@botbotgo/runtime 1.0.0

package/dist/runtime/human-loop/humanLoop.d.ts

@@ -0,0 +1,44 @@
+import type { ToolArgs } from "../middleware/types.js";
+export type HumanLoopRequestKind = "tool_approval";
+export type HumanLoopDecisionAction = "approve" | "reject" | "revise";
+export type HumanLoopRiskLevel = "low" | "medium" | "high";
+export interface HumanLoopToolCallContext {
+    threadId?: string;
+    toolCallId?: string;
+    toolName: string;
+    args: ToolArgs;
+    rootDir: string;
+}
+export interface HumanLoopRequest {
+    id: string;
+    kind: HumanLoopRequestKind;
+    threadId?: string;
+    toolCallId?: string;
+    toolName: string;
+    title: string;
+    description: string;
+    args: ToolArgs;
+    rootDir: string;
+    createdAt: string;
+    riskLevel?: HumanLoopRiskLevel;
+    metadata?: Record<string, unknown>;
+}
+export interface HumanLoopDecision {
+    action: HumanLoopDecisionAction;
+    message?: string;
+    revisedArgs?: ToolArgs;
+    actor?: string;
+    decidedAt?: string;
+}
+export interface HumanLoopService {
+    request(request: HumanLoopRequest): Promise<HumanLoopDecision>;
+}
+export interface HumanLoopToolPolicy {
+    buildRequest(context: HumanLoopToolCallContext): HumanLoopRequest | null | undefined;
+}
+export interface CreateDefaultHumanLoopToolPolicyOptions {
+    toolNames?: string[];
+    riskLevel?: HumanLoopRiskLevel;
+}
+export declare function createDefaultHumanLoopToolPolicy(options?: CreateDefaultHumanLoopToolPolicyOptions): HumanLoopToolPolicy;
+//# sourceMappingURL=humanLoop.d.ts.map

package/dist/runtime/human-loop/humanLoop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"humanLoop.d.ts","sourceRoot":"","sources":["../../../src/runtime/human-loop/humanLoop.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAEvD,MAAM,MAAM,oBAAoB,GAAG,eAAe,CAAC;AACnD,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AACtE,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE3D,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,oBAAoB,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,uBAAuB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,OAAO,EAAE,wBAAwB,GAAG,gBAAgB,GAAG,IAAI,GAAG,SAAS,CAAC;CACtF;AAED,MAAM,WAAW,uCAAuC;IACtD,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,GAAE,uCAA4C,GACpD,mBAAmB,CAyBrB"}

package/dist/runtime/human-loop/humanLoop.js

@@ -0,0 +1,36 @@
+import { randomUUID } from "node:crypto";
+export function createDefaultHumanLoopToolPolicy(options = {}) {
+    const riskyToolNames = new Set(options.toolNames ?? ["execute", "write_file", "edit_file"]);
+    const riskLevel = options.riskLevel ?? "high";
+    return {
+        buildRequest(context) {
+            if (!riskyToolNames.has(context.toolName)) {
+                return null;
+            }
+            return {
+                id: randomUUID(),
+                kind: "tool_approval",
+                threadId: context.threadId,
+                toolCallId: context.toolCallId,
+                toolName: context.toolName,
+                title: `Approval required for ${context.toolName}`,
+                description: buildDefaultDescription(context.toolName, context.args),
+                args: context.args,
+                rootDir: context.rootDir,
+                createdAt: new Date().toISOString(),
+                riskLevel,
+            };
+        },
+    };
+}
+function buildDefaultDescription(toolName, args) {
+    if (toolName === "execute" && typeof args.command === "string") {
+        return `Command: ${args.command}`;
+    }
+    if ((toolName === "write_file" || toolName === "edit_file") &&
+        typeof (args.file_path ?? args.path) === "string") {
+        return `File: ${String(args.file_path ?? args.path)}`;
+    }
+    return `Tool args: ${JSON.stringify(args)}`;
+}
+//# sourceMappingURL=humanLoop.js.map

package/dist/runtime/human-loop/humanLoop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"humanLoop.js","sourceRoot":"","sources":["../../../src/runtime/human-loop/humanLoop.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmDzC,MAAM,UAAU,gCAAgC,CAC9C,UAAmD,EAAE;IAErD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAE9C,OAAO;QACL,YAAY,CAAC,OAAO;YAClB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO;gBACL,EAAE,EAAE,UAAU,EAAE;gBAChB,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,yBAAyB,OAAO,CAAC,QAAQ,EAAE;gBAClD,WAAW,EAAE,uBAAuB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC;gBACpE,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS;aACV,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB,EAAE,IAAc;IAC/D,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC/D,OAAO,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,WAAW,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACpD,OAAO,SAAS,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;AAC9C,CAAC"}

