@axiastudio/aioc 0.1.0-beta.6 → 0.1.0

package/README.md

@@ -4,15 +4,20 @@ AIOC is a governance-first SDK for LLM agents: models can propose actions, while
 It provides default-deny gates for tools and handoffs, end-to-end auditability (run records, prompt snapshots, request fingerprints), and a foundation for verifiable iteration on prompts and policies.
 AIOC is designed for enterprise and public-sector contexts with privacy-by-design and high-accountability (AI Act-style) governance requirements.
 
-Project home and documentation: [https://github.com/axiastudio/aioc](https://github.com/axiastudio/aioc)
+Project home and documentation: [https://axiastudio.github.io/aioc](https://axiastudio.github.io/aioc)
 
 ## Release Status
 
-This package is currently in beta and is not production-ready.
-Breaking changes may occur before a stable release.
+This package is stable as of `0.1.0`.
+The core runtime surface is compatibility-managed. Breaking changes to the stable surface should ship only with explicit migration guidance and release notes.
 
-- Beta contract: `docs/BETA-CONTRACT.md`
-- Alpha contract (historical): `docs/ALPHA-CONTRACT.md`
+### Stable Scope
+
+AIOC `0.1.0` stabilizes the core runtime surface, public documentation aligned to the exported contract, `RunRecord` and replay/compare workflows, and the governance-first runtime model validated in real applications beyond toy examples.
+
+- Release notes: `CHANGELOG.md`
+- Historical beta contract snapshot: `docs/BETA-CONTRACT.md`
+- Historical alpha contract snapshot: `docs/ALPHA-CONTRACT.md`
 - Privacy baseline: `docs/PRIVACY-BASELINE.md`
 
 ## Documentation Site
@@ -39,6 +44,29 @@ npm install @axiastudio/aioc
 
 ## Quickstart
 
+### OpenAI
+
+```ts
+import "dotenv/config";
+import { Agent, run, setupOpenAI } from "@axiastudio/aioc";
+
+setupOpenAI(); // reads OPENAI_API_KEY from env
+
+const agent = new Agent({
+  name: "Hello Agent",
+  model: "gpt-4.1-mini",
+  instructions: "Answer in 2 short sentences.",
+});
+
+const result = await run(
+  agent,
+  "In one sentence, what is a deterministic policy gate in an agent SDK?",
+);
+console.log(result.finalOutput);
+```
+
+### Mistral
+
 ```ts
 import "dotenv/config";
 import { Agent, run, setupMistral } from "@axiastudio/aioc";
@@ -65,7 +93,7 @@ console.log(result.finalOutput);
 - `Tool`, `tool(...)`
 - handoffs via `Agent({ handoffs: [...] })`
 - `run(...)` with streaming support (`stream` defaults to `false`)
-- policy helpers `allow(...)` / `deny(...)`
+- policy helpers `allow(...)` / `deny(...)` / `requireApproval(...)`
 - provider setup helpers `setupMistral(...)`, `setupOpenAI(...)`, `setupProvider(...)`
 - run logger hook `run(..., { logger })`
 - run record hook `run(..., { record })`
@@ -80,7 +108,7 @@ import { Agent, allow, deny, run, tool, type ToolPolicy } from "@axiastudio/aioc
 const toolPolicy: ToolPolicy<{ actor: { groups: string[] } }> = ({ runContext }) => {
   if (!runContext.context.actor.groups.includes("finance")) {
     return deny("deny_missing_finance_group", {
-      denyMode: "tool_result",
+      resultMode: "tool_result",
       publicReason: "You are not authorized to access this report.",
     });
   }
@@ -95,6 +123,8 @@ await run(agent, "Summarize report Q1.", {
 
 Default behavior is deny when no policy is configured.
 
+`resultMode` is the canonical non-allow delivery mode (`"throw"` or `"tool_result"`). `denyMode` is no longer supported.
+
 ## Run Record (Minimal)
 
