@canhta/dsh-autopilot 0.1.0-alpha.1

package/lib/dispatch/service.js

@@ -0,0 +1,231 @@
+import { Service } from '@deepseek-ai/cordis';
+import { prepareAgentComposition } from './composition.js';
+import { executeClaimed, executeOwnedTurn } from './execute.js';
+import { activeExecution, currentRun, isPausedActive } from './execution-state.js';
+import { continuationPrompt } from './report.js';
+import { preparePausedResume } from './resume.js';
+/** Durable dispatcher composed from the Host's configured DSH Agent, preset, model, Session, and workspace services. */
+export class Dispatch extends Service {
+    static inject = [
+        'admission',
+        'agents',
+        'agentDefaultModel',
+        'agentPresets',
+        'permissionPresets',
+        'sessions',
+        'sessionPersistence',
+        'workspaceRegistry',
+        'tools',
+        'llm',
+        'subprocess',
+        'autopilotWorkflow',
+        'runtimeOwner',
+        'autopilotOperations',
+    ];
+    active = new Map();
+    starts = new Set();
+    accepting = false;
+    constructor(ctx) {
+        super(ctx, 'dispatch');
+    }
+    async *[Service.init]() {
+        const releaseOwnerHold = this.ctx.runtimeOwner.hold();
+        this.accepting = true;
+        yield async () => {
+            try {
+                this.accepting = false;
+                await Promise.all([...this.starts]);
+                const owned = [...this.active.values()];
+                const pausingRunIds = await this.ctx.admission.requestServiceWithdrawalPause();
+                const settled = await Promise.allSettled([
+                    ...pausingRunIds.map((runId) => this.pauseOwnedExecution(runId, 'required execution service withdrawn')),
+                    ...owned.map((execution) => execution.completion),
+                ]);
+                const failures = settled.flatMap((result) => (result.status === 'rejected' ? [result.reason] : []));
+                if (failures.length > 0)
+                    throw new AggregateError(failures, 'dispatcher withdrawal did not quiesce cleanly');
+            }
+            finally {
+                releaseOwnerHold();
+            }
+        };
+    }
+    /**
+     * Claim and execute the next queued run through the Host's configured DSH preset and model, or return undefined when
+     * the queue is empty. Requires the injected DSH execution services, valid execution Settings, and Git.
+     * The method reserves durable budget before Git/model effects, owns the root Agent to quiescence, flushes its Session,
+     * records final Git facts, and settles a structured terminal outcome. Setup/model/Git failures become a failed run
+     * when the aggregate remains writable; an aggregate write failure rejects for explicit recovery. The operation
+     * accepts no caller cancellation signal.
+     */
+    async dispatchNext() {
+        this.assertAccepting();
+        return await this.ctx.autopilotWorkflow.guardDispatch(() => this.prepareNext());
+    }
+    async prepareNext() {
+        this.assertAccepting();
+        if (!this.hasRunningCapacity())
+            return undefined;
+        const snapshot = this.ctx.admission.snapshot();
+        if (snapshot.scheduler.mode === 'enabled') {
+            const continuation = snapshot.runs.find((run) => isPausedActive(run) && !run.pause.operatorHold && run.execution.recovery === undefined);
+            if (continuation !== undefined)
+                return await this.prepareResume(continuation.runId, 'scheduler');
+        }
+        const finishStart = this.beginStart();
+        let claimed;
+        let active;
+        try {
+            await this.assertExecutionStartReady();
+            claimed = await this.ctx.admission.claimNext(await prepareAgentComposition(this.ctx));
+            if (claimed === undefined) {
+                finishStart();
+                return undefined;
+            }
+            active = activeExecution();
+            this.active.set(claimed.runId, active);
+        }
+        catch (error) {
+            finishStart();
+            throw error;
+        }
+        return async () => {
+            try {
+                return await executeClaimed(this.ctx, claimed, active, finishStart);
+            }
+            finally {
+                finishStart();
+                this.active.delete(claimed.runId);
+                active.complete();
+            }
+        };
+    }
+    /**
+     * Atomically disable scheduler admission/dequeue, request native cancellation for every live root, and resolve only
+     * after each owned execution has reached a durable pause checkpoint. Cancellation-resistant work remains `pausing`
+     * and keeps its reservation while this operation waits. Recovered runs without a live owner remain explicit recovery.
+     */
+    async disableScheduler() {
+        this.assertAccepting();
+        const requested = await this.ctx.admission.requestSchedulerDisable();
+        await Promise.all(requested.pausingRunIds.map((runId) => this.pauseOwnedExecution(runId, 'scheduler disabled')));
+        return this.ctx.admission.snapshot();
+    }
+    /**
+     * Request an operator hold for one live allocated run, cancel its native root, and resolve only after its Session and
+     * Autopilot checkpoint are durable. Queued work must use `Admission.holdQueued`; absent live ownership rejects.
