@corenel/harness 0.1.0

package/dist/compression.d.ts

@@ -0,0 +1,11 @@
+import type { CompressionMode, OffloadRef } from '@corenel/protocol';
+export type { CompressionMode, CompressionConfig, OffloadRef } from '@corenel/protocol';
+/** How much of an offloaded output to keep inline as a preview. */
+export declare const PREVIEW_BYTES = 800;
+/** Threshold for a given fill ratio (0–1). As the window fills, offload sooner. */
+export declare function effectiveThreshold(mode: CompressionMode, fill?: number): number;
+/** The self-describing reference that replaces a large output in the history.
+ * Carries enough (tool, size, preview, recall instruction) for the model to
+ * decide whether to pull the full content back. */
+export declare function formatOffloadRef(ref: OffloadRef): string;
+//# sourceMappingURL=compression.d.ts.map

package/dist/compression.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.d.ts","sourceRoot":"","sources":["../compression.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACrE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAExF,mEAAmE;AACnE,eAAO,MAAM,aAAa,MAAM,CAAC;AAOjC,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,SAAI,GAAG,MAAM,CAI1E;AAED;;mDAEmD;AACnD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAGxD"}

package/dist/compression.js

@@ -0,0 +1,27 @@
+/* Context compression config (rung-1 lossless offload).
+ *
+ * One preset controls how readily large tool outputs are offloaded to the
+ * RecallStore. It's adaptive: given the model's context window, the loop computes
+ * a fill ratio and lowers the threshold as the window fills — "more aggressive the
+ * fuller it gets," entirely within lossless offload. See docs/CONTEXT-COMPRESSION.md. */
+/** How much of an offloaded output to keep inline as a preview. */
+export const PREVIEW_BYTES = 800;
+// Base byte thresholds (output larger than this offloads) and a floor the ramp
+// won't go below, per preset.
+const BASE = { off: Infinity, conservative: 24000, balanced: 12000, aggressive: 6000 };
+const FLOOR = { off: Infinity, conservative: 8000, balanced: 4000, aggressive: 2000 };
+/** Threshold for a given fill ratio (0–1). As the window fills, offload sooner. */
+export function effectiveThreshold(mode, fill = 0) {
+    if (mode === 'off')
+        return Infinity;
+    const factor = fill < 0.5 ? 1 : fill < 0.7 ? 0.7 : fill < 0.85 ? 0.5 : 0.35;
+    return Math.max(FLOOR[mode], Math.round(BASE[mode] * factor));
+}
+/** The self-describing reference that replaces a large output in the history.
+ * Carries enough (tool, size, preview, recall instruction) for the model to
+ * decide whether to pull the full content back. */
+export function formatOffloadRef(ref) {
+    const head = `[offloaded tool result · ${ref.toolName} · ${ref.bytes.toLocaleString()} bytes · recall the full content with recall_result({ id: "${ref.id}" })]`;
+    return ref.preview ? `${head}\n--- preview ---\n${ref.preview}${ref.bytes > ref.preview.length ? '\n…(truncated)' : ''}` : head;
+}
+//# sourceMappingURL=compression.js.map

package/dist/compression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.js","sourceRoot":"","sources":["../compression.ts"],"names":[],"mappings":"AAAA;;;;;yFAKyF;AAOzF,mEAAmE;AACnE,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AAEjC,+EAA+E;AAC/E,8BAA8B;AAC9B,MAAM,IAAI,GAAoC,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAM,EAAE,QAAQ,EAAE,KAAM,EAAE,UAAU,EAAE,IAAK,EAAE,CAAC;AAC3H,MAAM,KAAK,GAAoC,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAK,EAAE,QAAQ,EAAE,IAAK,EAAE,UAAU,EAAE,IAAK,EAAE,CAAC;AAE1H,mFAAmF;AACnF,MAAM,UAAU,kBAAkB,CAAC,IAAqB,EAAE,IAAI,GAAG,CAAC;IAChE,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;mDAEmD;AACnD,MAAM,UAAU,gBAAgB,CAAC,GAAe;IAC9C,MAAM,IAAI,GAAG,4BAA4B,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,8DAA8D,GAAG,CAAC,EAAE,OAAO,CAAC;IACjK,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,sBAAsB,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClI,CAAC"}

