@alneas/eaos-server 0.1.0 → 0.2.0

package/dist/{chunk-THYUY5ZZ.js → chunk-F2J6IQ6I.js}

@@ -1,3 +1,6 @@
+import {
+  createChatClient
+} from "./chunk-YMHVRBUU.js";
 import {
   createCommandAgentExecutor,
   validateAgentRuntimePolicy
@@ -7,6 +10,7 @@ import {
 } from "./chunk-YABTQZDJ.js";
 
 // src/agentic/autonomous-worker.ts
+import { createOpenAICompatibleChatAdapter } from "@alneas/appkit-core/ai/ai-chat";
 import { defaultRuntimePlacementPolicy, McpGatekeeper } from "@alneas/eaos-core";
 import { randomUUID } from "node:crypto";
 function inferRuntimeRole() {
@@ -20,6 +24,8 @@ var ServerAutonomousWorker = class {
   hermesAgentPath;
   litellmUrl;
   litellmModel;
+  litellmHeaders;
+  chatOptions;
   maxOutputChars;
   runtimePolicy;
   runtimeRole;
@@ -37,6 +43,8 @@ var ServerAutonomousWorker = class {
     this.hermesAgentPath = options?.hermesAgentBinaryPath || process.env.HERMES_AGENT_BIN_PATH || "hermes";
     this.litellmUrl = options?.litellmEndpoint || process.env.LITELLM_ENDPOINT || "http://localhost:4000/v1";
     this.litellmModel = options?.litellmModel || process.env.LITELLM_MODEL;
+    this.litellmHeaders = { ...options?.litellmHeaders };
+    this.chatOptions = { ...options?.chat, parameters: structuredClone(options?.chat?.parameters) };
     this.maxOutputChars = options?.maxOutputChars ?? 1e6;
     this.runtimePolicy = validateAgentRuntimePolicy(options?.runtimePolicy || defaultRuntimePlacementPolicy().ai.agentRuntime);
     this.runtimeRole = options?.runtimeRole || inferRuntimeRole();
@@ -48,9 +56,10 @@ var ServerAutonomousWorker = class {
   /**
    * Checks task limits and gatekeeper policy before dispatching one runtime attempt.
    * @param request - Verified task identity and instructions; required strings must be nonblank, title at most 500 characters, instructions at most 1000000, and timeout a safe integer 1–3600000 milliseconds when provided.
+   * @param execution - Optional cancellation signal for built-in shared chat tasks; does not change injected executor or process contracts.
    * @returns COMPLETED text output, PENDING_APPROVAL ticket data without execution, or FAILED data with error and optional classification/retry advice. Duration is measured in wall-clock milliseconds.
    * @throws Can reject a throwing gatekeeper or malformed gatekeeper interaction before dispatch; runtime execution errors are normally returned as FAILED data.
-   * @remarks Gatekeeper receives fixed agent/server_bot roles rather than request user roles. Approval tickets are generated but not persisted here. The configured framework policy overrides request.runtimePolicy before execution. Injected executors and built-in LiteLLM outputs are bounded by maxOutputChars; LiteLLM response bodies are parsed before text length is checked.
+   * @remarks Gatekeeper receives fixed agent/server_bot roles rather than request user roles. Approval tickets are generated but not persisted here. The configured framework policy overrides request.runtimePolicy before execution. Injected executors and built-in chat outputs are bounded by maxOutputChars. LiteLLM uses Appkit SSE transport through createChatClient; JSON-only endpoints require a Host adapter or executor. Existing FAILED/PENDING_APPROVAL/COMPLETED envelopes and injected-executor priority remain unchanged.
    * @example
    * ```typescript
    * import { ServerAutonomousWorker, type ServerWorkerOptions } from "@alneas/eaos-server/agentic/autonomous-worker";
@@ -60,7 +69,7 @@ var ServerAutonomousWorker = class {
    * }
    * ```
    */
-  async runTask(request) {
+  async runTask(request, execution = {}) {
     const startTime = Date.now();
     if (!request || [request.id, request.tenantId, request.userId, request.title, request.instructions].some((value) => typeof value !== "string" || !value.trim())) {
       return { taskId: typeof request?.id === "string" ? request.id : "unknown", status: "FAILED", error: "Invalid agent task request", durationMs: Date.now() - startTime };
@@ -115,7 +124,7 @@ var ServerAutonomousWorker = class {
     }
     if (frameworkManaged) this.activeTasks += 1;
     try {
-      const output = await this.execute({ ...structuredClone(request), runtimePolicy: structuredClone(this.runtimePolicy) });
+      const output = await this.execute({ ...structuredClone(request), runtimePolicy: structuredClone(this.runtimePolicy) }, execution.signal);
       return {
         taskId: request.id,
         status: "COMPLETED",
@@ -134,12 +143,12 @@ var ServerAutonomousWorker = class {
       if (frameworkManaged) this.activeTasks -= 1;
     }
   }
-  async execute(request) {
+  async execute(request, signal) {
     const injected = this.executors[request.workerType];
     if (injected) return this.boundOutput(await injected(structuredClone(request)));
     if (request.workerType === "goose") return this.executeHeadlessGoose(request);
     if (request.workerType === "hermes_agent") return this.executeHeadlessHermesAgent(request);
-    if (request.workerType === "litellm") return this.executeLiteLlm(request);
+    if (request.workerType === "litellm") return this.executeLiteLlm(request, signal);
     throw new Error(`No executor configured for worker type '${request.workerType}'`);
   }
   /**
@@ -170,27 +179,61 @@ var ServerAutonomousWorker = class {
   /**
    * Execute a host-selected model through LiteLLM.
