMemory(arg(call, 'query')) };
+            }
+            case 'spawn_subagent': {
+                if (!deps.spawnSubagent)
+                    return { ok: false, output: 'spawn_subagent: delegation not available' };
+                const planArg = arg(call, 'plan');
+                if (planArg.length === 0)
+                    return { ok: false, output: 'spawn_subagent: plan must be a JSON string' };
+                const observations = await deps.spawnSubagent(planArg);
+                return { ok: true, output: JSON.stringify(observations) };
+            }
+            case 'goal_done':
+                // Tier-0 claim: no side effect. The orchestrator (Phase C) intercepts this
+                // sentinel before it reaches here; this case ensures graceful handling in
+                // any runner that reaches the base executor (e.g. sub-agents).
+                return { ok: true, output: '__goal_done__' };
+            default:
+                return { ok: false, output: `unsupported tool: ${call.name}` };
+        }
+    };
+}
+//# sourceMappingURL=execute-tool.js.map

package/dist/runtime/execute-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute-tool.js","sourceRoot":"","sources":["../../src/runtime/execute-tool.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,EAAE;AACF,iFAAiF;AACjF,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAE3E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AA4B1D,SAAS,GAAG,CAAC,IAAc,EAAE,GAAW;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAqB;IAErB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAExC,iFAAiF;IACjF,MAAM,OAAO,GAAG,CAAC,CAAS,EAAiB,EAAE;QAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QAC3D,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QAC5D,OAAO,GAAG,CAAA;IACZ,CAAC,CAAA;IAED,OAAO,KAAK,EAAE,IAAc,EAAuB,EAAE;QACnD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;gBACvC,IAAI,CAAC,IAAI;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAA;gBAC5E,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,IAAI,EAAE,EAAE,CAAA;gBACxF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAA;YACrD,CAAC;YAED,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;gBACvC,IAAI,CAAC,IAAI;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAA;gBAC7E,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAA;gBAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE,EAAE,CAAA;YAC9C,CAAC;YAED,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,CAAA;gBAC9C,IAAI,CAAC,IAAI;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAA;gBAC3E,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,IAAI,EAAE,EAAE,CAAA;gBACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;YAC/D,CAAC;YAED,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAA;gBAC5E,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;gBAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACxE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAA;YACjF,CAAC;YAED,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,YAAY;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAA;gBAClF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAA;YAC1E,CAAC;YAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,aAAa;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAA;gBACjG,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;gBACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAA;gBACpG,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;gBACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAA;YAC3D,CAAC;YAED,KAAK,WAAW;gBACd,2EAA2E;gBAC3E,0EAA0E;gBAC1E,+DAA+D;gBAC/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;YAE9C;gBACE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAA;QAClE,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/runtime/guardian.d.ts

@@ -0,0 +1,9 @@
+import type { LoopGuardian } from '../agent-loop/types.js';
+export interface GuardianDeps {
+    /** How many consecutive repeats of a period trip the guardian. Default 3. */
+    repeats?: number;
+    /** Largest cycle period to detect (1..3). Default 3. */
+    maxPeriod?: 1 | 2 | 3;
+}
+export declare function makeGuardian(deps?: GuardianDeps): LoopGuardian;
+//# sourceMappingURL=guardian.d.ts.map

package/dist/runtime/guardian.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardian.d.ts","sourceRoot":"","sources":["../../src/runtime/guardian.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAY,MAAM,wBAAwB,CAAA;AAEpE,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,wDAAwD;IACxD,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;CACtB;AAMD,wBAAgB,YAAY,CAAC,IAAI,GAAE,YAAiB,GAAG,YAAY,CA6BlE"}

package/dist/runtime/guardian.js

@@ -0,0 +1,41 @@
+// Loop guardian (runtime) — agent-loop LoopGuardian shape.
+//
+// Detects repeating tool-call cycles so a stuck agent halts instead of looping
+// forever. observe() is called on every dispatch; it trips when the recent
+// signature stream shows a period-1/2/3 pattern repeated `repeats` times (e.g.
+// the same call 3× in a row, or an A,B,A,B,A,B oscillation). note('replan')
+// resets the window — a fresh plan is a fresh execution context (§5.3).
+function sig(call) {
+    return `${call.name}:${JSON.stringify(call.args)}`;
+}
+export function makeGuardian(deps = {}) {
+    const repeats = deps.repeats ?? 3;
+    const maxPeriod = deps.maxPeriod ?? 3;
+    let window = [];
+    /** True if the tail is `period`-pattern repeated `repeats` times. */
+    const isCycle = (period) => {
+        const need = period * repeats;
+        if (window.length < need)
+            return false;
+        const tail = window.slice(window.length - need);
+        for (let i = period; i < tail.length; i++) {
+            if (tail[i] !== tail[i - period])
+                return false;
+        }
+        return true;
+    };
+    return {
+        observe(call) {
+            window.push(sig(call));
+            for (let p = 1; p <= maxPeriod; p = (p + 1)) {
+                if (isCycle(p))
+                    return { trip: true, period: p };
+            }
+            return { trip: false };
+        },
+        note(_event) {
+            window = [];
+        },
+    };
+}
+//# sourceMappingURL=guardian.js.map

