@armoriq/sdk-dev 0.6.8 → 0.7.0

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,KAAK,eAAe,EACpB,KAAK,uBAAuB,GAC7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,cAAc,EACd,cAAc,EACd,WAAW,EACX,aAAa,EACb,aAAa,GACd,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,WAAW,EACX,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,QAAQ,EACR,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,QAAQ,EACR,aAAa,EACb,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,aAAa,EACb,cAAc,EACd,QAAQ,EACR,SAAS,GACV,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,aAAa,EACb,WAAW,EACX,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,qBAAqB,EACrB,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,YAAY,EACZ,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,8BAA8B,GAC/B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,eAAO,MAAM,MAAM,iBAAiB,CAAC;AACrC,eAAO,MAAM,KAAK,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,KAAK,eAAe,EACpB,KAAK,uBAAuB,GAC7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,cAAc,EACd,cAAc,EACd,WAAW,EACX,aAAa,EACb,aAAa,GACd,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,WAAW,EACX,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,QAAQ,EACR,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,QAAQ,EACR,aAAa,EACb,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,aAAa,EACb,cAAc,EACd,QAAQ,EACR,SAAS,GACV,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,aAAa,EACb,WAAW,EACX,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,uBAAuB,EACvB,WAAW,EACX,iBAAiB,EACjB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,eAAO,MAAM,MAAM,iBAAiB,CAAC;AACrC,eAAO,MAAM,KAAK,uBAAuB,CAAC"}

package/dist/index.js

@@ -13,7 +13,7 @@
  * against package.json, so it only drifts.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.EMAIL = exports.AUTHOR = exports.VERSION = exports.__setObservabilitySinkForTests = exports.MODEL_PRICES = exports.isValidUuid = exports.computeCostUsd = exports.flushObservability = exports.recordGeneration = exports.recordPolicyCall = exports.recordEvent = exports.recordSpan = exports.closeSpan = exports.openSpan = exports.endTrace = exports.startTrace = exports.ObservabilityRecorder = exports.defaultObservabilityConfig = exports.DEFAULT_PROXY_URL = exports.saveArmorIQConfig = exports.resolveEnvReferences = exports.resolveEnvReference = exports.parseArmorIQConfig = exports.loadArmorIQConfig = exports.ArmorIQConfigError = exports.hashToolCalls = exports.buildPlanFromToolCalls = exports.defaultToolNameParser = exports.IntentToken = exports.PolicyHoldException = exports.PolicyBlockedException = exports.ConfigurationException = exports.RevokedTokenError = exports.DelegationException = exports.TokenExpiredException = exports.MCPInvocationException = exports.IntentMismatchException = exports.InvalidTokenException = exports.ArmorIQException = exports.ArmorIQSession = exports.summarizeTranscriptUsage = exports.ArmorIQUserScope = exports.ArmorIQClient = void 0;
+exports.EMAIL = exports.AUTHOR = exports.VERSION = exports.splitPrefixedToolName = exports.METADATA_CONTENT_PLACEHOLDER = exports.projectTelemetryContent = exports.resolveOtelConfig = exports.OtelSession = exports.ArmorIQTelemetryRuntime = exports.MODEL_PRICES = exports.computeCostUsd = exports.DEFAULT_PROXY_URL = exports.saveArmorIQConfig = exports.resolveEnvReferences = exports.resolveEnvReference = exports.parseArmorIQConfig = exports.loadArmorIQConfig = exports.ArmorIQConfigError = exports.hashToolCalls = exports.buildPlanFromToolCalls = exports.defaultToolNameParser = exports.IntentToken = exports.PolicyHoldException = exports.PolicyBlockedException = exports.ConfigurationException = exports.RevokedTokenError = exports.DelegationException = exports.TokenExpiredException = exports.MCPInvocationException = exports.IntentMismatchException = exports.InvalidTokenException = exports.ArmorIQException = exports.ArmorIQSession = exports.summarizeTranscriptUsage = exports.ArmorIQUserScope = exports.ArmorIQClient = void 0;