package/dist/conversation.d.ts

@@ -0,0 +1,29 @@
+import type { ChatCompletionMessageParam } from 'openai/resources/chat/completions';
+/** Per-turn telemetry shown under an assistant turn (tokens / cost / wall-clock). */
+export interface TurnStats {
+    inTok: number;
+    outTok: number;
+    cost: number;
+    ms: number;
+}
+/** One assistant conversation turn — the live-buffer data shape. Owned by the
+ * kernel (the UI Transcript renders it; runtime/AgentPanel pass it around). */
+export interface ConversationTurn {
+    id: string;
+    included: boolean;
+    messages: ChatCompletionMessageParam[];
+    /** Token/cost/latency for the assistant response, once the turn settles. */
+    stats?: TurnStats;
+}
+export declare function getTurns(): ConversationTurn[];
+/** React-style setter: accepts a value or an updater. */
+export declare function setTurns(next: ConversationTurn[] | ((prev: ConversationTurn[]) => ConversationTurn[])): void;
+/** Toggle a turn's include flag (warm-context inclusion — before compression). */
+export declare function toggleInclude(id: string): void;
+/** Subscribe a component to the live turns. */
+export declare function useConversation(): {
+    turns: ConversationTurn[];
+    setTurns: typeof setTurns;
+    toggleInclude: typeof toggleInclude;
+};
+//# sourceMappingURL=conversation.d.ts.map

package/dist/conversation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.d.ts","sourceRoot":"","sources":["../conversation.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAEpF,qFAAqF;AACrF,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;+EAC+E;AAC/E,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,4EAA4E;IAC5E,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAMD,wBAAgB,QAAQ,IAAI,gBAAgB,EAAE,CAAkB;AAEhE,yDAAyD;AACzD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAG5G;AAED,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED,+CAA+C;AAC/C,wBAAgB,eAAe,IAAI;IACjC,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,QAAQ,EAAE,OAAO,QAAQ,CAAC;IAC1B,aAAa,EAAE,OAAO,aAAa,CAAC;CACrC,CAIA"}

package/dist/conversation.js

@@ -0,0 +1,25 @@
+/* Shared conversation store — the assistant's live turns, lifted out of AgentPanel
+ * so sibling surfaces (the Context Manager dock panel) can read them and toggle
+ * include/exclude. Module-level + reactive (same pattern as lib/usage, recall).
+ * Session load/save still lives in AgentPanel; this is just the live buffer. */
+import { useEffect, useReducer } from 'react';
+let turns = [];
+const listeners = new Set();
+const notify = () => { listeners.forEach((fn) => fn()); };
+export function getTurns() { return turns; }
+/** React-style setter: accepts a value or an updater. */
+export function setTurns(next) {
+    turns = typeof next === 'function' ? next(turns) : next;
+    notify();
+}
+/** Toggle a turn's include flag (warm-context inclusion — before compression). */
+export function toggleInclude(id) {
+    setTurns((t) => t.map((x) => (x.id === id ? { ...x, included: !x.included } : x)));
+}
+/** Subscribe a component to the live turns. */
+export function useConversation() {
+    const [, force] = useReducer((x) => x + 1, 0);
+    useEffect(() => { listeners.add(force); return () => { listeners.delete(force); }; }, []);
+    return { turns, setTurns, toggleInclude };
+}
+//# sourceMappingURL=conversation.js.map

package/dist/conversation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.js","sourceRoot":"","sources":["../conversation.ts"],"names":[],"mappings":"AAAA;;;gFAGgF;AAChF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAqB9C,IAAI,KAAK,GAAuB,EAAE,CAAC;AACnC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;AACxC,MAAM,MAAM,GAAG,GAAS,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhE,MAAM,UAAU,QAAQ,KAAyB,OAAO,KAAK,CAAC,CAAC,CAAC;AAEhE,yDAAyD;AACzD,MAAM,UAAU,QAAQ,CAAC,IAA6E;IACpG,KAAK,GAAG,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAE,IAAsD,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3G,MAAM,EAAE,CAAC;AACX,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,eAAe;IAK7B,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,SAAS,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1F,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AAC5C,CAAC"}

package/dist/core/loop.d.ts

@@ -0,0 +1,31 @@
+import type OpenAI from 'openai';
+import type { ChatCompletionMessageParam } from 'openai/resources/chat/completions';
+import type { AgentTool, ToolContext, AgentEvent, Usage } from '@corenel/protocol';
+import type { Policy } from '@corenel/protocol';
+import type { PermissionService } from '../guardrail/permission-service';
+import { type CompressionConfig } from '../compression';
+export interface RunAgentArgs {
+    client: OpenAI;
+    model: string;
+    system?: string;
+    messages: ChatCompletionMessageParam[];
+    tools: AgentTool[];
+    toolCtx: ToolContext;
+    maxTurns?: number;
+    /** Governance policy for the run (guardrail gates). Defaults to STANDARD_POLICY. */
+    policy?: Policy;
+    /** Per-tool permission resolver. When omitted, tools run without an approval gate. */
+    permission?: PermissionService;
+    /** Context-compression config (rung-1 offload). Omit to disable. */
+    compression?: CompressionConfig;
+    signal?: AbortSignal;
+    onEvent?: (e: AgentEvent) => void;
+}
+export interface RunAgentResult {
+    messages: ChatCompletionMessageParam[];
+    text: string;
+    usage: Usage;
+    stopReason: string;
+}
+export declare function runAgent(args: RunAgentArgs): Promise<RunAgentResult>;
+//# sourceMappingURL=loop.d.ts.map

