@alneas/eaos-server 0.1.0 → 0.2.0

package/dist/chunk-YMHVRBUU.js

@@ -0,0 +1,199 @@
+// src/execution/chat.ts
+function createChatClient(options) {
+  const adapter = options.adapter, authorize = options.authorize, tools = options.tools;
+  const parameters = structuredClone(options.parameters), governance = options.governance, registry = options.modelRegistry;
+  const modelAdapters = Object.freeze(Object.fromEntries(Object.entries(options.modelAdapters ?? {}).map(([model, transport]) => {
+    if (typeof transport?.stream !== "function") throw new Error("Invalid AI model adapter binding");
+    return [model, Object.freeze({ id: transport.id, capabilities: Object.freeze({ ...transport.capabilities }), stream: transport.stream.bind(transport) })];
+  })));
+  if (registry && !options.modelAdapters) throw new Error("AI model adapter bindings required");
+  if (parameters !== void 0 && (!parameters || typeof parameters !== "object" || Array.isArray(parameters) || Object.keys(parameters).some((key) => ["model", "messages", "tools", "stream"].includes(key)))) throw new Error("Invalid or reserved chat parameters");
+  const timeout = options.timeoutMs ?? 3e4, maxInput = options.maxInputChars ?? 2e5, maxOutput = options.maxOutputChars ?? 1e5, maxEvents = options.maxEvents ?? 1e4;
+  for (const [value, max] of [[timeout, 36e5], [maxInput, 7e6], [maxOutput, 1e7], [maxEvents, 1e5]]) if (!Number.isSafeInteger(value) || value < 1 || value > max) throw new Error("Invalid chat limit");
+  if (typeof adapter?.stream !== "function" || typeof authorize !== "function" || tools !== void 0 && typeof tools !== "function") throw new Error("Chat adapter and authorization required");
+  return {
+    /**
+     * Request one bounded completion for the current actor.
+     * @param principal - Verified nonblank tenant/user identity; copied before invoking host callbacks.
+     * @param input - One to 1000 messages, optional cancellation, and explicit none/catalog tool disclosure.
+     * @returns Assistant data only after final live authorization; tools remain unexecuted requests.
+     * @throws Rejects invalid requests, governance/provider failure, revocation, limits or cancellation.
+     * @example
+     * ```typescript
+     * import { createChatClient } from '@alneas/eaos-server/execution/chat';
+     * export function complete(client: ReturnType<typeof createChatClient>, ...args: Parameters<typeof client.complete>) {
+     *   return client.complete(...args);
+     * }
+     * ```
+     */
+    async complete(principal, input) {
+      const p = structuredClone(principal);
+      if (!p || [p.tenantId, p.userId].some((v) => typeof v !== "string" || !v.trim())) throw new Error("Chat access denied");
+      if (!Array.isArray(input?.messages) || !input.messages.length || input.messages.length > 1e3 || Object.keys(input).some((k) => !["messages", "signal", "tools"].includes(k)) || input.tools !== void 0 && !["none", "catalog"].includes(input.tools)) throw new Error("Invalid chat history or options");
+      let messages = structuredClone(input.messages);
+      const toolMode = input.tools, traceId = crypto.randomUUID();
+      let sensitivityLevel, usage, selectedModelId;
+      let attemptStarted = false, usageRecord;
+      const context = () => ({ tenantId: p.tenantId, userId: p.userId, operation: governance?.operation ?? "model:chat", traceId, ...governance?.sessionId ? { sessionId: governance.sessionId } : {}, ...selectedModelId ?? governance?.model ? { model: selectedModelId ?? governance?.model } : {}, ...sensitivityLevel ? { sensitivityLevel } : {} });
+      const observe = async (phase, extra = {}) => {
+        try {
+          await governance?.observability?.record({ phase, context: context(), ...extra });
+        } catch {
+        }
+      };
+      const controller = new AbortController();
+      let iterator, timer;
+      const abort = () => controller.abort();
+      input.signal?.addEventListener("abort", abort, { once: true });
+      if (input.signal?.aborted) abort();
+      const check = () => {
+        if (controller.signal.aborted) throw new Error("Chat cancelled or timed out");
+      };
+      const allow = async () => {
+        check();
+        if (await authorize(structuredClone(p), "model:chat") !== true) throw new Error("Chat access denied");
+        check();
+      };
+      const recordAttemptUsage = () => {
+        if (!attemptStarted || !governance?.budget?.recordUsage) return Promise.resolve();
+        return usageRecord ??= Promise.resolve().then(() => governance.budget.recordUsage({ context: context(), usage: usage && structuredClone(usage) }));
+      };
+      const work = async () => {
+        await allow();
+        const catalog = toolMode === "catalog" ? structuredClone(await tools?.(structuredClone(p)) ?? []) : [];
+        await allow();
+        if (catalog.length > 100 || new Set(catalog.map((t) => t.name)).size !== catalog.length) throw new Error("Invalid chat tool catalog");
+        if (JSON.stringify({ messages, tools: catalog, parameters }).length > maxInput) throw new Error("Chat input limit");
+        if (governance?.guard?.before) {
+          const guarded = await governance.guard.before({ context: context(), messages, toolNames: catalog.map((tool) => tool.name) });
+          if (!guarded.allowed) throw new Error(`Chat blocked${guarded.reason ? `: ${guarded.reason}` : ""}`);
+          if (guarded.messages !== void 0) messages = structuredClone(guarded.messages);
+          sensitivityLevel = guarded.sensitivityLevel;
+        }
+        await allow();
+        const route = registry?.resolve({ context: context(), capability: "chat", ...governance?.model ? { modelId: governance.model } : {}, ...sensitivityLevel ? { sensitivityLevel } : {} });
+        let selectedAdapter = adapter;
+        if (route) {
+          selectedModelId = route.modelId;
+          if (!Object.hasOwn(modelAdapters, route.modelId) || typeof modelAdapters[route.modelId]?.stream !== "function") throw new Error("AI model adapter binding missing");
+          selectedAdapter = modelAdapters[route.modelId];
+          if (selectedAdapter.id !== route.adapterId) throw new Error("AI model adapter does not match the approved route");
+          if (toolMode === "catalog" && !route.capabilities.includes("tools")) throw new Error("AI model route does not support tools");
+        }
+        if (catalog.length && !selectedAdapter.capabilities.tools) throw new Error("Invalid chat tool catalog");
+        const inputLimit = Math.min(maxInput, route?.maxInputChars ?? maxInput), outputLimit = Math.min(maxOutput, route?.maxOutputChars ?? maxOutput);
+        if (JSON.stringify({ messages, tools: catalog, parameters }).length > inputLimit) throw new Error("Chat input limit");
+        await allow();
+        if (governance?.budget) {
+          const decision = await governance.budget.authorize({ context: context() });
+          if (!decision.allowed) throw new Error(`Chat budget denied${decision.reason ? `: ${decision.reason}` : ""}`);
+        }
+        await allow();
+        await observe("started", { input: { messageCount: messages.length, toolCount: catalog.length }, metadata: { adapter: selectedAdapter.id, ...route ? { modelId: route.modelId } : {} } });
+        await allow();
+        attemptStarted = true;
+        iterator = selectedAdapter.stream({ messages, ...catalog.length ? { tools: catalog } : {}, parameters: structuredClone(parameters), signal: controller.signal })[Symbol.asyncIterator]();
+        const parts = [], calls = /* @__PURE__ */ new Set(), names = new Set(catalog.map((t) => t.name));
+        let size = 0, events = 0;
+        while (true) {
+          check();
+          const next = await iterator.next();
+          check();
+          if (next.done) throw new Error("Chat stream ended without completion");
+          await allow();
+          const event = next.value;
+          await observe("event", { eventType: event.type });
+          if (++events > maxEvents || (size += JSON.stringify(event).length) > outputLimit) throw new Error("Chat output limit");
+          if (event.type === "metadata") usage = mergeUsage(usage, readUsage(event.metadata));
+          if (event.type === "finish") {
+            if (!["stop", "tool-calls"].includes(event.reason) || event.reason === "tool-calls" !== calls.size > 0) throw new Error("Chat response incomplete or inconsistent");
+            let message = { id: crypto.randomUUID(), role: "assistant", parts };
+            if (governance?.guard?.after) {
+              const guarded = await governance.guard.after({ context: context(), message });
+              if (!guarded.allowed) throw new Error(`Chat output blocked${guarded.reason ? `: ${guarded.reason}` : ""}`);
+              if (guarded.messages !== void 0) {
+                if (guarded.messages.length !== 1) throw new Error("Chat output guard returned invalid message count");
+                message = structuredClone(guarded.messages[0]);
+              }
+            }
+            if (JSON.stringify(message).length > outputLimit) throw new Error("Chat output limit after guard");
+            await allow();
+            return { message, finishReason: event.reason, traceId, usage, sensitivityLevel };
+          }
+          if (event.type === "text-delta") {
+            if (typeof event.text !== "string") throw new Error("Invalid chat text");
+            const previous = parts.at(-1);
+            if (previous?.type === "text") parts[parts.length - 1] = { type: "text", text: previous.text + event.text };
+            else parts.push({ type: "text", text: event.text });
+          } else if (event.type === "tool-call") {
+            if (!names.has(event.name) || typeof event.callId !== "string" || !event.callId.trim() || calls.has(event.callId) || calls.size >= 100 || !event.input || typeof event.input !== "object" || Array.isArray(event.input)) throw new Error("Invalid or unregistered chat tool call");
+            calls.add(event.callId);
+            parts.push(structuredClone(event));
+          } else if (event.type === "data") parts.push(structuredClone(event));
+          else if (event.type !== "metadata") throw new Error("Unexpected chat event");
+        }
+      };
+      let rejectAbort;
+      const stopped = new Promise((_resolve, reject) => {
+        rejectAbort = () => reject(new Error("Chat cancelled or timed out"));
+        controller.signal.addEventListener("abort", rejectAbort, { once: true });
+        if (controller.signal.aborted) rejectAbort();
+        timer = setTimeout(abort, timeout);
+      });
+      const accountedWork = async () => {
+        let result;
+        try {
+          result = await work();
+        } catch (error) {
+          await recordAttemptUsage();
+          throw error;
+        }
+        await recordAttemptUsage();
+        await allow();
+        await observe("completed", { output: result.message, usage });
+        await allow();
+        return result;
+      };
+      try {
+        return await Promise.race([accountedWork(), stopped]);
+      } catch (error) {
+        let failure = error;
+        try {
+          await Promise.race([recordAttemptUsage(), stopped]);
+        } catch (accountingError) {
+          if (!controller.signal.aborted) failure = accountingError;
+        }
+        void observe("failed", { error: failure instanceof Error ? failure.message : String(failure), usage });
+        throw failure;
+      } finally {
+        clearTimeout(timer);
+        input.signal?.removeEventListener("abort", abort);
+        if (rejectAbort) controller.signal.removeEventListener("abort", rejectAbort);
+        controller.abort();
+        try {
+          void Promise.resolve(iterator?.return?.()).catch(() => {
+          });
+        } catch {
+        }
+      }
+    }
+  };
+}
+function readUsage(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const record = value, raw = record.usage && typeof record.usage === "object" && !Array.isArray(record.usage) ? record.usage : record;
+  const inputTokens = number(raw.inputTokens ?? raw.promptTokens ?? raw.input_tokens), outputTokens = number(raw.outputTokens ?? raw.completionTokens ?? raw.output_tokens), totalTokens = number(raw.totalTokens ?? raw.total_tokens), cost = number(raw.cost), currency = typeof raw.currency === "string" ? raw.currency : void 0;
+  if (inputTokens === void 0 && outputTokens === void 0 && totalTokens === void 0 && cost === void 0) return void 0;
+  return { ...inputTokens === void 0 ? {} : { inputTokens }, ...outputTokens === void 0 ? {} : { outputTokens }, ...totalTokens === void 0 ? {} : { totalTokens }, ...cost === void 0 ? {} : { cost }, ...currency ? { currency } : {} };
+}
+function number(value) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : void 0;
+}
+function mergeUsage(previous, next) {
+  return next ? { ...previous ?? {}, ...next } : previous;
+}
+
+export {
+  createChatClient
+};
+//# sourceMappingURL=chunk-YMHVRBUU.js.map

