@amodalai/core 0.1.0

package/dist/src/runtime/output-pipeline.js

@@ -0,0 +1,69 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * Wraps OutputGuard in a pipeline suitable for both synchronous
+ * and streaming use. Provides telemetry hooks and buffered stream
+ * processing.
+ */
+export class OutputPipeline {
+    outputGuard;
+    onGuardDecision;
+    constructor(config) {
+        this.outputGuard = config.outputGuard;
+        this.onGuardDecision = config['onGuardDecision'];
+    }
+    /**
+     * Process a complete agent response text through the guard.
+     */
+    process(text) {
+        const guardResult = this.outputGuard.guard(text);
+        if (this.onGuardDecision) {
+            this.onGuardDecision(guardResult);
+        }
+        return {
+            output: guardResult['output'],
+            modified: guardResult['modified'],
+            blocked: guardResult['blocked'],
+            findings: guardResult['findings'],
+        };
+    }
+    /**
+     * Create a streaming processor that buffers tokens and guards on finalize.
+     */
+    createStreamProcessor() {
+        return new StreamGuardProcessor(this);
+    }
+}
+/**
+ * Buffers streaming tokens and runs the output guard on finalize.
+ */
+export class StreamGuardProcessor {
+    pipeline;
+    buffer = '';
+    constructor(pipeline) {
+        this.pipeline = pipeline;
+    }
+    /**
+     * Feed a token into the buffer. Tokens are accumulated
+     * for guard processing on finalize.
+     */
+    feed(token) {
+        this.buffer += token;
+    }
+    /**
+     * Get the current buffered text for intermediate streaming display.
+     */
+    getBuffer() {
+        return this.buffer;
+    }
+    /**
+     * Run the output guard on the full buffered text and return the result.
+     */
+    finalize() {
+        return this.pipeline.process(this.buffer);
+    }
+}
+//# sourceMappingURL=output-pipeline.js.map

package/dist/src/runtime/output-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-pipeline.js","sourceRoot":"","sources":["../../../src/runtime/output-pipeline.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAuBH;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACR,WAAW,CAAc;IACzB,eAAe,CAAiC;IAEjE,YAAY,MAA4B;QACtC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAED,OAAO;YACL,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC;YAC7B,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC;YACjC,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC;YAC/B,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC;SAClC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,oBAAoB;IACd,QAAQ,CAAiB;IAClC,MAAM,GAAG,EAAE,CAAC;IAEpB,YAAY,QAAwB;QAClC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,KAAa;QAChB,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/src/runtime/plan-mode.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * Manages plan mode state for a session.
+ *
+ * When active, write operations are blocked via the request tool's
+ * planModeActive callback. Once the user approves a plan, it's stored
+ * and injected into the context for execution.
+ */
+export declare class PlanModeManager {
+    private active;
+    private approvedPlan;
+    private reason;
+    /** Whether plan mode is currently active (writes blocked). */
+    isActive(): boolean;
+    /** The approved plan text, if any. */
+    getApprovedPlan(): string | null;
+    /** The reason plan mode was entered, if any. */
+    getReason(): string | null;
+    /** Enter plan mode. Writes are blocked until a plan is approved. */
+    enter(reason?: string): void;
+    /** Approve a plan. Stores the plan text and exits plan mode (writes re-enabled). */
+    approve(planText: string): void;
+    /** Exit plan mode without approving a plan. */
+    exit(): void;
+    /**
+     * Get the planning reminder text for injection into the system prompt.
+     * Returns null if plan mode is not active.
+     */
+    getPlanningReminder(): string | null;
+    /**
+     * Get the approved plan context for injection into the system prompt.
+     * Returns null if no plan has been approved.
+     */
+    getApprovedPlanContext(): string | null;
+}