+     */
+    async stopRun(runId) {
+        this.assertAccepting();
+        const active = this.active.get(runId);
+        if (active === undefined)
+            throw new Error(`run "${runId}" has no live execution owner`);
+        const requested = await this.ctx.admission.requestRunPause(runId);
+        if (requested.state === 'paused')
+            return requested;
+        await this.pauseOwnedExecution(runId, 'operator requested a checkpoint stop');
+        const paused = this.ctx.admission.snapshot().runs.find((run) => run.runId === runId);
+        if (!isPausedActive(paused))
+            throw new Error(`run "${runId}" did not reach a durable pause checkpoint`);
+        return paused;
+    }
+    /**
+     * Resume one allocated pause through DSH's persisted Session path after proving the retained Session and Git worktree
+     * are still usable. The same run, Session, worktree, and branch are retained; no fallback identity is created. Tracker,
+     * scheduler, routing, Git, and budget gates are revalidated before the resumed Agent receives continuation input.
+     * Definite retained-resource failures persist an explicit recovery requirement; other preflight failures preserve the
+     * pause. The operation owns the resumed root through disposal. Caller cancellation becomes a durable operator pause
+     * before the resumed root is cancelled and drained.
+     */
+    async resumeRun(runId, signal) {
+        this.assertAccepting();
+        signal?.throwIfAborted();
+        const resumed = await this.ctx.autopilotWorkflow.guardDispatch(() => this.prepareResume(runId, 'operator', signal));
+        if (resumed === undefined)
+            throw new Error(`run "${runId}" could not be prepared for execution`);
+        return resumed;
+    }
+    async prepareResume(runId, authorization, signal) {
+        if (!this.hasRunningCapacity())
+            throw new Error('maximum concurrent runs are already active');
+        const finishStart = this.beginStart();
+        let prepared;
+        try {
+            await this.assertExecutionStartReady();
+            prepared = await preparePausedResume(this.ctx, this.active, runId, authorization);
+        }
+        finally {
+            finishStart();
+        }
+        return () => this.executePreparedResume(prepared, signal);
+    }
+    async executePreparedResume(prepared, signal) {
+        const { run, active, handle, usage, report, baseHead, workspace } = prepared;
+        let cancellation;
+        const requestCancellation = () => {
+            if (cancellation !== undefined)
+                return;
+            active.pauseRequested = true;
+            handle.agent.cancel({ kind: 'hook', reason: 'operator command owner withdrew while resuming this run' }, { keepInbox: true });
+            cancellation = this.ctx.admission.requestRunPause(run.runId).then(() => undefined);
+        };
+        signal?.addEventListener('abort', requestCancellation);
+        if (signal?.aborted === true)
+            requestCancellation();
+        try {
+            return await executeOwnedTurn(this.ctx, run, active, handle, usage, report, baseHead, continuationPrompt(run), 'pause requested before continuation', 'Agent continuation failed.', workspace, () => cancellation ?? Promise.resolve());
+        }
+        finally {
+            signal?.removeEventListener('abort', requestCancellation);
+            await cancellation;
+            this.active.delete(run.runId);
+            active.complete();
+        }
+    }
+    async pauseOwnedExecution(runId, reason) {
+        const active = this.active.get(runId);
+        if (active === undefined) {
+            const run = currentRun(this.ctx.admission.snapshot(), runId);
+            if (run.state === 'pausing' && run.execution.recovery === undefined) {
+                throw new Error(`run "${runId}" is pausing without a live execution owner`);
+            }
+            return;
+        }
+        active.pauseRequested = true;
+        active.handle?.agent.cancel({ kind: 'hook', reason }, { keepInbox: true });
+        await active.completion;
+        const run = currentRun(this.ctx.admission.snapshot(), runId);
+        if (run.state === 'pausing' && run.execution.recovery === undefined) {
+            throw new Error(`run "${runId}" quiesced without a durable pause checkpoint`);
+        }
+    }
+    assertAccepting() {
+        if (!this.accepting)
+            throw new Error('dispatcher is unavailable while its required services are changing');
+    }
+    hasRunningCapacity() {
+        return this.active.size < this.ctx.autopilotConfig.get().maxRunning;
+    }
+    async assertExecutionStartReady() {
+        await this.ctx.runtimeOwner.ensureOwned();
+        await this.ctx.autopilotOperations.assertDispatchReady();
+    }
+    beginStart() {
+        this.assertAccepting();
+        let resolve;
+        const barrier = new Promise((settled) => {
+            resolve = settled;
+        });
+        this.starts.add(barrier);
+        let finished = false;
+        return () => {
+            if (finished)
+                return;
+            finished = true;
+            this.starts.delete(barrier);
+            resolve?.();
+        };
+    }
+}
+export default Dispatch;
+//# sourceMappingURL=service.js.map