package/dist/chunk-YMHVRBUU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/execution/chat.ts"],"sourcesContent":["import type { AIChatAdapter, AIChatMessage, AIChatPart, AIChatEvent } from '@alneas/appkit-core/ai/ai-chat'\nimport type { ActionToolDescriptor, ActionToolObject } from '@alneas/appkit-core/ai/action'\nimport type { AIBudgetGate, AIGuard, AIExecutionContext, AIModelRegistry, AIObservabilitySink, AIUsage } from '@alneas/eaos-core'\nimport type { ExecutionPolicy, ExecutionPrincipal } from './index'\n\n/** Host-injected model guards, usage budgets and telemetry.\n * @see createChatClient\n */\nexport interface ChatGovernanceOptions {\n /** Optional pre-input and post-output checks; replacement messages remain host-owned. */\n guard?: AIGuard\n /** Optional request admission and once-per-started-attempt accounting; accounting failures propagate. */\n budget?: AIBudgetGate\n /** Awaited started/event/completed telemetry within the deadline; sink errors are ignored. */\n observability?: AIObservabilitySink\n /** Telemetry operation label; authorization always checks model:chat. */\n operation?: string\n /** Host-selected registry model ID; without a registry this is metadata, not provider selection. */\n model?: string\n /** Optional host session identity recorded in governance context. */\n sessionId?: string\n}\n/** Host-configured adapter, current admission and bounded chat policy.\n * @see createChatClient\n */\nexport interface ChatClientOptions extends ExecutionPolicy {\n /** Existing Appkit transport configured with the host endpoint, model and credentials. */\n adapter: AIChatAdapter\n /** Host-owned provider parameters cloned at creation; model/messages/tools/stream keys are reserved and rejected. */\n parameters?: ActionToolObject\n /**\n  * Resolve descriptors only when the caller explicitly requests tools: catalog.\n  * @param principal - Copied verified actor whose current disclosure permission the host must check.\n  * @returns At most 100 unique descriptors; omission advertises no tools.\n  * @throws Host resolution failures reject completion before the provider starts.\n  * @example\n  * ```typescript\n  * import type { ChatClientOptions } from '@alneas/eaos-server/execution/chat';\n  * export function disclosedTools(resolve: NonNullable<ChatClientOptions['tools']>) { return resolve; }\n  * ```\n  */\n tools?(principal: ExecutionPrincipal): Promise<readonly ActionToolDescriptor[]>\n /** Positive integer deadline in milliseconds; default 30000, maximum 3600000. */\n timeoutMs?: number\n /** Serialized request character ceiling; default 200000, maximum 7000000. */\n maxInputChars?: number\n /** Serialized event and final assistant-message character ceiling; default 100000, maximum 10000000. */\n maxOutputChars?: number\n /** Maximum stream event count; default 10000, maximum 100000. */\n maxEvents?: number\n /** Host-approved route registry; requests cannot select a model or bypass sensitivity limits. */\n modelRegistry?: AIModelRegistry\n /** Required with modelRegistry: host-approved logical model to configured adapter bindings, snapshotted at creation. */\n modelAdapters?: Readonly<Record<string, AIChatAdapter>>\n /** Optional host guards, budgets and telemetry; final current authorization follows their completion. */\n governance?: ChatGovernanceOptions\n}\n/** Completed assistant message and optional host-governance metadata.\n * @see createChatClient\n */\nexport interface ChatCompletion {\n /** Detached assistant response; tool-call parts are unexecuted requests. */\n message: AIChatMessage\n /** Successful provider finish reason; truncated or inconsistent streams reject. */\n finishReason: 'stop' | 'tool-calls'\n /** Unique request trace identity generated before governance callbacks. */\n traceId?: string\n /** Recognized nonnegative adapter metadata; undefined means unknown, including Appkit OpenAI SSE without usage events. */\n usage?: AIUsage\n /** Sensitivity label supplied by the input guard. */\n sensitivityLevel?: AIExecutionContext['sensitivityLevel']\n}\n/**\n * Complete scoped chat through the existing Appkit adapter with live admission and host governance.\n * @param options - Trusted adapter, current authorization, optional routes/governance and bounded limits.\n * @returns A client whose complete method returns detached, finally authorized assistant data.\n * @throws Rejects invalid limits or missing adapter/policy during construction. Completion rejects\n * invalid histories/catalogs, denied or revoked admission, guard/budget/route denial, provider failures,\n * incomplete streams, exceeded limits, cancellation, deadline expiry and host accounting failure. Telemetry errors are ignored.\n * @remarks Every completion authorizes model:chat before disclosure, between events and after awaited\n * output guard, usage recording and completion telemetry. This client never executes model tool calls.\n * The host must configure real endpoint credentials in the Appkit adapter. Abort is cooperative for a\n * custom transport; the request promise remains bounded even if its iterator ignores cancellation.\n * With modelRegistry, provide modelAdapters mapping each approved logical model to its host-configured\n * Appkit adapter; generic adapter IDs alone do not select or prove the provider model. Binding entries\n * and stream methods are snapshotted at creation. Reserved transport parameters are rejected in 0.2.\n * Accounting runs once after each started adapter attempt, including output blocks, revocation and provider\n * failure. Unknown usage is passed as undefined, never zero. Appkit's OpenAI SSE adapter currently emits\n * no usage metadata event even for provider include_usage chunks; hosts must reconcile measured usage\n * through their existing accounting port using trace/session context. Accounting callback errors reject\n * completion in 0.2; a stalled callback remains bounded by the request deadline.\n * @example\n * ```typescript\n * import { createChatClient, type ChatClientOptions } from '@alneas/eaos-server/execution/chat';\n * export function connectChat(options: ChatClientOptions) { return createChatClient(options); }\n * ```\n */\nexport function createChatClient(options: ChatClientOptions) {\n const adapter = options.adapter, authorize = options.authorize, tools = options.tools\n const parameters = structuredClone(options.parameters), governance = options.governance, registry = options.modelRegistry\n const modelAdapters = Object.freeze(Object.fromEntries(Object.entries(options.modelAdapters ?? {}).map(([model,transport]) => {\n  if (typeof transport?.stream !== 'function') throw new Error('Invalid AI model adapter binding')\n  return [model,Object.freeze({id:transport.id,capabilities:Object.freeze({...transport.capabilities}),stream:transport.stream.bind(transport)})]\n })))\n if (registry && !options.modelAdapters) throw new Error('AI model adapter bindings required')\n if (parameters !