@aisy/core 0.1.0

package/dist/runtime/settings.js

@@ -0,0 +1,29 @@
+// Settings store (runtime, ADR-0050 Phase 2).
+//
+// A tiny typed key/value of operator preferences, persisted to
+// ~/.aisy/settings.json. The defaults are conservative: the per-turn cost
+// summary is OFF (spend is viewed on demand, not spammed in the main chat), and
+// budget enforcement is OFF. Toggled from the Settings ⚙️ menu.
+export const DEFAULT_SETTINGS = {
+    showCostPerTurn: false,
+    budgetEnabled: false,
+    debug: false,
+};
+export function makeSettingsStore(deps) {
+    const state = { ...DEFAULT_SETTINGS, ...(deps.persistence?.load() ?? {}) };
+    const persist = () => deps.persistence?.save({ ...state });
+    return {
+        get: () => ({ ...state }),
+        set(key, value) {
+            state[key] = value;
+            persist();
+        },
+        toggle(key) {
+            const next = !state[key];
+            state[key] = next;
+            persist();
+            return next;
+        },
+    };
+}
+//# sourceMappingURL=settings.js.map

package/dist/runtime/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/runtime/settings.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,+DAA+D;AAC/D,0EAA0E;AAC1E,gFAAgF;AAChF,gEAAgE;AAWhE,MAAM,CAAC,MAAM,gBAAgB,GAAa;IACxC,eAAe,EAAE,KAAK;IACtB,aAAa,EAAE,KAAK;IACpB,KAAK,EAAE,KAAK;CACb,CAAA;AAeD,MAAM,UAAU,iBAAiB,CAAC,IAA+C;IAC/E,MAAM,KAAK,GAAa,EAAE,GAAG,gBAAgB,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;IAEpF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;IAEhE,OAAO;QACL,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,EAAE,KAAK;YACZ,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAClB,OAAO,EAAE,CAAA;QACX,CAAC;QACD,MAAM,CAAC,GAAG;YACR,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACxB,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;YACjB,OAAO,EAAE,CAAA;YACT,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/runtime/spawn-plan.d.ts

@@ -0,0 +1,13 @@
+import type { PlanDAG } from '../orchestration/index.js';
+/**
+ * Normalize an unknown parsed value into a PlanDAG with every node having a
+ * non-null assignedTo set to `defaultCardName` when the node omits it.
+ *
+ * Accepted shapes:
+ *  - PlanDAG   `{ nodes: [...], edges?: [...] }`
+ *  - Linear    `{ steps: [{intent?}, ...] }`
+ *  - Single    `{ intent: string, ... }`
+ *  - Anything else → `{ nodes: [], edges: [] }`
+ */
+export declare function normalizeSpawnPlan(parsed: unknown, defaultCardName: string): PlanDAG;
+//# sourceMappingURL=spawn-plan.d.ts.map

package/dist/runtime/spawn-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-plan.d.ts","sourceRoot":"","sources":["../../src/runtime/spawn-plan.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAkB,MAAM,2BAA2B,CAAA;AAiBxE;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAuFpF"}