package/dist/src/runtime/plan-mode.js

@@ -0,0 +1,81 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * Manages plan mode state for a session.
+ *
+ * When active, write operations are blocked via the request tool's
+ * planModeActive callback. Once the user approves a plan, it's stored
+ * and injected into the context for execution.
+ */
+export class PlanModeManager {
+    active = false;
+    approvedPlan = null;
+    reason = null;
+    /** Whether plan mode is currently active (writes blocked). */
+    isActive() {
+        return this.active;
+    }
+    /** The approved plan text, if any. */
+    getApprovedPlan() {
+        return this.approvedPlan;
+    }
+    /** The reason plan mode was entered, if any. */
+    getReason() {
+        return this.reason;
+    }
+    /** Enter plan mode. Writes are blocked until a plan is approved. */
+    enter(reason) {
+        this.active = true;
+        this.reason = reason ?? null;
+        this.approvedPlan = null;
+    }
+    /** Approve a plan. Stores the plan text and exits plan mode (writes re-enabled). */
+    approve(planText) {
+        this.active = false;
+        this.approvedPlan = planText;
+    }
+    /** Exit plan mode without approving a plan. */
+    exit() {
+        if (!this.active) {
+            return;
+        }
+        this.active = false;
+    }
+    /**
+     * Get the planning reminder text for injection into the system prompt.
+     * Returns null if plan mode is not active.
+     */
+    getPlanningReminder() {
+        if (!this.active) {
+            return null;
+        }
+        const lines = [
+            '## Planning Mode Active',
+            'You are currently in planning mode. Present your plan to the user for approval before executing write operations.',
+            'Read operations and the explore tool are allowed freely.',
+        ];
+        if (this.reason) {
+            lines.push(`Reason: ${this.reason}`);
+        }
+        return lines.join('\n');
+    }
+    /**
+     * Get the approved plan context for injection into the system prompt.
+     * Returns null if no plan has been approved.
+     */
+    getApprovedPlanContext() {
+        if (this.approvedPlan === null) {
+            return null;
+        }
+        return [
+            '## Approved Plan',
+            'The following plan has been approved by the user. Execute it step by step.',
+            '',
+            this.approvedPlan,
+        ].join('\n');
+    }
+}
+//# sourceMappingURL=plan-mode.js.map

package/dist/src/runtime/plan-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-mode.js","sourceRoot":"","sources":["../../../src/runtime/plan-mode.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;GAMG;AACH,MAAM,OAAO,eAAe;IAClB,MAAM,GAAG,KAAK,CAAC;IACf,YAAY,GAAkB,IAAI,CAAC;IACnC,MAAM,GAAkB,IAAI,CAAC;IAErC,8DAA8D;IAC9D,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,sCAAsC;IACtC,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,gDAAgD;IAChD,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,MAAe;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED,oFAAoF;IACpF,OAAO,CAAC,QAAgB;QACtB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;IAC/B,CAAC;IAED,+CAA+C;IAC/C,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,mBAAmB;QACjB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG;YACZ,yBAAyB;YACzB,mHAAmH;YACnH,0DAA0D;SAC3D,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,sBAAsB;QACpB,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,kBAAkB;YAClB,4EAA4E;YAC5E,EAAE;YACF,IAAI,CAAC,YAAY;SAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;CACF"}

package/dist/src/runtime/preference-client.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * A user preference learned across sessions.
+ */
+export interface UserPreference {
+    id: string;
+    category: 'style' | 'content' | 'behavior' | 'domain';
+    preference: string;
+    confidence: number;
+    source: 'correction' | 'explicit' | 'inferred';
+}
+/**
+ * Client for fetching and reporting user preferences via the platform API.
+ */
+export declare class PreferenceClient {
+    private readonly url;
+    private readonly apiKey;
+    constructor(platformUrl: string, apiKey: string);
+    /**
+     * Fetch approved preferences for a user.
+     */
+    fetchPreferences(userId: string, orgId: string): Promise<UserPreference[]>;
+    /**
+     * Report a newly detected preference.
+     */
+    reportPreference(userId: string, orgId: string, preference: {
+        category: string;
+        preference: string;
+        source: string;
+    }, sessionId?: string): Promise<void>;
+}
+/**
+ * Format preferences as a system prompt section.
+ */
+export declare function formatPreferencesPrompt(preferences: UserPreference[]): string;

package/dist/src/runtime/preference-client.js

@@ -0,0 +1,70 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * Client for fetching and reporting user preferences via the platform API.
+ */
+export class PreferenceClient {
+    url;
+    apiKey;
+    constructor(platformUrl, apiKey) {
+        this.url = platformUrl.replace(/\/$/, '');
+        this.apiKey = apiKey;
+    }
+    /**
+     * Fetch approved preferences for a user.
+     */
+    async fetchPreferences(userId, orgId) {
+        try {
+            const response = await fetch(`${this.url}/api/learning/preferences?userId=${encodeURIComponent(userId)}&orgId=${encodeURIComponent(orgId)}`, { headers: { 'Authorization': `Bearer ${this.apiKey}` } });
+            if (!response.ok)
+                return [];
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- platform response
+            const data = await response.json();
+            return data.preferences;
+        }
+        catch {
+            return []; // Graceful degradation
+        }
+    }
+    /**
+     * Report a newly detected preference.
+     */
+    async reportPreference(userId, orgId, preference, sessionId) {
+        try {
+            await fetch(`${this.url}/api/learning/preferences`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Bearer ${this.apiKey}`,
+                },
+                body: JSON.stringify({
+                    userId,
+                    orgId,
+                    ...preference,
+                    sessionId,
+                }),
+            });
+        }
+        catch {
+            // Swallow — preference reporting must not break the session
+        }
+    }
+}
+/**
+ * Format preferences as a system prompt section.
+ */
+export function formatPreferencesPrompt(preferences) {
+    if (preferences.length === 0)
+        return '';
+    const lines = ['## Known User Preferences', ''];
+    for (const pref of preferences) {
+        lines.push(`- [${pref.category}] ${pref.preference} (confidence: ${(pref.confidence * 100).toFixed(0)}%)`);
+    }
+    lines.push('');
+    lines.push('Apply these preferences when generating responses. They were learned from previous interactions.');
+    return lines.join('\n');
+}
+//# sourceMappingURL=preference-client.js.map