== undefined && (!parameters || typeof parameters !== 'object' || Array.isArray(parameters) || Object.keys(parameters).some(key => ['model','messages','tools','stream'].includes(key)))) throw new Error('Invalid or reserved chat parameters')\n const timeout = options.timeoutMs ?? 30000, maxInput = options.maxInputChars ?? 200000, maxOutput = options.maxOutputChars ?? 100000, maxEvents = options.maxEvents ?? 10000\n for (const [value, max] of [[timeout,3600000],[maxInput,7000000],[maxOutput,10000000],[maxEvents,100000]] as const) if (!Number.isSafeInteger(value) || value < 1 || value > max) throw new Error('Invalid chat limit')\n if (typeof adapter?.stream !== 'function' || typeof authorize !== 'function' || tools !== undefined && typeof tools !== 'function') throw new Error('Chat adapter and authorization required')\n return {\n  /**\n   * Request one bounded completion for the current actor.\n   * @param principal - Verified nonblank tenant/user identity; copied before invoking host callbacks.\n   * @param input - One to 1000 messages, optional cancellation, and explicit none/catalog tool disclosure.\n   * @returns Assistant data only after final live authorization; tools remain unexecuted requests.\n   * @throws Rejects invalid requests, governance/provider failure, revocation, limits or cancellation.\n   * @example\n   * ```typescript\n   * import { createChatClient } from '@alneas/eaos-server/execution/chat';\n   * export function complete(client: ReturnType<typeof createChatClient>, ...args: Parameters<typeof client.complete>) {\n   *   return client.complete(...args);\n   * }\n   * ```\n   */\n  async complete(principal: ExecutionPrincipal, input: { messages: readonly AIChatMessage[]; signal?: AbortSignal; tools?: 'none' | 'catalog' }): Promise<ChatCompletion> {\n   const p = structuredClone(principal)\n   if (!p || [p.tenantId,p.userId].some(v => typeof v !== 'string' || !v.trim())) throw new Error('Chat access denied')\n   if (!Array.isArray(input?.messages) || !input.messages.length || input.messages.length > 1000 || Object.keys(input).some(k => !['messages','signal','tools'].includes(k)) || input.tools !== undefined && !['none','catalog'].includes(input.tools)) throw new Error('Invalid chat history or options')\n   let messages: AIChatMessage[] = structuredClone(input.messages) as AIChatMessage[]\n   const toolMode = input.tools, traceId = crypto.randomUUID()\n   let sensitivityLevel: AIExecutionContext['sensitivityLevel'], usage: AIUsage | undefined, selectedModelId: string | undefined\n   let attemptStarted = false, usageRecord: Promise<void> | undefined\n   const context = (): AIExecutionContext => ({ tenantId: p.tenantId, userId: p.userId, operation: governance?.operation ?? 'model:chat', traceId, ...(governance?.sessionId ? { sessionId: governance.sessionId } : {}), ...((selectedModelId ?? governance?.model) ? { model: selectedModelId ?? governance?.model } : {}), ...(sensitivityLevel ? { sensitivityLevel } : {}) })\n   const observe = async (phase: Parameters<AIObservabilitySink['record']>[0]['phase'], extra: Omit<Parameters<AIObservabilitySink['record']>[0], 'phase' | 'context'> = {}) => {\n    try { await governance?.observability?.record({ phase, context: context(), ...extra }) } catch { /* Telemetry is best-effort within the request deadline. */ }\n   }\n   const controller = new AbortController(); let iterator: AsyncIterator<AIChatEvent> | undefined, timer: ReturnType<typeof setTimeout> | undefined\n   const abort = () => controller.abort()\n   input.signal?.addEventListener('abort', abort, { once: true })\n   if (input.signal?.aborted) abort()\n   const check = () => { if (controller.signal.aborted) throw new Error('Chat cancelled or timed out') }\n   const allow = async () => { check(); if (await authorize(structuredClone(p), 'model:chat') !== true) throw new Error('Chat access denied'); check() }\n   const recordAttemptUsage = (): Promise<void> => {\n    if (!attemptStarted || !governance?.budget?.recordUsage) return Promise.resolve()\n    return usageRecord ??= Promise.resolve().then(() => governance.budget!.recordUsage!({context:context(),usage:usage && structuredClone(usage)}))\n   }\n   const work = async (): Promise<ChatCompletion> => {\n    await allow()\n    const catalog = toolMode === 'catalog' ? structuredClone(await tools?.(structuredClone(p)) ?? []) : []\n    await allow()\n    if (catalog.length > 100 || new Set(catalog.map(t => t.name)).size !== catalog.length) throw new Error('Invalid chat tool catalog')\n    if (JSON.stringify({ messages, tools: catalog, parameters }).length > maxInput) throw new Error('Chat input limit')\n    if (governance?.guard?.before) {\n     const guarded = await governance.guard.before({ context: context(), messages, toolNames: catalog.map(tool => tool.name) })\n     if (!guarded.allowed) throw new Error(`Chat blocked${guarded.reason ? `: ${guarded.reason}` : ''}`)\n    if (guarded.messages !== undefined) messages = structuredClone(guarded.messages) as AIChatMessage[]\n    sensitivityLevel = guarded.sensitivityLevel\n   }\n    await allow()\n    const route = registry?.resolve({ context: context(), capability: 'chat', ...(governance?.model ? { modelId: governance.model } : {}), ...(sensitivityLevel ? { sensitivityLevel } : {}) })\n    let selectedAdapter = adapter\n    if (route) {\n     selectedModelId = route.modelId\n     if (!Object.hasOwn(modelAdapters,route.modelId) || typeof modelAdapters[route.modelId]?.stream !== 'function') throw new Error('AI model adapter binding missing')\n     selectedAdapter = modelAdapters[route.modelId]\n     if (selectedAdapter.id !== route.adapterId) throw new Error('AI model adapter does not match the approved route')\n     if (toolMode === 'catalog' && !route.capabilities.includes('tools')) throw new Error('AI model route does not support tools')\n    }\n    if (catalog.length && !selectedAdapter.capabilities.tools) throw new Error('Invalid chat tool catalog')\n    const inputLimit = Math.min(maxInput, route?.maxInputChars ?? maxInput), outputLimit = Math.min(maxOutput, route?.maxOutputChars ?? maxOutput)\n    if (JSON.stringify({ messages, tools: catalog, parameters }).length > inputLimit) throw new Error('Chat input limit')\n    await allow()\n    if (governance?.budget) {\n     const decision = await governance.budget.authorize({ context: context() })\n     if (!decision.allowed) throw new Error(`Chat budget denied${decision.reason ? `: ${decision.reason}` : ''}`)\n    }\n    await allow()\n    await observe('started', { input: { messageCount: messages.length, toolCount: catalog.length }, metadata: { adapter: selectedAdapter.id, ...(route ? { modelId: route.modelId } : {}) } })\n    await allow()\n    attemptStarted = true\n    iterator = selectedAdapter.stream({ messages, ...