package/dist/runtime/spawn-plan.js

@@ -0,0 +1,107 @@
+// spawn-plan.ts — normalizes an unknown parsed plan into a PlanDAG with every
+// node having a non-null assignedTo. Used by the app layer so that linear
+// {steps} plans (and single-intent objects) can be safely passed to
+// makeDelegationManager without triggering the null-card spawn error.
+// Default scope/budget/contract/retry values for nodes where fields are absent.
+const DEFAULT_SCOPE = { owns: [], doNotTouch: [], taskClass: 'reasoning' };
+const DEFAULT_BUDGET = { iterations: 12, spendUsd: 1 };
+const DEFAULT_RETRY = { maxReplans: 0, maxIterations: 12 };
+function defaultNode(overrides) {
+    return {
+        scope: DEFAULT_SCOPE,
+        budgetSlice: DEFAULT_BUDGET,
+        outputContract: '',
+        retryPolicy: DEFAULT_RETRY,
+        ...overrides,
+    };
+}
+/**
+ * Normalize an unknown parsed value into a PlanDAG with every node having a
+ * non-null assignedTo set to `defaultCardName` when the node omits it.
+ *
+ * Accepted shapes:
+ *  - PlanDAG   `{ nodes: [...], edges?: [...] }`
+ *  - Linear    `{ steps: [{intent?}, ...] }`
+ *  - Single    `{ intent: string, ... }`
+ *  - Anything else → `{ nodes: [], edges: [] }`
+ */
+export function normalizeSpawnPlan(parsed, defaultCardName) {
+    if (parsed === null || typeof parsed !== 'object') {
+        return { nodes: [], edges: [] };
+    }
+    const p = parsed;
+    // ── PlanDAG: has an array `.nodes` ─────────────────────────────────────────
+    if (Array.isArray(p['nodes'])) {
+        const rawNodes = p['nodes'];
+        const edges = Array.isArray(p['edges'])
+            ? p['edges']
+            : [];
+        const nodes = rawNodes.map((raw, i) => {
+            const n = (raw !== null && typeof raw === 'object' ? raw : {});
+            const taskId = typeof n['taskId'] === 'string' ? n['taskId'] : `t${i + 1}`;
+            const intent = typeof n['intent'] === 'string' ? n['intent'] : '';
+            const assignedTo = typeof n['assignedTo'] === 'string' ? n['assignedTo'] : defaultCardName;
+            const dependsOn = Array.isArray(n['dependsOn']) ? n['dependsOn'] : [];
+            const scope = (n['scope'] !== null && typeof n['scope'] === 'object')
+                ? n['scope']
+                : {};
+            const budgetSlice = (n['budgetSlice'] !== null && typeof n['budgetSlice'] === 'object')
+                ? n['budgetSlice']
+                : {};
+            const retryPolicy = (n['retryPolicy'] !== null && typeof n['retryPolicy'] === 'object')
+                ? n['retryPolicy']
+                : {};
+            return defaultNode({
+                taskId,
+                intent,
+                assignedTo,
+                dependsOn,
+                scope: {
+                    owns: Array.isArray(scope['owns']) ? scope['owns'] : [],
+                    doNotTouch: Array.isArray(scope['doNotTouch']) ? scope['doNotTouch'] : [],
+                    taskClass: scope['taskClass'] ?? 'reasoning',
+                },
+                budgetSlice: {
+                    iterations: typeof budgetSlice['iterations'] === 'number' ? budgetSlice['iterations'] : 12,
+                    spendUsd: typeof budgetSlice['spendUsd'] === 'number' ? budgetSlice['spendUsd'] : 1,
+                },
+                outputContract: typeof n['outputContract'] === 'string' ? n['outputContract'] : '',
+                retryPolicy: {
+                    maxReplans: typeof retryPolicy['maxReplans'] === 'number' ? retryPolicy['maxReplans'] : 0,
+                    maxIterations: typeof retryPolicy['maxIterations'] === 'number' ? retryPolicy['maxIterations'] : 12,
+                },
+            });
+        });
+        return { nodes, edges };
+    }
+    // ── Linear plan: has an array `.steps` ─────────────────────────────────────
+    if (Array.isArray(p['steps'])) {
+        const rawSteps = p['steps'];
+        const nodes = rawSteps.map((raw, i) => {
+            const s = (raw !== null && typeof raw === 'object' ? raw : {});
+            const taskId = `s${i + 1}`;
+            const intent = typeof s['intent'] === 'string' ? s['intent'] : '';
+            return defaultNode({
+                taskId,
+                intent,
+                assignedTo: defaultCardName,
+                dependsOn: i > 0 ? [`s${i}`] : [],
+            });
+        });
+        const edges = nodes.slice(1).map((n, i) => ({ from: `s${i + 1}`, to: n.taskId }));
+        return { nodes, edges };
+    }
+    // ── Single task: has a string `.intent` ────────────────────────────────────
+    if (typeof p['intent'] === 'string') {
+        const node = defaultNode({
+            taskId: 's1',
+            intent: p['intent'],
+            assignedTo: defaultCardName,
+            dependsOn: [],
+        });
+        return { nodes: [node], edges: [] };
+    }
+    // ── Unrecognised ───────────────────────────────────────────────────────────
+    return { nodes: [], edges: [] };
+}
+//# sourceMappingURL=spawn-plan.js.map