package/lib/dispatch/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/dispatch/service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAQ7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAE1D,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/D,OAAO,EAAwB,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAuB,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAQtE,wHAAwH;AACxH,MAAM,OAAO,QAAS,SAAQ,OAAO;IACnC,MAAM,CAAU,MAAM,GAAG;QACvB,WAAW;QACX,QAAQ;QACR,mBAAmB;QACnB,cAAc;QACd,mBAAmB;QACnB,UAAU;QACV,oBAAoB;QACpB,mBAAmB;QACnB,OAAO;QACP,KAAK;QACL,YAAY;QACZ,mBAAmB;QACnB,cAAc;QACd,qBAAqB;KACtB,CAAA;IAEgB,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAA;IAC1C,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAA;IAC1C,SAAS,GAAG,KAAK,CAAA;IAEzB,YAAY,GAAY;QACtB,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAA;QACrD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,MAAM,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,IAAI,CAAC,SAAS,GAAG,KAAK,CAAA;gBACtB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;gBACnC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;gBACvC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,CAAA;gBAC9E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;oBACvC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,sCAAsC,CAAC,CAAC;oBACxG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC;iBAClD,CAAC,CAAA;gBACF,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBACnG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,+CAA+C,CAAC,CAAA;YAC9G,CAAC;oBAAS,CAAC;gBACT,gBAAgB,EAAE,CAAA;YACpB,CAAC;QACH,CAAC,CAAA;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IACjF,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE;YAAE,OAAO,SAAS,CAAA;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAA;QAC9C,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CACrC,CAAC,GAAG,EAA0B,EAAE,CAC9B,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,CACzF,CAAA;YACD,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;QAClG,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;QACrC,IAAI,OAAoC,CAAA;QACxC,IAAI,MAAmC,CAAA;QACvC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAA;YACtC,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YACrF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,WAAW,EAAE,CAAA;gBACb,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,MAAM,GAAG,eAAe,EAAE,CAAA;YAC1B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,EAAE,CAAA;YACb,MAAM,KAAK,CAAA;QACb,CAAC;QACD,OAAO,KAAK,IAAI,EAAE;YAChB,IAAI,CAAC;gBACH,OAAO,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAA;YACrE,CAAC;oBAAS,CAAC;gBACT,WAAW,EAAE,CAAA;gBACb,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;gBACjC,MAAM,CAAC,QAAQ,EAAE,CAAA;YACnB,CAAC;QACH,CAAC,CAAA;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,CAAA;QACpE,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAA;QAChH,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAA;IACtC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,KAAY;QACxB,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,+BAA+B,CAAC,CAAA;QACvF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;QACjE,IAAI,SAAS,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QAClD,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,sCAAsC,CAAC,CAAA;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,CAAA;QACpF,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,4CAA4C,CAAC,CAAA;QACvG,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CAAC,KAAY,EAAE,MAAoB;QAChD,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;QACnH,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,uCAAuC,CAAC,CAAA;QAChG,OAAO,OAAO,CAAA;IAChB,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,KAAY,EACZ,aAAwC,EACxC,MAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC7F,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;QACrC,IAAI,QAAwB,CAAA;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAA;YACtC,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;QACnF,CAAC;gBAAS,CAAC;YACT,WAAW,EAAE,CAAA;QACf,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC3D,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,QAAwB,EAAE,MAAoB;QAChF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAA;QAC5E,IAAI,YAAuC,CAAA;QAC3C,MAAM,mBAAmB,GAAG,GAAS,EAAE;YACrC,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAM;YACtC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAA;YAC5B,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,yDAAyD,EAAE,EACnF,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAA;YACD,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACpF,CAAC,CAAA;QACD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;QACtD,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;YAAE,mBAAmB,EAAE,CAAA;QACnD,IAAI,CAAC;YACH,OAAO,MAAM,gBAAgB,CAC3B,IAAI,CAAC,GAAG,EACR,GAAG,EACH,MAAM,EACN,MAAM,EACN,KAAK,EACL,MAAM,EACN,QAAQ,EACR,kBAAkB,CAAC,GAAG,CAAC,EACvB,qCAAqC,EACrC,4BAA4B,EAC5B,SAAS,EACT,GAAG,EAAE,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CACxC,CAAA;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;YACzD,MAAM,YAAY,CAAA;YAClB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC7B,MAAM,CAAC,QAAQ,EAAE,CAAA;QACnB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,KAAY,EAAE,MAAc;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAA;YAC5D,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,6CAA6C,CAAC,CAAA;YAC7E,CAAC;YACD,OAAM;QACR,CAAC;QACD,MAAM,CAAC,cAAc,GAAG,IAAI,CAAA;QAC5B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1E,MAAM,MAAM,CAAC,UAAU,CAAA;QACvB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAA;QAC5D,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,+CAA+C,CAAC,CAAA;QAC/E,CAAC;IACH,CAAC;IAEO,eAAe;QACrB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;IAC5G,CAAC;IAEO,kBAAkB;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,UAAU,CAAA;IACrE,CAAC;IAEO,KAAK,CAAC,yBAAyB;QACrC,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,CAAA;QACzC,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,CAAA;IAC1D,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,IAAI,OAAiC,CAAA;QACrC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5C,OAAO,GAAG,OAAO,CAAA;QACnB,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACxB,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,OAAO,GAAG,EAAE;YACV,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YACf,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YAC3B,OAAO,EAAE,EAAE,CAAA;QACb,CAAC,CAAA;IACH,CAAC;CACF;AAED,eAAe,QAAQ,CAAA"}