package/dist/src/runtime/preference-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preference-client.js","sourceRoot":"","sources":["../../../src/runtime/preference-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACV,GAAG,CAAS;IACZ,MAAM,CAAS;IAEhC,YAAY,WAAmB,EAAE,MAAc;QAC7C,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,KAAa;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,IAAI,CAAC,GAAG,oCAAoC,kBAAkB,CAAC,MAAM,CAAC,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAC9G,EAAC,OAAO,EAAE,EAAC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAC,EAAC,CACtD,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,EAAE,CAAC;YAE5B,4FAA4F;YAC5F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAqC,CAAC;YACtE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC,CAAC,uBAAuB;QACpC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAAc,EACd,KAAa,EACb,UAAkE,EAClE,SAAkB;QAElB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,2BAA2B,EAAE;gBAClD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;iBACzC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,MAAM;oBACN,KAAK;oBACL,GAAG,UAAU;oBACb,SAAS;iBACV,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAA6B;IACnE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,MAAM,KAAK,GAAG,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;IAEhD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,UAAU,iBAAiB,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7G,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAC;IAE/G,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/src/runtime/preference-detector.d.ts

@@ -0,0 +1,22 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import type { JudgeProvider } from '../eval/eval-judge.js';
+/**
+ * A detected preference from a conversation.
+ */
+export interface DetectedPreference {
+    category: 'style' | 'content' | 'behavior' | 'domain';
+    preference: string;
+    confidence: number;
+    source: 'correction' | 'explicit' | 'inferred';
+}
+/**
+ * Detect corrections and preferences in a conversation using an LLM.
+ */
+export declare function detectPreferences(conversation: Array<{
+    role: 'user' | 'assistant';
+    content: string;
+}>, provider: JudgeProvider): Promise<DetectedPreference[]>;

package/dist/src/runtime/preference-detector.js

@@ -0,0 +1,95 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * Detect corrections and preferences in a conversation using an LLM.
+ */
+export async function detectPreferences(conversation, provider) {
+    if (conversation.length < 2)
+        return [];
+    // Only look at user messages for corrections
+    const userMessages = conversation
+        .filter((m) => m.role === 'user')
+        .map((m) => m.content);
+    // Simple heuristic detection for common correction patterns
+    const preferences = [];
+    for (const message of userMessages) {
+        const lower = message.toLowerCase();
+        // Check for explicit corrections
+        if (hasCorrection(lower)) {
+            const detected = await extractPreferenceWithLLM(message, provider);
+            if (detected) {
+                preferences.push(detected);
+            }
+        }
+    }
+    return preferences;
+}
+/**
+ * Check if a message contains a correction pattern.
+ */
+function hasCorrection(message) {
+    const patterns = [
+        'no, ',
+        'not that',
+        'instead ',
+        "don't ",
+        "let's not",
+        'actually ',
+        'i prefer',
+        'i want',
+        'make it ',
+        'can you ',
+        'please use',
+        'shorter',
+        'longer',
+        'more concise',
+        'more detailed',
+        'in table form',
+        'as a list',
+    ];
+    return patterns.some((p) => message.includes(p));
+}
+/**
+ * Use an LLM to extract a structured preference from a correction message.
+ */
+async function extractPreferenceWithLLM(message, provider) {
+    const prompt = [
+        'Extract a user preference from this message. If it expresses a preference for how responses should be formatted or what they should contain, extract it.',
+        '',
+        `Message: "${message}"`,
+        '',
+        'Reply with exactly one line in the format:',
+        'PREF: category=<style|content|behavior|domain> preference=<the preference> source=<correction|explicit>',
+        'or',
+        'NONE: no clear preference detected',
+        '',
+        'Nothing else.',
+    ].join('\n');
+    try {
+        const response = await provider.judge(prompt);
+        const line = response.trim().split('\n')[0];
+        const prefMatch = /^PREF:\s*category=(\w+)\s+preference=(.+?)\s+source=(\w+)$/i.exec(line);
+        if (prefMatch) {
+            const rawCategory = prefMatch[1];
+            const validCategories = new Set(['style', 'content', 'behavior', 'domain']);
+            if (!validCategories.has(rawCategory))
+                return null;
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- validated above
+            const category = rawCategory;
+            return {
+                category,
+                preference: prefMatch[2].trim(),
+                confidence: 0.7,
+                source: prefMatch[3] === 'explicit' ? 'explicit' : 'correction',
+            };
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=preference-detector.js.map