    */
-  async executeLiteLlm(request) {
-    if (!this.litellmModel) throw new Error("LiteLLM model is not configured");
-    const endpoint = new URL(this.litellmUrl);
-    if (!["http:", "https:"].includes(endpoint.protocol)) throw new Error("Invalid LiteLLM endpoint");
-    endpoint.pathname = `${endpoint.pathname.replace(/\/$/, "")}/chat/completions`;
-    const response = await this.fetchImpl(endpoint, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({
+  async executeLiteLlm(request, signal) {
+    const configured = this.chatOptions;
+    let adapter = configured.adapter;
+    if (!adapter) {
+      if (!this.litellmModel) throw new Error("LiteLLM model is not configured");
+      const endpoint = new URL(this.litellmUrl);
+      if (!["http:", "https:"].includes(endpoint.protocol)) throw new Error("Invalid LiteLLM endpoint");
+      endpoint.pathname = `${endpoint.pathname.replace(/\/$/, "")}/chat/completions`;
+      adapter = createOpenAICompatibleChatAdapter({
+        api: endpoint.href,
         model: this.litellmModel,
-        messages: [{ role: "user", content: request.instructions }],
-        metadata: { tenantId: request.tenantId, taskId: request.id }
-      }),
-      signal: AbortSignal.timeout(request.timeoutMs ?? 6e4),
-      redirect: "error"
+        headers: this.litellmHeaders,
+        maxResponseChars: Math.min(1e7, this.maxOutputChars * 6 + 65536),
+        fetch: async (input, init) => {
+          const response = await this.fetchImpl(input, { ...init, redirect: "error" });
+          if (!response.ok) {
+            try {
+              void response.body?.cancel().catch(() => {
+              });
+            } catch {
+            }
+            throw new Error(`LiteLLM request failed (${response.status})`);
+          }
+          return response;
+        }
+      });
+    }
+    const metadata = configured.parameters?.metadata;
+    const timeout = request.timeoutMs ?? 6e4;
+    const chat = createChatClient({
+      ...configured,
+      adapter,
+      timeoutMs: Math.min(timeout, configured.timeoutMs ?? timeout),
+      maxInputChars: configured.maxInputChars ?? 7e6,
+      maxOutputChars: Math.min(1e7, configured.maxOutputChars ?? this.maxOutputChars * 6 + 65536),
+      parameters: { ...configured.parameters, metadata: {
+        ...metadata && typeof metadata === "object" && !Array.isArray(metadata) ? metadata : {},
+        tenantId: request.tenantId,
+        taskId: request.id
+      } },
+      governance: { ...configured.governance, sessionId: configured.governance?.sessionId ?? request.id },
+      authorize: async (principal, operation) => {
+        if (principal.tenantId !== request.tenantId || principal.userId !== request.userId) return false;
+        if (configured.authorize && await configured.authorize(principal, operation) !== true) return false;
+        const decision = this.gatekeeper.validateCall({ toolName: "server_agent_litellm", userRoles: ["agent", "server_bot"], tenantId: principal.tenantId });
+        return decision.allowed && !decision.requireHumanApproval;
+      }
+    });
+    const completed = await chat.complete({ tenantId: request.tenantId, userId: request.userId }, {
+      messages: [{ id: request.id, role: "user", parts: [{ type: "text", text: request.instructions }] }],
+      tools: "none",
+      signal
     });
-    if (!response.ok) throw new Error(`LiteLLM request failed (${response.status})`);
-    const body = await response.json();
-    const output = body.choices?.[0]?.message?.content;
-    if (typeof output !== "string") throw new Error("LiteLLM returned no assistant content");
-    return this.boundOutput(output);
+    if (completed.message.parts.some((part) => part.type !== "text")) throw new Error("LiteLLM returned no assistant content");
+    return this.boundOutput(completed.message.parts.map((part) => part.type === "text" ? part.text : "").join(""));
   }
   boundOutput(output) {
     if (output.length > this.maxOutputChars) throw new Error("Agent output exceeds configured limit");
@@ -201,4 +244,4 @@ var ServerAutonomousWorker = class {