package/lib/dispatch/usage.d.ts

@@ -0,0 +1,10 @@
+import type { Context } from '@deepseek-ai/cordis';
+import type { TokenUsage } from '@deepseek-ai/dsh-llm';
+import type { AgentExecutionComposition, ImplementingRun, PausedActiveRun, PausingRun, RunUsageSettlement } from '../admission.js';
+export interface UsageRecorder {
+    readonly usage: TokenUsage[];
+    requests: number;
+    uncertainty?: string;
+}
+export declare function registerUsageRecorder(agentCtx: Context, run: ImplementingRun | PausingRun | PausedActiveRun, composition: AgentExecutionComposition, recorder: UsageRecorder): void;
+export declare function usageSettlement(recorder: UsageRecorder): RunUsageSettlement;

package/lib/dispatch/usage.js

@@ -0,0 +1,47 @@
+export function registerUsageRecorder(agentCtx, run, composition, recorder) {
+    agentCtx.on('llm/stream', async function* (options, next) {
+        recorder.requests += 1;
+        if (options.provider !== composition.model.provider ||
+            options.model !== composition.model.model ||
+            options.reasoningEffort !== composition.model.reasoningEffort ||
+            options.sessionId !== run.execution.sessionId) {
+            recorder.uncertainty = 'a model request escaped the claimed provider, model, reasoning, or session identity';
+        }
+        let usageChunks = 0;
+        try {
+            for await (const chunk of next()) {
+                if (chunk.type === 'usage') {
+                    usageChunks += 1;
+                    if (validTokenUsage(chunk.usage))
+                        recorder.usage.push(structuredClone(chunk.usage));
+                    else
+                        recorder.uncertainty = 'the model provider returned invalid token usage';
+                }
+                yield chunk;
+            }
+        }
+        finally {
+            if (usageChunks !== 1)
+                recorder.uncertainty = 'a model request did not return exactly one usage record';
+        }
+    });
+}
+export function usageSettlement(recorder) {
+    if (recorder.uncertainty !== undefined)
+        return { kind: 'uncertain', reason: recorder.uncertainty };
+    if (recorder.usage.length !== recorder.requests) {
+        return { kind: 'uncertain', reason: 'provider usage records did not match the number of model requests' };
+    }
+    const tokens = recorder.usage.reduce((total, current) => total +
+        current.inputTokens +
+        current.outputTokens +
+        (current.cacheReadTokens ?? 0) +
+        (current.cacheWriteTokens ?? 0), 0);
+    return Number.isSafeInteger(tokens)
+        ? { kind: 'known', tokens }
+        : { kind: 'uncertain', reason: 'provider usage overflowed the safe integer range' };
+}
+function validTokenUsage(usage) {
+    return [usage.inputTokens, usage.outputTokens, usage.cacheReadTokens ?? 0, usage.cacheWriteTokens ?? 0].every((value) => Number.isSafeInteger(value) && value >= 0);
+}
+//# sourceMappingURL=usage.js.map