package/dist/runtime/guardian.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardian.js","sourceRoot":"","sources":["../../src/runtime/guardian.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AAWxE,SAAS,GAAG,CAAC,IAAc;IACzB,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;AACpD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAqB,EAAE;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAA;IACrC,IAAI,MAAM,GAAa,EAAE,CAAA;IAEzB,qEAAqE;IACrE,MAAM,OAAO,GAAG,CAAC,MAAc,EAAW,EAAE;QAC1C,MAAM,IAAI,GAAG,MAAM,GAAG,OAAO,CAAA;QAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;YAAE,OAAO,KAAK,CAAA;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;QAC/C,KAAK,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAA;QAChD,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IAED,OAAO;QACL,OAAO,CAAC,IAAc;YACpB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;YACtB,KAAK,IAAI,CAAC,GAAG,CAAc,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAc,EAAE,CAAC;gBACtE,IAAI,OAAO,CAAC,CAAC,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;YAClD,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;QACxB,CAAC;QAED,IAAI,CAAC,MAAgB;YACnB,MAAM,GAAG,EAAE,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/runtime/hook-gate.d.ts

@@ -0,0 +1,17 @@
+import type { HookGate } from '../agent-loop/types.js';
+import type { SafetyPolicy, GrantStore, GrantScope } from '../safety/index.js';
+import type { PendingAction } from '../gateway/index.js';
+export type ApprovalDecision = {
+    decision: 'confirmed';
+    scope?: GrantScope;
+} | {
+    decision: 'rejected';
+};
+export interface HookGateDeps {
+    safety: SafetyPolicy;
+    grants: GrantStore;
+    /** Human approval round-trip — the transport issues a card and awaits the tap. */
+    approve(action: PendingAction): Promise<ApprovalDecision>;
+}
+export declare function makeHookGate(deps: HookGateDeps): HookGate;
+//# sourceMappingURL=hook-gate.d.ts.map

package/dist/runtime/hook-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-gate.d.ts","sourceRoot":"","sources":["../../src/runtime/hook-gate.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAqC,MAAM,wBAAwB,CAAA;AACzF,OAAO,KAAK,EACV,YAAY,EAEZ,UAAU,EACV,UAAU,EAGX,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAExD,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,EAAE,WAAW,CAAC;IAAC,KAAK,CAAC,EAAE,UAAU,CAAA;CAAE,GAC7C;IAAE,QAAQ,EAAE,UAAU,CAAA;CAAE,CAAA;AAE5B,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAA;IACpB,MAAM,EAAE,UAAU,CAAA;IAClB,kFAAkF;IAClF,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;CAC1D;AAeD,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,QAAQ,CAkCzD"}

package/dist/runtime/hook-gate.js

@@ -0,0 +1,56 @@
+// HookGate adapter (runtime).
+//
+// Bridges the agent-loop's HookGate to the deterministic SafetyPolicy + the
+// scoped-grant store + the human approval round-trip. The loop awaits pre(), so
+// the entire "ask" resolution lives here: on a Tier-2/3 `ask` verdict we build a
+// PendingAction, hand it to the injected approve() port (the transport issues
+// the card and waits for the tap), and return allow/deny to the loop. On a
+// confirmed Tier-2 with a remembered scope we record the grant, so the next
+// matching call is allowed by SafetyPolicy.evaluate without another card.
+import { randomUUID } from 'node:crypto';
+function toSafetyCall(call, ctx) {
+    return {
+        tool: call.name,
+        args: call.args,
+        argsTainted: ctx.provenance === 'untrusted',
+    };
+}
+/** Narrowing is carried on HookCtx; surface it to SafetyPolicy as a synthetic span. */
+function safetyCtx(ctx) {
+    return ctx.narrowed ? [{ text: '', provenance: 'untrusted', source: 'narrowed' }] : [];
+}
+export function makeHookGate(deps) {
+    return {
+        async pre(call, ctx) {
+            const verdict = deps.safety.evaluate(toSafetyCall(call, ctx), safetyCtx(ctx));
+            if (verdict.decision === 'allow')
+                return 'allow';
+            if (verdict.decision === 'deny')
+                return 'deny';
+            if (verdict.decision === 'modify') {
+                return { modify: { name: verdict.rewritten.tool, args: verdict.rewritten.args } };
+            }
+            // verdict.decision === 'ask' — resolve via the human approval round-trip.
+            const action = {
+                actionId: randomUUID(),
+                actionHash: verdict.card.actionHash,
+                tier: verdict.tier,
+                requiresStepUp: verdict.tier === 3,
+                summary: verdict.card.actionSummary,
+            };
+            const result = await deps.approve(action);
+            if (result.decision !== 'confirmed')
+                return 'deny';
+            // Remember the grant only for Tier-2 (Tier-3 is never grantable, ADR-0047).
+            if (result.scope && action.tier === 2) {
+                deps.grants.record(call.name, result.scope);
+            }
+            return 'allow';
+        },
+        async post(_call, _result) {
+            // PostToolUse is a no-op for the MVP spine; redaction/observability hooks
+            // attach here later.
+        },
+    };
+}
+//# sourceMappingURL=hook-gate.js.map

