@cogenta/agents 0.1.0

package/dist/agents/define.d.ts

@@ -0,0 +1,9 @@
+import type { AgentDeclaration } from './types.js';
+/**
+ * Structural validation a type alone cannot enforce, mirroring `defineTool`
+ * (task 4): a name and an identity document are load-bearing strings, not
+ * decorative ones. Returns the declaration frozen, same reasoning as
+ * `defineTool` — nothing downstream mutates a shared declaration.
+ */
+export declare function defineAgent(declaration: AgentDeclaration): AgentDeclaration;
+//# sourceMappingURL=define.d.ts.map

package/dist/agents/define.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../src/agents/define.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAElD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,gBAAgB,GAAG,gBAAgB,CAiB3E"}

package/dist/agents/define.js

@@ -0,0 +1,25 @@
+import { CogentaError } from '@cogenta/core';
+/**
+ * Structural validation a type alone cannot enforce, mirroring `defineTool`
+ * (task 4): a name and an identity document are load-bearing strings, not
+ * decorative ones. Returns the declaration frozen, same reasoning as
+ * `defineTool` — nothing downstream mutates a shared declaration.
+ */
+export function defineAgent(declaration) {
+    if (declaration.name.trim() === '') {
+        throw new CogentaError({
+            code: 'AGENT_DEFINITION_INVALID',
+            message: 'An agent declares an empty name.',
+            hint: 'Give the agent a stable, unique name.',
+        });
+    }
+    if (declaration.identity.trim() === '') {
+        throw new CogentaError({
+            code: 'AGENT_DEFINITION_INVALID',
+            message: `Agent "${declaration.name}" declares no identity document.`,
+            hint: 'Point `identity` at the file describing this agent’s role, objectives and style.',
+        });
+    }
+    return Object.freeze(declaration);
+}
+//# sourceMappingURL=define.js.map

package/dist/agents/define.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.js","sourceRoot":"","sources":["../../src/agents/define.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAG5C;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,WAA6B;IACvD,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,kCAAkC;YAC3C,IAAI,EAAE,uCAAuC;SAC9C,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,UAAU,WAAW,CAAC,IAAI,kCAAkC;YACrE,IAAI,EAAE,kFAAkF;SACzF,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AACnC,CAAC"}

package/dist/agents/registry.d.ts

@@ -0,0 +1,29 @@
+import type { KillSwitch } from '../budget/types.js';
+import type { AgentDeclaration } from './types.js';
+export interface AgentRegistry {
+    list(): readonly AgentDeclaration[];
+    get(name: string): AgentDeclaration | undefined;
+    /** Re-enables a disabled agent — new runs may start; it does not affect what is already stopped. */
+    enable(name: string): void;
+    /**
+     * Disables an agent by flipping its shared kill switch — "désactiver un
+     * agent l'arrête immédiatement, y compris un run en cours". Every
+     * `runAgentLoop` call for this agent must be constructed with
+     * `killSwitchFor(name)` as its `killSwitch` for that guarantee to hold;
+     * this registry only owns the switch, not the runs themselves.
+     */
+    disable(name: string): void;
+    isEnabled(name: string): boolean;
+    /** The one `KillSwitch` instance shared by every run of this agent. */
+    killSwitchFor(name: string): KillSwitch;
+}
+/**
+ * "Format d'agent intégré, chargement, activation/désactivation" — loads a
+ * fixed set of `AgentDeclaration`s, checked once at construction (task 11's
+ * `validateSubagentTools`, since an `AgentDeclaration` is already a
+ * structural `AgentToolsDeclaration`), and gives each one a dedicated,
+ * shared kill switch for its enabled/disabled lifecycle. Every agent starts
+ * enabled.
+ */
+export declare function createAgentRegistry(declarations: readonly AgentDeclaration[]): AgentRegistry;
+//# sourceMappingURL=registry.d.ts.map

package/dist/agents/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/agents/registry.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAEpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAElD,MAAM,WAAW,aAAa;IAC5B,IAAI,IAAI,SAAS,gBAAgB,EAAE,CAAA;IACnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAA;IAC/C,oGAAoG;IACpG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IAChC,uEAAuE;IACvE,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAA;CACxC;AAiBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,SAAS,gBAAgB,EAAE,GAAG,aAAa,CA+B5F"}