package/lib/dispatch/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../src/dispatch/usage.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,qBAAqB,CACnC,QAAiB,EACjB,GAAmD,EACnD,WAAsC,EACtC,QAAuB;IAEvB,QAAQ,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,SAAS,CAAC,EAAE,OAAwB,EAAE,IAAI;QACvE,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAA;QACtB,IACE,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,KAAK,CAAC,QAAQ;YAC/C,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,CAAC,KAAK;YACzC,OAAO,CAAC,eAAe,KAAK,WAAW,CAAC,KAAK,CAAC,eAAe;YAC7D,OAAO,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,SAAS,EAC7C,CAAC;YACD,QAAQ,CAAC,WAAW,GAAG,qFAAqF,CAAA;QAC9G,CAAC;QACD,IAAI,WAAW,GAAG,CAAC,CAAA;QACnB,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,EAAE,CAAC;gBACjC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC3B,WAAW,IAAI,CAAC,CAAA;oBAChB,IAAI,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC;wBAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;;wBAC9E,QAAQ,CAAC,WAAW,GAAG,iDAAiD,CAAA;gBAC/E,CAAC;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,WAAW,KAAK,CAAC;gBAAE,QAAQ,CAAC,WAAW,GAAG,yDAAyD,CAAA;QACzG,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAuB;IACrD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAA;IAClG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,mEAAmE,EAAE,CAAA;IAC3G,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAClC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CACjB,KAAK;QACL,OAAO,CAAC,WAAW;QACnB,OAAO,CAAC,YAAY;QACpB,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC;QAC9B,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC,EACjC,CAAC,CACF,CAAA;IACD,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QACjC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;QAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAA;AACvF,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACxC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,IAAI,CAAC,EAAE,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,KAAK,CAC3G,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CACrD,CAAA;AACH,CAAC"}

package/lib/dispatch.d.ts

@@ -0,0 +1,2 @@
+export * from './dispatch/index.js';
+export { default } from './dispatch/index.js';

package/lib/dispatch.js

@@ -0,0 +1,3 @@
+export * from './dispatch/index.js';
+export { default } from './dispatch/index.js';
+//# sourceMappingURL=dispatch.js.map

package/lib/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA"}

package/lib/github-code-host.d.ts

@@ -0,0 +1 @@
+export * from './providers/github-code-host/index.js';

package/lib/github-code-host.js

@@ -0,0 +1,2 @@
+export * from './providers/github-code-host/index.js';
+//# sourceMappingURL=github-code-host.js.map

package/lib/github-code-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-code-host.js","sourceRoot":"","sources":["../src/github-code-host.ts"],"names":[],"mappings":"AAAA,cAAc,uCAAuC,CAAA"}

package/lib/github-issues.d.ts

@@ -0,0 +1 @@
+export * from './providers/github-issues/index.js';

package/lib/github-issues.js

@@ -0,0 +1,2 @@
+export * from './providers/github-issues/index.js';
+//# sourceMappingURL=github-issues.js.map

package/lib/github-issues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-issues.js","sourceRoot":"","sources":["../src/github-issues.ts"],"names":[],"mappings":"AAAA,cAAc,oCAAoC,CAAA"}

package/lib/index.d.ts

@@ -0,0 +1,21 @@
+import type { Context } from '@deepseek-ai/cordis';
+export declare const name = "dsh-autopilot";
+export declare const inject: string[];
+export interface AutopilotOptions {
+    /** Programmatic Host proof when the composition does not have a DSH Loader. */
+    readonly authoritativeStorePath?: string;
+}
+export declare function apply(ctx: Context, options?: AutopilotOptions): Promise<void>;
+export * from './admission.js';
+export * from './code-host.js';
+export * from './config.js';
+export * from './delivery.js';
+export * from './dispatch.js';
+export * from './ingress.js';
+export * from './notification.js';
+export * from './operations.js';
+export * from './publication.js';
+export * from './reconciliation.js';
+export * from './tracker.js';
+export * from './web.js';
+export * from './workflow.js';