package/dist/core/loop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop.d.ts","sourceRoot":"","sources":["../../core/loop.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,0BAA0B,EAAsB,MAAM,mCAAmC,CAAC;AACxG,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAOnF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAwC,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAE9F,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,oEAAoE;IACpE,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CA6M1E"}

package/dist/core/loop.js

@@ -0,0 +1,237 @@
+import { streamCompletion } from '../providers/gateway';
+import { alog } from '../log';
+import { initialState, evaluateTurnStart, evaluateToolCall, evaluateCompletion } from '../guardrail/guardrail';
+import { checkFeature } from '../guards';
+import { STANDARD_POLICY } from '../guardrail/builtins';
+import { toolAddress } from '../tools/namespaces';
+import { effectiveThreshold, formatOffloadRef } from '../compression';
+export async function runAgent(args) {
+    const { client, model, system, tools, toolCtx } = args;
+    const policy = args.policy ?? STANDARD_POLICY;
+    const permission = args.permission;
+    const compression = args.compression;
+    const ctxWindow = compression?.contextWindow;
+    let fill = 0; // window fill ratio; drives the adaptive offload threshold
+    const maxTurns = policy.maxTurns ?? args.maxTurns ?? 8;
+    const signal = args.signal ?? new AbortController().signal;
+    const emit = (e) => args.onEvent?.(e);
+    const gstate = initialState();
+    const messages = [...args.messages];
+    if (system && !messages.some((m) => m.role === 'system')) {
+        messages.unshift({ role: 'system', content: system });
+    }
+    const toolDefs = tools.map((t) => ({
+        type: 'function',
+        function: { name: t.name, description: t.description, parameters: t.parameters },
+    }));
+    const toolByName = new Map(tools.map((t) => [t.name, t]));
+    const usage = { promptTokens: 0, completionTokens: 0 };
+    let text = '';
+    let stopReason = 'stop';
+    let lastToolSig = null;
+    for (let turn = 1; turn <= maxTurns; turn++) {
+        if (signal.aborted) {
+            stopReason = 'aborted';
+            break;
+        }
+        emit({ type: 'turn', turn });
+        // Turn-budget guardrail (gstate.turn = completed turns).
+        gstate.turn = turn - 1;
+        const turnGate = evaluateTurnStart(policy, gstate);
+        if (!turnGate.ok) {
+            emit({ type: 'policy-violation', kind: turnGate.violation.kind, message: turnGate.violation.message, action: turnGate.action, tool: turnGate.violation.tool });
+            if (turnGate.action === 'stop') {
+                stopReason = 'policy';
+                break;
+            }
+        }
+        let streamed;
+        try {
+            streamed = await streamCompletion(client, {
+                model,
+                messages,
+                tools: toolDefs.length ? toolDefs : undefined,
+                tool_choice: toolDefs.length ? 'auto' : undefined,
+            }, signal, (delta) => emit({ type: 'assistant-delta', delta }));
+        }
+        catch (e) {
+            if (signal.aborted || e?.name === 'AbortError') {
+                stopReason = 'aborted';
+                break;
+            }
+            emit({ type: 'error', message: String(e?.message || e) });
+            stopReason = 'error';
+            break;
+        }
+        usage.promptTokens += streamed.usage.promptTokens;
+        usage.completionTokens += streamed.usage.completionTokens;
+        if (ctxWindow && ctxWindow > 0 && streamed.usage.promptTokens) {
+            fill = Math.min(1, streamed.usage.promptTokens / ctxWindow);
+        }
+        emit({ type: 'usage', usage: streamed.usage });
+        // Commit the assistant message to history (with tool_calls if any).
+        const assistantMsg = streamed.toolCalls.length
+            ? {
+                role: 'assistant',
+                content: streamed.content || null,
+                tool_calls: streamed.toolCalls.map((t) => ({
+                    id: t.id,
+                    type: 'function',
+                    function: { name: t.name, arguments: t.arguments },
+                })),
+            }
+            : { role: 'assistant', content: streamed.content };
+        messages.push(assistantMsg);
+        if (streamed.content) {
+            text = streamed.content;
+            emit({ type: 'assistant', content: streamed.content });
+        }
+        if (streamed.toolCalls.length === 0) {
+            stopReason = streamed.finishReason || 'stop';
+            break;
+        }
+        // No-progress guard: identical tool calls to the previous turn => stuck.
+        const sig = JSON.stringify(streamed.toolCalls.map((t) => ({ n: t.name, a: t.arguments })));
+        if (sig === lastToolSig) {
+            emit({ type: 'error', message: 'Stopped: the model repeated the same tool call without making progress.' });
+            stopReason = 'stuck';
+            break;
+        }
+        lastToolSig = sig;
+        let policyStop = false;
+        for (const call of streamed.toolCalls) {
+            let parsed = {};
+            try {
+                parsed = call.arguments ? JSON.parse(call.arguments) : {};
+            }
+            catch {
+                messages.push({ role: 'tool', tool_call_id: call.id, content: `Error: arguments were not valid JSON: ${call.arguments}` });
+                emit({ type: 'tool-result', id: call.id, name: call.name, result: 'invalid JSON arguments', isError: true });
+                continue;
+            }
+            alog('tool', call.name, parsed);
+            emit({ type: 'tool-call', id: call.id, name: call.name, args: parsed });
+            const tool = toolByName.get(call.name);
+            if (!tool) {
+                messages.push({ role: 'tool', tool_call_id: call.id, content: `Error: unknown tool "${call.name}"` });
+                emit({ type: 'tool-result', id: call.id, name: call.name, result: 'unknown tool', isError: true });
+                continue;
+            }
+            // Policy address (namespace:name) so guardrail/permission globs can target
+            // a whole namespace (fs:*) or one tool, while bare names still match.
+            const address = toolAddress(tool);