package/dist/agents/registry.js

@@ -0,0 +1,50 @@
+import { CogentaError } from '@cogenta/core';
+import { createKillSwitch } from '../budget/kill-switch.js';
+import { validateSubagentTools } from '../subagents/validate.js';
+function requireDeclaration(byName, name) {
+    const declaration = byName.get(name);
+    if (declaration === undefined) {
+        throw new CogentaError({
+            code: 'AGENT_UNKNOWN',
+            message: `No agent named "${name}" is registered.`,
+            hint: 'Check the name against `list()`, or register the agent before referring to it.',
+        });
+    }
+    return declaration;
+}
+/**
+ * "Format d'agent intégré, chargement, activation/désactivation" — loads a
+ * fixed set of `AgentDeclaration`s, checked once at construction (task 11's
+ * `validateSubagentTools`, since an `AgentDeclaration` is already a
+ * structural `AgentToolsDeclaration`), and gives each one a dedicated,
+ * shared kill switch for its enabled/disabled lifecycle. Every agent starts
+ * enabled.
+ */
+export function createAgentRegistry(declarations) {
+    validateSubagentTools(declarations);
+    const byName = new Map(declarations.map((declaration) => [declaration.name, declaration]));
+    const killSwitches = new Map(declarations.map((declaration) => [declaration.name, createKillSwitch(false)]));
+    function requireKillSwitch(name) {
+        requireDeclaration(byName, name);
+        // Built from the same `declarations` this constructor validated above, so a
+        // name that passed `requireDeclaration` always has a matching switch.
+        return killSwitches.get(name);
+    }
+    return {
+        list: () => declarations,
+        get: (name) => byName.get(name),
+        enable(name) {
+            requireKillSwitch(name).deactivate();
+        },
+        disable(name) {
+            requireKillSwitch(name).activate();
+        },
+        isEnabled(name) {
+            return !requireKillSwitch(name).isActive();
+        },
+        killSwitchFor(name) {
+            return requireKillSwitch(name);
+        },
+    };
+}
+//# sourceMappingURL=registry.js.map

package/dist/agents/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/agents/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,gBAAgB,EAA0B,MAAM,0BAA0B,CAAA;AAEnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAqBhE,SAAS,kBAAkB,CACzB,MAA6C,EAC7C,IAAY;IAEZ,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACpC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,mBAAmB,IAAI,kBAAkB;YAClD,IAAI,EAAE,gFAAgF;SACvF,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,WAAW,CAAA;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAyC;IAC3E,qBAAqB,CAAC,YAAY,CAAC,CAAA;IAEnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;IAC1F,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAC/E,CAAA;IAED,SAAS,iBAAiB,CAAC,IAAY;QACrC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAChC,4EAA4E;QAC5E,sEAAsE;QACtE,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAsB,CAAA;IACpD,CAAC;IAED,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY;QACxB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QAC/B,MAAM,CAAC,IAAI;YACT,iBAAiB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAA;QACtC,CAAC;QACD,OAAO,CAAC,IAAI;YACV,iBAAiB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;QACpC,CAAC;QACD,SAAS,CAAC,IAAI;YACZ,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC5C,CAAC;QACD,aAAa,CAAC,IAAI;YAChB,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAChC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/agents/types.d.ts