package/lib/index.js

@@ -0,0 +1,48 @@
+import { Admission } from './admission.js';
+import { CodeHost } from './code-host.js';
+import { AutopilotConfig } from './config.js';
+import { Delivery } from './delivery.js';
+import { Dispatch } from './dispatch.js';
+import { Ingress } from './ingress.js';
+import { Notifications } from './notification.js';
+import { AutopilotOperations, PullRequestDispositionRegistry, RuntimeOwner } from './operations.js';
+import { Publication } from './publication.js';
+import { Reconciliation } from './reconciliation.js';
+import { Tracker } from './tracker.js';
+import { AutopilotWeb, AutopilotWebContributions, AutopilotWebIntegrations } from './web.js';
+import { Workflow } from './workflow.js';
+export const name = 'dsh-autopilot';
+export const inject = ['settings', 'storageDomain'];
+export async function apply(ctx, options = {}) {
+    await ctx.plugin(Tracker);
+    await ctx.plugin(CodeHost);
+    await ctx.plugin(Notifications);
+    await ctx.plugin(AutopilotWebContributions);
+    await ctx.plugin(AutopilotConfig);
+    await ctx.plugin(RuntimeOwner, options);
+    await ctx.plugin(Admission);
+    await ctx.plugin(Ingress);
+    await ctx.plugin(PullRequestDispositionRegistry);
+    await ctx.plugin(AutopilotOperations);
+    await ctx.plugin(Dispatch);
+    await ctx.plugin(Publication);
+    await ctx.plugin(Delivery);
+    await ctx.plugin(Workflow);
+    await ctx.plugin(Reconciliation);
+    await ctx.plugin(AutopilotWebIntegrations);
+    await ctx.plugin(AutopilotWeb);
+}
+export * from './admission.js';
+export * from './code-host.js';
+export * from './config.js';
+export * from './delivery.js';
+export * from './dispatch.js';
+export * from './ingress.js';
+export * from './notification.js';
+export * from './operations.js';
+export * from './publication.js';
+export * from './reconciliation.js';
+export * from './tracker.js';
+export * from './web.js';
+export * from './workflow.js';
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,8BAA8B,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACnG,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAA;AAC5F,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAExC,MAAM,CAAC,MAAM,IAAI,GAAG,eAAe,CAAA;AACnC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;AAOnD,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,GAAY,EAAE,OAAO,GAAqB,EAAE;IACtE,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACzB,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC1B,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAC/B,MAAM,GAAG,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAA;IAC3C,MAAM,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACjC,MAAM,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACvC,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAC3B,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACzB,MAAM,GAAG,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAA;IAChD,MAAM,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;IACrC,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC1B,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC7B,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC1B,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC1B,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IAChC,MAAM,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAA;IAC1C,MAAM,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;AAChC,CAAC;AAED,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,mBAAmB,CAAA;AACjC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,qBAAqB,CAAA;AACnC,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,eAAe,CAAA"}

package/lib/ingress.d.ts

@@ -0,0 +1,2 @@
+export * from './reconciliation/ingress.js';
+export { default } from './reconciliation/ingress.js';

package/lib/ingress.js

@@ -0,0 +1,3 @@
+export * from './reconciliation/ingress.js';
+export { default } from './reconciliation/ingress.js';
+//# sourceMappingURL=ingress.js.map

package/lib/ingress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingress.js","sourceRoot":"","sources":["../src/ingress.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA"}

package/lib/jira.d.ts

@@ -0,0 +1 @@
+export * from './providers/jira/index.js';

package/lib/jira.js

@@ -0,0 +1,2 @@
+export * from './providers/jira/index.js';
+//# sourceMappingURL=jira.js.map

package/lib/jira.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jira.js","sourceRoot":"","sources":["../src/jira.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAA"}

package/lib/mcp/contracts.d.ts

@@ -0,0 +1,21 @@
+import type { ToolDefinition } from '@deepseek-ai/dsh-tools';
+/** Canonical value produced by DSH's MCP tool bridge. */
+export interface McpResult {
+    readonly content: readonly unknown[];
+    readonly structuredContent?: unknown;
+}
+/** One closed semantic operation backed by a version-pinned MCP tool contract. */
+export interface McpContract<Input, Output> {
+    readonly rawName: string;
+    readonly maxResultBytes: number;
+    acceptsDefinition(definition: ToolDefinition): boolean;
+    encode(input: Input): unknown;
+    decode(result: McpResult): Output;
+}
+export type McpContractMap = Readonly<Record<string, McpContract<unknown, unknown>>>;
+export type McpContractInput<Contract> = Contract extends McpContract<infer Input, unknown> ? Input : never;
+export type McpContractOutput<Contract> = Contract extends McpContract<unknown, infer Output> ? Output : never;
+/** Preserve a provider's closed semantic-operation keys while validating its static contract declarations. */
+export declare function defineMcpContracts<const Contracts extends McpContractMap>(contracts: Contracts): Contracts;
+/** Resolve only names that DSH publishes verbatim, avoiding a duplicate of its lossy name-normalization algorithm. */
+export declare function exactMcpToolName(serverName: string, rawName: string): string;