package/dist/runtime/index.d.ts

@@ -0,0 +1,10 @@
+export { AgentRuntimeService, createAgentRuntime2, initializeAgentRuntimeModules, } from "./runtimeService.js";
+export { ConsoleHumanLoopService } from "./human-loop/consoleHumanLoop.js";
+export type { CreateAgentRuntimeFrameworkOptions } from "./runtimeService.js";
+export { createDefaultHumanLoopToolPolicy, } from "./human-loop/humanLoop.js";
+export type { HumanLoopDecision, HumanLoopRequest, HumanLoopService, HumanLoopToolCallContext, HumanLoopToolPolicy, } from "./human-loop/humanLoop.js";
+export type { AgentEvent, AgentEventBus, AgentEventListener, } from "./events/eventPublisher.js";
+export { clearAgentRuntimeGlobalContext, getAgentRuntimeGlobal, getAgentRuntimeGlobalContext, getOrRegisterAgentRuntimeGlobal, registerAgentRuntimeGlobal, } from "./context/globalContext.js";
+export type { AgentRuntimeGlobalContext } from "./context/globalContext.js";
+export { requireAgentRuntimeChatModel, requireAgentRuntimeContextValue, requireAgentRuntimeMemory, requireAgentRuntimeTools, } from "./context/agentContext.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,YAAY,EAAE,kCAAkC,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EACL,gCAAgC,GACjC,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,UAAU,EACV,aAAa,EACb,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,EACrB,4BAA4B,EAC5B,+BAA+B,EAC/B,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC"}

package/dist/runtime/index.js

@@ -0,0 +1,6 @@
+export { AgentRuntimeService, createAgentRuntime2, initializeAgentRuntimeModules, } from "./runtimeService.js";
+export { ConsoleHumanLoopService } from "./human-loop/consoleHumanLoop.js";
+export { createDefaultHumanLoopToolPolicy, } from "./human-loop/humanLoop.js";
+export { clearAgentRuntimeGlobalContext, getAgentRuntimeGlobal, getAgentRuntimeGlobalContext, getOrRegisterAgentRuntimeGlobal, registerAgentRuntimeGlobal, } from "./context/globalContext.js";
+export { requireAgentRuntimeChatModel, requireAgentRuntimeContextValue, requireAgentRuntimeMemory, requireAgentRuntimeTools, } from "./context/agentContext.js";
+//# sourceMappingURL=index.js.map

package/dist/runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,EACL,gCAAgC,GACjC,MAAM,2BAA2B,CAAC;AAanC,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,EACrB,4BAA4B,EAC5B,+BAA+B,EAC/B,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC"}

package/dist/runtime/middleware/agentToolMiddleware.d.ts

@@ -0,0 +1,30 @@
+import type { AgentMiddlewareLike, CreateAgentToolMiddlewareOptions } from "./types.js";
+export declare class AgentToolMiddlewareFactory {
+    private readonly rootDir;
+    private readonly skillRoots;
+    private readonly skillPathMap;
+    private readonly createMiddleware;
+    private readonly ToolMessage;
+    private readonly events?;
+    private readonly executeTimeoutMs;
+    private readonly blockTaskTool;
+    private readonly allowedToolNames?;
+    private readonly logger;
+    private readonly persistTodos?;
+    private readonly humanLoop?;
+    private readonly humanLoopToolPolicy?;
+    private readonly beforeToolCall?;
+    private readonly afterToolCall?;
+    constructor(options: CreateAgentToolMiddlewareOptions);
+    create(): AgentMiddlewareLike;
+    private wrapModelCall;
+    private wrapToolCall;
+    private expandSyntheticFileEdits;
+    private handleSyntheticToolResponse;
+    private invokeToolHandler;
+    private requestHumanApprovalIfNeeded;
+    private resolveHumanLoopDecision;
+    private runTool;
+    private logToolStart;
+}
+//# sourceMappingURL=agentToolMiddleware.d.ts.map

package/dist/runtime/middleware/agentToolMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentToolMiddleware.d.ts","sourceRoot":"","sources":["../../../src/runtime/middleware/agentToolMiddleware.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,mBAAmB,EACnB,gCAAgC,EAEjC,MAAM,YAAY,CAAC;AAEpB,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAW;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IACtD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuD;IACxF,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkD;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAU;IACxC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAW;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAA6C;IAC3E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAgD;IAC3E,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAA0D;IAC/F,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAqD;IACrF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAoD;gBAEhE,OAAO,EAAE,gCAAgC;IAkBrD,MAAM,IAAI,mBAAmB;YAQtB,aAAa;YAab,YAAY;YA8EZ,wBAAwB;YAOxB,2BAA2B;YAsB3B,iBAAiB;YAqDjB,4BAA4B;IAoC1C,OAAO,CAAC,wBAAwB;YA2BlB,OAAO;IAqBrB,OAAO,CAAC,YAAY;CAcrB"}