 ```ts
@@ -187,17 +217,21 @@ This repository also contains `aioc-inspect`, a private reference example UI for
 
 | Command | Purpose | Needs API key |
 |---|---|---|
-| `npm run example:hello` | Minimal single-agent run | Yes (`MISTRAL_API_KEY`) |
-| `npm run example:tool-policy` | Tool calls with deterministic policy gate | Yes (`MISTRAL_API_KEY`) |
-| `npm run example:run-record` | Run-record persistence with redaction + audit | Yes (`MISTRAL_API_KEY`) |
+| `npm run example:hello` | Minimal single-agent run | Yes (`AIOC_EXAMPLE_PROVIDER` + matching provider API key) |
+| `npm run example:policy` | Minimal denied tool + policy flow | Yes (`AIOC_EXAMPLE_PROVIDER` + matching provider API key) |
+| `npm run example:approval-required` | Minimal approval-required tool + policy flow | Yes (`AIOC_EXAMPLE_PROVIDER` + matching provider API key) |
+| `npm run example:approval-evidence` | Approval evidence passed through context and reevaluated by policy | Yes (`AIOC_EXAMPLE_PROVIDER` + matching provider API key) |
+| `npm run example:tool-policy` | Straight tool + policy flow with allowed execution | Yes (`AIOC_EXAMPLE_PROVIDER` + matching provider API key) |
+| `npm run example:run-record` | Run-record persistence with redaction + audit | Yes (`AIOC_EXAMPLE_PROVIDER` + matching provider API key) |
 | `npm run example:rru:01-extract` | Minimal `extractToolCalls(...)` | No |
 | `npm run example:rru:02-compare` | Minimal `compareRunRecords(...)` | No |
 | `npm run example:rru:03-replay-strict` | Minimal strict replay | No |
 | `npm run example:rru:04-replay-hybrid` | Minimal hybrid replay | No |
-| `npm run example:non-regression` | Advanced v1/v2 run-record diff | Yes (`MISTRAL_API_KEY`) |
+| `npm run example:non-regression` | Advanced v1/v2 run-record diff | Yes (`AIOC_EXAMPLE_PROVIDER` + matching provider API key) |
 
 Notes:
 
+- for live-provider examples, set `AIOC_EXAMPLE_PROVIDER` to `openai` or `mistral`; the matching API key must also be available
 - `example:non-regression` is educational and can be non-deterministic because it uses a live provider.
 - canonical examples guide: `docs/CANONICAL-EXAMPLES.md`.
 
@@ -224,8 +258,10 @@ AIOC adopts the following non-negotiable principles:
 - `docs/RFC-0001-governance-first-runtime.md` (`Accepted`)
 - `docs/RFC-0002-policy-gates-for-tools-and-handoffs.md` (`Accepted`)
 - `docs/RFC-0003-run-record-audit-trail-and-persistence.md` (`Accepted`)
-- `docs/RFC-0004-policy-outcomes-and-approval-model.md` (`Draft`)
+- `docs/RFC-0004-policy-outcomes-and-approval-model.md` (`Accepted`)
 - `docs/RFC-0005-suspended-proposals-and-approval-lifecycle.md` (`Draft`)
+- `docs/RFC-0006-approval-evidence-helpers.md` (`Draft`)
+- `docs/RFC-0007-thread-state-utilities.md` (`Draft`)
 - `docs/PRIVACY-BASELINE.md`
 
 ## Historical Snapshots

package/dist/agent.d.ts

@@ -25,7 +25,6 @@ export declare class Agent<TContext = unknown> {
     handoffs: Agent<TContext>[];
     outputGuardrails: OutputGuardrail<TContext>[];
     constructor(config: AgentConfiguration<TContext>);
-    static create<TContext = unknown>(config: AgentConfiguration<TContext>): Agent<TContext>;
     resolveInstructions(runContext: RunContext<TContext>): Promise<string | undefined>;
 }
 //# sourceMappingURL=agent.d.ts.map

package/dist/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,MAAM,MAAM,iBAAiB,CAAC,QAAQ,GAAG,OAAO,IAC5C,MAAM,GACN,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAErE,MAAM,WAAW,kBAAkB,CAAC,QAAQ,GAAG,OAAO;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,KAAK,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;CAChD;AAED,qBAAa,KAAK,CAAC,QAAQ,GAAG,OAAO;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC5B,gBAAgB,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAElC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC;IAYhD,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,OAAO,EAC9B,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GACnC,KAAK,CAAC,QAAQ,CAAC;IAIZ,mBAAmB,CACvB,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,GAC/B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAS/B"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,MAAM,MAAM,iBAAiB,CAAC,QAAQ,GAAG,OAAO,IAC5C,MAAM,GACN,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAErE,MAAM,WAAW,kBAAkB,CAAC,QAAQ,GAAG,OAAO;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,KAAK,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;CAChD;AAED,qBAAa,KAAK,CAAC,QAAQ,GAAG,OAAO;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC5B,gBAAgB,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAElC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC;IAY1C,mBAAmB,CACvB,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,GAC/B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAS/B"}