package/lib/mcp/contracts.js

@@ -0,0 +1,33 @@
+const SERVER_NAME = /^[A-Za-z0-9_-]{1,32}$/;
+const RAW_TOOL_NAME = /^[A-Za-z0-9_-]+$/;
+const MAX_PUBLIC_TOOL_NAME_LENGTH = 64;
+/** Preserve a provider's closed semantic-operation keys while validating its static contract declarations. */
+export function defineMcpContracts(contracts) {
+    if (Object.keys(contracts).length === 0)
+        throw new TypeError('MCP read contracts must not be empty');
+    for (const [operation, contract] of Object.entries(contracts)) {
+        if (!/^[A-Za-z][A-Za-z0-9]*$/.test(operation)) {
+            throw new TypeError('MCP semantic operation names must be alphanumeric identifiers');
+        }
+        if (!RAW_TOOL_NAME.test(contract.rawName)) {
+            throw new TypeError(`MCP operation "${operation}" has an invalid raw tool name`);
+        }
+        if (!Number.isSafeInteger(contract.maxResultBytes) || contract.maxResultBytes < 1) {
+            throw new TypeError(`MCP operation "${operation}" must declare a positive result-byte bound`);
+        }
+    }
+    return contracts;
+}
+/** Resolve only names that DSH publishes verbatim, avoiding a duplicate of its lossy name-normalization algorithm. */
+export function exactMcpToolName(serverName, rawName) {
+    if (!SERVER_NAME.test(serverName))
+        throw new TypeError('MCP server name is invalid');
+    if (!RAW_TOOL_NAME.test(rawName))
+        throw new TypeError('MCP raw tool name is invalid');
+    const name = `mcp__${serverName}__${rawName}`;
+    if (name.length > MAX_PUBLIC_TOOL_NAME_LENGTH) {
+        throw new TypeError('MCP tool name requires unsupported lossy normalization');
+    }
+    return name;
+}
+//# sourceMappingURL=contracts.js.map

package/lib/mcp/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/mcp/contracts.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,GAAG,uBAAuB,CAAA;AAC3C,MAAM,aAAa,GAAG,kBAAkB,CAAA;AACxC,MAAM,2BAA2B,GAAG,EAAE,CAAA;AAsBtC,8GAA8G;AAC9G,MAAM,UAAU,kBAAkB,CAAyC,SAAoB;IAC7F,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAA;IACpG,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAA;QACtF,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,SAAS,CAAC,kBAAkB,SAAS,gCAAgC,CAAC,CAAA;QAClF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,SAAS,CAAC,kBAAkB,SAAS,6CAA6C,CAAC,CAAA;QAC/F,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,OAAe;IAClE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAA;IACpF,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAA;IACrF,MAAM,IAAI,GAAG,QAAQ,UAAU,KAAK,OAAO,EAAE,CAAA;IAC7C,IAAI,IAAI,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/lib/mcp/cursor.d.ts

@@ -0,0 +1,10 @@
+export interface McpTraversalCursor {
+    readonly vendorCursor: string;
+    readonly pagesRead: number;
+    readonly itemsRead: number;
+}
+/** Create a generation-local authenticated codec for untrusted provider continuation cursors. */
+export declare function createMcpTraversalCursorCodec(): {
+    encode(state: McpTraversalCursor): string;
+    decode(value: string): McpTraversalCursor;
+};