package/dist/runtime/middleware/agentToolMiddleware.js

@@ -0,0 +1,259 @@
+import { FrameworkPrompt } from "./frameworkPrompt.js";
+import { ToolArgsNormalizer } from "./toolArgsNormalizer.js";
+import { ToolCallGuard } from "./toolCallGuard.js";
+import { ToolFsHandlers } from "./toolFsHandlers.js";
+import { ToolRequestParser } from "./toolRequestParser.js";
+import { buildSkillPathMap, expandSkillRoots } from "./skillPathMap.js";
+export class AgentToolMiddlewareFactory {
+    rootDir;
+    skillRoots;
+    skillPathMap;
+    createMiddleware;
+    ToolMessage;
+    events;
+    executeTimeoutMs;
+    blockTaskTool;
+    allowedToolNames;
+    logger;
+    persistTodos;
+    humanLoop;
+    humanLoopToolPolicy;
+    beforeToolCall;
+    afterToolCall;
+    constructor(options) {
+        this.rootDir = options.rootDir;
+        this.skillRoots = expandSkillRoots(options.skillRoots ?? []);
+        this.skillPathMap = options.skillPathMap ?? buildSkillPathMap(this.skillRoots);
+        this.createMiddleware = options.createMiddleware;
+        this.ToolMessage = options.ToolMessage;
+        this.events = options.events;
+        this.executeTimeoutMs = options.executeTimeoutMs ?? 60_000;
+        this.blockTaskTool = options.blockTaskTool ?? false;
+        this.allowedToolNames = options.allowedToolNames?.filter((name) => typeof name === "string" && name.trim().length > 0);
+        this.logger = options.logger ?? (() => { });
+        this.persistTodos = options.persistTodos;
+        this.humanLoop = options.humanLoop;
+        this.humanLoopToolPolicy = options.humanLoopToolPolicy;
+        this.beforeToolCall = options.beforeToolCall;
+        this.afterToolCall = options.afterToolCall;
+    }
+    create() {
+        return this.createMiddleware({
+            name: "AgentToolMiddleware",
+            wrapModelCall: async (request, handler) => this.wrapModelCall(request, handler),
+            wrapToolCall: async (request, handler) => this.wrapToolCall(request, handler),
+        });
+    }
+    async wrapModelCall(request, handler) {
+        const modelRequest = ToolRequestParser.toModelRequest(request);
+        return handler({
+            ...modelRequest,
+            systemPrompt: FrameworkPrompt.build(modelRequest.systemPrompt, this.blockTaskTool, this.allowedToolNames, this.skillPathMap),
+        });
+    }
+    async wrapToolCall(request, handler) {
+        const toolRequest = ToolRequestParser.toMiddlewareRequest(request);
+        const name = toolRequest.toolCall.name;
+        const toolCallId = toolRequest.toolCall.id;
+        if (this.blockTaskTool && name === "task") {
+            this.events?.emit({
+                name: "agent.runtime2.tool.call.blocked",
+                from: "agent-runtime2.middleware",
+                to: name,
+                payload: { toolCallId, reason: "task_tool_disabled" },
+            });
+            return new this.ToolMessage({
+                content: "Error: Do not use the task tool. Use execute(), write_file(), and read_file() directly.",
+                tool_call_id: toolCallId ?? "blocked",
+            });
+        }
+        const args = ToolRequestParser.toToolArgs(toolRequest.toolCall.args);
+        const blocked = ToolCallGuard.maybeBlock(name, args, toolCallId, this.ToolMessage, this.rootDir, this.allowedToolNames, Object.values(this.skillPathMap));
+        if (blocked) {
+            this.events?.emit({
+                name: "agent.runtime2.tool.call.blocked",
+                from: "agent-runtime2.middleware",
+                to: name,
+                payload: { toolCallId, args, reason: "policy_violation" },
+            });
+            return blocked;
+        }
+        let nextArgs = ToolArgsNormalizer.normalizeToolArgs(this.rootDir, this.skillRoots, name, args, this.skillPathMap);
+        nextArgs = await this.expandSyntheticFileEdits(name, nextArgs);
+        const syntheticResult = await this.handleSyntheticToolResponse(name, toolRequest.toolCall.id, nextArgs);
+        if (syntheticResult) {
+            return syntheticResult;
+        }
+        const humanLoopResult = await this.requestHumanApprovalIfNeeded(toolRequest, name, nextArgs);
+        if (humanLoopResult?.result) {
+            return humanLoopResult.result;
+        }
+        if (humanLoopResult?.args) {
+            nextArgs = humanLoopResult.args;
+        }
+        const override = await this.beforeToolCall?.({
+            threadId: toolRequest.threadId,
+            name,
+            args,
+            nextArgs,
+            request: ToolRequestParser.toHookRequest(toolRequest),
+            rootDir: this.rootDir,
+        });
+        if (override?.result) {
+            return override.result;
+        }
+        if (override?.args) {
+            nextArgs = override.args;
+        }
+        return this.invokeToolHandler(toolRequest, name, nextArgs, handler);
+    }
+    async expandSyntheticFileEdits(name, args) {
+        if (name !== "edit_file") {
+            return args;
+        }
+        return ToolFsHandlers.expandEditFileContent(this.rootDir, args);
+    }
+    async handleSyntheticToolResponse(name, toolCallId, args) {
+        if (name === "write_file" && typeof args.content === "string") {
+            const result = await ToolFsHandlers.handleWriteFile(this.rootDir, args, this.logger);
+            if (result) {
+                return new this.ToolMessage({ content: result.content, tool_call_id: toolCallId ?? "write_file" });
+            }
+        }
+        if (name === "ls" || name === "inspect_files") {