+            // Guardrail gate: allow/deny lists + tool-call budget.
+            const gate = evaluateToolCall(policy, gstate, { name: call.name, exists: true, address });
+            if (!gate.ok) {
+                const msg = `Blocked by policy "${policy.name}": ${gate.violation.message}`;
+                messages.push({ role: 'tool', tool_call_id: call.id, content: `Error: ${msg}` });
+                emit({ type: 'policy-violation', kind: gate.violation.kind, message: gate.violation.message, action: gate.action, tool: call.name });
+                emit({ type: 'tool-result', id: call.id, name: call.name, result: msg, isError: true });
+                if (gate.action === 'stop') {
+                    policyStop = true;
+                    break;
+                }
+                continue;
+            }
+            // Feature gate: the host's registered guards (auth/quota/plan/token). A tool
+            // that declares requiresFeature only runs when no guard denies it — enforced
+            // by the kernel, so it holds in the browser, the node CLI, and the sidecar.
+            if (tool.requiresFeature) {
+                const verdict = await checkFeature(tool.requiresFeature);
+                if (!verdict.allowed) {
+                    const msg = `Feature unavailable (${tool.requiresFeature}): ${verdict.reason}`;
+                    messages.push({ role: 'tool', tool_call_id: call.id, content: `Error: ${msg}` });
+                    emit({ type: 'tool-result', id: call.id, name: tool.name, result: msg, isError: true });
+                    continue;
+                }
+            }
+            // Permission gate: resolve oversight level, ask the user when required.
+            if (permission) {
+                const decision = await permission.check({ name: tool.name, address, mutates: tool.mutates, permission: tool.permission }, parsed);
+                emit({ type: 'permission', tool: tool.name, decision });
+                if (decision === 'deny') {
+                    messages.push({ role: 'tool', tool_call_id: call.id, content: 'Permission denied by the user — the action was not performed.' });
+                    emit({ type: 'tool-result', id: call.id, name: tool.name, result: 'permission denied', isError: true });
+                    continue;
+                }
+            }
+            const startedAt = Date.now();
+            try {
+                // Per-call context: callId lets a tool correlate with UI state keyed by
+                // tool_call id (propose_edit blocks on its review).
+                const result = await tool.run(parsed, { ...toolCtx, callId: call.id });
+                const durationMs = Date.now() - startedAt;
+                gstate.toolCalls++;
+                gstate.calledTools.add(tool.name);
+                gstate.calledTools.add(address); // so mustCall globs may use either form
+                // Context compression (rung-1): offload a large, offloadable output to the
+                // RecallStore and append a compact reference instead. Append-only — never
+                // rewrites prior messages, so the OpenAI prefix cache stays valid.
+                let out = result;
+                if (compression && compression.mode !== 'off' && !tool.noOffload && toolCtx.recall) {
+                    if (result.length > effectiveThreshold(compression.mode, fill)) {
+                        const ref = await toolCtx.recall.record(tool.name, result);
+                        out = formatOffloadRef(ref);
+                        emit({ type: 'offload', id: ref.id, name: tool.name, bytes: ref.bytes });
+                    }
+                }
+                messages.push({ role: 'tool', tool_call_id: call.id, content: out });
+                emit({ type: 'tool-result', id: call.id, name: call.name, result: out, durationMs });
+            }
+            catch (e) {
+                const errMsg = String(e?.message || e);
+                messages.push({ role: 'tool', tool_call_id: call.id, content: `Error: ${errMsg}` });
+                emit({ type: 'tool-result', id: call.id, name: call.name, result: errMsg, isError: true, durationMs: Date.now() - startedAt });
+            }
+        }
+        if (policyStop) {
+            stopReason = 'policy';
+            break;
+        }
+        if (turn === maxTurns)
+            stopReason = 'max_turns';
+    }
+    // A stop that breaks AFTER committing the assistant tool_calls message but
+    // before every call ran (no-progress, policy-stop with parallel calls) leaves a
+    // tool_call with no result. The OpenAI message contract requires one result per
+    // tool_call_id, so reusing these messages as conversation history would 400 on
+    // the next turn ("did not have response messages"). Backfill any gaps.
+    reconcileDanglingToolCalls(messages);
+    // Completion guardrail: required tools must have been invoked.
+    for (const v of evaluateCompletion(policy, gstate)) {
+        emit({ type: 'policy-violation', kind: v.kind, message: v.message, action: 'stop', tool: v.tool });
+    }
+    alog('done', stopReason, 'tokens', usage);
+    emit({ type: 'done', reason: stopReason });
+    return { messages, text, usage, stopReason };
+}
+/** Ensure every tool_call in the final assistant message has a following tool
+ * result — appending a synthetic one for any the run stopped before answering —
+ * so the returned messages stay a valid conversation prefix. */
+function reconcileDanglingToolCalls(messages) {
+    let idx = -1;
+    for (let i = messages.length - 1; i >= 0; i--) {
+        const m = messages[i];
+        if (m.role === 'assistant' && m.tool_calls && m.tool_calls.length) {
+            idx = i;
+            break;
+        }
+    }
+    if (idx < 0)
+        return;
+    const asst = messages[idx];
+    if (asst.role !== 'assistant' || !asst.tool_calls)
+        return;
+    const answered = new Set();
+    for (let i = idx + 1; i < messages.length; i++) {
+        const m = messages[i];
+        if (m.role === 'tool')
+            answered.add(m.tool_call_id);
+    }
+    for (const c of asst.tool_calls) {
+        if (!answered.has(c.id)) {
+            messages.push({ role: 'tool', tool_call_id: c.id, content: 'Tool not run — the run stopped before this call.' });
+        }
+    }
+}
+//# sourceMappingURL=loop.js.map