package/dist/agent.js

@@ -22,9 +22,6 @@ class Agent {
         this.handoffs = config.handoffs ?? [];
         this.outputGuardrails = config.outputGuardrails ?? [];
     }
-    static create(config) {
-        return new Agent(config);
-    }
     async resolveInstructions(runContext) {
         if (typeof this.instructions === "undefined") {
             return undefined;

package/dist/errors.d.ts

@@ -1,5 +1,6 @@
 import type { GuardrailFunctionOutput } from "./guardrails";
 import type { PolicyResult } from "./policy";
+import type { SuspendedProposal } from "./run-record";
 export declare class AIOCError extends Error {
     constructor(message: string);
 }
@@ -25,6 +26,15 @@ export declare class ToolCallPolicyDeniedError extends ToolCallError {
     result: ToolCallPolicyDeniedResult;
     constructor(result: ToolCallPolicyDeniedResult);
 }
+export interface ToolCallApprovalRequiredResult {
+    toolName: string;
+    policyResult: PolicyResult;
+    suspendedProposal: SuspendedProposal;
+}
+export declare class ToolCallApprovalRequiredError extends ToolCallError {
+    result: ToolCallApprovalRequiredResult;
+    constructor(result: ToolCallApprovalRequiredResult);
+}
 export interface HandoffPolicyDeniedResult {
     fromAgent: string;
     toAgent: string;
@@ -34,4 +44,14 @@ export declare class HandoffPolicyDeniedError extends AIOCError {
     result: HandoffPolicyDeniedResult;
     constructor(result: HandoffPolicyDeniedResult);
 }
+export interface HandoffApprovalRequiredResult {
+    fromAgent: string;
+    toAgent: string;
+    policyResult: PolicyResult;
+    suspendedProposal: SuspendedProposal;
+}
+export declare class HandoffApprovalRequiredError extends AIOCError {
+    result: HandoffApprovalRequiredResult;
+    constructor(result: HandoffApprovalRequiredResult);
+}
 //# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE7C,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,qBAAsB,SAAQ,SAAS;gBACtC,QAAQ,EAAE,MAAM;CAG7B;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,uBAAuB,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,gCAAiC,SAAQ,SAAS;IAC7D,MAAM,EAAE,6BAA6B,CAAC;gBAE1B,MAAM,EAAE,6BAA6B;CAOlD;AAED,qBAAa,aAAc,SAAQ,SAAS;CAAG;AAE/C,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED,qBAAa,yBAA0B,SAAQ,aAAa;IAC1D,MAAM,EAAE,0BAA0B,CAAC;gBAEvB,MAAM,EAAE,0BAA0B;CAM/C;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED,qBAAa,wBAAyB,SAAQ,SAAS;IACrD,MAAM,EAAE,yBAAyB,CAAC;gBAEtB,MAAM,EAAE,yBAAyB;CAM9C"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,qBAAsB,SAAQ,SAAS;gBACtC,QAAQ,EAAE,MAAM;CAG7B;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,uBAAuB,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,gCAAiC,SAAQ,SAAS;IAC7D,MAAM,EAAE,6BAA6B,CAAC;gBAE1B,MAAM,EAAE,6BAA6B;CAOlD;AAED,qBAAa,aAAc,SAAQ,SAAS;CAAG;AAE/C,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED,qBAAa,yBAA0B,SAAQ,aAAa;IAC1D,MAAM,EAAE,0BAA0B,CAAC;gBAEvB,MAAM,EAAE,0BAA0B;CAM/C;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,iBAAiB,EAAE,iBAAiB,CAAC;CACtC;AAED,qBAAa,6BAA8B,SAAQ,aAAa;IAC9D,MAAM,EAAE,8BAA8B,CAAC;gBAE3B,MAAM,EAAE,8BAA8B;CAMnD;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED,qBAAa,wBAAyB,SAAQ,SAAS;IACrD,MAAM,EAAE,yBAAyB,CAAC;gBAEtB,MAAM,EAAE,yBAAyB;CAM9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,YAAY,CAAC;IAC3B,iBAAiB,EAAE,iBAAiB,CAAC;CACtC;AAED,qBAAa,4BAA6B,SAAQ,SAAS;IACzD,MAAM,EAAE,6BAA6B,CAAC;gBAE1B,MAAM,EAAE,6BAA6B;CAMlD"}