@@ -0,0 +1,36 @@
+import type { AutonomyConfig } from '../autonomy/types.js';
+import type { BudgetLimits } from '../budget/types.js';
+export interface AgentModelPreference {
+    readonly preferred: string;
+    readonly fallback?: string;
+}
+export interface AgentTrigger {
+    readonly on: string;
+    /** Present only for `on: 'schedule'` triggers. */
+    readonly cron?: string;
+}
+export interface AgentMemoryConfig {
+    readonly episodic?: boolean;
+    readonly semantic?: boolean;
+    readonly procedural?: boolean;
+    readonly scope?: 'agent' | 'site';
+}
+/**
+ * Contract C's `defineAgent({...})` (`tools@1.0`, ADR-0020), reproduced as a
+ * type — `autonomy` and `budget` reuse the exact types tasks 8/9 already
+ * built rather than re-declaring their shape here.
+ */
+export interface AgentDeclaration {
+    readonly name: string;
+    /** A path to the agent's identity document (role, objectives, style) — read by whoever assembles context (task 3), not by this module. */
+    readonly identity: string;
+    readonly model: AgentModelPreference;
+    readonly tools: readonly string[];
+    readonly skills?: readonly string[];
+    readonly subagents?: readonly string[];
+    readonly autonomy?: AutonomyConfig;
+    readonly budget?: BudgetLimits;
+    readonly memory?: AgentMemoryConfig;
+    readonly triggers?: readonly AgentTrigger[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/agents/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,kDAAkD;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,0IAA0I;IAC1I,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAA;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAA;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAA;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;CAC5C"}

package/dist/agents/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/agents/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":""}

package/dist/audit/types.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The narrow slice of `@cogenta/auth`'s `AuditLog` this module writes to —
+ * declared locally rather than imported so `@cogenta/agents` does not pull
+ * in `@simplewebauthn/server` just to describe one method. A real
+ * `AuditLog` (`createAuditLog`, `packages/auth/src/audit.ts`) already
+ * satisfies this structurally: it was built generic on purpose so L4 could
+ * become "a second writer" without redesigning it.
+ */
+export interface AuditRecordInput {
+    readonly actorId: string | null;
+    readonly actorRoles: readonly string[];
+    readonly action: string;
+    readonly collection?: string;
+    readonly entryId?: string;
+    readonly diff?: Readonly<Record<string, unknown>>;
+}
+export interface AuditLogLike {
+    record(input: AuditRecordInput): Promise<{
+        readonly id: string;
+        readonly hash: string;
+    }>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/audit/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/audit/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAClD;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACzF"}

package/dist/audit/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/audit/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/audit/types.ts"],"names":[],"mappings":""}

package/dist/audit/with-audit.d.ts

@@ -0,0 +1,34 @@
+import type { ExecutableTool } from '../runtime/types.js';
+import type { AuditLogLike } from './types.js';
+export interface WithAuditOptions {
+    readonly auditLog: AuditLogLike;
+    readonly agentName: string;
+    readonly actor: {
+        readonly id: string | null;
+        readonly roles: readonly string[];
+    };
+    /** Injectable so tests never depend on real wall-clock duration. */
+    readonly now?: () => number;
+    /** Pulls `{collection, entryId}` out of a tool's input when it touches content, so the entry links to the right one — absent for tools that don't (site.config_read, http.fetch). */
+    readonly targetOf?: (input: Readonly<Record<string, unknown>>) => {
+        readonly collection?: string;
+        readonly entryId?: string;
+    };
+    /**
+     * Called when `auditLog.record` itself fails. Never rethrown: ADR-0018's
+     * own rule — "a write that fails must never fail the action it is
+     * auditing" — applies here exactly as it did for L2's first writer.
+     */
+    readonly onAuditFailure?: (error: unknown) => void;
+}
+/**
+ * L4 task 6: "Tout appel [d'outil] produit une entrée d'audit : acteur,
+ * agent, outil, entrée, sortie, diff, coût, durée." Wraps one
+ * `ExecutableTool` so every call — success or failure — is recorded once it
+ * resolves, never before: an entry that records only "attempted" and not
+ * "what happened" is not the accountability this rule asks for.
+ */
+export declare function withAudit(tool: ExecutableTool, options: WithAuditOptions): ExecutableTool;
+/** Applies `withAudit` to every tool in a manifest, so a caller does not have to remember to wrap each one individually. */
+export declare function withAuditForManifest(tools: readonly ExecutableTool[], options: WithAuditOptions): readonly ExecutableTool[];
+//# sourceMappingURL=with-audit.d.ts.map