 export {
   ServerAutonomousWorker
 };
-//# sourceMappingURL=chunk-THYUY5ZZ.js.map
+//# sourceMappingURL=chunk-F2J6IQ6I.js.map

package/dist/chunk-F2J6IQ6I.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agentic/autonomous-worker.ts"],"sourcesContent":["import {createOpenAICompatibleChatAdapter, type AIChatAdapter} from '@alneas/appkit-core/ai/ai-chat'\nimport {createChatClient, type ChatClientOptions} from '../execution/chat'\nimport { defaultRuntimePlacementPolicy, McpGatekeeper, type AgentRuntimeResourcePolicy } from '@alneas/eaos-core'\nimport { ServerAgentExecutionError, type ServerAgentExecutor, type ServerAgentTaskRequest, type ServerAgentTaskResult, type ServerAgentWorkerType } from './types'\nimport { randomUUID } from 'node:crypto'\nimport { createCommandAgentExecutor, validateAgentRuntimePolicy } from './executor'\n\n/**\n * Host composition of the shared chat path for built-in model tasks.\n * @remarks Defaults retain the worker gatekeeper, 60-second task timeout and worker output bound. Tools are undisclosed; action orchestration belongs to createToolAgent. No model transport or credential is selected from model output.\n * @see ServerWorkerOptions for complete worker configuration.\n */\nexport interface ServerWorkerChatOptions extends Omit<ChatClientOptions, 'adapter' | 'authorize' | 'tools'> {\n  /** Optional host adapter; omission uses Appkit's OpenAI-compatible LiteLLM transport. */\n  adapter?: AIChatAdapter\n  /** Optional live Host authorization, combined with the worker gatekeeper before and after asynchronous work. */\n  authorize?: ChatClientOptions['authorize']\n}\n\n/**\n * Trusted gatekeeper, runtime endpoints/adapters, and execution limits for {@link ServerAutonomousWorker}.\n */\nexport interface ServerWorkerOptions {\n  /** Host security/approval policies; defaults to a new McpGatekeeper. */\n  gatekeeper?: McpGatekeeper\n  /** Trusted executable path; defaults to GOOSE_BIN_PATH or goose. */\n  gooseBinaryPath?: string\n  /** Trusted executable path; defaults to HERMES_AGENT_BIN_PATH or hermes. */\n  hermesAgentBinaryPath?: string\n  /** Host LiteLLM base URL; defaults to LITELLM_ENDPOINT or http://localhost:4000/v1. */\n  litellmEndpoint?: string\n  /** Host model identifier; defaults to LITELLM_MODEL and is required for built-in LiteLLM execution. */\n  litellmModel?: string\n  /** Host-owned provider headers; captured at construction and never read from task/model input. */\n  litellmHeaders?: Readonly<Record<string, string>>\n  /** Optional shared chat model routing, live authorization, limits, guards, usage, budget and observability. */\n  chat?: ServerWorkerChatOptions\n  /** Combined command output/string result ceiling, safe integer 1–10000000; defaults to 1000000. */\n  maxOutputChars?: number\n  /** Framework default is safe for the ARM agent host. Host adapters may tighten it. */\n  runtimePolicy?: AgentRuntimeResourcePolicy\n  /** Built-in Goose/Hermes execution is permitted only on the AI placement. */\n  runtimeRole?: ServerRuntimeRole\n  /** Host fetch implementation for built-in LiteLLM; defaults to global fetch. */\n  fetch?: typeof fetch\n  /** Host/plugin adapters for coding agents and other external runtimes. */\n  executors?: Partial<Record<ServerAgentWorkerType, ServerAgentExecutor>>\n}\n\n/**\n * Host placement role controlling whether built-in Goose/Hermes processes may run locally.\n * @see ServerAutonomousWorker.\n */\nexport type ServerRuntimeRole = 'edge' | 'application-worker' | 'ai'\n\nfunction inferRuntimeRole(): ServerRuntimeRole {\n  const configured = process.env.EAOS_RUNTIME_ROLE\n  if (configured === 'edge' || configured === 'application-worker' || configured === 'ai') return configured\n  // The supported three-host topology places the AI runtime on the ARM host.\n  // Unknown x64 hosts therefore fail closed as application-worker hosts.\n  return process.arch === 'arm64' ? 'ai' : 'application-worker'\n}\n\n/**\n * Admits and executes host agent tasks through a gatekeeper and bounded runtime adapters.