package/dist/runtime/spawn-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-plan.js","sourceRoot":"","sources":["../../src/runtime/spawn-plan.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0EAA0E;AAC1E,oEAAoE;AACpE,sEAAsE;AAItE,gFAAgF;AAChF,MAAM,aAAa,GAAG,EAAE,IAAI,EAAE,EAAc,EAAE,UAAU,EAAE,EAAc,EAAE,SAAS,EAAE,WAAoB,EAAE,CAAA;AAC3G,MAAM,cAAc,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;AACtD,MAAM,aAAa,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAA;AAE1D,SAAS,WAAW,CAAC,SAAgH;IACnI,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,cAAc;QAC3B,cAAc,EAAE,EAAE;QAClB,WAAW,EAAE,aAAa;QAC1B,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe,EAAE,eAAuB;IACzE,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IACjC,CAAC;IAED,MAAM,CAAC,GAAG,MAAiC,CAAA;IAE3C,8EAA8E;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAc,CAAA;QACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC,CAAE,CAAC,CAAC,OAAO,CAAyC;YACrD,CAAC,CAAC,EAAE,CAAA;QAEN,MAAM,KAAK,GAAqB,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACtD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAA;YACzF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;YAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACjE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,eAAe,CAAA;YAC1F,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,WAAW,CAAc,CAAC,CAAC,CAAC,EAAE,CAAA;YAEnF,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBACnE,CAAC,CAAE,CAAC,CAAC,OAAO,CAAkG;gBAC9G,CAAC,CAAC,EAAE,CAAA;YACN,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC;gBACrF,CAAC,CAAE,CAAC,CAAC,aAAa,CAAgD;gBAClE,CAAC,CAAC,EAAE,CAAA;YACN,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC;gBACrF,CAAC,CAAE,CAAC,CAAC,aAAa,CAAqD;gBACvE,CAAC,CAAC,EAAE,CAAA;YAEN,OAAO,WAAW,CAAC;gBACjB,MAAM;gBACN,MAAM;gBACN,UAAU;gBACV,SAAS;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,MAAM,CAAc,CAAC,CAAC,CAAC,EAAE;oBACrE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,YAAY,CAAc,CAAC,CAAC,CAAC,EAAE;oBACvF,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,WAAW;iBAC7C;gBACD,WAAW,EAAE;oBACX,UAAU,EAAE,OAAO,WAAW,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;oBAC1F,QAAQ,EAAE,OAAO,WAAW,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;iBACpF;gBACD,cAAc,EAAE,OAAO,CAAC,CAAC,gBAAgB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE;gBAClF,WAAW,EAAE;oBACX,UAAU,EAAE,OAAO,WAAW,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzF,aAAa,EAAE,OAAO,WAAW,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE;iBACpG;aACF,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IACzB,CAAC;IAED,8EAA8E;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAc,CAAA;QACxC,MAAM,KAAK,GAAqB,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACtD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAA;YACzF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;YAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACjE,OAAO,WAAW,CAAC;gBACjB,MAAM;gBACN,MAAM;gBACN,UAAU,EAAE,eAAe;gBAC3B,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;aAClC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QACjF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IACzB,CAAC;IAED,8EAA8E;IAC9E,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,WAAW,CAAC;YACvB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC;YACnB,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,EAAE;SACd,CAAC,CAAA;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IACrC,CAAC;IAED,8EAA8E;IAC9E,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;AACjC,CAAC"}