 var client_1 = require("./client");
 Object.defineProperty(exports, "ArmorIQClient", { enumerable: true, get: function () { return client_1.ArmorIQClient; } });
 Object.defineProperty(exports, "ArmorIQUserScope", { enumerable: true, get: function () { return client_1.ArmorIQUserScope; } });
@@ -46,22 +46,16 @@ Object.defineProperty(exports, "resolveEnvReference", { enumerable: true, get: f
 Object.defineProperty(exports, "resolveEnvReferences", { enumerable: true, get: function () { return config_1.resolveEnvReferences; } });
 Object.defineProperty(exports, "saveArmorIQConfig", { enumerable: true, get: function () { return config_1.saveArmorIQConfig; } });
 Object.defineProperty(exports, "DEFAULT_PROXY_URL", { enumerable: true, get: function () { return config_1.DEFAULT_PROXY_URL; } });
-Object.defineProperty(exports, "defaultObservabilityConfig", { enumerable: true, get: function () { return config_1.defaultObservabilityConfig; } });
 var observability_1 = require("./observability");
-Object.defineProperty(exports, "ObservabilityRecorder", { enumerable: true, get: function () { return observability_1.ObservabilityRecorder; } });
-Object.defineProperty(exports, "startTrace", { enumerable: true, get: function () { return observability_1.startTrace; } });
-Object.defineProperty(exports, "endTrace", { enumerable: true, get: function () { return observability_1.endTrace; } });
-Object.defineProperty(exports, "openSpan", { enumerable: true, get: function () { return observability_1.openSpan; } });
-Object.defineProperty(exports, "closeSpan", { enumerable: true, get: function () { return observability_1.closeSpan; } });
-Object.defineProperty(exports, "recordSpan", { enumerable: true, get: function () { return observability_1.recordSpan; } });
-Object.defineProperty(exports, "recordEvent", { enumerable: true, get: function () { return observability_1.recordEvent; } });
-Object.defineProperty(exports, "recordPolicyCall", { enumerable: true, get: function () { return observability_1.recordPolicyCall; } });
-Object.defineProperty(exports, "recordGeneration", { enumerable: true, get: function () { return observability_1.recordGeneration; } });
-Object.defineProperty(exports, "flushObservability", { enumerable: true, get: function () { return observability_1.flushObservability; } });
 Object.defineProperty(exports, "computeCostUsd", { enumerable: true, get: function () { return observability_1.computeCostUsd; } });
-Object.defineProperty(exports, "isValidUuid", { enumerable: true, get: function () { return observability_1.isValidUuid; } });
 Object.defineProperty(exports, "MODEL_PRICES", { enumerable: true, get: function () { return observability_1.MODEL_PRICES; } });
-Object.defineProperty(exports, "__setObservabilitySinkForTests", { enumerable: true, get: function () { return observability_1.__setObservabilitySinkForTests; } });
+Object.defineProperty(exports, "ArmorIQTelemetryRuntime", { enumerable: true, get: function () { return observability_1.ArmorIQTelemetryRuntime; } });