\n * @remarks This class runs only when runTask is called; it installs no scheduler. The host authenticates tenant/user claims before admission. Framework-managed tasks share a per-instance concurrency counter; injected executors own scheduling and are exempt from it. Built-in Goose/Hermes require the ai role and Node process/systemd support. Queue persistence, approvals, retries, and side-effect idempotency belong to the host.\n * @example\n * ```typescript\n * import { ServerAutonomousWorker, type ServerWorkerOptions } from \"@alneas/eaos-server/agentic/autonomous-worker\";\n * export function worker(options: ServerWorkerOptions) { return new ServerAutonomousWorker(options); }\n * ```\n */\nexport class ServerAutonomousWorker {\n  private gatekeeper: McpGatekeeper\n  private goosePath: string\n  private hermesAgentPath: string\n  private litellmUrl: string\n  private litellmModel?: string\n  private litellmHeaders: Record<string, string>\n  private chatOptions: ServerWorkerChatOptions\n  private maxOutputChars: number\n  private runtimePolicy: AgentRuntimeResourcePolicy\n  private runtimeRole: ServerRuntimeRole\n  private activeTasks = 0\n  private fetchImpl: typeof fetch\n  private executors: Partial<Record<ServerAgentWorkerType, ServerAgentExecutor>>\n\n  /**\n   * Captures runtime settings and validates resource policy, role, and output ceiling.\n   * @param options - Trusted host configuration; omitted gatekeeper uses a new McpGatekeeper and runtime role uses EAOS_RUNTIME_ROLE, then ai on arm64 or application-worker otherwise.\n   * @throws Invalid resource policy, role, or output limit.\n   */\n  constructor(options?: ServerWorkerOptions) {\n    this.gatekeeper = options?.gatekeeper || new McpGatekeeper()\n    this.goosePath = options?.gooseBinaryPath || process.env.GOOSE_BIN_PATH || 'goose'\n    this.hermesAgentPath = options?.hermesAgentBinaryPath || process.env.HERMES_AGENT_BIN_PATH || 'hermes'\n    this.litellmUrl = options?.litellmEndpoint || process.env.LITELLM_ENDPOINT || 'http://localhost:4000/v1'\n    this.litellmModel = options?.litellmModel || process.env.LITELLM_MODEL\n    this.litellmHeaders = {...options?.litellmHeaders}\n    this.chatOptions = {...options?.chat, parameters: structuredClone(options?.chat?.parameters)}\n    this.maxOutputChars = options?.maxOutputChars ?? 1_000_000\n    this.runtimePolicy = validateAgentRuntimePolicy(options?.runtimePolicy || defaultRuntimePlacementPolicy().ai.agentRuntime)\n    this.runtimeRole = options?.runtimeRole || inferRuntimeRole()\n    if (!['edge', 'application-worker', 'ai'].includes(this.runtimeRole)) throw new Error('Invalid agent runtime role')\n    this.fetchImpl = options?.fetch || fetch\n    this.executors = options?.executors || {}\n    if (!Number.isSafeInteger(this.maxOutputChars) || this.maxOutputChars < 1 || this.maxOutputChars > 10_000_000) throw new Error('Invalid worker output limit')\n  }\n\n  /**\n   * Checks task limits and gatekeeper policy before dispatching one runtime attempt.\n   * @param request - Verified task identity and instructions; required strings must be nonblank, title at most 500 characters, instructions at most 1000000, and timeout a safe integer 1–3600000 milliseconds when provided.\n   * @param execution - Optional cancellation signal for built-in shared chat tasks; does not change injected executor or process contracts.\n   * @returns COMPLETED text output, PENDING_APPROVAL ticket data without execution, or FAILED data with error and optional classification/retry advice. Duration is measured in wall-clock milliseconds.\n   * @throws Can reject a throwing gatekeeper or malformed gatekeeper interaction before dispatch; runtime execution errors are normally returned as FAILED data.\n   * @remarks Gatekeeper receives fixed agent/server_bot roles rather than request user roles. Approval tickets are generated but not persisted here. The configured framework policy overrides request.runtimePolicy before execution. Injected executors and built-in chat outputs are bounded by maxOutputChars. LiteLLM uses Appkit SSE transport through createChatClient; JSON-only endpoints require a Host adapter or executor. Existing FAILED/PENDING_APPROVAL/COMPLETED envelopes and injected-executor priority remain unchanged.