package/dist/errors.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.HandoffPolicyDeniedError = exports.ToolCallPolicyDeniedError = exports.ToolCallError = exports.OutputGuardrailTripwireTriggered = exports.MaxTurnsExceededError = exports.AIOCError = void 0;
+exports.HandoffApprovalRequiredError = exports.HandoffPolicyDeniedError = exports.ToolCallApprovalRequiredError = exports.ToolCallPolicyDeniedError = exports.ToolCallError = exports.OutputGuardrailTripwireTriggered = exports.MaxTurnsExceededError = exports.AIOCError = void 0;
 class AIOCError extends Error {
     constructor(message) {
         super(message);
@@ -36,6 +36,14 @@ class ToolCallPolicyDeniedError extends ToolCallError {
     }
 }
 exports.ToolCallPolicyDeniedError = ToolCallPolicyDeniedError;
+class ToolCallApprovalRequiredError extends ToolCallError {
+    result;
+    constructor(result) {
+        super(`Tool "${result.toolName}" requires approval: ${result.policyResult.reason}`);
+        this.result = result;
+    }
+}
+exports.ToolCallApprovalRequiredError = ToolCallApprovalRequiredError;
 class HandoffPolicyDeniedError extends AIOCError {
     result;
     constructor(result) {
@@ -44,3 +52,11 @@ class HandoffPolicyDeniedError extends AIOCError {
     }
 }
 exports.HandoffPolicyDeniedError = HandoffPolicyDeniedError;
+class HandoffApprovalRequiredError extends AIOCError {
+    result;
+    constructor(result) {
+        super(`Handoff "${result.fromAgent}" -> "${result.toAgent}" requires approval: ${result.policyResult.reason}`);
+        this.result = result;
+    }
+}
+exports.HandoffApprovalRequiredError = HandoffApprovalRequiredError;

package/dist/index.d.ts

@@ -6,6 +6,7 @@ export * from "./json";
 export * from "./logger";
 export * from "./messages";
 export * from "./policy";
+export * from "./proposal-hashing";
 export * from "./provider-setup";
 export * from "./providers/base";
 export * from "./providers/chat-completions";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,OAAO,CAAC;AACtB,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,OAAO,CAAC;AACtB,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}

package/dist/index.js

@@ -22,6 +22,7 @@ __exportStar(require("./json"), exports);
 __exportStar(require("./logger"), exports);
 __exportStar(require("./messages"), exports);
 __exportStar(require("./policy"), exports);
+__exportStar(require("./proposal-hashing"), exports);
 __exportStar(require("./provider-setup"), exports);
 __exportStar(require("./providers/base"), exports);
 __exportStar(require("./providers/chat-completions"), exports);

package/dist/logger.d.ts

@@ -21,18 +21,24 @@ export type RunLogEvent = (RunLogEventBase & {
     type: "tool_policy_evaluated";
     toolName: string;
     callId: string;
-    decision: "allow" | "deny";
+    decision: "allow" | "deny" | "require_approval";
     reason: string;
+    publicReason?: string;
+    resultMode?: "throw" | "tool_result";
     policyVersion?: string;
+    expiresAt?: string;
     metadata?: Record<string, unknown>;
 }) | (RunLogEventBase & {
     type: "handoff_policy_evaluated";
     handoffName: string;
     callId: string;
     toAgent: string;
-    decision: "allow" | "deny";
+    decision: "allow" | "deny" | "require_approval";
     reason: string;
+    publicReason?: string;
+    resultMode?: "throw" | "tool_result";
     policyVersion?: string;
+    expiresAt?: string;
     metadata?: Record<string, unknown>;
 }) | (RunLogEventBase & {
     type: "tool_call_completed";

package/dist/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE9D,UAAU,eAAe;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,WAAW,GACnB,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,iBAAiB,CAAC;CACzB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,cAAc,CAAC;CACtB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,mBAAmB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,uBAAuB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,0BAA0B,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,kBAAkB,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,0BAA0B,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,yBAAyB,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,4BAA4B,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,eAAe,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEP,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAuCD,wBAAgB,kBAAkB,CAChC,OAAO,GAAE,mBAAwB,GAChC,SAAS,CA4BX"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE9D,UAAU,eAAe;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,WAAW,GACnB,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,iBAAiB,CAAC;CACzB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,cAAc,CAAC;CACtB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,mBAAmB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,uBAAuB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,0BAA0B,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,kBAAkB,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,0BAA0B,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,yBAAyB,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,4BAA4B,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,eAAe,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,GACF,CAAC,eAAe,GAAG;IACjB,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEP,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAuCD,wBAAgB,kBAAkB,CAChC,OAAO,GAAE,mBAAwB,GAChC,SAAS,CA4BX"}