+Object.defineProperty(exports, "OtelSession", { enumerable: true, get: function () { return observability_1.OtelSession; } });
+Object.defineProperty(exports, "resolveOtelConfig", { enumerable: true, get: function () { return observability_1.resolveOtelConfig; } });
+Object.defineProperty(exports, "projectTelemetryContent", { enumerable: true, get: function () { return observability_1.projectTelemetryContent; } });
+Object.defineProperty(exports, "METADATA_CONTENT_PLACEHOLDER", { enumerable: true, get: function () { return observability_1.METADATA_CONTENT_PLACEHOLDER; } });
+var tool_name_1 = require("./tool_name");
+Object.defineProperty(exports, "splitPrefixedToolName", { enumerable: true, get: function () { return tool_name_1.splitPrefixedToolName; } });
 var _version_1 = require("./_version");
 Object.defineProperty(exports, "VERSION", { enumerable: true, get: function () { return _version_1.VERSION; } });
 exports.AUTHOR = 'ArmorIQ Team';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,mCAA2D;AAAlD,uGAAA,aAAa,OAAA;AAAE,0GAAA,gBAAgB,OAAA;AACxC,6CAIuB;AAHrB,uHAAA,wBAAwB,OAAA;AAI1B,qCAMmB;AALjB,yGAAA,cAAc,OAAA;AAMhB,2CAWsB;AAVpB,8GAAA,gBAAgB,OAAA;AAChB,mHAAA,qBAAqB,OAAA;AACrB,qHAAA,uBAAuB,OAAA;AACvB,oHAAA,sBAAsB,OAAA;AACtB,mHAAA,qBAAqB,OAAA;AACrB,iHAAA,mBAAmB,OAAA;AACnB,+GAAA,iBAAiB,OAAA;AACjB,oHAAA,sBAAsB,OAAA;AACtB,oHAAA,sBAAsB,OAAA;AACtB,iHAAA,mBAAmB,OAAA;AAErB,mCAmBkB;AAlBhB,qGAAA,WAAW,OAAA;AAoBb,+CAOwB;AANtB,qHAAA,qBAAqB,OAAA;AACrB,sHAAA,sBAAsB,OAAA;AACtB,6GAAA,aAAa,OAAA;AAMf,mCAmBkB;AAjBhB,4GAAA,kBAAkB,OAAA;AASlB,2GAAA,iBAAiB,OAAA;AACjB,4GAAA,kBAAkB,OAAA;AAClB,6GAAA,mBAAmB,OAAA;AACnB,8GAAA,oBAAoB,OAAA;AACpB,2GAAA,iBAAiB,OAAA;AACjB,2GAAA,iBAAiB,OAAA;AAEjB,oHAAA,0BAA0B,OAAA;AAG5B,iDAwByB;AAvBvB,sHAAA,qBAAqB,OAAA;AACrB,2GAAA,UAAU,OAAA;AACV,yGAAA,QAAQ,OAAA;AACR,yGAAA,QAAQ,OAAA;AACR,0GAAA,SAAS,OAAA;AACT,2GAAA,UAAU,OAAA;AACV,4GAAA,WAAW,OAAA;AACX,iHAAA,gBAAgB,OAAA;AAChB,iHAAA,gBAAgB,OAAA;AAChB,mHAAA,kBAAkB,OAAA;AAClB,+GAAA,cAAc,OAAA;AACd,4GAAA,WAAW,OAAA;AACX,6GAAA,YAAY,OAAA;AAUZ,+HAAA,8BAA8B,OAAA;AAGhC,uCAAqC;AAA5B,mGAAA,OAAO,OAAA;AACH,QAAA,MAAM,GAAG,cAAc,CAAC;AACxB,QAAA,KAAK,GAAG,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,mCAA2D;AAAlD,uGAAA,aAAa,OAAA;AAAE,0GAAA,gBAAgB,OAAA;AACxC,6CAIuB;AAHrB,uHAAA,wBAAwB,OAAA;AAI1B,qCAMmB;AALjB,yGAAA,cAAc,OAAA;AAMhB,2CAWsB;AAVpB,8GAAA,gBAAgB,OAAA;AAChB,mHAAA,qBAAqB,OAAA;AACrB,qHAAA,uBAAuB,OAAA;AACvB,oHAAA,sBAAsB,OAAA;AACtB,mHAAA,qBAAqB,OAAA;AACrB,iHAAA,mBAAmB,OAAA;AACnB,+GAAA,iBAAiB,OAAA;AACjB,oHAAA,sBAAsB,OAAA;AACtB,oHAAA,sBAAsB,OAAA;AACtB,iHAAA,mBAAmB,OAAA;AAErB,mCAmBkB;AAlBhB,qGAAA,WAAW,OAAA;AAoBb,+CAOwB;AANtB,qHAAA,qBAAqB,OAAA;AACrB,sHAAA,sBAAsB,OAAA;AACtB,6GAAA,aAAa,OAAA;AAMf,mCAiBkB;AAfhB,4GAAA,kBAAkB,OAAA;AASlB,2GAAA,iBAAiB,OAAA;AACjB,4GAAA,kBAAkB,OAAA;AAClB,6GAAA,mBAAmB,OAAA;AACnB,8GAAA,oBAAoB,OAAA;AACpB,2GAAA,iBAAiB,OAAA;AACjB,2GAAA,iBAAiB,OAAA;AAGnB,iDAgCyB;AA/BvB,+GAAA,cAAc,OAAA;AACd,6GAAA,YAAY,OAAA;AACZ,wHAAA,uBAAuB,OAAA;AACvB,4GAAA,WAAW,OAAA;AACX,kHAAA,iBAAiB,OAAA;AAyBjB,wHAAA,uBAAuB,OAAA;AACvB,6HAAA,4BAA4B,OAAA;AAG9B,yCAAoD;AAA3C,kHAAA,qBAAqB,OAAA;AAC9B,uCAAqC;AAA5B,mGAAA,OAAO,OAAA;AACH,QAAA,MAAM,GAAG,cAAc,CAAC;AACxB,QAAA,KAAK,GAAG,oBAAoB,CAAC"}

package/dist/integrations/google_adk.d.ts

@@ -15,6 +15,7 @@
  *       for await (const event of runner.runAsync(...)) { ... }
  *     } finally {
  *       scope.uninstall(rootAgent);
+ *       await scope.close();   // ends the plan trace and flushes it
  *     }
  *
  * The bundle installs three ADK lifecycle callbacks on the agent:
@@ -31,6 +32,7 @@ import { ArmorIQClient, ArmorIQUserScope } from '../client';