\n   * @example\n   * ```typescript\n   * import { ServerAutonomousWorker, type ServerWorkerOptions } from \"@alneas/eaos-server/agentic/autonomous-worker\";\n   * import type { ServerAgentTaskRequest } from \"@alneas/eaos-server/agentic/types\";\n   * export async function execute(options: ServerWorkerOptions, request: ServerAgentTaskRequest) {\n   *   return new ServerAutonomousWorker(options).runTask(request);\n   * }\n   * ```\n   */\n  async runTask(request: ServerAgentTaskRequest, execution: {\n    /** Cooperatively cancel built-in shared chat. Injected executors and Goose/Hermes retain their own cancellation contracts. */\n    signal?: AbortSignal\n  } = {}): Promise<ServerAgentTaskResult> {\n    const startTime = Date.now()\n\n    if (!request || [request.id, request.tenantId, request.userId, request.title, request.instructions].some(value => typeof value !== 'string' || !value.trim())) {\n      return { taskId: typeof request?.id === 'string' ? request.id : 'unknown', status: 'FAILED', error: 'Invalid agent task request', durationMs: Date.now() - startTime }\n    }\n    if (request.instructions.length > 1_000_000 || request.title.length > 500 || request.timeoutMs !== undefined && (!Number.isSafeInteger(request.timeoutMs) || request.timeoutMs < 1 || request.timeoutMs > 3_600_000)) {\n      return { taskId: request.id, status: 'FAILED', error: 'Agent task exceeds configured limits', durationMs: Date.now() - startTime }\n    }\n\n    // 1. Evaluate security and gatekeeper policies\n    const policy = this.gatekeeper.validateCall({\n      toolName: `server_agent_${request.workerType}`,\n      userRoles: ['agent', 'server_bot'],\n      tenantId: request.tenantId,\n    })\n\n    if (!policy.allowed) {\n      return {\n        taskId: request.id,\n        status: 'FAILED',\n        error: `Task execution blocked by security policy: ${policy.reason}`,\n        riskLevel: policy.riskLevel,\n        durationMs: Date.now() - startTime,\n      }\n    }\n\n    if (policy.requireHumanApproval) {\n      return {\n        taskId: request.id,\n        status: 'PENDING_APPROVAL',\n        approvalTicketId: randomUUID(),\n        approvalLevel: policy.approvalLevel,\n        riskLevel: policy.riskLevel,\n        durationMs: Date.now() - startTime,\n      }\n    }\n\n    // Explicitly injected executors are host-owned adapters and may implement\n    // their own queue/scheduler. The framework-managed Goose/Hermes path is\n    // bounded by the default policy so a forgotten host setting cannot create\n    // unbounded local agent concurrency.\n    const frameworkManaged = !this.executors[request.workerType]\n    if (frameworkManaged && (request.workerType === 'goose' || request.workerType === 'hermes_agent') && this.runtimeRole !== 'ai') {\n      return {\n        taskId: request.id,\n        status: 'FAILED',\n        error: `Built-in ${request.workerType} execution is restricted to the AI runtime placement`,\n        failureCode: 'AGENT_UNAVAILABLE',\n        retryable: true,\n        durationMs: Date.now() - startTime,\n      }\n    }\n    if (frameworkManaged && this.activeTasks >= this.runtimePolicy.maxConcurrent) {\n      return {\n        taskId: request.id,\n        status: 'FAILED',\n        error: 'Agent runtime concurrency limit reached',\n        failureCode: 'AGENT_UNAVAILABLE',\n        retryable: true,\n        durationMs: Date.now() - startTime,\n      }\n    }\n\n    // 2. Dispatch according to worker type\n    if (frameworkManaged) this.activeTasks += 1\n    try {\n      const output = await this.execute({ ...structuredClone(request), runtimePolicy: structuredClone(this.runtimePolicy) }, execution.signal)\n      return {\n        taskId: request.id,\n        status: 'COMPLETED',\n        output,\n        durationMs: Date.now() - startTime,\n      }\n    } catch (err) {\n      return {\n        taskId: request.id,\n        status: 'FAILED',\n        error: (err as Error).message,\n        ...