package/dist/audit/with-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-audit.d.ts","sourceRoot":"","sources":["../../src/audit/with-audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAwB,MAAM,qBAAqB,CAAA;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAoB,MAAM,YAAY,CAAA;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;IACjF,oEAAoE;IACpE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,qLAAqL;IACrL,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK;QAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;QAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAC1B,CAAA;IACD;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CACnD;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,GAAG,cAAc,CAqDzF;AAED,4HAA4H;AAC5H,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,SAAS,cAAc,EAAE,EAChC,OAAO,EAAE,gBAAgB,GACxB,SAAS,cAAc,EAAE,CAE3B"}

package/dist/audit/with-audit.js

@@ -0,0 +1,65 @@
+/**
+ * L4 task 6: "Tout appel [d'outil] produit une entrée d'audit : acteur,
+ * agent, outil, entrée, sortie, diff, coût, durée." Wraps one
+ * `ExecutableTool` so every call — success or failure — is recorded once it
+ * resolves, never before: an entry that records only "attempted" and not
+ * "what happened" is not the accountability this rule asks for.
+ */
+export function withAudit(tool, options) {
+    const now = options.now ?? Date.now;
+    async function record(input) {
+        try {
+            await options.auditLog.record(input);
+        }
+        catch (error) {
+            options.onAuditFailure?.(error);
+        }
+    }
+    return {
+        spec: tool.spec,
+        async execute(input, ctx) {
+            const startedAt = now();
+            const target = options.targetOf?.(input) ?? {};
+            try {
+                const output = await tool.execute(input, ctx);
+                await record({
+                    actorId: options.actor.id,
+                    actorRoles: options.actor.roles,
+                    action: `agent.tool.${tool.spec.name}`,
+                    ...target,
+                    diff: {
+                        agent: options.agentName,
+                        tool: tool.spec.name,
+                        input,
+                        output,
+                        durationMs: now() - startedAt,
+                        ok: true,
+                    },
+                });
+                return output;
+            }
+            catch (error) {
+                await record({
+                    actorId: options.actor.id,
+                    actorRoles: options.actor.roles,
+                    action: `agent.tool.${tool.spec.name}`,
+                    ...target,
+                    diff: {
+                        agent: options.agentName,
+                        tool: tool.spec.name,
+                        input,
+                        durationMs: now() - startedAt,
+                        ok: false,
+                        error: error instanceof Error ? error.message : String(error),
+                    },
+                });
+                throw error;
+            }
+        },
+    };
+}
+/** Applies `withAudit` to every tool in a manifest, so a caller does not have to remember to wrap each one individually. */
+export function withAuditForManifest(tools, options) {
+    return tools.map((tool) => withAudit(tool, options));
+}
+//# sourceMappingURL=with-audit.js.map

package/dist/audit/with-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-audit.js","sourceRoot":"","sources":["../../src/audit/with-audit.ts"],"names":[],"mappings":"AAsBA;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,IAAoB,EAAE,OAAyB;IACvE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IAEnC,KAAK,UAAU,MAAM,CAAC,KAAuB;QAC3C,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAA;QACjC,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,CAAC,OAAO,CAAC,KAAwC,EAAE,GAAyB;YAC/E,MAAM,SAAS,GAAG,GAAG,EAAE,CAAA;YACvB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;YAE9C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;gBAC7C,MAAM,MAAM,CAAC;oBACX,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;oBACzB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;oBAC/B,MAAM,EAAE,cAAc,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBACtC,GAAG,MAAM;oBACT,IAAI,EAAE;wBACJ,KAAK,EAAE,OAAO,CAAC,SAAS;wBACxB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;wBACpB,KAAK;wBACL,MAAM;wBACN,UAAU,EAAE,GAAG,EAAE,GAAG,SAAS;wBAC7B,EAAE,EAAE,IAAI;qBACT;iBACF,CAAC,CAAA;gBACF,OAAO,MAAM,CAAA;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,CAAC;oBACX,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;oBACzB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;oBAC/B,MAAM,EAAE,cAAc,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBACtC,GAAG,MAAM;oBACT,IAAI,EAAE;wBACJ,KAAK,EAAE,OAAO,CAAC,SAAS;wBACxB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;wBACpB,KAAK;wBACL,UAAU,EAAE,GAAG,EAAE,GAAG,SAAS;wBAC7B,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D;iBACF,CAAC,CAAA;gBACF,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,4HAA4H;AAC5H,MAAM,UAAU,oBAAoB,CAClC,KAAgC,EAChC,OAAyB;IAEzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;AACtD,CAAC"}