(catalog.length ? { tools: catalog } : {}), parameters: structuredClone(parameters), signal: controller.signal })[Symbol.asyncIterator]()\n    const parts: AIChatPart[] = [], calls = new Set<string>(), names = new Set(catalog.map(t => t.name))\n    let size = 0, events = 0\n    while (true) {\n     check()\n     const next = await iterator.next(); check()\n     if (next.done) throw new Error('Chat stream ended without completion')\n     await allow()\n     const event = next.value\n     await observe('event', { eventType: event.type })\n     if (++events > maxEvents || (size += JSON.stringify(event).length) > outputLimit) throw new Error('Chat output limit')\n     if (event.type === 'metadata') usage = mergeUsage(usage, readUsage(event.metadata))\n     if (event.type === 'finish') {\n      if (!['stop','tool-calls'].includes(event.reason) || (event.reason === 'tool-calls') !== (calls.size > 0)) throw new Error('Chat response incomplete or inconsistent')\n      let message: AIChatMessage = { id: crypto.randomUUID(), role: 'assistant', parts }\n      if (governance?.guard?.after) {\n       const guarded = await governance.guard.after({ context: context(), message })\n       if (!guarded.allowed) throw new Error(`Chat output blocked${guarded.reason ? `: ${guarded.reason}` : ''}`)\n       if (guarded.messages !== undefined) {\n        if (guarded.messages.length !== 1) throw new Error('Chat output guard returned invalid message count')\n        message = structuredClone(guarded.messages[0])\n       }\n      }\n      if (JSON.stringify(message).length > outputLimit) throw new Error('Chat output limit after guard')\n      await allow()\n      return { message, finishReason: event.reason as ChatCompletion['finishReason'], traceId, usage, sensitivityLevel }\n     }\n     if (event.type === 'text-delta') {\n      if (typeof event.text !== 'string') throw new Error('Invalid chat text')\n      const previous = parts.at(-1)\n      if (previous?.type === 'text') parts[parts.length - 1] = { type: 'text', text: previous.text + event.text }\n      else parts.push({ type: 'text', text: event.text })\n     } else if (event.type === 'tool-call') {\n      if (!names.has(event.name) || typeof event.callId !== 'string' || !event.callId.trim() || calls.has(event.callId) || calls.size >= 100 || !event.input || typeof event.input !== 'object' || Array.isArray(event.input)) throw new Error('Invalid or unregistered chat tool call')\n      calls.add(event.callId); parts.push(structuredClone(event))\n     } else if (event.type === 'data') parts.push(structuredClone(event))\n     else if (event.type !== 'metadata') throw new Error('Unexpected chat event')\n    }\n   }\n   let rejectAbort: (() => void) | undefined\n   const stopped = new Promise<never>((_resolve, reject) => {\n    rejectAbort = () => reject(new Error('Chat cancelled or timed out'))\n    controller.signal.addEventListener('abort', rejectAbort, { once: true })\n    if (controller.signal.aborted) rejectAbort()\n    timer = setTimeout(abort, timeout)\n   })\n   const accountedWork = async () => {\n    let result: ChatCompletion\n    try { result = await work() }\n    catch (error) { await recordAttemptUsage(); throw error }\n    await recordAttemptUsage()\n    await allow()\n    await observe('completed', {output:result.message,usage})\n    await allow()\n    return result\n   }\n   try { return await Promise.race([accountedWork(), stopped]) }\n   catch (error) {\n    let failure = error\n    // A deadline can win while a started provider/output guard is pending. Account that attempt once.\n    try { await Promise.race([recordAttemptUsage(),stopped]) }\n    catch (accountingError) { if (!controller.signal.aborted) failure = accountingError }\n    void observe('failed', { error: failure instanceof Error ? failure.message : String(failure), usage })\n    throw failure\n   }\n   finally {\n    clearTimeout(timer); input.signal?.removeEventListener('abort', abort)\n    if (rejectAbort) controller.signal.removeEventListener('abort', rejectAbort)\n    controller.abort()\n    try { void Promise.resolve(iterator?.return?.()).catch(() => {}) } catch { /* Preserve the original outcome. */ }\n   }\n  },\n }\n}\n\nfunction readUsage(value: unknown): AIUsage | undefined {\n if (!value || typeof value !== 'object' || Array.isArray(value)) return undefined\n const record = value as Record<string, unknown>, raw = record.usage && typeof record.usage === 'object' && !Array.isArray(record.usage) ? record.usage as Record<string, unknown> : record\n const inputTokens = number(raw.inputTokens ?? raw.promptTokens ?? raw.input_tokens), outputTokens = number(raw.outputTokens ?? raw.completionTokens ?? raw.output_tokens), totalTokens = number(raw.totalTokens ?? raw.total_tokens), cost = number(raw.cost), currency = typeof raw.currency === 'string' ? raw.currency : undefined\n if (inputTokens === undefined && outputTokens === undefined && totalTokens === undefined && cost === undefined) return undefined\n return { ...(inputTokens === undefined ? {} : { inputTokens }), ...(outputTokens === undefined ? {} : { outputTokens }), ...(totalTokens === undefined ? {} : { totalTokens }), ...(cost === undefined ? {} : { cost }), ...(currency ? { currency } : {}) }\n}\n\nfunction number(value: unknown): number | undefined { return typeof value === 'number' && Number.isFinite(value) && value >= 0 ? value : undefined }\nfunction mergeUsage(previous: AIUsage | undefined, next: AIUsage | undefined): AIUsage | undefined { return next ? { ...(previous ?? {}), ...next } : previous }\n"],"mappings":";AAiGO,SAAS,iBAAiB,SAA4B;AAC5D,QAAM,UAAU,QAAQ,SAAS,YAAY,QAAQ,WAAW,QAAQ,QAAQ;AAChF,QAAM,aAAa,gBAAgB,QAAQ,UAAU,GAAG,aAAa,QAAQ,YAAY,WAAW,QAAQ;AAC5G,QAAM,gBAAgB,OAAO,OAAO,OAAO,YAAY,OAAO,QAAQ,QAAQ,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAM,SAAS,MAAM;AAC7H,QAAI,OAAO,WAAW,WAAW,WAAY,OAAM,IAAI,MAAM,kCAAkC;AAC/F,WAAO,CAAC,OAAM,OAAO,OAAO,EAAC,IAAG,UAAU,IAAG,cAAa,OAAO,OAAO,EAAC,GAAG,UAAU,aAAY,CAAC,GAAE,QAAO,UAAU,OAAO,KAAK,SAAS,EAAC,CAAC,CAAC;AAAA,EAC/I,CAAC,CAAC,CAAC;AACH,MAAI,YAAY,CAAC,QAAQ,cAAe,OAAM,IAAI,MAAM,oCAAoC;AAC5F,MAAI,eAAe,WAAc,CAAC,cAAc,OAAO,eAAe,YAAY,MAAM,QAAQ,UAAU,KAAK,OAAO,KAAK,UAAU,EAAE,KAAK,SAAO,CAAC,SAAQ,YAAW,SAAQ,QAAQ,EAAE,SAAS,GAAG,CAAC,GAAI,OAAM,IAAI,MAAM,qCAAqC;AAC/P,QAAM,UAAU,QAAQ,aAAa,KAAO,WAAW,QAAQ,iBAAiB,KAAQ,YAAY,QAAQ,kBAAkB,KAAQ,YAAY,QAAQ,aAAa;AACvK,aAAW,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,SAAQ,IAAO,GAAE,CAAC,UAAS,GAAO,GAAE,CAAC,WAAU,GAAQ,GAAE,CAAC,WAAU,GAAM,CAAC,EAAY,KAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,KAAK,QAAQ,IAAK,OAAM,IAAI,MAAM,oBAAoB;AACtN,MAAI,OAAO,SAAS,WAAW,cAAc,OAAO,cAAc,cAAc,UAAU,UAAa,OAAO,UAAU,WAAY,OAAM,IAAI,MAAM,yCAAyC;AAC7L,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAeN,MAAM,SAAS,WAA+B,OAA0H;AACvK,YAAM,IAAI,gBAAgB,SAAS;AACnC,UAAI,CAAC,KAAK,CAAC,EAAE,UAAS,EAAE,MAAM,EAAE,KAAK,OAAK,OAAO,MAAM,YAAY,CAAC,EAAE,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,oBAAoB;AACnH,UAAI,CAAC,MAAM,QAAQ,OAAO,QAAQ,KAAK,CAAC,MAAM,SAAS,UAAU,MAAM,SAAS,SAAS,OAAQ,OAAO,KAAK,KAAK,EAAE,KAAK,OAAK,CAAC,CAAC,YAAW,UAAS,OAAO,EAAE,SAAS,CAAC,CAAC,KAAK,MAAM,UAAU,UAAa,CAAC,CAAC,QAAO,SAAS,EAAE,SAAS,