 import { ArmorIQSession, SessionMode } from '../session';
 import { ToolNameParser } from '../plan_builder';
 import { OnEvent } from './strands';
+import type { OtelTerminalStatus } from '../observability';
 export interface ArmorIQADKOptions {
     apiKey: string;
     backendEndpoint?: string;
@@ -43,6 +45,13 @@ export interface ArmorIQADKOptions {
     mode?: SessionMode;
     llm?: string;
     agentName?: string;
+    /**
+     * How long to wait for a human to approve a HELD tool before failing closed.
+     * Same option, env var and default as the strands / langchain integrations.
+     */
+    approvalWaitSeconds?: number;
+    /** Seconds between delegation-status polls while a tool is held. */
+    approvalPollInterval?: number;
     /**
      * Phase 4 C5c — TRUE reanchor mode. When true, plan growth records a
      * delta and SKIPS the re-mint (single JWT continues across chain).
@@ -63,9 +72,17 @@ export type AdkCallback = (...args: any[]) => any;
  * compiler from catching the next ADK contract drift.
  */
 export interface AdkLikeAgent {
+    beforeModelCallback?: AdkCallback | AdkCallback[];
     afterModelCallback?: AdkCallback | AdkCallback[];
     beforeToolCallback?: AdkCallback | AdkCallback[];
     afterToolCallback?: AdkCallback | AdkCallback[];
+    runAsync?: (...args: any[]) => AsyncIterable<unknown>;
+    /**
+     * ADK's BaseAgent sets this when the agent is added as a subAgent of a
+     * composed workflow (SequentialAgent, ParallelAgent, ...). Optional so any
+     * duck-typed caller that never composes agents installs exactly as before.
+     */
+    parentAgent?: AdkLikeAgent;
 }
 /**
  * Process-wide ArmorIQ factory for ADK-style agents.
@@ -78,6 +95,8 @@ export declare class ArmorIQADK {
     readonly defaultMcpName?: string;
     readonly autoReanchor = true;
     readonly trueReanchor: boolean;
+    readonly approvalWaitSeconds: number;
+    readonly approvalPollInterval: number;
     private customParser?;
     private bootstrapData?;
     private readonly explicitAgentName?;
@@ -102,11 +121,52 @@ export declare class ArmorIQADKBundle {
     private scope;
     private parser;
     private planMinted;
-    private blockedTools;
-    private blockedActions;
+    private pendingPlanCapture?;
+    /** Terminal enforcement state keyed by ADK's native functionCallId. */
+    private blockedCalls;
+    /**
+     * Legacy duck-typed callers may omit functionCallId. Keep a FIFO fallback
+     * for those callers; real ADK 0.6.1 always supplies the native id.
+     */
+    private anonymousBlockedCalls;
+    private nextAnonymousCallOrdinal;
+    private modelSpans;
+    private toolSpans;
+    /** Model output is scoped by ADK's native invocation key. A scalar leaks a
+     * concurrent invocation's result into another span/root. */
+    private readonly modelOutputs;
+    /**
+     * Root/session output per invocation. Defaults to the raw model output
+     * (mirrors modelOutputs) but the PAP rejection branch overwrites the entry
+     * — never modelOutputs — with the safe response ADK actually returns, so
+     * root/session telemetry exports what the caller really got back instead
+     * of the blocked content.
+     */
+    private readonly rootOutputs;
+    private toolOrdinals;
+    private nextToolOrdinal;
+    private nextInvocationOrdinal;
+    private closed;
+    private closePromise?;
     private onEvent?;
     private agent?;
-    private saved;
+    /**
+     * The agent whose runAsync actually got the close-on-completion wrapper.