package/dist/autonomy/approval-queue.d.ts

@@ -0,0 +1,13 @@
+import type { ApprovalQueue } from './types.js';
+export interface MemoryApprovalQueueOptions {
+    readonly now?: () => number;
+    readonly newId?: () => string;
+}
+/**
+ * In-process, one queue per running server — enough for `execute_with_approval`
+ * to block a run on a real human decision, and for the admin/channel surfaces
+ * (L2/L6) to list and decide requests. A durable, cross-process version is a
+ * later concern once those surfaces exist to need one.
+ */
+export declare function createMemoryApprovalQueue(options?: MemoryApprovalQueueOptions): ApprovalQueue;
+//# sourceMappingURL=approval-queue.d.ts.map

package/dist/autonomy/approval-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-queue.d.ts","sourceRoot":"","sources":["../../src/autonomy/approval-queue.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,aAAa,EAId,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;CAC9B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,GAAE,0BAA+B,GAAG,aAAa,CAuDjG"}

package/dist/autonomy/approval-queue.js

@@ -0,0 +1,56 @@
+import { CogentaError, newId } from '@cogenta/core';
+/**
+ * In-process, one queue per running server — enough for `execute_with_approval`
+ * to block a run on a real human decision, and for the admin/channel surfaces
+ * (L2/L6) to list and decide requests. A durable, cross-process version is a
+ * later concern once those surfaces exist to need one.
+ */
+export function createMemoryApprovalQueue(options = {}) {
+    const now = options.now ?? Date.now;
+    const generateId = options.newId ?? newId;
+    const requests = new Map();
+    const resolvers = new Map();
+    return {
+        request(input) {
+            const id = generateId();
+            const record = {
+                id,
+                agentName: input.agentName,
+                toolName: input.toolName,
+                input: input.input,
+                requestedAt: new Date(now()).toISOString(),
+                status: 'pending',
+            };
+            requests.set(id, record);
+            return new Promise((resolve) => {
+                resolvers.set(id, resolve);
+            });
+        },
+        async list(status) {
+            const all = [...requests.values()];
+            return status === undefined ? all : all.filter((request) => request.status === status);
+        },
+        async decide(id, decision, decidedBy, reason) {
+            const existing = requests.get(id);
+            if (existing === undefined) {
+                throw new CogentaError({
+                    code: 'APPROVAL_REQUEST_UNKNOWN',
+                    message: `No approval request with id "${id}".`,
+                    hint: 'Check the id, or list pending requests to find the right one.',
+                });
+            }
+            const decided = {
+                ...existing,
+                status: decision,
+                decidedAt: new Date(now()).toISOString(),
+                decidedBy,
+                ...(reason === undefined ? {} : { reason }),
+            };
+            requests.set(id, decided);
+            resolvers.get(id)?.(decided);
+            resolvers.delete(id);
+            return decided;
+        },
+    };
+}
+//# sourceMappingURL=approval-queue.js.map

package/dist/autonomy/approval-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-queue.js","sourceRoot":"","sources":["../../src/autonomy/approval-queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA;AAanD;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAO,GAA+B,EAAE;IAChF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACnC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAA;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAA;IACnD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8C,CAAA;IAEvE,OAAO;QACL,OAAO,CAAC,KAA2B;YACjC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;YACvB,MAAM,MAAM,GAAoB;gBAC9B,EAAE;gBACF,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;gBAC1C,MAAM,EAAE,SAAS;aAClB,CAAA;YACD,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;YAC5B,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAuB;YAChC,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;YAClC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;QACxF,CAAC;QAED,KAAK,CAAC,MAAM,CACV,EAAU,EACV,QAAiC,EACjC,SAAiB,EACjB,MAAe;YAEf,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,gCAAgC,EAAE,IAAI;oBAC/C,IAAI,EAAE,+DAA+D;iBACtE,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,OAAO,GAAoB;gBAC/B,GAAG,QAAQ;gBACX,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;gBACxC,SAAS;gBACT,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC5C,CAAA;YACD,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;YACzB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;YAC5B,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACpB,OAAO,OAAO,CAAA;QAChB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/autonomy/types.d.ts