package/dist/runtime/spend.d.ts

@@ -0,0 +1,41 @@
+export interface SpendUsage {
+    inputTokens: number;
+    outputTokens: number;
+    dollars: number;
+}
+/** One charge: a model call attributed to an agent (default "main"). */
+export interface SpendEntry {
+    model: string;
+    agentId?: string;
+    usage: SpendUsage;
+}
+export interface ModelSpend {
+    model: string;
+    inputTokens: number;
+    outputTokens: number;
+    dollars: number;
+}
+export interface AgentSpend {
+    agentId: string;
+    inputTokens: number;
+    outputTokens: number;
+    dollars: number;
+}
+/** Persistence seam — load the aggregated entries, save after every record. */
+export interface SpendPersistencePort {
+    load(): SpendEntry[];
+    save(entries: SpendEntry[]): void;
+}
+export interface SpendStore {
+    record(entry: SpendEntry): void;
+    /** Per-model totals, sorted by model id. */
+    byModel(): ModelSpend[];
+    /** Per-agent totals, sorted by agent id. */
+    byAgent(): AgentSpend[];
+    /** Grand total across all models/agents. */
+    total(): SpendUsage;
+}
+export declare function makeSpendStore(deps: {
+    persistence?: SpendPersistencePort;
+}): SpendStore;
+//# sourceMappingURL=spend.d.ts.map

package/dist/runtime/spend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend.d.ts","sourceRoot":"","sources":["../../src/runtime/spend.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,wEAAwE;AACxE,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,+EAA+E;AAC/E,MAAM,WAAW,oBAAoB;IACnC,IAAI,IAAI,UAAU,EAAE,CAAA;IACpB,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;CAClC;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAA;IAC/B,4CAA4C;IAC5C,OAAO,IAAI,UAAU,EAAE,CAAA;IACvB,4CAA4C;IAC5C,OAAO,IAAI,UAAU,EAAE,CAAA;IACvB,4CAA4C;IAC5C,KAAK,IAAI,UAAU,CAAA;CACpB;AAYD,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,oBAAoB,CAAA;CAAE,GAAG,UAAU,CAkEvF"}

package/dist/runtime/spend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend.js","sourceRoot":"","sources":["../../src/runtime/spend.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,iFAAiF;AACjF,2EAA2E;AAqD3E,MAAM,GAAG,GAAG,GAAG,CAAA;AAEf,MAAM,UAAU,cAAc,CAAC,IAA4C;IACzE,kEAAkE;IAClE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAA;IAErC,MAAM,GAAG,GAAG,CAAC,KAAiB,EAAQ,EAAE;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,MAAM,CAAA;QACvC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,GAAG,GAAG,GAAG,OAAO,EAAE,CAAA;QAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;QAC1G,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,CAAA;QAC1C,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC,YAAY,CAAA;QAC5C,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAA;QAClC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACrB,CAAC,CAAA;IAED,IAAI,IAAI,CAAC,WAAW;QAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,CAAA;IAErE,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAM;QAC7B,IAAI,CAAC,WAAW,CAAC,IAAI,CACnB,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;SACxF,CAAC,CAAC,CACJ,CAAA;IACH,CAAC,CAAA;IAED,OAAO;QACL,MAAM,CAAC,KAAK;YACV,GAAG,CAAC,KAAK,CAAC,CAAA;YACV,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO;YACL,MAAM,GAAG,GAAG,IAAI,GAAG,EAAsB,CAAA;YACzC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;gBAC/F,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,CAAA;gBAChC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAA;gBAClC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAA;gBACxB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YACvB,CAAC;YACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/F,CAAC;QACD,OAAO;YACL,MAAM,GAAG,GAAG,IAAI,GAAG,EAAsB,CAAA;YACzC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;gBACrG,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,CAAA;gBAChC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAA;gBAClC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAA;gBACxB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;YACzB,CAAC;YACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACvG,CAAC;QACD,KAAK;YACH,IAAI,WAAW,GAAG,CAAC,CAAA;YACnB,IAAI,YAAY,GAAG,CAAC,CAAA;YACpB,IAAI,OAAO,GAAG,CAAC,CAAA;YACf,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/B,WAAW,IAAI,CAAC,CAAC,WAAW,CAAA;gBAC5B,YAAY,IAAI,CAAC,CAAC,YAAY,CAAA;gBAC9B,OAAO,IAAI,CAAC,CAAC,OAAO,CAAA;YACtB,CAAC;YACD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;QAC/C,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/runtime/sub-agent-runner.d.ts