+            const result = await ToolFsHandlers.handleListFiles(this.rootDir, args);
+            if (result) {
+                this.logger(`[tool] ${name}: ${String(args.path ?? ".")}`);
+                this.logger(`[tool] ${name} done in 0ms`);
+                return new this.ToolMessage({ content: result.content, tool_call_id: toolCallId ?? name });
+            }
+        }
+        return null;
+    }
+    async invokeToolHandler(toolRequest, name, nextArgs, handler) {
+        this.events?.emit({
+            name: "agent.runtime2.tool.call.start",
+            from: "agent-runtime2.middleware",
+            to: name,
+            payload: { toolCallId: toolRequest.toolCall.id, args: nextArgs },
+        });
+        this.logToolStart(name, nextArgs);
+        const startedAt = Date.now();
+        try {
+            const result = await this.runTool(name, nextArgs, toolRequest, handler);
+            const durationMs = Date.now() - startedAt;
+            this.logger(`[tool] ${name} done in ${durationMs}ms`);
+            if (name === "write_todos" && Array.isArray(nextArgs.todos)) {
+                await this.persistTodos?.(nextArgs.todos);
+            }
+            await this.afterToolCall?.({
+                threadId: toolRequest.threadId,
+                name,
+                args: nextArgs,
+                result,
+                request: ToolRequestParser.toAfterHookRequest(toolRequest),
+                rootDir: this.rootDir,
+            });
+            this.events?.emit({
+                name: "agent.runtime2.tool.call.done",
+                from: name,
+                to: "agent-runtime2.middleware",
+                payload: { toolCallId: toolRequest.toolCall.id, args: nextArgs, durationMs, result },
+            });
+            return result;
+        }
+        catch (error) {
+            this.events?.emit({
+                name: "agent.runtime2.tool.call.error",
+                from: name,
+                to: "agent-runtime2.middleware",
+                payload: {
+                    toolCallId: toolRequest.toolCall.id,
+                    args: nextArgs,
+                    durationMs: Date.now() - startedAt,
+                    error: error instanceof Error ? error.message : String(error),
+                },
+            });
+            throw error;
+        }
+    }
+    async requestHumanApprovalIfNeeded(toolRequest, name, args) {
+        const request = this.humanLoopToolPolicy?.buildRequest({
+            threadId: toolRequest.threadId,
+            toolCallId: toolRequest.toolCall.id,
+            toolName: name,
+            args,
+            rootDir: this.rootDir,
+        });
+        if (!request || !this.humanLoop) {
+            return;
+        }
+        this.events?.emit({
+            name: "agent.runtime2.human_loop.requested",
+            from: "agent-runtime2.middleware",
+            to: "human",
+            payload: request,
+        });
+        const decision = await this.humanLoop.request(request);
+        this.events?.emit({
+            name: "agent.runtime2.human_loop.resolved",
+            from: "human",
+            to: "agent-runtime2.middleware",
+            payload: {
+                request,
+                decision,
+            },
+        });
+        return this.resolveHumanLoopDecision(toolRequest.toolCall.id, request, decision);
+    }
+    resolveHumanLoopDecision(toolCallId, request, decision) {
+        if (decision.action === "approve") {
+            return decision.revisedArgs ? { args: decision.revisedArgs } : {};
+        }
+        if (decision.action === "revise") {
+            if (decision.revisedArgs) {
+                return { args: decision.revisedArgs };
+            }
+            return {
+                result: new this.ToolMessage({
+                    content: decision.message ?? "Error: human review requested revised args but none were provided.",
+                    tool_call_id: toolCallId ?? request.id,
+                }),
+            };
+        }
+        return {
+            result: new this.ToolMessage({
+                content: decision.message ?? `Rejected by human reviewer for tool ${request.toolName}.`,
+                tool_call_id: toolCallId ?? request.id,
+            }),
+        };
+    }
+    async runTool(name, nextArgs, toolRequest, handler) {
+        const runPromise = Promise.resolve(handler({
+            ...toolRequest,
+            toolCall: { ...toolRequest.toolCall, args: nextArgs },
+        }));
+        if (name !== "execute") {
+            return runPromise;
+        }
+        return Promise.race([
+            runPromise,
+            new Promise((_, reject) => setTimeout(() => reject(new Error(`execute timeout after ${this.executeTimeoutMs / 1000}s`)), this.executeTimeoutMs)),
+        ]);
+    }
+    logToolStart(name, args) {
+        if (name === "execute" && typeof args.command === "string") {
+            const command = args.command.length > 120 ? `${args.command.slice(0, 117)}…` : args.command;
+            this.logger(`[tool] execute: ${command}`);
+            return;
+        }
+        if (name === "write_file") {
+            const filePath = String(args.file_path ?? args.path ?? "");
+            const length = typeof args.content === "string" ? args.content.length : 0;
+            this.logger(`[tool] write_file: ${filePath} (${length} chars)`);
+            return;
+        }
+        this.logger(`[tool] ${name}`);
+    }
+}
+//# sourceMappingURL=agentToolMiddleware.js.map