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,iCAAiC;AACtS,UAAI,WAA4B,gBAAgB,MAAM,QAAQ;AAC9D,YAAM,WAAW,MAAM,OAAO,UAAU,OAAO,WAAW;AAC1D,UAAI,kBAA0D,OAA4B;AAC1F,UAAI,iBAAiB,OAAO;AAC5B,YAAM,UAAU,OAA2B,EAAE,UAAU,EAAE,UAAU,QAAQ,EAAE,QAAQ,WAAW,YAAY,aAAa,cAAc,SAAS,GAAI,YAAY,YAAY,EAAE,WAAW,WAAW,UAAU,IAAI,CAAC,GAAI,GAAK,mBAAmB,YAAY,QAAS,EAAE,OAAO,mBAAmB,YAAY,MAAM,IAAI,CAAC,GAAI,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC,EAAG;AAC7W,YAAM,UAAU,OAAO,OAA8D,QAAiF,CAAC,MAAM;AAC5K,YAAI;AAAE,gBAAM,YAAY,eAAe,OAAO,EAAE,OAAO,SAAS,QAAQ,GAAG,GAAG,MAAM,CAAC;AAAA,QAAE,QAAQ;AAAA,QAA8D;AAAA,MAC9J;AACA,YAAM,aAAa,IAAI,gBAAgB;AAAG,UAAI,UAAkD;AAChG,YAAM,QAAQ,MAAM,WAAW,MAAM;AACrC,YAAM,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AAC7D,UAAI,MAAM,QAAQ,QAAS,OAAM;AACjC,YAAM,QAAQ,MAAM;AAAE,YAAI,WAAW,OAAO,QAAS,OAAM,IAAI,MAAM,6BAA6B;AAAA,MAAE;AACpG,YAAM,QAAQ,YAAY;AAAE,cAAM;AAAG,YAAI,MAAM,UAAU,gBAAgB,CAAC,GAAG,YAAY,MAAM,KAAM,OAAM,IAAI,MAAM,oBAAoB;AAAG,cAAM;AAAA,MAAE;AACpJ,YAAM,qBAAqB,MAAqB;AAC/C,YAAI,CAAC,kBAAkB,CAAC,YAAY,QAAQ,YAAa,QAAO,QAAQ,QAAQ;AAChF,eAAO,gBAAgB,QAAQ,QAAQ,EAAE,KAAK,MAAM,WAAW,OAAQ,YAAa,EAAC,SAAQ,QAAQ,GAAE,OAAM,SAAS,gBAAgB,KAAK,EAAC,CAAC,CAAC;AAAA,MAC/I;AACA,YAAM,OAAO,YAAqC;AACjD,cAAM,MAAM;AACZ,cAAM,UAAU,aAAa,YAAY,gBAAgB,MAAM,QAAQ,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AACrG,cAAM,MAAM;AACZ,YAAI,QAAQ,SAAS,OAAO,IAAI,IAAI,QAAQ,IAAI,OAAK,EAAE,IAAI,CAAC,EAAE,SAAS,QAAQ,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AAClI,YAAI,KAAK,UAAU,EAAE,UAAU,OAAO,SAAS,WAAW,CAAC,EAAE,SAAS,SAAU,OAAM,IAAI,MAAM,kBAAkB;AAClH,YAAI,YAAY,OAAO,QAAQ;AAC9B,gBAAM,UAAU,MAAM,WAAW,MAAM,OAAO,EAAE,SAAS,QAAQ,GAAG,UAAU,WAAW,QAAQ,IAAI,UAAQ,KAAK,IAAI,EAAE,CAAC;AACzH,cAAI,CAAC,QAAQ,QAAS,OAAM,IAAI,MAAM,eAAe,QAAQ,SAAS,KAAK,QAAQ,MAAM,KAAK,EAAE,EAAE;AACnG,cAAI,QAAQ,aAAa,OAAW,YAAW,gBAAgB,QAAQ,QAAQ;AAC/E,6BAAmB,QAAQ;AAAA,QAC5B;AACC,cAAM,MAAM;AACZ,cAAM,QAAQ,UAAU,QAAQ,EAAE,SAAS,QAAQ,GAAG,YAAY,QAAQ,GAAI,YAAY,QAAQ,EAAE,SAAS,WAAW,MAAM,IAAI,CAAC,GAAI,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC,EAAG,CAAC;AAC1L,YAAI,kBAAkB;AACtB,YAAI,OAAO;AACV,4BAAkB,MAAM;AACxB,cAAI,CAAC,OAAO,OAAO,eAAc,MAAM,OAAO,KAAK,OAAO,cAAc,MAAM,OAAO,GAAG,WAAW,WAAY,OAAM,IAAI,MAAM,kCAAkC;AACjK,4BAAkB,cAAc,MAAM,OAAO;AAC7C,cAAI,gBAAgB,OAAO,MAAM,UAAW,OAAM,IAAI,MAAM,oDAAoD;AAChH,cAAI,aAAa,aAAa,CAAC,MAAM,aAAa,SAAS,OAAO,EAAG,OAAM,IAAI,MAAM,uCAAuC;AAAA,QAC7H;AACA,YAAI,QAAQ,UAAU,CAAC,gBAAgB,aAAa,MAAO,OAAM,IAAI,MAAM,2BAA2B;AACtG,cAAM,aAAa,KAAK,IAAI,UAAU,OAAO,iBAAiB,QAAQ,GAAG,cAAc,KAAK,IAAI,WAAW,OAAO,kBAAkB,SAAS;AAC7I,YAAI,KAAK,UAAU,EAAE,UAAU,OAAO,SAAS,WAAW,CAAC,EAAE,SAAS,WAAY,OAAM,IAAI,MAAM,kBAAkB;AACpH,cAAM,MAAM;AACZ,YAAI,YAAY,QAAQ;AACvB,gBAAM,WAAW,MAAM,WAAW,OAAO,UAAU,EAAE,SAAS,QAAQ,EAAE,CAAC;AACzE,cAAI,CAAC,SAAS,QAAS,OAAM,IAAI,MAAM,qBAAqB,SAAS,SAAS,KAAK,SAAS,MAAM,KAAK,EAAE,EAAE;AAAA,QAC5G;AACA,cAAM,MAAM;AACZ,cAAM,QAAQ,WAAW,EAAE,OAAO,EAAE,cAAc,SAAS,QAAQ,WAAW,QAAQ,OAAO,GAAG,UAAU,EAAE,SAAS,gBAAgB,IAAI,GAAI,QAAQ,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC,EAAG,EAAE,CAAC;AACzL,cAAM,MAAM;AACZ,yBAAiB;AACjB,mBAAW,gBAAgB,OAAO,EAAE,UAAU,GAAI,QAAQ,SAAS,EAAE,OAAO,QAAQ,IAAI,CAAC,GAAI,YAAY,gBAAgB,UAAU,GAAG,QAAQ,WAAW,OAAO,CAAC,EAAE,OAAO,aAAa,EAAE;AACzL,cAAM,QAAsB,CAAC,GAAG,QAAQ,oBAAI,IAAY,GAAG,QAAQ,IAAI,IAAI,QAAQ,IAAI,OAAK,EAAE,IAAI,CAAC;AACnG,YAAI,OAAO,GAAG,SAAS;AACvB,eAAO,MAAM;AACZ,gBAAM;AACN,gBAAM,OAAO,MAAM,SAAS,KAAK;AAAG,gBAAM;AAC1C,cAAI,KAAK,KAAM,OAAM,IAAI,MAAM,sCAAsC;AACrE,gBAAM,MAAM;AACZ,gBAAM,QAAQ,KAAK;AACnB,gBAAM,QAAQ,SAAS,EAAE,WAAW,MAAM,KAAK,CAAC;AAChD,cAAI,EAAE,SAAS,cAAc,QAAQ,KAAK,UAAU,KAAK,EAAE,UAAU,YAAa,OAAM,IAAI,MAAM,mBAAmB;AACrH,cAAI,MAAM,SAAS,WAAY,SAAQ,WAAW,OAAO,UAAU,MAAM,QAAQ,CAAC;AAClF,cAAI,MAAM,SAAS,UAAU;AAC5B,gBAAI,CAAC,CAAC,QAAO,YAAY,EAAE,SAAS,MAAM,MAAM,KAAM,MAAM,WAAW,iBAAmB,MAAM,OAAO,EAAI,OAAM,IAAI,MAAM,0CAA0C;AACrK,gBAAI,UAAyB,EAAE,IAAI,OAAO,WAAW,GAAG,MAAM,aAAa,MAAM;AACjF,gBAAI,YAAY,OAAO,OAAO;AAC7B,oBAAM,UAAU,MAAM,WAAW,MAAM,MAAM,EAAE,SAAS,QAAQ,GAAG,QAAQ,CAAC;AAC5E,kBAAI,CAAC,QAAQ,QAAS,OAAM,IAAI,MAAM,sBAAsB,QAAQ,SAAS,KAAK,QAAQ,MAAM,KAAK,EAAE,EAAE;AACzG,kBAAI,QAAQ,aAAa,QAAW;AACnC,oBAAI,QAAQ,SAAS,WAAW,EAAG,OAAM,IAAI,MAAM,kDAAkD;AACrG,0BAAU,gBAAgB,QAAQ,SAAS,CAAC,CAAC;AAAA,cAC9C;AAAA,YACD;AACA,gBAAI,KAAK,UAAU,OAAO,EAAE,SAAS,YAAa,OAAM,IAAI,MAAM,+BAA+B;AACjG,kBAAM,MAAM;AACZ,mBAAO,EAAE,SAAS,cAAc,MAAM,QAA0C,SAAS,OAAO,iBAAiB;AAAA,UAClH;AACA,cAAI,MAAM,SAAS,cAAc;AAChC,gBAAI,OAAO,MAAM,SAAS,SAAU,OAAM,IAAI,MAAM,mBAAmB;AACvE,kBAAM,WAAW,MAAM,GAAG,EAAE;AAC5B,gBAAI,UAAU,SAAS,OAAQ,OAAM,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,QAAQ,MAAM,SAAS,OAAO,MAAM,KAAK;AAAA,gBACrG,OAAM,KAAK,EAAE,MAAM,QAAQ,MAAM,MAAM,KAAK,CAAC;AAAA,UACnD,WAAW,MAAM,SAAS,aAAa;AACtC,gBAAI,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,OAAO,MAAM,WAAW,YAAY,CAAC,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM,MAAM,KAAK,MAAM,QAAQ,OAAO,CAAC,MAAM,SAAS,OAAO,MAAM,UAAU,YAAY,MAAM,QAAQ,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,wCAAwC;AACjR,kBAAM,IAAI,MAAM,MAAM;AAAG,kBAAM,KAAK,gBAAgB,KAAK,CAAC;AAAA,UAC3D,WAAW,MAAM,SAAS,OAAQ,OAAM,KAAK,gBAAgB,KAAK,CAAC;AAAA,mBAC1D,MAAM,SAAS,WAAY,OAAM,IAAI,MAAM,uBAAuB;AAAA,QAC5E;AAAA,MACD;AACA,UAAI;AACJ,YAAM,UAAU,IAAI,QAAe,CAAC,UAAU,WAAW;AACxD,sBAAc,MAAM,OAAO,IAAI,MAAM,6BAA6B,CAAC;AACnE,mBAAW,OAAO,iBAAiB,SAAS,aAAa,EAAE,MAAM,KAAK,CAAC;AACvE,YAAI,WAAW,OAAO,QAAS,aAAY;AAC3C,gBAAQ,WAAW,OAAO,OAAO;AAAA,MAClC,CAAC;AACD,YAAM,gBAAgB,YAAY;AACjC,YAAI;AACJ,YAAI;AAAE,mBAAS,MAAM,KAAK;AAAA,QAAE,SACrB,OAAO;AAAE,gBAAM,mBAAmB;AAAG,gBAAM;AAAA,QAAM;AACxD,cAAM,mBAAmB;AACzB,cAAM,MAAM;AACZ,cAAM,QAAQ,aAAa,EAAC,QAAO,OAAO,SAAQ,MAAK,CAAC;AACxD,cAAM,MAAM;AACZ,eAAO;AAAA,MACR;AACA,UAAI;AAAE,eAAO,MAAM,QAAQ,KAAK,CAAC,cAAc,GAAG,OAAO,CAAC;AAAA,MAAE,SACrD,OAAO;AACb,YAAI,UAAU;AAEd,YAAI;AAAE,gBAAM,QAAQ,KAAK,CAAC,mBAAmB,GAAE,OAAO,CAAC;AAAA,QAAE,SAClD,iBAAiB;AAAE,cAAI,CAAC,WAAW,OAAO,QAAS,WAAU;AAAA,QAAgB;AACpF,aAAK,QAAQ,UAAU,EAAE,OAAO,mBAAmB,QAAQ,QAAQ,UAAU,OAAO,OAAO,GAAG,MAAM,CAAC;AACrG,cAAM;AAAA,MACP,UACA;AACC,qBAAa,KAAK;AAAG,cAAM,QAAQ,oBAAoB,SAAS,KAAK;AACrE,YAAI,YAAa,YAAW,OAAO,oBAAoB,SAAS,WAAW;AAC3E,mBAAW,MAAM;AACjB,YAAI;AAAE,eAAK,QAAQ,QAAQ,UAAU,SAAS,CAAC,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QAAE,QAAQ;AAAA,QAAuC;AAAA,MACjH;AAAA,IACD;AAAA,EACD;AACD;AAEA,SAAS,UAAU,OAAqC;AACvD,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,SAAS,OAAkC,MAAM,OAAO,SAAS,OAAO,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,QAAmC;AACpL,QAAM,cAAc,OAAO,IAAI,eAAe,IAAI,gBAAgB,IAAI,YAAY,GAAG,eAAe,OAAO,IAAI,gBAAgB,IAAI,oBAAoB,IAAI,aAAa,GAAG,cAAc,OAAO,IAAI,eAAe,IAAI,YAAY,GAAG,OAAO,OAAO,IAAI,IAAI,GAAG,WAAW,OAAO,IAAI,aAAa,WAAW,IAAI,WAAW;AAC5T,MAAI,gBAAgB,UAAa,iBAAiB,UAAa,gBAAgB,UAAa,SAAS,OAAW,QAAO;AACvH,SAAO,EAAE,GAAI,gBAAgB,SAAY,CAAC,IAAI,EAAE,YAAY,GAAI,GAAI,iBAAiB,SAAY,CAAC,IAAI,EAAE,aAAa,GAAI,GAAI,gBAAgB,SAAY,CAAC,IAAI,EAAE,YAAY,GAAI,GAAI,SAAS,SAAY,CAAC,IAAI,EAAE,KAAK,GAAI,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC,EAAG;AAC5P;AAEA,SAAS,OAAO,OAAoC;AAAE,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,SAAS,IAAI,QAAQ;AAAU;AACnJ,SAAS,WAAW,UAA+B,MAAgD;AAAE,SAAO,OAAO,EAAE,GAAI,YAAY,CAAC,GAAI,GAAG,KAAK,IAAI;AAAS;","names":[]}