@@ -0,0 +1,36 @@
+/** Contract C's four levels, settable per agent and per tool (`defineAgent`'s `autonomy: { default, 'tool.name': level }`). */
+export type AutonomyLevel = 'observe' | 'propose' | 'execute_with_approval' | 'autonomous';
+export interface AutonomyConfig {
+    readonly default: AutonomyLevel;
+    /** Per-tool overrides, keyed by tool name. */
+    readonly overrides?: Readonly<Record<string, AutonomyLevel>>;
+}
+export type ApprovalStatus = 'pending' | 'approved' | 'rejected';
+export interface ApprovalRequest {
+    readonly id: string;
+    readonly agentName: string;
+    readonly toolName: string;
+    readonly input: Readonly<Record<string, unknown>>;
+    readonly requestedAt: string;
+    readonly status: ApprovalStatus;
+    readonly decidedAt?: string;
+    readonly decidedBy?: string;
+    readonly reason?: string;
+}
+export interface ApprovalRequestInput {
+    readonly agentName: string;
+    readonly toolName: string;
+    readonly input: Readonly<Record<string, unknown>>;
+}
+/**
+ * "La file d'approbation est consultable dans l'admin et actionnable depuis
+ * un canal (L6)" — this is the queue those surfaces will read and act on;
+ * building the admin/channel UI for it is later work, not this task's.
+ */
+export interface ApprovalQueue {
+    /** Creates a pending request and resolves once a human decides it. */
+    request(input: ApprovalRequestInput): Promise<ApprovalRequest>;
+    list(status?: ApprovalStatus): Promise<readonly ApprovalRequest[]>;
+    decide(id: string, decision: 'approved' | 'rejected', decidedBy: string, reason?: string): Promise<ApprovalRequest>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/autonomy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/autonomy/types.ts"],"names":[],"mappings":"AAAA,+HAA+H;AAC/H,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,uBAAuB,GAAG,YAAY,CAAA;AAE1F,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAA;CAC7D;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAEhE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAClD;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC9D,IAAI,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAAA;IAClE,MAAM,CACJ,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,UAAU,GAAG,UAAU,EACjC,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CAAA;CAC5B"}

package/dist/autonomy/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/autonomy/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/autonomy/types.ts"],"names":[],"mappings":""}

package/dist/autonomy/with-autonomy.d.ts

@@ -0,0 +1,25 @@
+import type { ExecutableTool } from '../runtime/types.js';
+import type { ApprovalQueue, AutonomyConfig } from './types.js';
+export interface WithAutonomyOptions {
+    readonly agentName: string;
+    readonly autonomy: AutonomyConfig;
+    readonly approvalQueue: ApprovalQueue;
+}
+/**
+ * L4 task 9. `sideEffects: true` with `reversible` not `true` — the same
+ * condition `defineTool` already requires either `revert` or forced human
+ * approval for (Contract C's own rule) — always routes through the
+ * approval queue, regardless of the configured level: `autonomous` cannot
+ * waive it, only a human decision can. A tool with no declared
+ * `sideEffects` is treated as side-effecting (the conservative default:
+ * an unlabelled tool gets the gate, not a free pass).
+ *
+ * "`autonomous` sur un outil destructif exige une confirmation explicite à
+ * l'activation, avec avertissement" is a config-time concern (validating a
+ * `defineAgent` before it is saved) — out of this runtime decorator's
+ * scope, which only ever sees an already-activated configuration.
+ */
+export declare function withAutonomy(tool: ExecutableTool, options: WithAutonomyOptions): ExecutableTool;
+/** Applies `withAutonomy` to every tool in a manifest. */
+export declare function withAutonomyForManifest(tools: readonly ExecutableTool[], options: WithAutonomyOptions): readonly ExecutableTool[];
+//# sourceMappingURL=with-autonomy.d.ts.map