package/dist/runtime/middleware/agentToolMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentToolMiddleware.js","sourceRoot":"","sources":["../../../src/runtime/middleware/agentToolMiddleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAOxE,MAAM,OAAO,0BAA0B;IACpB,OAAO,CAAS;IAChB,UAAU,CAAW;IACrB,YAAY,CAAyB;IACrC,gBAAgB,CAAuD;IACvE,WAAW,CAAkD;IAC7D,MAAM,CAA8B;IACpC,gBAAgB,CAAS;IACzB,aAAa,CAAU;IACvB,gBAAgB,CAAY;IAC5B,MAAM,CAA4B;IAClC,YAAY,CAA8C;IAC1D,SAAS,CAAiD;IAC1D,mBAAmB,CAA2D;IAC9E,cAAc,CAAsD;IACpE,aAAa,CAAqD;IAEnF,YAAmB,OAAyC;QAC1D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/E,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAgD,CAAC;QACvE,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;QAC3D,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;QACpD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvH,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACvD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC7C,CAAC;IAEM,MAAM;QACX,OAAO,IAAI,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,qBAAqB;YAC3B,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC;YAC/E,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,OAAsC;QAClF,MAAM,YAAY,GAAG,iBAAiB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC;YACb,GAAG,YAAY;YACf,YAAY,EAAE,eAAe,CAAC,KAAK,CACjC,YAAY,CAAC,YAAY,EACzB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,YAAY,CAClB;SACF,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,OAAsC;QACjF,MAAM,WAAW,GAAG,iBAAiB,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;QACvC,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAE3C,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;gBAChB,IAAI,EAAE,kCAAkC;gBACxC,IAAI,EAAE,2BAA2B;gBACjC,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,oBAAoB,EAAE;aACtD,CAAC,CAAC;YACH,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC;gBAC1B,OAAO,EAAE,yFAAyF;gBAClG,YAAY,EAAE,UAAU,IAAI,SAAS;aACtC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CACtC,IAAI,EACJ,IAAI,EACJ,UAAU,EACV,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,gBAAgB,EACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CACjC,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;gBAChB,IAAI,EAAE,kCAAkC;gBACxC,IAAI,EAAE,2BAA2B;gBACjC,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE;aAC1D,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,QAAQ,GAAG,kBAAkB,CAAC,iBAAiB,CACjD,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,UAAU,EACf,IAAI,EACJ,IAAI,EACJ,IAAI,CAAC,YAAY,CAClB,CAAC;QACF,QAAQ,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAE/D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACxG,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7F,IAAI,eAAe,EAAE,MAAM,EAAE,CAAC;YAC5B,OAAO,eAAe,CAAC,MAAM,CAAC;QAChC,CAAC;QACD,IAAI,eAAe,EAAE,IAAI,EAAE,CAAC;YAC1B,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC;QAClC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,IAAI;YACJ,IAAI;YACJ,QAAQ;YACR,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,WAAW,CAAC;YACrD,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC;QACD,IAAI,QAAQ,EAAE,IAAI,EAAE,CAAC;YACnB,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,CAAC;QAED,OAAO,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,IAAY,EAAE,IAAc;QACjE,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,cAAc,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,2BAA2B,CACvC,IAAY,EACZ,UAA8B,EAC9B,IAAc;QAEd,IAAI,IAAI,KAAK,YAAY,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9D,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACrF,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,IAAI,YAAY,EAAE,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACxE,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,cAAc,CAAC,CAAC;gBAC1C,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,WAAqE,EACrE,IAAY,EACZ,QAAkB,EAClB,OAAsC;QAEtC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;YAChB,IAAI,EAAE,gCAAgC;YACtC,IAAI,EAAE,2BAA2B;YACjC,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACjE,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAElC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YACxE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,YAAY,UAAU,IAAI,CAAC,CAAC;YACtD,IAAI,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5D,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;gBACzB,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,IAAI;gBACJ,IAAI,EAAE,QAAQ;gBACd,MAAM;gBACN,OAAO,EAAE,iBAAiB,CAAC,kBAAkB,CAAC,WAAW,CAAC;gBAC1D,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;gBAChB,IAAI,EAAE,+BAA+B;gBACrC,IAAI,EAAE,IAAI;gBACV,EAAE,EAAE,2BAA2B;gBAC/B,OAAO,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE;aACrF,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;gBAChB,IAAI,EAAE,gCAAgC;gBACtC,IAAI,EAAE,IAAI;gBACV,EAAE,EAAE,2BAA2B;gBAC/B,OAAO,EAAE;oBACP,UAAU,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE;oBACnC,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAClC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D;aACF,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,4BAA4B,CACxC,WAAqE,EACrE,IAAY,EACZ,IAAc;QAEd,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,YAAY,CAAC;YACrD,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,UAAU,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE;YACnC,QAAQ,EAAE,IAAI;YACd,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;YAChB,IAAI,EAAE,qCAAqC;YAC3C,IAAI,EAAE,2BAA2B;YACjC,EAAE,EAAE,OAAO;YACX,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;YAChB,IAAI,EAAE,oCAAoC;YAC1C,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,2BAA2B;YAC/B,OAAO,EAAE;gBACP,OAAO;gBACP,QAAQ;aACT;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnF,CAAC;IAEO,wBAAwB,CAC9B,UAA8B,EAC9B,OAAyB,EACzB,QAA2B;QAE3B,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzB,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxC,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC;oBAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,oEAAoE;oBACjG,YAAY,EAAE,UAAU,IAAI,OAAO,CAAC,EAAE;iBACvC,CAAC;aACH,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC;gBAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,uCAAuC,OAAO,CAAC,QAAQ,GAAG;gBACvF,YAAY,EAAE,UAAU,IAAI,OAAO,CAAC,EAAE;aACvC,CAAC;SACH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,QAAkB,EAClB,WAAqE,EACrE,OAAsC;QAEtC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;YACzC,GAAG,WAAW;YACd,QAAQ,EAAE,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;SACtD,CAAC,CAAC,CAAC;QACJ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,UAAU;YACV,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CACrH;SACF,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,IAAc;QAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;YAC5F,IAAI,CAAC,MAAM,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,MAAM,CAAC,sBAAsB,QAAQ,KAAK,MAAM,SAAS,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;CACF"}