package/dist/core/loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop.js","sourceRoot":"","sources":["../../core/loop.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC/G,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAA0B,MAAM,gBAAgB,CAAC;AA2B9F,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB;IAC/C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,MAAM,SAAS,GAAG,WAAW,EAAE,aAAa,CAAC;IAC7C,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,2DAA2D;IACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC;IAC3D,MAAM,IAAI,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAE9B,MAAM,QAAQ,GAAiC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACzD,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,QAAQ,GAAyB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;KACjF,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAU,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;IAC9D,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,UAAU,GAAG,MAAM,CAAC;IACxB,IAAI,WAAW,GAAkB,IAAI,CAAC;IAEtC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,UAAU,GAAG,SAAS,CAAC;YAAC,MAAM;QAAC,CAAC;QACtD,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7B,yDAAyD;QACzD,MAAM,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC;QACvB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/J,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAAC,UAAU,GAAG,QAAQ,CAAC;gBAAC,MAAM;YAAC,CAAC;QACnE,CAAC;QAED,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,gBAAgB,CAC/B,MAAM,EACN;gBACE,KAAK;gBACL,QAAQ;gBACR,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBAC7C,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;aAClD,EACD,MAAM,EACN,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CACpD,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,OAAO,IAAK,CAAuB,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;gBAAC,UAAU,GAAG,SAAS,CAAC;gBAAC,MAAM;YAAC,CAAC;YACzG,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YACrE,UAAU,GAAG,OAAO,CAAC;YACrB,MAAM;QACR,CAAC;QAED,KAAK,CAAC,YAAY,IAAI,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;QAClD,KAAK,CAAC,gBAAgB,IAAI,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC1D,IAAI,SAAS,IAAI,SAAS,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAC9D,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAE/C,oEAAoE;QACpE,MAAM,YAAY,GAA+B,QAAQ,CAAC,SAAS,CAAC,MAAM;YACxE,CAAC,CAAC;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI;gBACjC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACzC,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE;iBACnD,CAAC,CAAC;aACJ;YACH,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5B,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAAC,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;YAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QAE1G,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,UAAU,GAAG,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC;YAC7C,MAAM;QACR,CAAC;QAED,yEAAyE;QACzE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3F,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,yEAAyE,EAAE,CAAC,CAAC;YAC5G,UAAU,GAAG,OAAO,CAAC;YACrB,MAAM;QACR,CAAC;QACD,WAAW,GAAG,GAAG,CAAC;QAElB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,MAAM,GAA4B,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,yCAAyC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC3H,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7G,SAAS;YACX,CAAC;YAED,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,wBAAwB,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;gBACtG,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnG,SAAS;YACX,CAAC;YAED,2EAA2E;YAC3E,sEAAsE;YACtE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAElC,uDAAuD;YACvD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1F,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,sBAAsB,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,EAAE,EAAE,CAAC,CAAC;gBACjF,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrI,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxF,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAAC,UAAU,GAAG,IAAI,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,6EAA6E;YAC7E,6EAA6E;YAC7E,4EAA4E;YAC5E,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBACzD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBACrB,MAAM,GAAG,GAAG,wBAAwB,IAAI,CAAC,eAAe,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;oBAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,EAAE,EAAE,CAAC,CAAC;oBACjF,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBACxF,SAAS;gBACX,CAAC;YACH,CAAC;YAED,wEAAwE;YACxE,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;gBAClI,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACxD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;oBACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC,CAAC;oBACjI,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBACxG,SAAS;gBACX,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,wEAAwE;gBACxE,oDAAoD;gBACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAC1C,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wCAAwC;gBAEzE,2EAA2E;gBAC3E,0EAA0E;gBAC1E,mEAAmE;gBACnE,IAAI,GAAG,GAAG,MAAM,CAAC;gBACjB,IAAI,WAAW,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnF,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;wBAC/D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBAC3D,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;wBAC5B,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC3E,CAAC;gBACH,CAAC;gBAED,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACrE,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;gBAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,MAAM,EAAE,EAAE,CAAC,CAAC;gBACpF,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;YACjI,CAAC;QACH,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YAAC,UAAU,GAAG,QAAQ,CAAC;YAAC,MAAM;QAAC,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ;YAAE,UAAU,GAAG,WAAW,CAAC;IAClD,CAAC;IAED,2EAA2E;IAC3E,gFAAgF;IAChF,gFAAgF;IAChF,+EAA+E;IAC/E,uEAAuE;IACvE,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAErC,+DAA+D;IAC/D,KAAK,MAAM,CAAC,IAAI,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC/C,CAAC;AAED;;gEAEgE;AAChE,SAAS,0BAA0B,CAAC,QAAsC;IACxE,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAAC,GAAG,GAAG,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC;IACxF,CAAC;IACD,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO;IACpB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO;IAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/dag/executeNode.d.ts