(err instanceof ServerAgentExecutionError ? { failureCode: err.failureCode, retryable: err.retryable } : {}),\n        durationMs: Date.now() - startTime,\n      }\n    } finally {\n      if (frameworkManaged) this.activeTasks -= 1\n    }\n  }\n\n  private async execute(request: ServerAgentTaskRequest, signal?: AbortSignal): Promise<string> {\n    const injected = this.executors[request.workerType]\n    if (injected) return this.boundOutput(await injected(structuredClone(request)))\n    if (request.workerType === 'goose') return this.executeHeadlessGoose(request)\n    if (request.workerType === 'hermes_agent') return this.executeHeadlessHermesAgent(request)\n    if (request.workerType === 'litellm') return this.executeLiteLlm(request, signal)\n    throw new Error(`No executor configured for worker type '${request.workerType}'`)\n  }\n\n  /**\n   * Execute Goose in headless batch mode\n   */\n  private async executeHeadlessGoose(request: ServerAgentTaskRequest): Promise<string> {\n    return createCommandAgentExecutor({\n      command: this.goosePath,\n      buildArgs: task => ['run', '--text', task.instructions],\n      includeProcessEnv: true,\n      maxOutputChars: this.maxOutputChars,\n      sandbox: { mode: 'auto', policy: this.runtimePolicy },\n    })(request)\n  }\n\n  /**\n   * Execute NousResearch Hermes Agent in headless mode (-z / non-interactive)\n   * Hermes Agent provides persistent cross-session memory and self-improving skill extraction.\n   */\n  private async executeHeadlessHermesAgent(request: ServerAgentTaskRequest): Promise<string> {\n    return createCommandAgentExecutor({\n      command: this.hermesAgentPath,\n      buildArgs: task => ['run', '-z', task.instructions],\n      includeProcessEnv: true,\n      maxOutputChars: this.maxOutputChars,\n      sandbox: { mode: 'auto', policy: this.runtimePolicy },\n    })(request)\n  }\n\n  /**\n   * Execute a host-selected model through LiteLLM.\n   */\n  private async executeLiteLlm(request: ServerAgentTaskRequest, signal?: AbortSignal): Promise<string> {\n    const configured = this.chatOptions\n    let adapter = configured.adapter\n    if (!adapter) {\n      if (!this.litellmModel) throw new Error('LiteLLM model is not configured')\n      const endpoint = new URL(this.litellmUrl)\n      if (!['http:', 'https:'].includes(endpoint.protocol)) throw new Error('Invalid LiteLLM endpoint')\n      endpoint.pathname = `${endpoint.pathname.replace(/\\/$/, '')}/chat/completions`\n      adapter = createOpenAICompatibleChatAdapter({\n        api: endpoint.href, model: this.litellmModel, headers: this.litellmHeaders,\n        maxResponseChars: Math.min(10_000_000, this.maxOutputChars * 6 + 65_536),\n        fetch: async (input, init) => {\n          const response = await this.fetchImpl(input, {...init, redirect: 'error'})\n          if (!response.ok) {\n            try { void response.body?.cancel().catch(() => {}) } catch { /* Preserve the provider status while releasing unread bodies. */ }\n            throw new Error(`LiteLLM request failed (${response.status})`)\n          }\n          return response\n        },\n      })\n    }\n    const metadata = configured.parameters?.metadata\n    const timeout = request.timeoutMs ?? 60_000\n    const chat = createChatClient({\n      ...configured, adapter,\n      timeoutMs: Math.min(timeout, configured.timeoutMs ?? timeout),\n      maxInputChars: configured.maxInputChars ?? 7_000_000,\n      maxOutputChars: Math.min(10_000_000, configured.maxOutputChars ?? this.maxOutputChars * 6 + 65_536),\n      parameters: {...configured.parameters, metadata: {\n        ...(metadata && typeof metadata === 'object' && !Array.isArray(metadata) ? metadata : {}),\n        tenantId: request.tenantId, taskId: request.id,\n      }},\n      governance: {...configured.governance, sessionId: configured.governance?.sessionId ?? request.id},\n      authorize: async (principal, operation) => {\n        if (principal.tenantId !== request.tenantId || principal.userId !== request.userId) return false\n        if (configured.authorize && await configured.authorize(principal, operation) !