package/dist/policy-outcomes.d.ts

@@ -0,0 +1,26 @@
+import type { PolicyResult, PolicyResultMode } from "./policy";
+import type { SuspendedProposal } from "./run-record";
+export type ToolResultEnvelopeStatus = "ok" | "denied" | "approval_required";
+export interface ToolResultEnvelope {
+    status: ToolResultEnvelopeStatus;
+    code: string | null;
+    publicReason: string | null;
+    data: unknown | null;
+}
+export declare function createDeniedPolicyResult(reason: string, metadata?: Record<string, unknown>): PolicyResult;
+export declare function toAllowedToolResultEnvelope(data: unknown): ToolResultEnvelope;
+export declare function materializePolicyResult(policyResult: PolicyResult): PolicyResult;
+export declare function resolveResultMode(policyResult: PolicyResult): PolicyResultMode;
+export declare function handleBlockedPolicyResult(params: {
+    kind: "tool";
+    toolName: string;
+    policyResult: PolicyResult;
+    suspendedProposal?: SuspendedProposal;
+} | {
+    kind: "handoff";
+    fromAgent: string;
+    toAgent: string;
+    policyResult: PolicyResult;
+    suspendedProposal?: SuspendedProposal;
+}): ToolResultEnvelope;
+//# sourceMappingURL=policy-outcomes.d.ts.map

package/dist/policy-outcomes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-outcomes.d.ts","sourceRoot":"","sources":["../src/policy-outcomes.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,MAAM,wBAAwB,GAAG,IAAI,GAAG,QAAQ,GAAG,mBAAmB,CAAC;AAE7E,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,wBAAwB,CAAC;IACjC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;CACtB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,YAAY,CAOd;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,OAAO,GAAG,kBAAkB,CAO7E;AAoBD,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,YAAY,GACzB,YAAY,CAYd;AAED,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,YAAY,GACzB,gBAAgB,CAElB;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EACF;IACE,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC,GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,YAAY,CAAC;IAC3B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC,GACJ,kBAAkB,CA+CpB"}

package/dist/policy-outcomes.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createDeniedPolicyResult = createDeniedPolicyResult;
+exports.toAllowedToolResultEnvelope = toAllowedToolResultEnvelope;
+exports.materializePolicyResult = materializePolicyResult;
+exports.resolveResultMode = resolveResultMode;
+exports.handleBlockedPolicyResult = handleBlockedPolicyResult;
+const errors_1 = require("./errors");
+function createDeniedPolicyResult(reason, metadata) {
+    return {
+        decision: "deny",
+        reason,
+        resultMode: "throw",
+        metadata,
+    };
+}
+function toAllowedToolResultEnvelope(data) {
+    return {
+        status: "ok",
+        code: null,
+        publicReason: null,
+        data,
+    };
+}
+function toBlockedToolResultEnvelope(policyResult) {
+    return {
+        status: policyResult.decision === "require_approval"
+            ? "approval_required"
+            : "denied",
+        code: policyResult.reason,
+        publicReason: policyResult.publicReason?.trim() ||
+            (policyResult.decision === "require_approval"
+                ? "Action requires approval."
+                : "Action not allowed."),
+        data: null,
+    };
+}
+function materializePolicyResult(policyResult) {
+    if (policyResult.decision === "allow" ||
+        typeof policyResult.resultMode !== "undefined") {
+        return policyResult;
+    }
+    return {
+        ...policyResult,
+        resultMode: "throw",
+    };
+}
+function resolveResultMode(policyResult) {
+    return policyResult.resultMode ?? "throw";
+}
+function handleBlockedPolicyResult(params) {
+    const { policyResult } = params;
+    if (policyResult.decision === "allow") {
+        throw new Error("Blocked policy result handler received an allow decision.");
+    }
+    if (resolveResultMode(policyResult) === "tool_result") {
+        return toBlockedToolResultEnvelope(policyResult);
+    }
+    if (policyResult.decision === "require_approval") {
+        if (!params.suspendedProposal) {
+            throw new Error("Approval-required policy result is missing a suspended proposal.");
+        }
+        if (params.kind === "tool") {
+            throw new errors_1.ToolCallApprovalRequiredError({
+                toolName: params.toolName,
+                policyResult,
+                suspendedProposal: params.suspendedProposal,
+            });
+        }
+        throw new errors_1.HandoffApprovalRequiredError({
+            fromAgent: params.fromAgent,
+            toAgent: params.toAgent,
+            policyResult,
+            suspendedProposal: params.suspendedProposal,
+        });
+    }
+    if (params.kind === "tool") {
+        throw new errors_1.ToolCallPolicyDeniedError({
+            toolName: params.toolName,
+            policyResult,
+        });
+    }
+    throw new errors_1.HandoffPolicyDeniedError({
+        fromAgent: params.fromAgent,
+        toAgent: params.toAgent,
+        policyResult,
+    });
+}