@@ -0,0 +1,41 @@
+import type OpenAI from 'openai';
+import type { PermissionService } from '../guardrail/permission-service';
+import type { AgentTool, AgentEvent, ToolContext, Policy, CompressionConfig, NodeOutput, NodeEvent, NodeSpec, RunNodeResult } from '@corenel/protocol';
+export type { NodeSpec, RunNodeResult } from '@corenel/protocol';
+export interface NodeRunRequest {
+    node: NodeSpec;
+    /** Upstream outputs keyed by edge/port name (empty for a root/dynamic spawn). */
+    inputs: Record<string, NodeOutput>;
+    signal: AbortSignal;
+    onEvent: (e: NodeEvent) => void;
+}
+/** Everything runNode needs that isn't on the request (supplied by the worker or
+ * the scheduler): the chat client, the full available tool set, the bridge-backed
+ * ToolContext, and the run governance. */
+export interface RunNodeDeps {
+    client: OpenAI;
+    defaultModel: string;
+    tools: AgentTool[];
+    toolCtx: ToolContext;
+    policy?: Policy;
+    permission?: PermissionService;
+    compression?: CompressionConfig;
+    defaultSystem?: string;
+}
+/** Read-biased default tool set for a node with no explicit allowlist (§4). No
+ * mutating tools, so a delegated node never writes unless its allowlist opts in. */
+export declare const READ_BIASED_TOOLS: string[];
+export declare const SUBAGENT_SYSTEM: string;
+/** Resolve the node's effective tool list: allowlist (or read-biased default),
+ * with spawn_* tools dropped when this context can't spawn (the depth cap). */
+export declare function resolveTools(all: AgentTool[], allow: string[] | undefined, ctx: ToolContext): AgentTool[];
+/** Render a node's task: literal `task` wins; else a Nunjucks `promptTemplate`
+ * bound to { inputs } via the real engine; else fan-in concat of upstream text. */
+export declare function composeTask(node: NodeSpec, inputs: Record<string, NodeOutput>): Promise<string>;
+/** Run one node to completion. Emits node-start, the wrapped per-turn AgentEvents,
+ * then node-done (or node-error). Safe to call concurrently. */
+export declare function runNode(req: NodeRunRequest, deps: RunNodeDeps): Promise<RunNodeResult>;
+/** Wrap a plain AgentEvent callback into the node-tagged stream (§9.3) — used by
+ * the root-session adapter so root + sub-agents tag identically. */
+export declare function wrapAsNodeEvents(nodeId: string, onNode: (e: NodeEvent) => void): (e: AgentEvent) => void;
+//# sourceMappingURL=executeNode.d.ts.map

package/dist/dag/executeNode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeNode.d.ts","sourceRoot":"","sources":["../../dag/executeNode.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAIjC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EACV,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAC7D,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAC/C,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEjE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,CAAC;IACf,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnC,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC;CACjC;AAED;;0CAE0C;AAC1C,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;oFACoF;AACpF,eAAO,MAAM,iBAAiB,UAI7B,CAAC;AAEF,eAAO,MAAM,eAAe,QAI6D,CAAC;AAE1F;+EAC+E;AAC/E,wBAAgB,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,SAAS,EAAE,CAKzG;AAED;mFACmF;AACnF,wBAAsB,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAWrG;AAED;gEACgE;AAChE,wBAAsB,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAiC5F;AAED;oEACoE;AACpE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,SAAS,KAAK,IAAI,GAAG,CAAC,CAAC,EAAE,UAAU,KAAK,IAAI,CAExG"}