package/dist/src/runtime/preference-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preference-detector.js","sourceRoot":"","sources":["../../../src/runtime/preference-detector.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,YAAkE,EAClE,QAAuB;IAEvB,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,6CAA6C;IAC7C,MAAM,YAAY,GAAG,YAAY;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAEzB,4DAA4D;IAC5D,MAAM,WAAW,GAAyB,EAAE,CAAC;IAE7C,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAEpC,iCAAiC;QACjC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACnE,IAAI,QAAQ,EAAE,CAAC;gBACb,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,QAAQ,GAAG;QACf,MAAM;QACN,UAAU;QACV,UAAU;QACV,QAAQ;QACR,WAAW;QACX,WAAW;QACX,UAAU;QACV,QAAQ;QACR,UAAU;QACV,UAAU;QACV,YAAY;QACZ,SAAS;QACT,QAAQ;QACR,cAAc;QACd,eAAe;QACf,eAAe;QACf,WAAW;KACZ,CAAC;IAEF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,wBAAwB,CACrC,OAAe,EACf,QAAuB;IAEvB,MAAM,MAAM,GAAG;QACb,0JAA0J;QAC1J,EAAE;QACF,aAAa,OAAO,GAAG;QACvB,EAAE;QACF,4CAA4C;QAC5C,yGAAyG;QACzG,IAAI;QACJ,oCAAoC;QACpC,EAAE;QACF,eAAe;KAChB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5C,MAAM,SAAS,GAAG,6DAA6D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3F,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnD,0FAA0F;YAC1F,MAAM,QAAQ,GAAG,WAA6C,CAAC;YAE/D,OAAO;gBACL,QAAQ;gBACR,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC/B,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;aAChE,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/src/runtime/request-integration.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import type { MessageBus } from '@google/gemini-cli-core';
+import { RequestTool } from '../tools/request-tool.js';
+import type { SessionRuntime } from './session-setup.js';
+/**
+ * Creates a RequestTool with security integration (field scrubbing +
+ * action gating) wired from the session runtime.
+ */
+export declare function createSecuredRequestTool(runtime: SessionRuntime, messageBus: MessageBus): RequestTool;
+/**
+ * Creates a read-only RequestTool with security integration.
+ * Used for task agents that should not perform writes.
+ */
+export declare function createSecuredReadOnlyRequestTool(runtime: SessionRuntime, messageBus: MessageBus): RequestTool;

package/dist/src/runtime/request-integration.js

@@ -0,0 +1,36 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import { RequestTool } from '../tools/request-tool.js';
+/**
+ * Builds a {@link RequestSecurityConfig} from a session runtime.
+ */
+function buildSecurityConfig(runtime) {
+    return {
+        fieldScrubber: runtime.fieldScrubber,
+        actionGate: runtime.actionGate,
+    };
+}
+/**
+ * Creates a RequestTool with security integration (field scrubbing +
+ * action gating) wired from the session runtime.
+ */
+export function createSecuredRequestTool(runtime, messageBus) {
+    const security = buildSecurityConfig(runtime);
+    // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- _secrets is stored as Record<string, string>
+    const sessionEnv = (runtime.connectionsMap['_secrets'] ?? {});
+    return new RequestTool(runtime.connectionsMap, messageBus, false, sessionEnv, security);
+}
+/**
+ * Creates a read-only RequestTool with security integration.
+ * Used for task agents that should not perform writes.
+ */
+export function createSecuredReadOnlyRequestTool(runtime, messageBus) {
+    const security = buildSecurityConfig(runtime);
+    // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- _secrets is stored as Record<string, string>
+    const sessionEnv = (runtime.connectionsMap['_secrets'] ?? {});
+    return new RequestTool(runtime.connectionsMap, messageBus, true, sessionEnv, security);
+}
+//# sourceMappingURL=request-integration.js.map