package/dist/policy.d.ts

@@ -1,27 +1,32 @@
 import type { RunContext } from "./run-context";
-export type PolicyDecision = "allow" | "deny";
-export type PolicyDenyMode = "throw" | "tool_result";
+export type PolicyDecision = "allow" | "deny" | "require_approval";
+export type PolicyResultMode = "throw" | "tool_result";
 export interface PolicyResult {
     decision: PolicyDecision;
     reason: string;
     publicReason?: string;
-    denyMode?: PolicyDenyMode;
+    resultMode?: PolicyResultMode;
     policyVersion?: string;
+    expiresAt?: string;
     metadata?: Record<string, unknown>;
 }
 export interface PolicyResultOptions {
     publicReason?: string;
-    denyMode?: PolicyDenyMode;
+    resultMode?: PolicyResultMode;
     policyVersion?: string;
+    expiresAt?: string;
     metadata?: Record<string, unknown>;
 }
 export declare function allow(reason: string, options?: PolicyResultOptions): PolicyResult;
 export declare function deny(reason: string, options?: PolicyResultOptions): PolicyResult;
+export declare function requireApproval(reason: string, options?: PolicyResultOptions): PolicyResult;
 export interface ToolPolicyInput<TContext = unknown> {
     agentName: string;
     toolName: string;
     rawArguments: string;
     parsedArguments: unknown;
+    proposalHash: string;
+    argsCanonicalJson: string;
     runContext: RunContext<TContext>;
     turn: number;
 }
@@ -29,6 +34,8 @@ export interface HandoffPolicyInput<TContext = unknown> {
     fromAgentName: string;
     toAgentName: string;
     handoffPayload: unknown;
+    proposalHash: string;
+    payloadCanonicalJson: string;
     runContext: RunContext<TContext>;
     turn: number;
 }

package/dist/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,CAAC;AAC9C,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,aAAa,CAAC;AAErD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAiBD,wBAAgB,KAAK,CACnB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,mBAAmB,GAC5B,YAAY,CAEd;AAED,wBAAgB,IAAI,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,mBAAmB,GAC5B,YAAY,CAEd;AAED,MAAM,WAAW,eAAe,CAAC,QAAQ,GAAG,OAAO;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB,CAAC,QAAQ,GAAG,OAAO;IACpD,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,UAAU,CAAC,QAAQ,GAAG,OAAO,IAAI,CAC3C,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC,KAC7B,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;AAE1C,MAAM,MAAM,aAAa,CAAC,QAAQ,GAAG,OAAO,IAAI,CAC9C,KAAK,EAAE,kBAAkB,CAAC,QAAQ,CAAC,KAChC,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;AAE1C,MAAM,WAAW,mBAAmB,CAAC,QAAQ,GAAG,OAAO;IACrD,UAAU,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;CACzC"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;AACnE,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,aAAa,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAkBD,wBAAgB,KAAK,CACnB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,mBAAmB,GAC5B,YAAY,CAEd;AAED,wBAAgB,IAAI,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,mBAAmB,GAC5B,YAAY,CAEd;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,mBAAmB,GAC5B,YAAY,CAEd;AAED,MAAM,WAAW,eAAe,CAAC,QAAQ,GAAG,OAAO;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB,CAAC,QAAQ,GAAG,OAAO;IACpD,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,UAAU,CAAC,QAAQ,GAAG,OAAO,IAAI,CAC3C,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC,KAC7B,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;AAE1C,MAAM,MAAM,aAAa,CAAC,QAAQ,GAAG,OAAO,IAAI,CAC9C,KAAK,EAAE,kBAAkB,CAAC,QAAQ,CAAC,KAChC,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;AAE1C,MAAM,WAAW,mBAAmB,CAAC,QAAQ,GAAG,OAAO;IACrD,UAAU,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;CACzC"}