== true) return false\n        const decision = this.gatekeeper.validateCall({toolName: 'server_agent_litellm', userRoles: ['agent', 'server_bot'], tenantId: principal.tenantId})\n        return decision.allowed && !decision.requireHumanApproval\n      },\n    })\n    const completed = await chat.complete({tenantId: request.tenantId, userId: request.userId}, {\n      messages: [{id: request.id, role: 'user', parts: [{type: 'text', text: request.instructions}]}],\n      tools: 'none', signal,\n    })\n    if (completed.message.parts.some(part => part.type !== 'text')) throw new Error('LiteLLM returned no assistant content')\n    return this.boundOutput(completed.message.parts.map(part => part.type === 'text' ? part.text : '').join(''))\n  }\n\n  private boundOutput(output: string): string {\n    if (output.length > this.maxOutputChars) throw new Error('Agent output exceeds configured limit')\n    return output\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAAA,SAAQ,yCAA4D;AAEpE,SAAS,+BAA+B,qBAAsD;AAE9F,SAAS,kBAAkB;AAmD3B,SAAS,mBAAsC;AAC7C,QAAM,aAAa,QAAQ,IAAI;AAC/B,MAAI,eAAe,UAAU,eAAe,wBAAwB,eAAe,KAAM,QAAO;AAGhG,SAAO,QAAQ,SAAS,UAAU,OAAO;AAC3C;AAWO,IAAM,yBAAN,MAA6B;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOR,YAAY,SAA+B;AACzC,SAAK,aAAa,SAAS,cAAc,IAAI,cAAc;AAC3D,SAAK,YAAY,SAAS,mBAAmB,QAAQ,IAAI,kBAAkB;AAC3E,SAAK,kBAAkB,SAAS,yBAAyB,QAAQ,IAAI,yBAAyB;AAC9F,SAAK,aAAa,SAAS,mBAAmB,QAAQ,IAAI,oBAAoB;AAC9E,SAAK,eAAe,SAAS,gBAAgB,QAAQ,IAAI;AACzD,SAAK,iBAAiB,EAAC,GAAG,SAAS,eAAc;AACjD,SAAK,cAAc,EAAC,GAAG,SAAS,MAAM,YAAY,gBAAgB,SAAS,MAAM,UAAU,EAAC;AAC5F,SAAK,iBAAiB,SAAS,kBAAkB;AACjD,SAAK,gBAAgB,2BAA2B,SAAS,iBAAiB,8BAA8B,EAAE,GAAG,YAAY;AACzH,SAAK,cAAc,SAAS,eAAe,iBAAiB;AAC5D,QAAI,CAAC,CAAC,QAAQ,sBAAsB,IAAI,EAAE,SAAS,KAAK,WAAW,EAAG,OAAM,IAAI,MAAM,4BAA4B;AAClH,SAAK,YAAY,SAAS,SAAS;AACnC,SAAK,YAAY,SAAS,aAAa,CAAC;AACxC,QAAI,CAAC,OAAO,cAAc,KAAK,cAAc,KAAK,KAAK,iBAAiB,KAAK,KAAK,iBAAiB,IAAY,OAAM,IAAI,MAAM,6BAA6B;AAAA,EAC9J;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAM,QAAQ,SAAiC,YAG3C,CAAC,GAAmC;AACtC,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI,CAAC,WAAW,CAAC,QAAQ,IAAI,QAAQ,UAAU,QAAQ,QAAQ,QAAQ,OAAO,QAAQ,YAAY,EAAE,KAAK,WAAS,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,CAAC,GAAG;AAC7J,aAAO,EAAE,QAAQ,OAAO,SAAS,OAAO,WAAW,QAAQ,KAAK,WAAW,QAAQ,UAAU,OAAO,8BAA8B,YAAY,KAAK,IAAI,IAAI,UAAU;AAAA,IACvK;AACA,QAAI,QAAQ,aAAa,SAAS,OAAa,QAAQ,MAAM,SAAS,OAAO,QAAQ,cAAc,WAAc,CAAC,OAAO,cAAc,QAAQ,SAAS,KAAK,QAAQ,YAAY,KAAK,QAAQ,YAAY,OAAY;AACpN,aAAO,EAAE,QAAQ,QAAQ,IAAI,QAAQ,UAAU,OAAO,wCAAwC,YAAY,KAAK,IAAI,IAAI,UAAU;AAAA,IACnI;AAGA,UAAM,SAAS,KAAK,WAAW,aAAa;AAAA,MAC1C,UAAU,gBAAgB,QAAQ,UAAU;AAAA,MAC5C,WAAW,CAAC,SAAS,YAAY;AAAA,MACjC,UAAU,QAAQ;AAAA,IACpB,CAAC;AAED,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO;AAAA,QACL,QAAQ,QAAQ;AAAA,QAChB,QAAQ;AAAA,QACR,OAAO,8CAA8C,OAAO,MAAM;AAAA,QAClE,WAAW,OAAO;AAAA,QAClB,YAAY,KAAK,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF;AAEA,QAAI,OAAO,sBAAsB;AAC/B,aAAO;AAAA,QACL,QAAQ,QAAQ;AAAA,QAChB,QAAQ;AAAA,QACR,kBAAkB,WAAW;AAAA,QAC7B,eAAe,OAAO;AAAA,QACtB,WAAW,OAAO;AAAA,QAClB,YAAY,KAAK,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF;AAMA,UAAM,mBAAmB,CAAC,KAAK,UAAU,QAAQ,UAAU;AAC3D,QAAI,qBAAqB,QAAQ,eAAe,WAAW,QAAQ,eAAe,mBAAmB,KAAK,gBAAgB,MAAM;AAC9H,aAAO;AAAA,QACL,QAAQ,QAAQ;AAAA,QAChB,QAAQ;AAAA,QACR,OAAO,YAAY,QAAQ,UAAU;AAAA,QACrC,aAAa;AAAA,QACb,WAAW;AAAA,QACX,YAAY,KAAK,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,oBAAoB,KAAK,eAAe,KAAK,cAAc,eAAe;AAC5E,aAAO;AAAA,QACL,QAAQ,QAAQ;AAAA,QAChB,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,aAAa;AAAA,QACb,WAAW;AAAA,QACX,YAAY,KAAK,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF;AAGA,QAAI,iBAAkB,MAAK,eAAe;AAC1C,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,QAAQ,EAAE,GAAG,gBAAgB,OAAO,GAAG,eAAe,gBAAgB,KAAK,aAAa,EAAE,GAAG,UAAU,MAAM;AACvI,aAAO;AAAA,QACL,QAAQ,QAAQ;AAAA,QAChB,QAAQ;AAAA,QACR;AAAA,QACA,YAAY,KAAK,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,QAAQ,QAAQ;AAAA,QAChB,QAAQ;AAAA,QACR,OAAQ,IAAc;AAAA,QACtB,GAAI,eAAe,4BAA4B,EAAE,aAAa,IAAI,aAAa,WAAW,IAAI,UAAU,IAAI,CAAC;AAAA,QAC7G,YAAY,KAAK,IAAI,IAAI;AAAA,MAC3B;AAAA,IACF,UAAE;AACA,UAAI,iBAAkB,MAAK,eAAe;AAAA,IAC5C;AAAA,EACF;AAAA,EAEA,MAAc,QAAQ,SAAiC,QAAuC;AAC5F,UAAM