package/dist/dag/executeNode.js

@@ -0,0 +1,81 @@
+import { runAgent } from '../core/loop';
+import { compilePrompt } from '../promptCompiler';
+/** Read-biased default tool set for a node with no explicit allowlist (§4). No
+ * mutating tools, so a delegated node never writes unless its allowlist opts in. */
+export const READ_BIASED_TOOLS = [
+    'compile_prompd', 'search_packages', 'web_search',
+    'read_file', 'list_files', 'search_files', 'stat_file',
+    'recall_result', 'recall_memory', 'kv_get',
+];
+export const SUBAGENT_SYSTEM = 'You are a focused Prompd sub-agent. A parent agent has delegated ONE ' +
+    'self-contained task to you. You do not see the parent conversation. Complete ' +
+    'only that task and return a concise, complete result the parent can use ' +
+    'directly. Prefer calling a tool over guessing. State the result plainly, no preamble.';
+/** Resolve the node's effective tool list: allowlist (or read-biased default),
+ * with spawn_* tools dropped when this context can't spawn (the depth cap). */
+export function resolveTools(all, allow, ctx) {
+    const wanted = new Set(allow && allow.length ? allow : READ_BIASED_TOOLS);
+    let tools = all.filter((t) => wanted.has(t.name));
+    if (!ctx.spawn)
+        tools = tools.filter((t) => !t.name.startsWith('spawn_'));
+    return tools;
+}
+/** Render a node's task: literal `task` wins; else a Nunjucks `promptTemplate`
+ * bound to { inputs } via the real engine; else fan-in concat of upstream text. */
+export async function composeTask(node, inputs) {
+    if (typeof node.task === 'string')
+        return node.task;
+    if (node.promptTemplate) {
+        // Wrap the template body in a minimal valid .prmd so the host's compiler
+        // renders it; parameters become top-level vars, so `inputs` is addressable.
+        const doc = `---\nid: dag-node\nname: dag-node\nversion: 1.0.0\n---\n${node.promptTemplate}`;
+        const r = await compilePrompt(doc, { inputs });
+        return r.output;
+    }
+    const keys = Object.keys(inputs ?? {});
+    return keys.map((k) => inputs[k]?.text ?? '').filter(Boolean).join('\n\n');
+}
+/** Run one node to completion. Emits node-start, the wrapped per-turn AgentEvents,
+ * then node-done (or node-error). Safe to call concurrently. */
+export async function runNode(req, deps) {
+    const { node, inputs, signal, onEvent } = req;
+    onEvent({ type: 'node-start', nodeId: node.id });
+    let turns = 0;
+    try {
+        const task = await composeTask(node, inputs);
+        const tools = resolveTools(deps.tools, node.tools, deps.toolCtx);
+        const messages = [{ role: 'user', content: task }];
+        const result = await runAgent({
+            client: deps.client,
+            model: node.model || deps.defaultModel,
+            system: node.system || deps.defaultSystem || SUBAGENT_SYSTEM,
+            messages,
+            tools,
+            toolCtx: deps.toolCtx,
+            maxTurns: node.maxTurns,
+            policy: deps.policy,
+            permission: deps.permission,
+            compression: deps.compression,
+            signal,
+            onEvent: (e) => {
+                if (e.type === 'turn')
+                    turns = e.turn;
+                onEvent({ type: 'node-event', nodeId: node.id, event: e });
+            },
+        });
+        const output = { text: result.text, usage: result.usage, stopReason: result.stopReason };
+        onEvent({ type: 'node-done', nodeId: node.id, output });
+        return { ...output, turns };
+    }
+    catch (e) {
+        const message = String(e?.message || e);
+        onEvent({ type: 'node-error', nodeId: node.id, message });
+        throw e;
+    }
+}
+/** Wrap a plain AgentEvent callback into the node-tagged stream (§9.3) — used by
+ * the root-session adapter so root + sub-agents tag identically. */
+export function wrapAsNodeEvents(nodeId, onNode) {
+    return (event) => onNode({ type: 'node-event', nodeId, event });
+}
+//# sourceMappingURL=executeNode.js.map