package/dist/policy.js

@@ -2,13 +2,15 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.allow = allow;
 exports.deny = deny;
+exports.requireApproval = requireApproval;
 function createPolicyResult(decision, reason, options) {
     return {
         decision,
         reason,
         publicReason: options?.publicReason,
-        denyMode: options?.denyMode,
+        resultMode: options?.resultMode,
         policyVersion: options?.policyVersion,
+        expiresAt: options?.expiresAt,
         metadata: options?.metadata,
     };
 }
@@ -18,3 +20,6 @@ function allow(reason, options) {
 function deny(reason, options) {
     return createPolicyResult("deny", reason, options);
 }
+function requireApproval(reason, options) {
+    return createPolicyResult("require_approval", reason, options);
+}

package/dist/proposal-hashing.d.ts

@@ -0,0 +1,21 @@
+export interface ToolProposalFingerprintInput {
+    agentName: string;
+    toolName: string;
+    parsedArguments: unknown;
+}
+export interface ToolProposalFingerprint {
+    proposalHash: string;
+    argsCanonicalJson: string;
+}
+export interface HandoffProposalFingerprintInput {
+    fromAgentName: string;
+    toAgentName: string;
+    handoffPayload: unknown;
+}
+export interface HandoffProposalFingerprint {
+    proposalHash: string;
+    payloadCanonicalJson: string;
+}
+export declare function createToolProposalFingerprint(input: ToolProposalFingerprintInput): ToolProposalFingerprint;
+export declare function createHandoffProposalFingerprint(input: HandoffProposalFingerprintInput): HandoffProposalFingerprint;
+//# sourceMappingURL=proposal-hashing.d.ts.map

package/dist/proposal-hashing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal-hashing.d.ts","sourceRoot":"","sources":["../src/proposal-hashing.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,4BAA4B,GAClC,uBAAuB,CAezB;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,+BAA+B,GACrC,0BAA0B,CAe5B"}

package/dist/proposal-hashing.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createToolProposalFingerprint = createToolProposalFingerprint;
+exports.createHandoffProposalFingerprint = createHandoffProposalFingerprint;
+const canonical_json_1 = require("./canonical-json");
+function createToolProposalFingerprint(input) {
+    const argsCanonicalJson = (0, canonical_json_1.toCanonicalJson)(input.parsedArguments);
+    const proposalHash = (0, canonical_json_1.hashCanonicalJson)((0, canonical_json_1.toCanonicalJson)({
+        kind: "tool",
+        agentName: input.agentName,
+        toolName: input.toolName,
+        argsCanonicalJson,
+    }));
+    return {
+        proposalHash,
+        argsCanonicalJson,
+    };
+}
+function createHandoffProposalFingerprint(input) {
+    const payloadCanonicalJson = (0, canonical_json_1.toCanonicalJson)(input.handoffPayload);
+    const proposalHash = (0, canonical_json_1.hashCanonicalJson)((0, canonical_json_1.toCanonicalJson)({
+        kind: "handoff",
+        fromAgentName: input.fromAgentName,
+        toAgentName: input.toAgentName,
+        payloadCanonicalJson,
+    }));
+    return {
+        proposalHash,
+        payloadCanonicalJson,
+    };
+}

package/dist/run-log-emitter.d.ts

@@ -8,8 +8,8 @@ export declare class RunLogEmitter {
     agentActivated(agent: string, turn: number): Promise<void>;
     turnStarted(agent: string, turn: number): Promise<void>;
     toolCallStarted(agent: string, turn: number, toolName: string, callId: string): Promise<void>;
-    toolPolicyEvaluated(agent: string, turn: number, toolName: string, callId: string, decision: "allow" | "deny", reason: string, policyVersion?: string, metadata?: Record<string, unknown>): Promise<void>;
-    handoffPolicyEvaluated(agent: string, turn: number, handoffName: string, callId: string, toAgent: string, decision: "allow" | "deny", reason: string, policyVersion?: string, metadata?: Record<string, unknown>): Promise<void>;
+    toolPolicyEvaluated(agent: string, turn: number, toolName: string, callId: string, decision: "allow" | "deny" | "require_approval", reason: string, publicReason?: string, resultMode?: "throw" | "tool_result", policyVersion?: string, expiresAt?: string, metadata?: Record<string, unknown>): Promise<void>;
+    handoffPolicyEvaluated(agent: string, turn: number, handoffName: string, callId: string, toAgent: string, decision: "allow" | "deny" | "require_approval", reason: string, publicReason?: string, resultMode?: "throw" | "tool_result", policyVersion?: string, expiresAt?: string, metadata?: Record<string, unknown>): Promise<void>;
     toolCallCompleted(agent: string, turn: number, toolName: string, callId: string): Promise<void>;
     toolCallFailed(agent: string, turn: number, toolName: string, callId: string, error: unknown): Promise<void>;
     outputGuardrailStarted(agent: string, turn: number, guardrailName: string): Promise<void>;