,WAAW,KAAK,UAAU,QAAQ,UAAU;AAClD,QAAI,SAAU,QAAO,KAAK,YAAY,MAAM,SAAS,gBAAgB,OAAO,CAAC,CAAC;AAC9E,QAAI,QAAQ,eAAe,QAAS,QAAO,KAAK,qBAAqB,OAAO;AAC5E,QAAI,QAAQ,eAAe,eAAgB,QAAO,KAAK,2BAA2B,OAAO;AACzF,QAAI,QAAQ,eAAe,UAAW,QAAO,KAAK,eAAe,SAAS,MAAM;AAChF,UAAM,IAAI,MAAM,2CAA2C,QAAQ,UAAU,GAAG;AAAA,EAClF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,qBAAqB,SAAkD;AACnF,WAAO,2BAA2B;AAAA,MAChC,SAAS,KAAK;AAAA,MACd,WAAW,UAAQ,CAAC,OAAO,UAAU,KAAK,YAAY;AAAA,MACtD,mBAAmB;AAAA,MACnB,gBAAgB,KAAK;AAAA,MACrB,SAAS,EAAE,MAAM,QAAQ,QAAQ,KAAK,cAAc;AAAA,IACtD,CAAC,EAAE,OAAO;AAAA,EACZ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,2BAA2B,SAAkD;AACzF,WAAO,2BAA2B;AAAA,MAChC,SAAS,KAAK;AAAA,MACd,WAAW,UAAQ,CAAC,OAAO,MAAM,KAAK,YAAY;AAAA,MAClD,mBAAmB;AAAA,MACnB,gBAAgB,KAAK;AAAA,MACrB,SAAS,EAAE,MAAM,QAAQ,QAAQ,KAAK,cAAc;AAAA,IACtD,CAAC,EAAE,OAAO;AAAA,EACZ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,eAAe,SAAiC,QAAuC;AACnG,UAAM,aAAa,KAAK;AACxB,QAAI,UAAU,WAAW;AACzB,QAAI,CAAC,SAAS;AACZ,UAAI,CAAC,KAAK,aAAc,OAAM,IAAI,MAAM,iCAAiC;AACzE,YAAM,WAAW,IAAI,IAAI,KAAK,UAAU;AACxC,UAAI,CAAC,CAAC,SAAS,QAAQ,EAAE,SAAS,SAAS,QAAQ,EAAG,OAAM,IAAI,MAAM,0BAA0B;AAChG,eAAS,WAAW,GAAG,SAAS,SAAS,QAAQ,OAAO,EAAE,CAAC;AAC3D,gBAAU,kCAAkC;AAAA,QAC1C,KAAK,SAAS;AAAA,QAAM,OAAO,KAAK;AAAA,QAAc,SAAS,KAAK;AAAA,QAC5D,kBAAkB,KAAK,IAAI,KAAY,KAAK,iBAAiB,IAAI,KAAM;AAAA,QACvE,OAAO,OAAO,OAAO,SAAS;AAC5B,gBAAM,WAAW,MAAM,KAAK,UAAU,OAAO,EAAC,GAAG,MAAM,UAAU,QAAO,CAAC;AACzE,cAAI,CAAC,SAAS,IAAI;AAChB,gBAAI;AAAE,mBAAK,SAAS,MAAM,OAAO,EAAE,MAAM,MAAM;AAAA,cAAC,CAAC;AAAA,YAAE,QAAQ;AAAA,YAAoE;AAC/H,kBAAM,IAAI,MAAM,2BAA2B,SAAS,MAAM,GAAG;AAAA,UAC/D;AACA,iBAAO;AAAA,QACT;AAAA,MACF,CAAC;AAAA,IACH;AACA,UAAM,WAAW,WAAW,YAAY;AACxC,UAAM,UAAU,QAAQ,aAAa;AACrC,UAAM,OAAO,iBAAiB;AAAA,MAC5B,GAAG;AAAA,MAAY;AAAA,MACf,WAAW,KAAK,IAAI,SAAS,WAAW,aAAa,OAAO;AAAA,MAC5D,eAAe,WAAW,iBAAiB;AAAA,MAC3C,gBAAgB,KAAK,IAAI,KAAY,WAAW,kBAAkB,KAAK,iBAAiB,IAAI,KAAM;AAAA,MAClG,YAAY,EAAC,GAAG,WAAW,YAAY,UAAU;AAAA,QAC/C,GAAI,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,QAAQ,IAAI,WAAW,CAAC;AAAA,QACvF,UAAU,QAAQ;AAAA,QAAU,QAAQ,QAAQ;AAAA,MAC9C,EAAC;AAAA,MACD,YAAY,EAAC,GAAG,WAAW,YAAY,WAAW,WAAW,YAAY,aAAa,QAAQ,GAAE;AAAA,MAChG,WAAW,OAAO,WAAW,cAAc;AACzC,YAAI,UAAU,aAAa,QAAQ,YAAY,UAAU,WAAW,QAAQ,OAAQ,QAAO;AAC3F,YAAI,WAAW,aAAa,MAAM,WAAW,UAAU,WAAW,SAAS,MAAM,KAAM,QAAO;AAC9F,cAAM,WAAW,KAAK,WAAW,aAAa,EAAC,UAAU,wBAAwB,WAAW,CAAC,SAAS,YAAY,GAAG,UAAU,UAAU,SAAQ,CAAC;AAClJ,eAAO,SAAS,WAAW,CAAC,SAAS;AAAA,MACvC;AAAA,IACF,CAAC;AACD,UAAM,YAAY,MAAM,KAAK,SAAS,EAAC,UAAU,QAAQ,UAAU,QAAQ,QAAQ,OAAM,GAAG;AAAA,MAC1F,UAAU,CAAC,EAAC,IAAI,QAAQ,IAAI,MAAM,QAAQ,OAAO,CAAC,EAAC,MAAM,QAAQ,MAAM,QAAQ,aAAY,CAAC,EAAC,CAAC;AAAA,MAC9F,OAAO;AAAA,MAAQ;AAAA,IACjB,CAAC;AACD,QAAI,UAAU,QAAQ,MAAM,KAAK,UAAQ,KAAK,SAAS,MAAM,EAAG,OAAM,IAAI,MAAM,uCAAuC;AACvH,WAAO,KAAK,YAAY,UAAU,QAAQ,MAAM,IAAI,UAAQ,KAAK,SAAS,SAAS,KAAK,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC;AAAA,EAC7G;AAAA,EAEQ,YAAY,QAAwB;AAC1C,QAAI,OAAO,SAAS,KAAK,eAAgB,OAAM,IAAI,MAAM,uCAAuC;AAChG,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/{chunk-6KV5CJBW.js → chunk-F4IITPGX.js}

@@ -1,3 +1,7 @@
+import {
+  createLifecycleGuard,
+  resolveLifecycleBackend
+} from "./chunk-L6PMAEMB.js";
 import {
   createAuthMiddleware
 } from "./chunk-XIEY2OF4.js";
@@ -10,10 +14,6 @@ import {
 import {
   createHealthRouter
 } from "./chunk-R4ADP2DC.js";
-import {
-  createLifecycleGuard,
-  resolveLifecycleBackend
-} from "./chunk-L6PMAEMB.js";
 import {
   createMcpRouter
 } from "./chunk-VF5YDZJC.js";
@@ -218,4 +218,4 @@ export {
   ErpEngine,
   createErpEngine
 };
-//# sourceMappingURL=chunk-6KV5CJBW.js.map
+//# sourceMappingURL=chunk-F4IITPGX.js.map

package/dist/{chunk-DHQGNP4T.js → chunk-SDJNYPYK.js}

@@ -7,7 +7,7 @@ import { createHash } from "node:crypto";
 import { satisfies, valid, validRange, lt } from "semver";
 
 // package.json
-var version = "0.1.0";
+var version = "0.2.0";
 
 // src/lifecycle-engine/backend-migration.ts
 function text(value, name, max = 256) {
@@ -767,4 +767,4 @@ export {
   assertBackendMigrationVerification,
   assertBackendMigrationCutover
 };
-//# sourceMappingURL=chunk-DHQGNP4T.js.map
+//# sourceMappingURL=chunk-SDJNYPYK.js.map