package/dist/src/runtime/request-integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-integration.js","sourceRoot":"","sources":["../../../src/runtime/request-integration.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAC,WAAW,EAAC,MAAM,0BAA0B,CAAC;AAIrD;;GAEG;AACH,SAAS,mBAAmB,CAAC,OAAuB;IAClD,OAAO;QACL,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAuB,EACvB,UAAsB;IAEtB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,uHAAuH;IACvH,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE,CAAsC,CAAC;IACnG,OAAO,IAAI,WAAW,CACpB,OAAO,CAAC,cAAc,EACtB,UAAU,EACV,KAAK,EACL,UAAU,EACV,QAAQ,CACT,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gCAAgC,CAC9C,OAAuB,EACvB,UAAsB;IAEtB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,uHAAuH;IACvH,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE,CAAsC,CAAC;IACnG,OAAO,IAAI,WAAW,CACpB,OAAO,CAAC,cAAc,EACtB,UAAU,EACV,IAAI,EACJ,UAAU,EACV,QAAQ,CACT,CAAC;AACJ,CAAC"}

package/dist/src/runtime/runtime-types.d.ts

@@ -0,0 +1,48 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import type { AmodalRepo } from '../repo/repo-types.js';
+/**
+ * Configuration for a single chat or task session.
+ */
+export interface SessionConfig {
+    repo: AmodalRepo;
+    userRoles: string[];
+    scopeLabels: Record<string, string>;
+    fieldGuidance: string;
+    alternativeLookupGuidance: string;
+    planMode: boolean;
+    approvedPlan?: string;
+    isDelegated: boolean;
+    sessionId: string;
+}
+/**
+ * The fully compiled context ready for the LLM.
+ */
+export interface CompiledContext {
+    systemPrompt: string;
+    tokenUsage: TokenBudget;
+    sections: ContextSection[];
+}
+/**
+ * A single section of the compiled prompt.
+ */
+export interface ContextSection {
+    name: string;
+    content: string;
+    tokens: number;
+    /** Higher priority = more important, trimmed last. */
+    priority: number;
+    trimmed: boolean;
+}
+/**
+ * Token budget tracking for the compiled context.
+ */
+export interface TokenBudget {
+    total: number;
+    used: number;
+    remaining: number;
+    sectionBreakdown: Record<string, number>;
+}

package/dist/src/runtime/runtime-types.js

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+export {};
+//# sourceMappingURL=runtime-types.js.map

package/dist/src/runtime/runtime-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-types.js","sourceRoot":"","sources":["../../../src/runtime/runtime-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/src/runtime/session-setup.d.ts

@@ -0,0 +1,53 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import type { AmodalRepo } from '../repo/repo-types.js';
+import type { CompiledContext } from './runtime-types.js';
+import type { ConnectionsMap } from '../templates/connections.js';
+import type { RuntimeTelemetryEvent } from './telemetry-hooks.js';
+import { ScrubTracker } from '../security/scrub-tracker.js';
+import { FieldScrubber } from '../security/field-scrubber.js';
+import { OutputGuard } from '../security/output-guard.js';
+import { ActionGate } from '../security/action-gate.js';
+import { ContextCompiler } from './context-compiler.js';
+import { OutputPipeline } from './output-pipeline.js';
+import { RuntimeTelemetry } from './telemetry-hooks.js';
+/**
+ * Options for setting up a new session.
+ */
+export interface SessionSetupOptions {
+    repo: AmodalRepo;
+    userId?: string;
+    userRoles?: string[];
+    isDelegated?: boolean;
+    telemetrySink?: (event: RuntimeTelemetryEvent) => void;
+}
+/**
+ * The fully initialized session runtime — all components ready.
+ */
+export interface SessionRuntime {
+    repo: AmodalRepo;
+    scrubTracker: ScrubTracker;
+    fieldScrubber: FieldScrubber;
+    outputGuard: OutputGuard;
+    actionGate: ActionGate;
+    contextCompiler: ContextCompiler;
+    compiledContext: CompiledContext;
+    exploreContext: CompiledContext;
+    outputPipeline: OutputPipeline;
+    telemetry: RuntimeTelemetry;
+    connectionsMap: ConnectionsMap;
+    userRoles: string[];
+    sessionId: string;
+    isDelegated: boolean;
+}
+/**
+ * Sets up a complete session runtime from a loaded repo.
+ *
+ * This is synchronous — the repo must already be loaded and no HTTP calls
+ * are made. All security components, context compilation, and telemetry
+ * are initialized and ready for use.
+ */
+export declare function setupSession(options: SessionSetupOptions): SessionRuntime;