package/dist/run-log-emitter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-log-emitter.d.ts","sourceRoot":"","sources":["../src/run-log-emitter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAe,SAAS,EAAE,MAAM,UAAU,CAAC;AAmBvD,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,CAAY;gBAEf,MAAM,CAAC,EAAE,SAAS;IAI9B,OAAO,CAAC,eAAe;YAIT,IAAI;IAYZ,UAAU,CACd,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAWV,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU1D,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvD,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAYV,mBAAmB,CACvB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,OAAO,GAAG,MAAM,EAC1B,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,EACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IAgBV,sBAAsB,CAC1B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,OAAO,GAAG,MAAM,EAC1B,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,EACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IAiBV,iBAAiB,CACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAYV,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,IAAI,CAAC;IAeV,sBAAsB,CAC1B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC;IAWV,qBAAqB,CACzB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC;IAWV,wBAAwB,CAC5B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAYV,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAWV,SAAS,CACb,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,IAAI,CAAC;CAYjB"}
+{"version":3,"file":"run-log-emitter.d.ts","sourceRoot":"","sources":["../src/run-log-emitter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAe,SAAS,EAAE,MAAM,UAAU,CAAC;AAmBvD,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,CAAY;gBAEf,MAAM,CAAC,EAAE,SAAS;IAI9B,OAAO,CAAC,eAAe;YAIT,IAAI;IAYZ,UAAU,CACd,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAWV,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU1D,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvD,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAYV,mBAAmB,CACvB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,EAC/C,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,MAAM,EACrB,UAAU,CAAC,EAAE,OAAO,GAAG,aAAa,EACpC,aAAa,CAAC,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IAmBV,sBAAsB,CAC1B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,EAC/C,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,MAAM,EACrB,UAAU,CAAC,EAAE,OAAO,GAAG,aAAa,EACpC,aAAa,CAAC,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IAoBV,iBAAiB,CACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAYV,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,IAAI,CAAC;IAeV,sBAAsB,CAC1B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC;IAWV,qBAAqB,CACzB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC;IAWV,wBAAwB,CAC5B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAYV,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAWV,SAAS,CACb,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,IAAI,CAAC;CAYjB"}

package/dist/run-log-emitter.js

@@ -71,10 +71,10 @@ class RunLogEmitter {
             callId,
         });
     }
-    async toolPolicyEvaluated(agent, turn, toolName, callId, decision, reason, policyVersion, metadata) {
+    async toolPolicyEvaluated(agent, turn, toolName, callId, decision, reason, publicReason, resultMode, policyVersion, expiresAt, metadata) {
         await this.emit({
             timestamp: this.createTimestamp(),
-            level: decision === "deny" ? "warn" : "info",
+            level: decision === "allow" ? "info" : "warn",
             type: "tool_policy_evaluated",
             agent,
             turn,
@@ -82,14 +82,17 @@ class RunLogEmitter {
             callId,
             decision,
             reason,
+            publicReason,
+            resultMode,
             policyVersion,
+            expiresAt,
             metadata,
         });
     }
-    async handoffPolicyEvaluated(agent, turn, handoffName, callId, toAgent, decision, reason, policyVersion, metadata) {
+    async handoffPolicyEvaluated(agent, turn, handoffName, callId, toAgent, decision, reason, publicReason, resultMode, policyVersion, expiresAt, metadata) {
         await this.emit({
             timestamp: this.createTimestamp(),
-            level: decision === "deny" ? "warn" : "info",
+            level: decision === "allow" ? "info" : "warn",
             type: "handoff_policy_evaluated",
             agent,
             turn,
@@ -98,7 +101,10 @@ class RunLogEmitter {
             toAgent,
             decision,
             reason,
+            publicReason,
+            resultMode,
             policyVersion,
+            expiresAt,
             metadata,
         });
     }