package/dist/runtime/middleware/commandPolicy.d.ts

@@ -0,0 +1,8 @@
+import type { ToolMessageConstructorLike, ToolMessageLike } from "./types.js";
+export declare class CommandPolicy {
+    static maybeBlockExecuteCommand(command: string, toolCallId: string | undefined, ToolMessage: ToolMessageConstructorLike, rootDir: string, allowedPathPrefixes?: string[]): ToolMessageLike | null;
+    private static getViolationMessage;
+    private static containsAbsolutePathOutsideWorkspace;
+    private static isSystemPath;
+}
+//# sourceMappingURL=commandPolicy.d.ts.map

package/dist/runtime/middleware/commandPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandPolicy.d.ts","sourceRoot":"","sources":["../../../src/runtime/middleware/commandPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE9E,qBAAa,aAAa;WACV,wBAAwB,CACpC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,WAAW,EAAE,0BAA0B,EACvC,OAAO,EAAE,MAAM,EACf,mBAAmB,GAAE,MAAM,EAAO,GACjC,eAAe,GAAG,IAAI;IAKzB,OAAO,CAAC,MAAM,CAAC,mBAAmB;IA2BlC,OAAO,CAAC,MAAM,CAAC,oCAAoC;IAmBnD,OAAO,CAAC,MAAM,CAAC,YAAY;CAI5B"}

package/dist/runtime/middleware/commandPolicy.js

@@ -0,0 +1,55 @@
+export class CommandPolicy {
+    static maybeBlockExecuteCommand(command, toolCallId, ToolMessage, rootDir, allowedPathPrefixes = []) {
+        const message = this.getViolationMessage(command, rootDir, allowedPathPrefixes);
+        return message ? new ToolMessage({ content: message, tool_call_id: toolCallId ?? "execute" }) : null;
+    }
+    static getViolationMessage(command, rootDir, allowedPathPrefixes) {
+        if (/\bls\b/.test(command) && command.includes("?")) {
+            return "Error: Do not run fuzzy ls probes with unknown paths. Continue with known workflow commands.";
+        }
+        if ((/\bbash\b/i.test(command) || /\/bin\/bash\b/i.test(command) || /\bzsh\b/i.test(command)) && command.includes("/scripts/")) {
+            return "Error: Do not wrap skill scripts with `bash`. Execute the script path directly.";
+        }
+        if (/\bchmod\s+\+x\b/i.test(command)) {
+            return "Error: Do not run chmod +x. Use direct execution of the target command or script.";
+        }
+        if (/\b(?:ba)?sh\s+-lc\b/i.test(command)) {
+            return "Error: Do not wrap command execution with shell -lc. Execute the target command directly.";
+        }
+        if (/\b(curl|wget)\b/i.test(command)) {
+            return "Error: Do not execute direct network fetch commands. Use provided scripts/tools and then write results with write_file/edit_file.";
+        }
+        if (/\|\s*reportgen\b/i.test(command)) {
+            return "Error: Do not pipe output to ad-hoc generators. Use write_file/edit_file for artifact generation.";
+        }
+        if (/(^|[\s;|&])(?:echo|cat|printf)[^|&;]*>\s*[^\s]+/i.test(command)) {
+            return "Error: Do not write files via shell redirection in execute. Use write_file/edit_file tools.";
+        }
+        return this.containsAbsolutePathOutsideWorkspace(command, rootDir, allowedPathPrefixes)
+            ? "Error: Do not execute commands with absolute paths outside workspace root. Use workspace-relative paths only."
+            : null;
+    }
+    static containsAbsolutePathOutsideWorkspace(command, rootDir, allowedPathPrefixes) {
+        const normalizedRoot = rootDir.replace(/\\/g, "/");
+        const normalizedAllowed = allowedPathPrefixes.map((entry) => entry.replace(/\\/g, "/"));
+        const pathLikeMatches = [...command.matchAll(/(?:^|[\s=>(;|&])(["']?)(\/[^\s"'`<>|&;]+)\1/g)];
+        for (const match of pathLikeMatches) {
+            const pathToken = match[2];
+            if (!pathToken || pathToken.startsWith("//"))
+                continue;
+            if (this.isSystemPath(pathToken))
+                continue;
+            if (pathToken === normalizedRoot || pathToken.startsWith(`${normalizedRoot}/`))
+                continue;
+            if (normalizedAllowed.some((prefix) => pathToken === prefix || pathToken.startsWith(`${prefix}/`)))
+                continue;
+            return true;
+        }
+        return false;
+    }
+    static isSystemPath(pathToken) {
+        return ["/usr/", "/bin/", "/etc/", "/var/", "/dev/", "/proc/", "/System/", "/opt/"]
+            .some((prefix) => pathToken.startsWith(prefix));
+    }
+}
+//# sourceMappingURL=commandPolicy.js.map