package/dist/db-package/index.js

@@ -1,10 +1,10 @@
-import {
-  LocalFirstSqliteAdapter
-} from "../chunk-VISRDVTK.js";
 import "../chunk-JT6BRGQM.js";
 import {
   MigrationAggregator
 } from "../chunk-5WOZWPZA.js";
+import {
+  LocalFirstSqliteAdapter
+} from "../chunk-VISRDVTK.js";
 
 // src/db-package/index.ts
 export * from "@alneas/eaos-core/contracts/data-contracts";

package/dist/engine.js

@@ -2,12 +2,12 @@ import {
   ErpEngine,
   createErpEngine,
   defineConfig
-} from "./chunk-6KV5CJBW.js";
+} from "./chunk-F4IITPGX.js";
+import "./chunk-L6PMAEMB.js";
 import "./chunk-XIEY2OF4.js";
 import "./chunk-AVDMLTPF.js";
 import "./chunk-VC2PCK2S.js";
 import "./chunk-R4ADP2DC.js";
-import "./chunk-L6PMAEMB.js";
 import "./chunk-VF5YDZJC.js";
 import "./chunk-46UWPEW2.js";
 import "./chunk-INCHXAFK.js";

package/dist/execution/chat.d.ts

@@ -0,0 +1,7 @@
+import '@alneas/appkit-core/ai/ai-chat';
+import '@alneas/appkit-core/ai/action';
+import '@alneas/eaos-core';
+export { ChatClientOptions, ChatCompletion, ChatGovernanceOptions, createChatClient } from './index.js';
+import 'hono/types';
+import 'hono';
+import '@alneas/appkit-core/ai';

package/dist/execution/chat.js

@@ -0,0 +1,7 @@
+import {
+  createChatClient
+} from "../chunk-YMHVRBUU.js";
+export {
+  createChatClient
+};
+//# sourceMappingURL=chat.js.map

package/dist/execution/chat.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/execution/index.d.ts