@@ -0,0 +1,19 @@
+import { type AgentRunnerDeps, type AgentRunner } from './agent-runner.js';
+import type { ProviderAdapter, MemoryPort, SessionLog, ToolCall } from '../agent-loop/types.js';
+import type { ApprovalDecision } from './hook-gate.js';
+import type { PendingAction } from '../gateway/index.js';
+import type { DelegationHandle } from '../orchestration/index.js';
+import type { ToolResult } from './execute-tool.js';
+export interface SubAgentRunnerDeps {
+    handle: DelegationHandle;
+    provider: ProviderAdapter;
+    baseExecuteTool: (call: ToolCall) => Promise<ToolResult>;
+    approve: (action: PendingAction) => Promise<ApprovalDecision>;
+    memory: MemoryPort;
+    sessionLog: SessionLog;
+    parentNarrowed: boolean;
+    doNotTouch: string[];
+    budgetCheck?: AgentRunnerDeps['budgetCheck'];
+}
+export declare function makeSubAgentRunner(deps: SubAgentRunnerDeps): AgentRunner;
+//# sourceMappingURL=sub-agent-runner.d.ts.map

package/dist/runtime/sub-agent-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sub-agent-runner.d.ts","sourceRoot":"","sources":["../../src/runtime/sub-agent-runner.ts"],"names":[],"mappings":"AAQA,OAAO,EAAmB,KAAK,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAI3F,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAyB,MAAM,wBAAwB,CAAA;AACtH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAEnD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,gBAAgB,CAAA;IACxB,QAAQ,EAAE,eAAe,CAAA;IACzB,eAAe,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;IACxD,OAAO,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC7D,MAAM,EAAE,UAAU,CAAA;IAClB,UAAU,EAAE,UAAU,CAAA;IACtB,cAAc,EAAE,OAAO,CAAA;IACvB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,WAAW,CAAC,EAAE,eAAe,CAAC,aAAa,CAAC,CAAA;CAC7C;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,GAAG,WAAW,CAsCxE"}

package/dist/runtime/sub-agent-runner.js

@@ -0,0 +1,47 @@
+// Sub-agent runner factory (runtime, ADR-0052).
+//
+// Builds a card-scoped child AgentRunner for one delegation: a FRESH empty
+// GrantStore (parent grants are never inherited — tier-2/3 re-prompt), the
+// card's tools gated via the scoped executor, a fresh Loop Guardian, and the
+// card's maxIterations as the tool-call cap. Parent narrowing is inherited by
+// forcing the sub-agent's span provenance to untrusted.
+import { makeAgentRunner } from './agent-runner.js';
+import { makeGrantStore } from '../safety/index.js';
+import { makeScopedToolExecutor } from './scoped-tool-executor.js';
+import { makeGuardian } from './guardian.js';
+export function makeSubAgentRunner(deps) {
+    // Fresh, empty grant store: the sub-agent inherits NO approvals from the parent.
+    const grants = makeGrantStore();
+    const scoped = makeScopedToolExecutor({
+        base: deps.baseExecuteTool,
+        permitsTool: deps.handle.permitsTool.bind(deps.handle),
+        owns: deps.handle.owns,
+        doNotTouch: deps.doNotTouch,
+    });
+    // The sub-agent runs its own agent-loop, so it needs its own agent-loop guardian
+    // (observe/note shape). The DelegationHandle.guardian is the orchestration-layer
+    // guardian (check/reset) — a different, incompatible type. Build a fresh one.
+    const guardian = makeGuardian();
+    const runner = makeAgentRunner({
+        provider: deps.provider,
+        memory: deps.memory,
+        grants,
+        executeTool: scoped,
+        approve: deps.approve,
+        guardian,
+        sessionLog: deps.sessionLog,
+        maxTotalToolCalls: deps.handle.card.maxIterations,
+        ...(deps.budgetCheck !== undefined ? { budgetCheck: deps.budgetCheck } : {}),
+    });
+    return {
+        handle: (input) => {
+            // Inherit parent narrowing: a narrowed parent forces the sub-agent's spans
+            // to untrusted provenance so the loop narrows and the motivated-call block applies.
+            const spans = deps.parentNarrowed
+                ? input.spans.map((s) => ({ ...s, provenance: 'untrusted' }))
+                : input.spans;
+            return runner.handle({ ...input, spans });
+        },
+    };
+}
+//# sourceMappingURL=sub-agent-runner.js.map