+     * Usually the installed agent itself; when the installed agent is a child
+     * of a composed workflow (see install()) this is the outermost ancestor,
+     * so uninstall() must restore runAsync on THIS object, not on the
+     * installed agent.
+     */
+    private runAsyncOwner?;
+    /**
+     * Set while `runAsyncOwner` is only a provisional owner (the installed
+     * agent had no `parentAgent` yet at install() time). Holds the agent whose
+     * `parentAgent` property we replaced with an accessor so we notice if ADK
+     * composes it into a parent *after* install() — see watchForLateParent().
+     */
+    private parentWatchTarget?;
+    /** The agent whose callback slots this bundle last wrote. */
+    private callbackAgent?;
     constructor(args: {
         factory: ArmorIQADK;
         scope: ArmorIQUserScope;
@@ -122,14 +182,116 @@ export declare class ArmorIQADKBundle {
      */
     private emit;
     private ensureSession;
+    private capturePlan;
+    /** End and ship the request-owned plan session without closing the shared client. */
+    close(status?: OtelTerminalStatus): Promise<void>;
+    private closeInternal;
     private afterModel;
+    /** ADK resolves toolsets on every model step, so a changed tool set is visible here. */
+    private refreshDeclarations;
+    private beforeModel;
+    private modelKey;
+    private toolOrdinal;
+    private frameworkMcpOperation;
+    private anonymousCallFingerprint;
+    /**
+     * The fallback is only for legacy duck-typed callers. Keep the diagnostic
+     * fixed and once per process so it cannot leak tool data or flood host logs.
+     */
+    private warnFunctionCallIdFallback;
+    private callKeyForBefore;
+    private callKeyForAfter;
+    private rememberBlockedCall;
     private beforeTool;
     private afterTool;
+    /** Attach this bundle to an ADK-style agent. */
+    install(agent: AdkLikeAgent): this;
     /**
-     * Attach the three callbacks to the ADK-style agent. Save originals
-     * for uninstall().
+     * Chained in front of the agent's pre-ArmorIQ callbacks, not in front of
+     * whatever is in the slot now. See `callbackRegistrations`. runAsync is
+     * wrapped separately, on the invocation owner rather than on the agent.
      */
-    install(agent: AdkLikeAgent): this;
+    private installCallbacks;
+    /**
+     * Subscribe this bundle to the close-on-completion wrapper for `owner`,
+     * installing that wrapper if this is the first bundle to claim the owner.
+     *
+     * There is exactly one wrapper per owner (see `runAsyncRegistrations`), so
+     * a second bundle resolving the same owner joins the existing wrapper's
+     * subscriber set rather than layering a second wrapper on top of the first.
+     * That keeps the true pre-wrap `runAsync` recoverable regardless of the
+     * order bundles later unsubscribe in, and means no inert wrapper can be
+     * left behind to retain a torn-down bundle.
+     */
+    private bindFinalizer;
+    /**
+     * Drop this bundle from its owner's wrapper subscriber set. The shared
+     * wrapper stays in place while any sibling bundle still needs it; only when
+     * the set drains does the owner get its TRUE pre-wrap `runAsync` back — the
+     * one recorded at registration time, never a snapshot of whatever happened
+     * to be installed when this particular bundle bound. Uninstall order is
+     * therefore irrelevant, and no wrapper survives an owner's last subscriber.
+     */
+    private unsubscribeRunAsync;
+    /**
+     * Release this bundle from both owner-keyed structures, so neither can be
+     * left holding it because only the other was released.
+     *
+     * The agent-keyed callback registry is deliberately NOT released here: it
+     * must survive close so a late tool call still meets `beforeTool`'s
+     * fail-closed refusal. Only uninstall() releases it.
+     */
+    private releaseFromOwners;
+    /**
+     * Put the agent's four callback slots back the way they were before ArmorIQ
+     * touched them, but only while this bundle still occupies them.
+     *
+     * A later bundle that installed over this one owns the slots now, so
+     * unwinding here would tear out live enforcement; that bundle's own release
+     * restores the same recorded originals when its turn comes, which is why
+     * uninstall order cannot matter. Each slot is compared against exactly what
+     * we wrote, so a callback the application replaced afterwards is left alone
+     * (the same guard `unsubscribeRunAsync()` applies to `runAsync`).