@@ -1,5 +1,160 @@
+import { AIChatMessage, AIChatAdapter } from '@alneas/appkit-core/ai/ai-chat';
+import { ActionToolBinding, ActionRegistry, ActionToolCall, ActionToolObject, ActionToolDescriptor } from '@alneas/appkit-core/ai/action';
+import { AIModelRegistry, AIGuard, AIBudgetGate, AIObservabilitySink, AIUsage, AIExecutionContext } from '@alneas/eaos-core';
 import * as hono_types from 'hono/types';
 import { Context, Hono } from 'hono';
+import * as _alneas_appkit_core_ai from '@alneas/appkit-core/ai';
+
+/** Host-registered Action binding and explicit automatic-execution policy.
+ * @see createToolAgent
+ */
+interface AgentTool {
+    /** Existing Appkit Action/command binding; registration and input/output schemas remain Appkit-owned. */
+    binding: ActionToolBinding;
+    /** Only host-verified read-only actions may run automatically; handoffs remain unexecuted. */
+    mode: 'read' | 'handoff';
+}
+/** Current host policies and limits for a single-flight Appkit execution session.
+ * @see createToolAgent
+ */
+interface ToolAgentOptions extends Omit<ChatClientOptions, 'tools'> {
+    /**
+     * Resolve the current host registry and explicit tool execution policy.
+     * @param principal - Copied verified tenant/user identity.
+     * @returns Existing Action registry and at most 100 read/handoff bindings.
+     * @throws Rejects missing host session or registry resolution failures.
+     * @example
+     * ```typescript
+     * import type { ToolAgentOptions } from '@alneas/eaos-server/execution/tool-agent';
+     * export function agentSession(resolve: ToolAgentOptions['session']) { return resolve; }
+     * ```
+     */
+    session(principal: ExecutionPrincipal): Promise<{
+        /** Existing host-owned Appkit Action registry for this authorized session. */
+        registry: ActionRegistry;
+        /** Explicit read/handoff policy for every disclosed binding. */
+        tools: readonly AgentTool[];
+    }>;
+    /**
+     * Check current permission to disclose a tool descriptor or result to the model.
+     * @param principal - Copied verified actor.
+     * @param name - Host-registered tool name.
+     * @returns Exactly true permits disclosure; other results deny it.
+     * @throws Host policy errors propagate into the execution outcome.
+     * @example
+     * ```typescript
+     * import type { ToolAgentOptions } from '@alneas/eaos-server/execution/tool-agent';
+     * export function disclosurePolicy(policy: ToolAgentOptions['disclose']) { return policy; }
+     * ```
+     */
+    disclose(principal: ExecutionPrincipal, name: string): Promise<boolean>;
+    /**
+     * Check exact resource/input permission before execution and before result disclosure.
+     * @param principal - Copied verified actor; callback mutation cannot change the trusted identity.
+     * @param call - Untrusted model request with correlated ID, name and arguments.
+     * @returns Exactly true admits the call; it does not approve a handoff for execution.
+     * @throws Host policy errors propagate into the execution outcome.
+     * @example
+     * ```typescript
+     * import type { ToolAgentOptions } from '@alneas/eaos-server/execution/tool-agent';
+     * export function callPolicy(policy: ToolAgentOptions['authorizeCall']) { return policy; }
+     * ```
+     */
+    authorizeCall(principal: ExecutionPrincipal, call: ActionToolCall): Promise<boolean>;
+    /** Maximum model rounds; default 6, allowed integers 1–20. */
+    maxRounds?: number;
+    /** Maximum automatic Action calls per run; default 10, allowed integers 1–100. */
+    maxCalls?: number;
+}
+/** Final in-memory conversational outcome, separate from Appkit execution status.
+ * @see createToolAgent
+ */
+interface ToolAgentResult {
+    /** Completed chat, unexecuted handoff, bounded stop, or an Action validation/execution failure. */
+    status: 'completed' | 'handoff' | 'limited' | 'tool-error';
+    /** Detached correlated chat history, including only authorized projected tool results. */
+    messages: AIChatMessage[];
+    /** Unexecuted requests; the host must validate them through its existing Action/Proposal review path. */
+    pending: ActionToolCall[];
+    /** Number of attempted automatic Action calls, including a returned Action failure. */
+    callsExecuted: number;
+}
+/**
+ * Orchestrate bounded model rounds through existing Appkit Action/Execution and scoped EAOS chat.
+ * @param options - Current session/disclosure/call policies, Appkit adapter and chat/round/call limits.
+ * @returns Single-flight run, cancel, close and summary subscription methods backed by Appkit ExecutionSession.
+ * @throws Invalid policies or round/call limits reject construction. Concurrent/closed runs reject through
+ * Appkit; asynchronous authorization/provider failures become failed execution outcomes. Cancellation is
+ * cooperative and does not roll back previously completed Action effects.
+ * @remarks Only explicitly host-verified read tools execute automatically. A batch containing any handoff
+ * returns all its calls without executing them. No durable command engine, approval grant or transaction
+ * is created; retained tool-call/result history and descriptors are reauthorized at the exact adapter
+ * boundary after chat governance, including caller-supplied history and guard substitutions. Approved writes belong to the host's existing proposal/approval and owning command service.
+ * @example
+ * ```typescript
+ * import { createToolAgent, type ToolAgentOptions } from '@alneas/eaos-server/execution/tool-agent';
+ * export function connectAgent(options: ToolAgentOptions) { return createToolAgent(options); }
+ * ```
+ */
+declare function createToolAgent(options: ToolAgentOptions): {
+    /**
+     * Request cooperative cancellation of the current Appkit execution.
+     * @returns No value; Appkit marks active work cancelling without rolling back completed effects.
+     * @example
+     * ```typescript
+     * import { createToolAgent } from '@alneas/eaos-server/execution/tool-agent';
+     * export function cancel(agent: ReturnType<typeof createToolAgent>) { return agent.cancel(); }
+     * ```
+     */
+    cancel: () => void;
+    /**
+     * Read Appkit's summary-only in-memory execution history.
+     * @returns Appkit execution summaries; raw model inputs/results are not stored in these summaries.
+     * @example
+     * ```typescript
+     * import { createToolAgent } from '@alneas/eaos-server/execution/tool-agent';
+     * export function snapshot(agent: ReturnType<typeof createToolAgent>) { return agent.getSnapshot(); }
+     * ```
+     */
+    getSnapshot: () => readonly _alneas_appkit_core_ai.ExecutionRecord[];
+    /**
+     * Subscribe to Appkit execution summary changes.
+     * @param listener - Callback notified when execution state changes; do not expose raw secrets in UI callbacks.
+     * @returns Unsubscribe function owned by the subscribing host.
+     * @example
+     * ```typescript
+     * import { createToolAgent } from '@alneas/eaos-server/execution/tool-agent';
+     * export function observe(agent: ReturnType<typeof createToolAgent>, listener: () => void) { return agent.subscribe(listener); }
+     * ```
+     */
+    subscribe: (listener: () => void) => () => void;
+    /**
+     * Close the Appkit session and request cooperative cancellation.
+     * @returns No value; the session no longer admits new runs.
+     * @example
+     * ```typescript
+     * import { createToolAgent } from '@alneas/eaos-server/execution/tool-agent';
+     * export function close(agent: ReturnType<typeof createToolAgent>) { agent.close(); }
+     * ```
+     */
+    close: () => void;
+    /**
+     * Run a single authorized model/Action conversation.
+     * @param principal - Verified current tenant/user identity, copied before host callbacks.
+     * @param input - Detached initial messages and optional cooperative cancellation signal.
+     * @returns Appkit execution outcome containing a ToolAgentResult on success; failed/cancelled outcomes omit it.
+     * @throws Appkit rejects concurrent or closed session admission; run failures otherwise become outcomes.
+     * @example
+     * ```typescript
+     * import { createToolAgent } from '@alneas/eaos-server/execution/tool-agent';
+     * export function run(agent: ReturnType<typeof createToolAgent>, ...args: Parameters<typeof agent.run>) { return agent.run(...args); }
+     * ```
+     */
+    run(principal: ExecutionPrincipal, input: {
+        messages: readonly AIChatMessage[];
+        signal?: AbortSignal;
+    }): Promise<_alneas_appkit_core_ai.ExecutionOutcome<ToolAgentResult>>;
+};
 