package/dist/runtime/sub-agent-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sub-agent-runner.js","sourceRoot":"","sources":["../../src/runtime/sub-agent-runner.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,wDAAwD;AAExD,OAAO,EAAE,eAAe,EAA0C,MAAM,mBAAmB,CAAA;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAmB5C,MAAM,UAAU,kBAAkB,CAAC,IAAwB;IACzD,iFAAiF;IACjF,MAAM,MAAM,GAAG,cAAc,EAAE,CAAA;IAE/B,MAAM,MAAM,GAAG,sBAAsB,CAAC;QACpC,IAAI,EAAE,IAAI,CAAC,eAAe;QAC1B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QACtD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;QACtB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAA;IAEF,iFAAiF;IACjF,iFAAiF;IACjF,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAA;IAE/B,MAAM,MAAM,GAAG,eAAe,CAAC;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM;QACN,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa;QACjD,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC,CAAA;IAEF,OAAO;QACL,MAAM,EAAE,CAAC,KAAgB,EAAuB,EAAE;YAChD,2EAA2E;YAC3E,oFAAoF;YACpF,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc;gBAC/B,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,WAAoB,EAAE,CAAC,CAAC;gBACtE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA;YACf,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3C,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/safety/grants.d.ts

@@ -0,0 +1,7 @@
+import type { GrantStore, GrantPersistencePort } from './types.js';
+export interface GrantStoreDeps {
+    /** Persistence for always grants. Absent ⇒ always grants are in-memory only. */
+    persistence?: GrantPersistencePort;
+}
+export declare function makeGrantStore(deps?: GrantStoreDeps): GrantStore;
+//# sourceMappingURL=grants.d.ts.map

package/dist/safety/grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/safety/grants.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAc,UAAU,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAE9E,MAAM,WAAW,cAAc;IAC7B,gFAAgF;IAChF,WAAW,CAAC,EAAE,oBAAoB,CAAA;CACnC;AAED,wBAAgB,cAAc,CAAC,IAAI,GAAE,cAAmB,GAAG,UAAU,CA6CpE"}

package/dist/safety/grants.js

@@ -0,0 +1,53 @@
+// Scoped approval grant store (ADR-0047).
+//
+// Remembers "session" / "always" approvals per base tool so repeated low-risk
+// actions stop prompting. Session grants are in-memory (process lifetime);
+// always grants are persisted via an injected port. This store ONLY answers
+// "is this tool granted" — the safety verdict layer decides whether a grant is
+// allowed to suppress a card (never for Tier-3, never over a deny).
+export function makeGrantStore(deps = {}) {
+    const session = new Set();
+    const always = new Set(deps.persistence?.loadAlways() ?? []);
+    const persist = () => deps.persistence?.saveAlways([...always]);
+    return {
+        has(tool) {
+            return session.has(tool) || always.has(tool);
+        },
+        record(tool, scope) {
+            if (scope === 'always') {
+                // Promote: an always grant supersedes a session grant for the tool.
+                session.delete(tool);
+                if (!always.has(tool)) {
+                    always.add(tool);
+                    persist();
+                }
+                return;
+            }
+            // session: skip if already covered by a durable always grant.
+            if (!always.has(tool))
+                session.add(tool);
+        },
+        revoke(tool) {
+            session.delete(tool);
+            if (always.delete(tool))
+                persist();
+        },
+        revokeAll() {
+            session.clear();
+            if (always.size > 0) {
+                always.clear();
+                persist();
+            }
+        },
+        list() {
+            const out = [];
+            for (const t of always)
+                out.push({ tool: t, scope: 'always' });
+            for (const t of session)
+                if (!always.has(t))
+                    out.push({ tool: t, scope: 'session' });
+            return out;
+        },
+    };
+}
+//# sourceMappingURL=grants.js.map