+     *
+     * Deliberately NOT called from closeInternal(). A closed bundle's callbacks
+     * stay installed so a tool call arriving after the request ended still meets
+     * `beforeTool`'s fail-closed refusal instead of reaching the application's
+     * unguarded callbacks. That leaves at most the one current bundle reachable
+     * from the agent, which the next install() replaces.
+     */
+    private releaseCallbacks;
+    /**
+     * Replace `agent.parentAgent` with an accessor so we notice the moment ADK
+     * (or application code) assigns a real parent to it — which happens
+     * strictly before that parent's own runAsync can be invoked, since ADK
+     * always finishes composing a tree before running it. When that happens,
+     * re-bind the finalizer to the *new* outermost owner instead, so an
+     * install()-before-composition call ends up wrapping the same object
+     * install()-after-composition would have.
+     *
+     * Static, and keyed by `owner` (via `lateParentSubscribers`) rather than by
+     * `bundle`, because more than one bundle can resolve the same owner (see
+     * the registry doc comment above) — at most one accessor is ever installed
+     * per owner, and its setter fans out to every subscribed bundle.
+     */
+    private static watchForLateParent;
+    private handleLateParent;
+    /**
+     * Stop watching `agent` for a late parent assignment on this bundle's
+     * behalf — used by uninstall() when the late parent never arrived. Removes
+     * only this bundle from the shared subscriber set; the accessor is only
+     * torn down (restored to a plain property) once no bundle is left
+     * watching it, so unwinding one bundle never disturbs another bundle still
+     * watching the same owner.
+     */
+    private restoreParentWatcher;
+    /**
+     * Walk ADK's public `parentAgent` link to the outermost agent that owns
+     * this invocation. An agent installed directly on a root (the common case,
+     * and every existing call site) resolves to itself, so behavior there is
+     * unchanged.
+     */
+    private static invocationOwner;
     uninstall(agent?: AdkLikeAgent): void;
 }
 //# sourceMappingURL=google_adk.d.ts.map

package/dist/integrations/google_adk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google_adk.d.ts","sourceRoot":"","sources":["../../src/integrations/google_adk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE5D,OAAO,EACL,cAAc,EAEd,WAAW,EAEZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,+EAA+E;AAC/E,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC;AAElD;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IAC3B,kBAAkB,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;IACjD,kBAAkB,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;IACjD,iBAAiB,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;CACjD;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,SAAgB,MAAM,EAAE,aAAa,CAAC;IACtC,SAAgB,IAAI,EAAE,WAAW,CAAC;IAClC,SAAgB,GAAG,EAAE,MAAM,CAAC;IAC5B,SAAgB,eAAe,EAAE,MAAM,CAAC;IACxC,SAAgB,cAAc,CAAC,EAAE,MAAM,CAAC;IAIxC,SAAgB,YAAY,QAAQ;IACpC,SAAgB,YAAY,EAAE,OAAO,CAAC;IACtC,OAAO,CAAC,YAAY,CAAC,CAAiB;IACtC,OAAO,CAAC,aAAa,CAAC,CAAsB;IAC5C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAS;gBAEhC,IAAI,EAAE,iBAAiB;IAqB7B,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAiCjC,cAAc;IAiB5B,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIjC,OAAO,CACX,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAC1C,OAAO,CAAC,gBAAgB,CAAC;CAa7B;AAED;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,cAAc,CAAC;IAChC,OAAO,CAAC,OAAO,CAAa;IAC5B,OAAO,CAAC,KAAK,CAAmB;IAChC,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,OAAO,CAAC,CAAU;IAC1B,OAAO,CAAC,KAAK,CAAC,CAAe;IAC7B,OAAO,CAAC,KAAK,CAIN;gBAEK,IAAI,EAAE;QAChB,OAAO,EAAE,UAAU,CAAC;QACpB,KAAK,EAAE,gBAAgB,CAAC;QACxB,MAAM,EAAE,cAAc,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB;IASD;;;;OAIG;IACH,OAAO,CAAC,IAAI;IASZ,OAAO,CAAC,aAAa;YAeP,UAAU;YA4GV,UAAU;YAyIV,SAAS;IAsBvB;;;OAGG;IACH,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IA6BlC,SAAS,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI;CAOtC"}