package/dist/autonomy/with-autonomy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-autonomy.d.ts","sourceRoot":"","sources":["../../src/autonomy/with-autonomy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAwB,MAAM,qBAAqB,CAAA;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAiB,MAAM,YAAY,CAAA;AAE9E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;CACtC;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,GAAG,cAAc,CA8D/F;AAED,0DAA0D;AAC1D,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,SAAS,cAAc,EAAE,EAChC,OAAO,EAAE,mBAAmB,GAC3B,SAAS,cAAc,EAAE,CAE3B"}

package/dist/autonomy/with-autonomy.js

@@ -0,0 +1,77 @@
+import { CogentaError } from '@cogenta/core';
+function levelFor(toolName, autonomy) {
+    return autonomy.overrides?.[toolName] ?? autonomy.default;
+}
+/**
+ * L4 task 9. `sideEffects: true` with `reversible` not `true` — the same
+ * condition `defineTool` already requires either `revert` or forced human
+ * approval for (Contract C's own rule) — always routes through the
+ * approval queue, regardless of the configured level: `autonomous` cannot
+ * waive it, only a human decision can. A tool with no declared
+ * `sideEffects` is treated as side-effecting (the conservative default:
+ * an unlabelled tool gets the gate, not a free pass).
+ *
+ * "`autonomous` sur un outil destructif exige une confirmation explicite à
+ * l'activation, avec avertissement" is a config-time concern (validating a
+ * `defineAgent` before it is saved) — out of this runtime decorator's
+ * scope, which only ever sees an already-activated configuration.
+ */
+export function withAutonomy(tool, options) {
+    const isSideEffecting = tool.sideEffects !== false;
+    const forcedApproval = isSideEffecting && tool.reversible !== true;
+    async function awaitApproval(input, ctx) {
+        const decision = await options.approvalQueue.request({
+            agentName: options.agentName,
+            toolName: tool.spec.name,
+            input,
+        });
+        if (decision.status !== 'approved') {
+            throw new CogentaError({
+                code: 'TOOL_CALL_REJECTED',
+                message: `"${tool.spec.name}" was rejected by human review${decision.reason === undefined ? '.' : `: ${decision.reason}`}`,
+                hint: 'Try a different approach, or ask a human to approve the request.',
+            });
+        }
+        return tool.execute(input, ctx);
+    }
+    return {
+        spec: tool.spec,
+        ...(tool.sideEffects === undefined ? {} : { sideEffects: tool.sideEffects }),
+        ...(tool.reversible === undefined ? {} : { reversible: tool.reversible }),
+        async execute(input, ctx) {
+            if (!isSideEffecting)
+                return tool.execute(input, ctx);
+            const level = levelFor(tool.spec.name, options.autonomy);
+            if (!forcedApproval && level === 'observe') {
+                return {
+                    observed: true,
+                    note: `Observation mode: "${tool.spec.name}" was not called.`,
+                };
+            }
+            if (!forcedApproval && level === 'propose') {
+                // Deliberately not awaited: "propose" hands the decision to a human
+                // and moves on — the run does not block waiting for it, unlike
+                // execute_with_approval below.
+                void options.approvalQueue.request({
+                    agentName: options.agentName,
+                    toolName: tool.spec.name,
+                    input,
+                });
+                return {
+                    proposed: true,
+                    note: `Proposed "${tool.spec.name}"; awaiting human review.`,
+                };
+            }
+            if (!forcedApproval && level === 'autonomous') {
+                return tool.execute(input, ctx);
+            }
+            // execute_with_approval, or any level overridden by forcedApproval.
+            return awaitApproval(input, ctx);
+        },
+    };
+}
+/** Applies `withAutonomy` to every tool in a manifest. */
+export function withAutonomyForManifest(tools, options) {
+    return tools.map((tool) => withAutonomy(tool, options));
+}
+//# sourceMappingURL=with-autonomy.js.map