package/dist/safety/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/safety/grants.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAC/E,oEAAoE;AASpE,MAAM,UAAU,cAAc,CAAC,OAAuB,EAAE;IACtD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;IAEpE,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAA;IAErE,OAAO;QACL,GAAG,CAAC,IAAY;YACd,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC9C,CAAC;QAED,MAAM,CAAC,IAAY,EAAE,KAAiB;YACpC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvB,oEAAoE;gBACpE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;oBAChB,OAAO,EAAE,CAAA;gBACX,CAAC;gBACD,OAAM;YACR,CAAC;YACD,8DAA8D;YAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,CAAC,IAAY;YACjB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACpB,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAA;QACpC,CAAC;QAED,SAAS;YACP,OAAO,CAAC,KAAK,EAAE,CAAA;YACf,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,EAAE,CAAA;gBACd,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC;QAED,IAAI;YACF,MAAM,GAAG,GAA0C,EAAE,CAAA;YACrD,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC9D,KAAK,MAAM,CAAC,IAAI,OAAO;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;YACpF,OAAO,GAAG,CAAA;QACZ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/safety/index.d.ts

@@ -0,0 +1,72 @@
+export type { Provenance, ContextSpan, ToolCall, Verdict, Tier, AutonomyLevel, AutonomyTier, ConfirmationCard, HardDenyRule, HardDenyCategory, InjectionVerdict, InjectionClassifier, InputGuard, SafetyPolicy, SafetyClassifier, EgressMode, EgressAllowlistEntry, OutboundRequest, EgressGuard, ApprovalStatus, ApprovalRecord, ApprovalResult, ApprovalHandler, SecretRedactor, Vault, MountSpec, SandboxConfig, SandboxRunResult, SandboxSecurityLevel, SandboxRunner, NightlyOpKind, NightlyOp, NightlyCarveoutEntry, NightlyCarveout, LethalTrifectaState, LethalTrifectaResult, LethalTrifectaDetector, GrantScope, GrantStore, GrantPersistencePort, } from './types.js';
+export { makeGrantStore } from './grants.js';
+export type { GrantStoreDeps } from './grants.js';
+import type { SafetyClassifier, SafetyPolicy, Vault, SandboxRunner, SandboxSecurityLevel, SandboxRunResult, SandboxConfig, InputGuard, InjectionVerdict, EgressGuard, EgressAllowlistEntry, ContextSpan, ApprovalHandler, NightlyCarveout, NightlyOp, LethalTrifectaDetector, GrantStore } from './types.js';
+export interface SafetyPolicyDeps {
+    /** false = cold start: rule set not yet loaded → fail-closed deny-all. */
+    ready?: boolean;
+    /** Last sandbox probe; degraded mode denies high-risk tools (ADR-0012). */
+    sandboxSecurityLevel?: SandboxSecurityLevel;
+    /**
+     * Scoped approval grants (ADR-0047). When present, a per-tool grant suppresses
+     * the Tier-2 `ask` (only after every deny check; never for Tier-3). Absent ⇒
+     * no grants ⇒ baseline behavior.
+     */
+    grants?: GrantStore;
+}
+export declare function makeSafetyPolicy(deps?: SafetyPolicyDeps): SafetyPolicy;
+export declare function makeSafetyClassifier(deps?: SafetyPolicyDeps): SafetyClassifier;
+export interface InputGuardDeps {
+    /** Advisory classifier override; failure never blocks defang. */
+    classify?: (span: ContextSpan) => Promise<InjectionVerdict>;
+}
+export declare function makeInputGuard(deps?: InputGuardDeps): InputGuard;
+export interface EgressGuardDeps {
+    allowlist?: EgressAllowlistEntry[];
+    proxyAvailable?: boolean;
+    maxBodyBytes?: number;
+}
+export declare function makeEgressGuard(deps?: EgressGuardDeps): EgressGuard;
+interface PendingApproval {
+    nonce: string;
+    actionHash: string;
+    requiresSecondFactor: boolean;
+    stagedHashAtAccept: string;
+    expiresAt: number;
+}
+export interface ApprovalHandlerDeps {
+    pending?: PendingApproval[];
+    /** Hash of the staging area at promote time (TOCTOU re-check). */
+    currentStagedHash?: () => string;
+    now?: () => number;
+    verifySecondFactor?: (factor: string) => boolean;
+}
+export declare function makeApprovalHandler(deps?: ApprovalHandlerDeps): ApprovalHandler;
+export interface VaultDeps {
+    secrets?: Record<string, string>;
+}
+export declare function makeVault(deps?: VaultDeps): Vault;
+export interface SandboxRunnerDeps {
+    /** Launch shim (spy-able); returns the container id. Default: deterministic id. */
+    launch?: (config: SandboxConfig, flags: string[]) => string;
+    /** Probe for the gVisor (runsc) runtime; default: available. */
+    gVisorProbe?: () => boolean;
+    /** Host paths mounts may live under (own worktree only). */
+    allowedMountRoots?: string[];
+    /** Exec shim for commands inside a container. */
+    execImpl?: (containerId: string, cmd: string, args: readonly string[]) => Promise<SandboxRunResult>;
+    /** Seccomp profile path applied to every container (ADR-0012, CSO-M1). */
+    seccompProfile?: string;
+    /** User-namespace remap target applied to every container (ADR-0012, CSO-M1). */
+    usernsRemap?: string;
+}
+export declare function makeSandboxRunner(deps?: SandboxRunnerDeps): SandboxRunner;
+export interface NightlyCarveoutDeps {
+    /** Pre-op DB snapshot (reversibility); runs BEFORE the op. */
+    snapshot?: () => void;
+    /** Executes the permitted op. */
+    execOp?: (op: NightlyOp) => void;
+}
+export declare function makeNightlyCarveout(deps?: NightlyCarveoutDeps): NightlyCarveout;
+export declare function makeLethalTrifectaDetector(): LethalTrifectaDetector;
+//# sourceMappingURL=index.d.ts.map