package/dist/runtime/hook-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-gate.js","sourceRoot":"","sources":["../../src/runtime/hook-gate.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,iFAAiF;AACjF,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,0EAA0E;AAE1E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAuBxC,SAAS,YAAY,CAAC,IAAkB,EAAE,GAAY;IACpD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,GAAG,CAAC,UAAU,KAAK,WAAW;KAC5C,CAAA;AACH,CAAC;AAED,uFAAuF;AACvF,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACxF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAkB;IAC7C,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,IAAkB,EAAE,GAAY;YACxC,MAAM,OAAO,GAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;YAEtF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAA;YAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAA;YAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAClC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAA;YACnF,CAAC;YAED,0EAA0E;YAC1E,MAAM,MAAM,GAAkB;gBAC5B,QAAQ,EAAE,UAAU,EAAE;gBACtB,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;gBACnC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,cAAc,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC;gBAClC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa;aACpC,CAAA;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACzC,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW;gBAAE,OAAO,MAAM,CAAA;YAElD,4EAA4E;YAC5E,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;YAC7C,CAAC;YACD,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAmB,EAAE,OAAgB;YAC9C,0EAA0E;YAC1E,qBAAqB;QACvB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/runtime/memory-adapter.d.ts

@@ -0,0 +1,6 @@
+import type { MemoryPort } from '../agent-loop/types.js';
+import type { Memory } from '../memory/index.js';
+export declare function makeMemoryPort(memory: Memory, nowIso: () => string): MemoryPort;
+/** Bridge Memory.search → the execute-tool searchMemory port (hits → text). */
+export declare function makeMemorySearch(memory: Memory, limit?: number): (query: string) => Promise<string>;
+//# sourceMappingURL=memory-adapter.d.ts.map

package/dist/runtime/memory-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-adapter.d.ts","sourceRoot":"","sources":["../../src/runtime/memory-adapter.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,MAAM,EAAa,MAAM,oBAAoB,CAAA;AAE3D,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,MAAM,GAAG,UAAU,CAa/E;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAe9F"}

package/dist/runtime/memory-adapter.js

@@ -0,0 +1,38 @@
+// packages/core-ts/src/runtime/memory-adapter.ts
+// Bridge the memory component (Memory) to the agent-loop ports. The two
+// FrozenSnapshot shapes differ — memory yields {bytes, sha256}; the loop wants
+// {prefixBytes, prefixHash, breakpoints, takenAt} — so this is a real translation.
+export function makeMemoryPort(memory, nowIso) {
+    return {
+        snapshot: async () => {
+            const snap = await memory.readFrozenSnapshot();
+            return {
+                prefixBytes: new Uint8Array(snap.bytes),
+                prefixHash: snap.sha256,
+                breakpoints: [],
+                takenAt: nowIso(),
+            };
+        },
+        forget: (factRef, humanConfirmed) => memory.forget(factRef, 'operator forget', humanConfirmed),
+    };
+}
+/** Bridge Memory.search → the execute-tool searchMemory port (hits → text). */
+export function makeMemorySearch(memory, limit = 8) {
+    return async (query) => {
+        let hits;
+        try {
+            hits = await memory.search(query, { limit });
+        }
+        catch {
+            // A cold start (no index on disk until the first write) or a transient
+            // read error must NOT crash the turn — the loop's catch only handles its
+            // own Halt and would otherwise surface as an unhandled rejection in the
+            // transport. The model just gets "no memory" and continues.
+            return 'Память: индекс пуст или недоступен.';
+        }
+        if (hits.length === 0)
+            return 'Память: ничего не найдено.';
+        return hits.map((h) => `• [${h.factKey}] ${h.text}`).join('\n');
+    };
+}
+//# sourceMappingURL=memory-adapter.js.map

package/dist/runtime/memory-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-adapter.js","sourceRoot":"","sources":["../../src/runtime/memory-adapter.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,wEAAwE;AACxE,+EAA+E;AAC/E,mFAAmF;AAKnF,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,MAAoB;IACjE,OAAO;QACL,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAA;YAC9C,OAAO;gBACL,WAAW,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;gBACvC,UAAU,EAAE,IAAI,CAAC,MAAM;gBACvB,WAAW,EAAE,EAAE;gBACf,OAAO,EAAE,MAAM,EAAE;aAClB,CAAA;QACH,CAAC;QACD,MAAM,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,cAAc,CAAC;KAC/F,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,KAAK,GAAG,CAAC;IACxD,OAAO,KAAK,EAAE,KAAa,EAAE,EAAE;QAC7B,IAAI,IAAiB,CAAA;QACrB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,yEAAyE;YACzE,wEAAwE;YACxE,4DAA4D;YAC5D,OAAO,qCAAqC,CAAA;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,4BAA4B,CAAA;QAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjE,CAAC,CAAA;AACH,CAAC"}