package/dist/runtime/middleware/commandPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandPolicy.js","sourceRoot":"","sources":["../../../src/runtime/middleware/commandPolicy.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,aAAa;IACjB,MAAM,CAAC,wBAAwB,CACpC,OAAe,EACf,UAA8B,EAC9B,WAAuC,EACvC,OAAe,EACf,sBAAgC,EAAE;QAElC,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;QAChF,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvG,CAAC;IAEO,MAAM,CAAC,mBAAmB,CAAC,OAAe,EAAE,OAAe,EAAE,mBAA6B;QAChG,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,8FAA8F,CAAC;QACxG,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/H,OAAO,iFAAiF,CAAC;QAC3F,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,OAAO,mFAAmF,CAAC;QAC7F,CAAC;QACD,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,OAAO,2FAA2F,CAAC;QACrG,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,OAAO,mIAAmI,CAAC;QAC7I,CAAC;QACD,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,OAAO,mGAAmG,CAAC;QAC7G,CAAC;QACD,IAAI,kDAAkD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrE,OAAO,6FAA6F,CAAC;QACvG,CAAC;QACD,OAAO,IAAI,CAAC,oCAAoC,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC;YACrF,CAAC,CAAC,+GAA+G;YACjH,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAEO,MAAM,CAAC,oCAAoC,CACjD,OAAe,EACf,OAAe,EACf,mBAA6B;QAE7B,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACxF,MAAM,eAAe,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC,CAAC;QAC9F,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YACvD,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC3C,IAAI,SAAS,KAAK,cAAc,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC;gBAAE,SAAS;YACzF,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,KAAK,MAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;gBAAE,SAAS;YAC7G,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,SAAiB;QAC3C,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC;aAChF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/runtime/middleware/frameworkPrompt.d.ts

@@ -0,0 +1,4 @@
+export declare class FrameworkPrompt {
+    static build(currentPrompt: string | undefined, blockTaskTool: boolean, allowedToolNames?: string[], skillPathMap?: Record<string, string>): string;
+}
+//# sourceMappingURL=frameworkPrompt.d.ts.map

package/dist/runtime/middleware/frameworkPrompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frameworkPrompt.d.ts","sourceRoot":"","sources":["../../../src/runtime/middleware/frameworkPrompt.ts"],"names":[],"mappings":"AAAA,qBAAa,eAAe;WACZ,KAAK,CACjB,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,aAAa,EAAE,OAAO,EACtB,gBAAgB,CAAC,EAAE,MAAM,EAAE,EAC3B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC,MAAM;CA4CV"}