package/dist/safety/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/safety/index.ts"],"names":[],"mappings":"AAEA,YAAY,EAEV,UAAU,EACV,WAAW,EACX,QAAQ,EACR,OAAO,EACP,IAAI,EACJ,aAAa,EACb,YAAY,EACZ,gBAAgB,EAEhB,YAAY,EACZ,gBAAgB,EAEhB,gBAAgB,EAChB,mBAAmB,EAEnB,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,oBAAoB,EACpB,eAAe,EACf,WAAW,EAEX,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,EAEf,cAAc,EACd,KAAK,EAEL,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EAEb,aAAa,EACb,SAAS,EACT,oBAAoB,EACpB,eAAe,EAEf,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EAEtB,UAAU,EACV,UAAU,EACV,oBAAoB,GACrB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,KAAK,EAEL,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAEhB,aAAa,EACb,UAAU,EACV,gBAAgB,EAChB,WAAW,EACX,oBAAoB,EAEpB,WAAW,EACX,eAAe,EAGf,eAAe,EACf,SAAS,EAET,sBAAsB,EAKtB,UAAU,EACX,MAAM,YAAY,CAAA;AA+EnB,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,2EAA2E;IAC3E,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAC3C;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,CAAA;CACpB;AAED,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,gBAAqB,GAAG,YAAY,CAsE1E;AAMD,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,gBAAqB,GAAG,gBAAgB,CAMlF;AAYD,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;CAC5D;AAED,wBAAgB,cAAc,CAAC,IAAI,GAAE,cAAmB,GAAG,UAAU,CAsCpE;AAOD,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAA;IAClC,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAuBD,wBAAgB,eAAe,CAAC,IAAI,GAAE,eAAoB,GAAG,WAAW,CAyCvE;AAMD,UAAU,eAAe;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,oBAAoB,EAAE,OAAO,CAAA;IAC7B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,eAAe,EAAE,CAAA;IAC3B,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,MAAM,MAAM,CAAA;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAA;CACjD;AAkBD,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,mBAAwB,GAAG,eAAe,CAgDnF;AAMD,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACjC;AAQD,wBAAgB,SAAS,CAAC,IAAI,GAAE,SAAc,GAAG,KAAK,CAqCrD;AAMD,MAAM,WAAW,iBAAiB;IAChC,mFAAmF;IACnF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,MAAM,CAAA;IAC3D,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,OAAO,CAAA;IAC3B,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,iDAAiD;IACjD,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACnG,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,iBAAsB,GAAG,aAAa,CA8D7E;AAMD,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,iCAAiC;IACjC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,KAAK,IAAI,CAAA;CACjC;AAQD,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,mBAAwB,GAAG,eAAe,CAsBnF;AAMD,wBAAgB,0BAA0B,IAAI,sBAAsB,CAanE"}