 /**
  * Authenticated host identity supplied to {@link createPluginExecutionRouter}.
@@ -45,6 +200,143 @@ declare function createPluginExecutionRouter(options: {
      */
     allowedOrigins?: string[];
 }): Hono<hono_types.BlankEnv, hono_types.BlankSchema, "/">;
+/** Verified generic execution identity; policy checks remain host-owned.
+ * @see createChatClient
+ */
+type ExecutionPrincipal = ExecutionIdentity;
+/** Current admission policy used by model and action orchestration.
+ * @see createChatClient
+ */
+interface ExecutionPolicy {
+    /**
+     * Check current membership, activation and operation permission.
+     * @param principal - Trusted tenant/user identity copied before calling the host.
+     * @param operation - Host operation identity; chat uses model:chat.
+     * @returns Exactly true to admit; any other value denies execution.
+     * @throws Host policy failures propagate to the caller.
+     * @example
+     * ```typescript
+     * import type { ExecutionPolicy } from '@alneas/eaos-server/execution';
+     * export function currentPolicy(policy: ExecutionPolicy) { return policy; }
+     * ```
+     * @see createChatClient
+     */
+    authorize(principal: ExecutionPrincipal, operation: string): Promise<boolean>;
+}
+
+/** Host-injected model guards, usage budgets and telemetry.
+ * @see createChatClient
+ */
+interface ChatGovernanceOptions {
+    /** Optional pre-input and post-output checks; replacement messages remain host-owned. */
+    guard?: AIGuard;
+    /** Optional request admission and once-per-started-attempt accounting; accounting failures propagate. */
+    budget?: AIBudgetGate;
+    /** Awaited started/event/completed telemetry within the deadline; sink errors are ignored. */
+    observability?: AIObservabilitySink;
+    /** Telemetry operation label; authorization always checks model:chat. */
+    operation?: string;
+    /** Host-selected registry model ID; without a registry this is metadata, not provider selection. */
+    model?: string;
+    /** Optional host session identity recorded in governance context. */
+    sessionId?: string;
+}
+/** Host-configured adapter, current admission and bounded chat policy.
+ * @see createChatClient
+ */
+interface ChatClientOptions extends ExecutionPolicy {
+    /** Existing Appkit transport configured with the host endpoint, model and credentials. */
+    adapter: AIChatAdapter;
+    /** Host-owned provider parameters cloned at creation; model/messages/tools/stream keys are reserved and rejected. */
+    parameters?: ActionToolObject;
+    /**
+     * Resolve descriptors only when the caller explicitly requests tools: catalog.
+     * @param principal - Copied verified actor whose current disclosure permission the host must check.
+     * @returns At most 100 unique descriptors; omission advertises no tools.
+     * @throws Host resolution failures reject completion before the provider starts.
+     * @example
+     * ```typescript
+     * import type { ChatClientOptions } from '@alneas/eaos-server/execution/chat';
+     * export function disclosedTools(resolve: NonNullable<ChatClientOptions['tools']>) { return resolve; }
+     * ```
+     */
+    tools?(principal: ExecutionPrincipal): Promise<readonly ActionToolDescriptor[]>;
+    /** Positive integer deadline in milliseconds; default 30000, maximum 3600000. */
+    timeoutMs?: number;
+    /** Serialized request character ceiling; default 200000, maximum 7000000. */
+    maxInputChars?: number;
+    /** Serialized event and final assistant-message character ceiling; default 100000, maximum 10000000. */
+    maxOutputChars?: number;
+    /** Maximum stream event count; default 10000, maximum 100000. */
+    maxEvents?: number;
+    /** Host-approved route registry; requests cannot select a model or bypass sensitivity limits. */
+    modelRegistry?: AIModelRegistry;
+    /** Required with modelRegistry: host-approved logical model to configured adapter bindings, snapshotted at creation. */
+    modelAdapters?: Readonly<Record<string, AIChatAdapter>>;
+    /** Optional host guards, budgets and telemetry; final current authorization follows their completion. */
+    governance?: ChatGovernanceOptions;
+}
+/** Completed assistant message and optional host-governance metadata.
+ * @see createChatClient
+ */
+interface ChatCompletion {
+    /** Detached assistant response; tool-call parts are unexecuted requests. */
+    message: AIChatMessage;
+    /** Successful provider finish reason; truncated or inconsistent streams reject. */
+    finishReason: 'stop' | 'tool-calls';
+    /** Unique request trace identity generated before governance callbacks. */
+    traceId?: string;
+    /** Recognized nonnegative adapter metadata; undefined means unknown, including Appkit OpenAI SSE without usage events. */
+    usage?: AIUsage;
+    /** Sensitivity label supplied by the input guard. */
+    sensitivityLevel?: AIExecutionContext['sensitivityLevel'];
+}
+/**
+ * Complete scoped chat through the existing Appkit adapter with live admission and host governance.
+ * @param options - Trusted adapter, current authorization, optional routes/governance and bounded limits.
+ * @returns A client whose complete method returns detached, finally authorized assistant data.
+ * @throws Rejects invalid limits or missing adapter/policy during construction. Completion rejects
+ * invalid histories/catalogs, denied or revoked admission, guard/budget/route denial, provider failures,
+ * incomplete streams, exceeded limits, cancellation, deadline expiry and host accounting failure. Telemetry errors are ignored.
+ * @remarks Every completion authorizes model:chat before disclosure, between events and after awaited
+ * output guard, usage recording and completion telemetry. This client never executes model tool calls.
+ * The host must configure real endpoint credentials in the Appkit adapter. Abort is cooperative for a
+ * custom transport; the request promise remains bounded even if its iterator ignores cancellation.
+ * With modelRegistry, provide modelAdapters mapping each approved logical model to its host-configured
+ * Appkit adapter; generic adapter IDs alone do not select or prove the provider model. Binding entries
+ * and stream methods are snapshotted at creation. Reserved transport parameters are rejected in 0.2.
+ * Accounting runs once after each started adapter attempt, including output blocks, revocation and provider
+ * failure. Unknown usage is passed as undefined, never zero. Appkit's OpenAI SSE adapter currently emits
+ * no usage metadata event even for provider include_usage chunks; hosts must reconcile measured usage
+ * through their existing accounting port using trace/session context. Accounting callback errors reject
+ * completion in 0.2; a stalled callback remains bounded by the request deadline.
+ * @example
+ * ```typescript
+ * import { createChatClient, type ChatClientOptions } from '@alneas/eaos-server/execution/chat';
+ * export function connectChat(options: ChatClientOptions) { return createChatClient(options); }
+ * ```
+ */
+declare function createChatClient(options: ChatClientOptions): {
+    /**
+     * Request one bounded completion for the current actor.
+     * @param principal - Verified nonblank tenant/user identity; copied before invoking host callbacks.
+     * @param input - One to 1000 messages, optional cancellation, and explicit none/catalog tool disclosure.
+     * @returns Assistant data only after final live authorization; tools remain unexecuted requests.
+     * @throws Rejects invalid requests, governance/provider failure, revocation, limits or cancellation.
+     * @example
+     * ```typescript
+     * import { createChatClient } from '@alneas/eaos-server/execution/chat';
+     * export function complete(client: ReturnType<typeof createChatClient>, ...args: Parameters<typeof client.complete>) {
+     *   return client.complete(...args);
+     * }
+     * ```
+     */
+    complete(principal: ExecutionPrincipal, input: {
+        messages: readonly AIChatMessage[];
+        signal?: AbortSignal;
+        tools?: "none" | "catalog";
+    }): Promise<ChatCompletion>;
+};
 
-export { createPluginExecutionRouter };
-export type { ExecutionIdentity };
+export { createChatClient, createPluginExecutionRouter, createToolAgent };
+export type { AgentTool, ChatClientOptions, ChatCompletion, ChatGovernanceOptions, ExecutionIdentity, ExecutionPolicy, ExecutionPrincipal, ToolAgentOptions, ToolAgentResult };

package/dist/execution/index.js

@@ -1,3 +1,10 @@
+import {
+  createToolAgent
+} from "../chunk-4BARRLJR.js";
+import {
+  createChatClient
+} from "../chunk-YMHVRBUU.js";
+
 // src/execution/index.ts
 import { Hono } from "hono";
 function createPluginExecutionRouter(options) {
@@ -52,6 +59,8 @@ function createPluginExecutionRouter(options) {
   return router;
 }
 export {
-  createPluginExecutionRouter
+  createChatClient,
+  createPluginExecutionRouter,
+  createToolAgent
 };
 //# sourceMappingURL=index.js.map