package/dist/dag/executeNode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeNode.js","sourceRoot":"","sources":["../../dag/executeNode.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAgClD;oFACoF;AACpF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,gBAAgB,EAAE,iBAAiB,EAAE,YAAY;IACjD,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW;IACtD,eAAe,EAAE,eAAe,EAAE,QAAQ;CAC3C,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAC1B,uEAAuE;IACvE,+EAA+E;IAC/E,0EAA0E;IAC1E,uFAAuF,CAAC;AAE1F;+EAC+E;AAC/E,MAAM,UAAU,YAAY,CAAC,GAAgB,EAAE,KAA2B,EAAE,GAAgB;IAC1F,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC1E,IAAI,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED;mFACmF;AACnF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc,EAAE,MAAkC;IAClF,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACpD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,GAAG,GAAG,2DAA2D,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7F,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED;gEACgE;AAChE,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAmB,EAAE,IAAiB;IAClE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAC9C,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAiC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,IAAI,eAAe;YAC5D,QAAQ;YACR,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM;YACN,OAAO,EAAE,CAAC,CAAa,EAAE,EAAE;gBACzB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;oBAAE,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC;gBACtC,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7D,CAAC;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAe,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QACrG,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACxD,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED;oEACoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAA8B;IAC7E,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC"}

package/dist/fileSchema.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Config path of the per-filetype system prompt for the active file, or null when
+ * there's no recognized file. A `.md`/`.markdown` only counts as a prompt when it
+ * actually carries frontmatter (a plain note does not).
+ */
+export declare function systemForFile(fileName: string, src?: string): string | null;
+//# sourceMappingURL=fileSchema.d.ts.map

package/dist/fileSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileSchema.d.ts","sourceRoot":"","sources":["../fileSchema.ts"],"names":[],"mappings":"AA2BA;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAK,GAAG,MAAM,GAAG,IAAI,CAMvE"}

package/dist/fileSchema.js

@@ -0,0 +1,40 @@
+/* Per-filetype system prompt selection.
+ *
+ * When the assistant works over a recognized Prompd file, it should use a system
+ * prompt that teaches the file's FORMAT — the .prmd/.md frontmatter+param schema
+ * and Nunjucks body, or the .pdflow node taxonomy — so it edits the structure
+ * correctly instead of guessing. Those docs are authorable markdown that inherit
+ * the base system prompt (prompts/library/systems/system-<ext...>.md), discovered
+ * by extension via SYSTEM_BY_EXT.
+ *
+ * `systemForFile` returns the config-workspace path of the matching system doc, or
+ * null when there's no recognized file — in which case the caller falls back to
+ * the base system prompt. To add a format, drop a `system-<ext>.md` in the systems
+ * folder; no code change here is required for a new single-extension type.
+ */
+import { SYSTEM_BY_EXT } from './prompts/library';
+/** Whether a Markdown document opens with a YAML frontmatter fence — only then is
+ * a .md file a Prompd prompt (a plain note isn't). */
+const hasFrontmatter = (src) => /^\s*---\r?\n/.test(src || '');
+/** Lowercased extension after the last dot (no dot), or '' when there is none. */
+function extOf(fileName) {
+    const name = (fileName || '').toLowerCase();
+    const dot = name.lastIndexOf('.');
+    return dot === -1 ? '' : name.slice(dot + 1);
+}
+/**
+ * Config path of the per-filetype system prompt for the active file, or null when
+ * there's no recognized file. A `.md`/`.markdown` only counts as a prompt when it
+ * actually carries frontmatter (a plain note does not).
+ */
+export function systemForFile(fileName, src = '') {
+    let ext = extOf(fileName);
+    if (ext === 'markdown')
+        ext = 'md';
+    if (!ext)
+        return null;
+    if (ext === 'md' && !hasFrontmatter(src))
+        return null;
+    return SYSTEM_BY_EXT[ext] ?? null;
+}
+//# sourceMappingURL=fileSchema.js.map

package/dist/fileSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileSchema.js","sourceRoot":"","sources":["../fileSchema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD;sDACsD;AACtD,MAAM,cAAc,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;AAEhF,kFAAkF;AAClF,SAAS,KAAK,CAAC,QAAgB;IAC7B,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,GAAG,GAAG,EAAE;IACtD,IAAI,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1B,IAAI,GAAG,KAAK,UAAU;QAAE,GAAG,GAAG,IAAI,CAAC;IACnC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACpC,CAAC"}

package/dist/guardrail/builtins.d.ts

@@ -0,0 +1,9 @@
+import type { Policy } from '@corenel/protocol';
+/** Default: read freely, ask before any side effect (file/memory writes). */
+export declare const STANDARD_POLICY: Policy;
+/** Strict: no side effects at all. Mutating tools are denied outright. */
+export declare const READ_ONLY_POLICY: Policy;
+/** Unattended: everything runs without prompting, except harness self-config. */
+export declare const AUTONOMOUS_POLICY: Policy;
+export declare const BUILTIN_POLICIES: Record<string, Policy>;
+//# sourceMappingURL=builtins.d.ts.map

package/dist/guardrail/builtins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtins.d.ts","sourceRoot":"","sources":["../../guardrail/builtins.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,6EAA6E;AAC7E,eAAO,MAAM,eAAe,EAAE,MAW7B,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,EAAE,MA4B9B,CAAC;AAEF,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,EAAE,MAU/B,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAInD,CAAC"}