package/lib/mcp/cursor.js

@@ -0,0 +1,68 @@
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { TrackerProviderError } from '../tracker.js';
+const CURSOR_VERSION = 1;
+const MAX_CURSOR_BYTES = 4_096;
+/** Create a generation-local authenticated codec for untrusted provider continuation cursors. */
+export function createMcpTraversalCursorCodec() {
+    const key = randomBytes(32);
+    return {
+        encode(state) {
+            const payload = Buffer.from(JSON.stringify({ version: CURSOR_VERSION, ...state })).toString('base64url');
+            const signature = createHmac('sha256', key).update(payload).digest('base64url');
+            const cursor = `${payload}.${signature}`;
+            if (Buffer.byteLength(cursor) > MAX_CURSOR_BYTES)
+                throw invalidCursor();
+            return cursor;
+        },
+        decode(value) {
+            if (Buffer.byteLength(value) > MAX_CURSOR_BYTES)
+                throw invalidCursor();
+            const [payload, signature, extra] = value.split('.');
+            if (payload === undefined || signature === undefined || extra !== undefined)
+                throw invalidCursor();
+            const expected = createHmac('sha256', key).update(payload).digest();
+            let actual;
+            try {
+                actual = Buffer.from(signature, 'base64url');
+            }
+            catch {
+                throw invalidCursor();
+            }
+            if (actual.byteLength !== expected.byteLength || !timingSafeEqual(actual, expected))
+                throw invalidCursor();
+            let parsed;
+            try {
+                parsed = JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'));
+            }
+            catch {
+                throw invalidCursor();
+            }
+            if (typeof parsed !== 'object' || parsed === null)
+                throw invalidCursor();
+            const candidate = parsed;
+            if (candidate.version !== CURSOR_VERSION ||
+                typeof candidate.vendorCursor !== 'string' ||
+                candidate.vendorCursor.length === 0 ||
+                candidate.vendorCursor.length > MAX_CURSOR_BYTES ||
+                !positiveInteger(candidate.pagesRead) ||
+                !nonNegativeInteger(candidate.itemsRead)) {
+                throw invalidCursor();
+            }
+            return {
+                vendorCursor: candidate.vendorCursor,
+                pagesRead: candidate.pagesRead,
+                itemsRead: candidate.itemsRead,
+            };
+        },
+    };
+}
+function positiveInteger(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value > 0;
+}
+function nonNegativeInteger(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;
+}
+function invalidCursor() {
+    return new TrackerProviderError('invalid-response', 'MCP tracker candidate cursor was invalid');
+}
+//# sourceMappingURL=cursor.js.map

package/lib/mcp/cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../src/mcp/cursor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAEpD,MAAM,cAAc,GAAG,CAAC,CAAA;AACxB,MAAM,gBAAgB,GAAG,KAAK,CAAA;AAQ9B,iGAAiG;AACjG,MAAM,UAAU,6BAA6B;IAI3C,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;IAC3B,OAAO;QACL,MAAM,CAAC,KAAK;YACV,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACxG,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YAC/E,MAAM,MAAM,GAAG,GAAG,OAAO,IAAI,SAAS,EAAE,CAAA;YACxC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,gBAAgB;gBAAE,MAAM,aAAa,EAAE,CAAA;YACvE,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,CAAC,KAAK;YACV,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,gBAAgB;gBAAE,MAAM,aAAa,EAAE,CAAA;YACtE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACpD,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,aAAa,EAAE,CAAA;YAClG,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAA;YACnE,IAAI,MAAc,CAAA;YAClB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,aAAa,EAAE,CAAA;YACvB,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAAE,MAAM,aAAa,EAAE,CAAA;YAC1G,IAAI,MAAe,CAAA;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;YACpF,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,aAAa,EAAE,CAAA;YACvB,CAAC;YACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,aAAa,EAAE,CAAA;YACxE,MAAM,SAAS,GAAG,MAAiC,CAAA;YACnD,IACE,SAAS,CAAC,OAAO,KAAK,cAAc;gBACpC,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ;gBAC1C,SAAS,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;gBACnC,SAAS,CAAC,YAAY,CAAC,MAAM,GAAG,gBAAgB;gBAChD,CAAC,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC;gBACrC,CAAC,kBAAkB,CAAC,SAAS,CAAC,SAAS,CAAC,EACxC,CAAC;gBACD,MAAM,aAAa,EAAE,CAAA;YACvB,CAAC;YACD,OAAO;gBACL,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;aAC/B,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,0CAA0C,CAAC,CAAA;AACjG,CAAC"}

package/lib/mcp/definition.d.ts

@@ -0,0 +1,8 @@
+import type { ToolDefinition } from '@deepseek-ai/dsh-tools';
+/** Require a zero-argument object input before binding an MCP identity operation. */
+export declare function hasNoArgumentObjectInput(definition: ToolDefinition): boolean;
+/** Check the top-level shape used by a pinned MCP operation contract. */
+export declare function hasInputShape(definition: ToolDefinition, requiredNames: readonly string[], propertyTypes: Readonly<Record<string, string>>): boolean;
+export declare function propertyEnumIncludes(definition: ToolDefinition, name: string, value: string): boolean;
+export declare function arrayItemsAreStrings(definition: ToolDefinition, name: string): boolean;
+export declare function arrayItemEnumIncludes(definition: ToolDefinition, name: string, value: string): boolean;