+{"version":3,"file":"google_adk.d.ts","sourceRoot":"","sources":["../../src/integrations/google_adk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE5D,OAAO,EAAE,cAAc,EAAiB,WAAW,EAAkB,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAK3D,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,+EAA+E;AAC/E,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC;AAkBlD;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IAC3B,mBAAmB,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;IAClD,kBAAkB,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;IACjD,kBAAkB,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;IACjD,iBAAiB,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;IAChD,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC;IACtD;;;;OAIG;IACH,WAAW,CAAC,EAAE,YAAY,CAAC;CAC5B;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,SAAgB,MAAM,EAAE,aAAa,CAAC;IACtC,SAAgB,IAAI,EAAE,WAAW,CAAC;IAClC,SAAgB,GAAG,EAAE,MAAM,CAAC;IAC5B,SAAgB,eAAe,EAAE,MAAM,CAAC;IACxC,SAAgB,cAAc,CAAC,EAAE,MAAM,CAAC;IAIxC,SAAgB,YAAY,QAAQ;IACpC,SAAgB,YAAY,EAAE,OAAO,CAAC;IACtC,SAAgB,mBAAmB,EAAE,MAAM,CAAC;IAC5C,SAAgB,oBAAoB,EAAE,MAAM,CAAC;IAC7C,OAAO,CAAC,YAAY,CAAC,CAAiB;IACtC,OAAO,CAAC,aAAa,CAAC,CAAsB;IAC5C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAS;gBAEhC,IAAI,EAAE,iBAAiB;IAyB7B,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAiCjC,cAAc;IAqB5B,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIjC,OAAO,CACX,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAC1C,OAAO,CAAC,gBAAgB,CAAC;CAY7B;AA0GD;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,cAAc,CAAC;IAChC,OAAO,CAAC,OAAO,CAAa;IAC5B,OAAO,CAAC,KAAK,CAAmB;IAChC,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,kBAAkB,CAAC,CAAyD;IACpF,uEAAuE;IACvE,OAAO,CAAC,YAAY,CAA6B;IACjD;;;OAGG;IACH,OAAO,CAAC,qBAAqB,CAA+B;IAC5D,OAAO,CAAC,wBAAwB,CAAK;IACrC,OAAO,CAAC,UAAU,CAA0B;IAC5C,OAAO,CAAC,SAAS,CAA0B;IAC3C;gEAC4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8B;IAC3D;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,qBAAqB,CAAK;IAClC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAAC,CAAgB;IACrC,OAAO,CAAC,OAAO,CAAC,CAAU;IAC1B,OAAO,CAAC,KAAK,CAAC,CAAe;IAC7B;;;;;;OAMG;IACH,OAAO,CAAC,aAAa,CAAC,CAAe;IACrC;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB,CAAC,CAAe;IACzC,6DAA6D;IAC7D,OAAO,CAAC,aAAa,CAAC,CAAe;gBAEzB,IAAI,EAAE;QAChB,OAAO,EAAE,UAAU,CAAC;QACpB,KAAK,EAAE,gBAAgB,CAAC;QACxB,MAAM,EAAE,cAAc,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB;IASD;;;;OAIG;IACH,OAAO,CAAC,IAAI;IASZ,OAAO,CAAC,aAAa;YAeP,WAAW;IAazB,qFAAqF;IAC/E,KAAK,CAAC,MAAM,GAAE,kBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;YAM/C,aAAa;YA6Cb,UAAU;IAuJxB,wFAAwF;IACxF,OAAO,CAAC,mBAAmB;YAWb,WAAW;IAkBzB,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,qBAAqB;IAgB7B,OAAO,CAAC,wBAAwB;IAQhC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAMlC,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,mBAAmB;YASb,UAAU;YAwJV,SAAS;IA0CvB,gDAAgD;IAChD,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IA0ClC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAyExB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,aAAa;IA4CrB;;;;;;;OAOG;IACH,OAAO,CAAC,mBAAmB;IAkB3B;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;IAKzB;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,gBAAgB;IAcxB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;IA8BjC,OAAO,CAAC,gBAAgB;IAiCxB;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAa5B;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,eAAe;IAU9B,SAAS,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI;CAYtC"}