package/dist/autonomy/with-autonomy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-autonomy.js","sourceRoot":"","sources":["../../src/autonomy/with-autonomy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAU5C,SAAS,QAAQ,CAAC,QAAgB,EAAE,QAAwB;IAC1D,OAAO,QAAQ,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAA;AAC3D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,IAAoB,EAAE,OAA4B;IAC7E,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,KAAK,KAAK,CAAA;IAClD,MAAM,cAAc,GAAG,eAAe,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,CAAA;IAElE,KAAK,UAAU,aAAa,CAC1B,KAAwC,EACxC,GAAyB;QAEzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;YACnD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACxB,KAAK;SACN,CAAC,CAAA;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,YAAY,CAAC;gBACrB,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,iCAAiC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,EAAE;gBAC1H,IAAI,EAAE,kEAAkE;aACzE,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACjC,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACzE,KAAK,CAAC,OAAO,CAAC,KAAwC,EAAE,GAAyB;YAC/E,IAAI,CAAC,eAAe;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YAErD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;YAExD,IAAI,CAAC,cAAc,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC3C,OAAO;oBACL,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,sBAAsB,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB;iBAC9D,CAAA;YACH,CAAC;YAED,IAAI,CAAC,cAAc,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC3C,oEAAoE;gBACpE,+DAA+D;gBAC/D,+BAA+B;gBAC/B,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;oBACjC,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;oBACxB,KAAK;iBACN,CAAC,CAAA;gBACF,OAAO;oBACL,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,2BAA2B;iBAC7D,CAAA;YACH,CAAC;YAED,IAAI,CAAC,cAAc,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;gBAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YACjC,CAAC;YAED,oEAAoE;YACpE,OAAO,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAClC,CAAC;KACF,CAAA;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,uBAAuB,CACrC,KAAgC,EAChC,OAA4B;IAE5B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;AACzD,CAAC"}

package/dist/budget/kill-switch.d.ts

@@ -0,0 +1,14 @@
+import type { KillSwitch } from './types.js';
+export interface MutableKillSwitch extends KillSwitch {
+    activate(): void;
+    deactivate(): void;
+}
+/**
+ * An explicit, human-flipped stop — independent of budgets, which trip on
+ * their own from measured usage. Shared across every run for the same
+ * agent (construct once, pass the same instance into every `runAgentLoop`
+ * call for that agent) so flipping it stops the next step of *every*
+ * in-flight run, not just new ones.
+ */
+export declare function createKillSwitch(initial?: boolean): MutableKillSwitch;
+//# sourceMappingURL=kill-switch.d.ts.map

package/dist/budget/kill-switch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-switch.d.ts","sourceRoot":"","sources":["../../src/budget/kill-switch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C,MAAM,WAAW,iBAAkB,SAAQ,UAAU;IACnD,QAAQ,IAAI,IAAI,CAAA;IAChB,UAAU,IAAI,IAAI,CAAA;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,UAAQ,GAAG,iBAAiB,CAWnE"}

package/dist/budget/kill-switch.js

@@ -0,0 +1,20 @@
+/**
+ * An explicit, human-flipped stop — independent of budgets, which trip on
+ * their own from measured usage. Shared across every run for the same
+ * agent (construct once, pass the same instance into every `runAgentLoop`
+ * call for that agent) so flipping it stops the next step of *every*
+ * in-flight run, not just new ones.
+ */
+export function createKillSwitch(initial = false) {
+    let active = initial;
+    return {
+        isActive: () => active,
+        activate: () => {
+            active = true;
+        },
+        deactivate: () => {
+            active = false;
+        },
+    };
+}
+//# sourceMappingURL=kill-switch.js.map

package/dist/budget/kill-switch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-switch.js","sourceRoot":"","sources":["../../src/budget/kill-switch.ts"],"names":[],"mappings":"AAOA;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAO,GAAG,KAAK;IAC9C,IAAI,MAAM,GAAG,OAAO,CAAA;IACpB,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;QACtB,QAAQ,EAAE,GAAG,EAAE;YACb,MAAM,GAAG,IAAI,CAAA;QACf,CAAC;QACD,UAAU,EAAE,GAAG,EAAE;YACf,MAAM,GAAG,KAAK,CAAA;QAChB,CAAC;KACF,CAAA;AACH,CAAC"}