package/dist/runtime/middleware/frameworkPrompt.js

@@ -0,0 +1,44 @@
+export class FrameworkPrompt {
+    static build(currentPrompt, blockTaskTool, allowedToolNames, skillPathMap) {
+        const baseRules = [
+            "Framework execution rules:",
+            "- Follow SKILL instructions exactly as the source of truth.",
+            "- Execute required workflow steps in order; do not skip required steps.",
+            "- Do not add extra exploratory or redundant operations outside the SKILL workflow.",
+            "- Support both tool calls and script commands: use whichever the SKILL explicitly allows for each step.",
+            "- If a SKILL allows both tool and script for the same step, prefer the safer/more structured tool path.",
+            "- For independent operations with no data dependency, prefer parallel tool calls to reduce latency.",
+            "- Do not stop after intermediate reads/planning. Continue autonomously until required outputs are produced.",
+            '- Return strict JSON for tool arguments (example: {"offset":0}, never "offset=0").',
+            "- Use workspace-relative paths only; do not invent absolute filesystem paths unless provided by runtime placeholders.",
+            "- Do not inspect script source files unless explicitly requested.",
+            "- Runtime path variable `${WORKSPACE}` expands to the workspace root.",
+        ];
+        if (blockTaskTool) {
+            baseRules.push("- The task tool is disabled. Never call task; complete work using available file and execute tools.");
+        }
+        if (allowedToolNames?.length) {
+            baseRules.push(`- Tool allowlist is enforced by config. Only call these tools: ${allowedToolNames.join(", ")}.`);
+        }
+        const skillEntries = Object.entries(skillPathMap ?? {});
+        if (skillEntries.length > 0) {
+            baseRules.push("- Active skills for this run:");
+            for (const [skillId, skillPath] of skillEntries) {
+                baseRules.push(`  - ${skillId} => ${skillPath}`);
+            }
+            baseRules.push("- Use `${SKILL_PATH:<skill-id>}` to reference a specific skill directory from the active skill mapping above.");
+            if (skillEntries.length === 1) {
+                baseRules.push("- Because only one skill is active, `${SKILL_PATH}` also resolves to that skill directory.");
+            }
+            baseRules.push("- `${SKILL_PATH...}` is only for skill-owned assets such as scripts/, references/, templates, and static inputs explicitly required by the SKILL.");
+            baseRules.push("- Do not use `${SKILL_PATH...}` for exploration, listing, globbing, discovery, or inspection. Do not call ls/glob/read_file on a skill path unless the user explicitly asks for skill source or contents.");
+            baseRules.push("- If a SKILL provides an explicit script command using `${SKILL_PATH...}` and `${WORKSPACE}`, execute that command directly instead of exploring the skill directory first.");
+        }
+        const frameworkPrompt = baseRules.join("\n");
+        if (!currentPrompt?.trim() || currentPrompt.includes("Framework execution rules:")) {
+            return currentPrompt?.trim() ? currentPrompt : frameworkPrompt;
+        }
+        return `${currentPrompt}\n\n${frameworkPrompt}`;
+    }
+}
+//# sourceMappingURL=frameworkPrompt.js.map

package/dist/runtime/middleware/frameworkPrompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frameworkPrompt.js","sourceRoot":"","sources":["../../../src/runtime/middleware/frameworkPrompt.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,eAAe;IACnB,MAAM,CAAC,KAAK,CACjB,aAAiC,EACjC,aAAsB,EACtB,gBAA2B,EAC3B,YAAqC;QAErC,MAAM,SAAS,GAAG;YAChB,4BAA4B;YAC5B,6DAA6D;YAC7D,yEAAyE;YACzE,oFAAoF;YACpF,yGAAyG;YACzG,yGAAyG;YACzG,qGAAqG;YACrG,6GAA6G;YAC7G,oFAAoF;YACpF,uHAAuH;YACvH,mEAAmE;YACnE,uEAAuE;SACxE,CAAC;QAEF,IAAI,aAAa,EAAE,CAAC;YAClB,SAAS,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAC;QACxH,CAAC;QACD,IAAI,gBAAgB,EAAE,MAAM,EAAE,CAAC;YAC7B,SAAS,CAAC,IAAI,CAAC,kEAAkE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,SAAS,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAChD,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,YAAY,EAAE,CAAC;gBAChD,SAAS,CAAC,IAAI,CAAC,OAAO,OAAO,OAAO,SAAS,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,+GAA+G,CAAC,CAAC;YAChI,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,SAAS,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAC;YAC/G,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,mJAAmJ,CAAC,CAAC;YACpK,SAAS,CAAC,IAAI,CAAC,2MAA2M,CAAC,CAAC;YAC5N,SAAS,CAAC,IAAI,CAAC,6KAA6K,CAAC,CAAC;QAChM,CAAC;QAED,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;YACnF,OAAO,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC;QACjE,CAAC;QACD,OAAO,GAAG,aAAa,OAAO,eAAe,EAAE,CAAC;IAClD,CAAC;CACF"}

package/dist/runtime/middleware/index.d.ts

@@ -0,0 +1,4 @@
+export { AgentToolMiddlewareFactory } from "./agentToolMiddleware.js";
+export { buildSkillPathMap } from "./skillPathMap.js";
+export type { CreateAgentToolMiddlewareOptions, ToolCallAfterHookContext, ToolCallHookContext, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/middleware/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/middleware/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EACV,gCAAgC,EAChC,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,YAAY,CAAC"}

package/dist/runtime/middleware/index.js

@@ -0,0 +1,3 @@
+export { AgentToolMiddlewareFactory } from "./agentToolMiddleware.js";
+export { buildSkillPathMap } from "./skillPathMap.js";
+//# sourceMappingURL=index.js.map

package/dist/runtime/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/middleware/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/runtime/middleware/skillPathMap.d.ts

@@ -0,0 +1,3 @@
+export declare function buildSkillPathMap(skillRoots: string[]): Record<string, string>;
+export declare function expandSkillRoots(skillRoots: string[]): string[];
+//# sourceMappingURL=skillPathMap.d.ts.map

package/dist/runtime/middleware/skillPathMap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skillPathMap.d.ts","sourceRoot":"","sources":["../../../src/runtime/middleware/skillPathMap.ts"],"names":[],"mappings":"AAGA,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAc9E;AAUD,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAqB/D"}