@corenel/harness 0.20.0 → 0.22.0

package/dist/chat/runWatchdog.js

@@ -0,0 +1,92 @@
+export const WATCHDOG_SOFT_MS = 120000;
+export const WATCHDOG_TOOL_HARD_MS = 10 * 60 * 1000;
+export function createRunWatchdog(onTimeout, opts) {
+    const softMs = opts?.softMs ?? WATCHDOG_SOFT_MS;
+    const hardMs = opts?.hardMs ?? WATCHDOG_TOOL_HARD_MS;
+    const toolsInFlight = new Set();
+    let soft;
+    let hard;
+    // What is left of the hard cap while tools are in flight, and when it was last armed.
+    let hardLeft = null;
+    let hardSince = 0;
+    let pauses = 0;
+    let done = false;
+    const fire = (reason) => {
+        if (done)
+            return;
+        done = true;
+        if (soft)
+            clearTimeout(soft);
+        if (hard)
+            clearTimeout(hard);
+        onTimeout(reason);
+    };
+    const armHard = () => {
+        if (done || pauses > 0 || hardLeft === null || hard)
+            return;
+        hardSince = Date.now();
+        hard = setTimeout(() => fire('tool-hard-cap'), hardLeft);
+    };
+    // Stops the hard cap, keeping what is left of it.
+    const holdHard = () => {
+        if (!hard)
+            return;
+        clearTimeout(hard);
+        hard = undefined;
+        if (hardLeft !== null)
+            hardLeft = Math.max(0, hardLeft - (Date.now() - hardSince));
+    };
+    const bump = () => {
+        if (soft)
+            clearTimeout(soft);
+        if (done || pauses > 0)
+            return;
+        if (toolsInFlight.size > 0) {
+            // Soft timer stays down mid-tool; the hard cap (armed on tool-call) guards.
+            return;
+        }
+        soft = setTimeout(() => fire('silent'), softMs);
+    };
+    return {
+        onEvent(e) {
+            if (e.type === 'tool-call' && e.id != null) {
+                if (toolsInFlight.size === 0) {
+                    hardLeft = hardMs;
+                    armHard();
+                }
+                toolsInFlight.add(e.id);
+            }
+            else if (e.type === 'tool-result' && e.id != null) {
+                toolsInFlight.delete(e.id);
+                if (toolsInFlight.size === 0) {
+                    if (hard) {
+                        clearTimeout(hard);
+                        hard = undefined;
+                    }
+                    hardLeft = null;
+                }
+            }
+            bump();
+        },
+        pause() {
+            pauses += 1;
+            if (soft)
+                clearTimeout(soft);
+            holdHard();
+        },
+        bump() {
+            if (pauses > 0)
+                pauses -= 1;
+            armHard();
+            bump();
+        },
+        clear() {
+            done = true;
+            if (soft)
+                clearTimeout(soft);
+            if (hard)
+                clearTimeout(hard);
+        },
+    };
+}
+//# sourceMappingURL=runWatchdog.js.map

package/dist/chat/runWatchdog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runWatchdog.js","sourceRoot":"","sources":["../../chat/runWatchdog.ts"],"names":[],"mappings":"AA6BA,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAO,CAAC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD,MAAM,UAAU,iBAAiB,CAC/B,SAAuD,EACvD,IAA2C;IAE3C,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,gBAAgB,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,qBAAqB,CAAC;IACrD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,IAAI,IAA+C,CAAC;IACpD,IAAI,IAA+C,CAAC;IACpD,sFAAsF;IACtF,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,MAAM,IAAI,GAAG,CAAC,MAAkC,EAAE,EAAE;QAClD,IAAI,IAAI;YAAE,OAAO;QACjB,IAAI,GAAG,IAAI,CAAC;QACZ,IAAI,IAAI;YAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI;YAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7B,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,IAAI,IAAI,MAAM,GAAG,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,IAAI;YAAE,OAAO;QAC5D,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3D,CAAC,CAAC;IACF,kDAAkD;IAClD,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,GAAG,SAAS,CAAC;QACjB,IAAI,QAAQ,KAAK,IAAI;YAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,IAAI;YAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO;QAC/B,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC3B,4EAA4E;YAC5E,OAAO;QACT,CAAC;QACD,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,OAAO;QACL,OAAO,CAAC,CAAC;YACP,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;gBAC3C,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBAAC,QAAQ,GAAG,MAAM,CAAC;oBAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;gBAC/D,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;gBACpD,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC3B,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBAC7B,IAAI,IAAI,EAAE,CAAC;wBAAC,YAAY,CAAC,IAAI,CAAC,CAAC;wBAAC,IAAI,GAAG,SAAS,CAAC;oBAAC,CAAC;oBACnD,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC;YACH,CAAC;YACD,IAAI,EAAE,CAAC;QACT,CAAC;QACD,KAAK;YACH,MAAM,IAAI,CAAC,CAAC;YACZ,IAAI,IAAI;gBAAE,YAAY,CAAC,IAAI,CAAC,CAAC;YAC7B,QAAQ,EAAE,CAAC;QACb,CAAC;QACD,IAAI;YACF,IAAI,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,CAAC;QACT,CAAC;QACD,KAAK;YACH,IAAI,GAAG,IAAI,CAAC;YACZ,IAAI,IAAI;gBAAE,YAAY,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI;gBAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/chat/stitch.d.ts

@@ -0,0 +1,26 @@
+import type { ToolCheckMark, ToolHooksMark, TurnVerification } from '@corenel/protocol';
+import type { ConversationTurn } from '../conversation';
+import type { RunLoopResult } from './types';
+/** The run's reply goes onto its user turn: FROM THE TAIL, by the count the run
+ * reports -- never an absolute offset into what was sent. Rung-2 compaction
+ * rewrites the array in place and the rewrite is shorter than the input, so an
+ * offset ran off the end and the reply was dropped. Each tool message gets its
+ * measured duration (`_ms`), its injection check (`_check`) and what its System
+ * One hooks did (`_hooks`; never a blocked result, which stays in the page). Note
+ * turns the run injected are removed (the run's own copy is in the reply), and
+ * the last compaction seam takes the run's folded view. */
+export declare function stitchTurn(args: {
+    turns: ConversationTurn[];
+    userTurnId: string;
+    result: RunLoopResult;
+    toolChecks: Record<string, ToolCheckMark>;
+    toolHooks?: Record<string, ToolHooksMark>;
+    injectedTurnIds: string[];
+    seamIds: string[];
+    verification?: TurnVerification;
+    auditIncomplete?: {
+        lost: number;
+        unconfirmed?: boolean;
+    };
+}): ConversationTurn[];
+//# sourceMappingURL=stitch.d.ts.map

package/dist/chat/stitch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stitch.d.ts","sourceRoot":"","sources":["../../chat/stitch.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C;;;;;;;2DAO2D;AAC3D,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAC/B,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1C,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,eAAe,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3D,GAAG,gBAAgB,EAAE,CA4BrB"}

package/dist/chat/stitch.js

@@ -0,0 +1,40 @@
+import { stampFoldedView } from './messages.js';
+/** The run's reply goes onto its user turn: FROM THE TAIL, by the count the run
+ * reports -- never an absolute offset into what was sent. Rung-2 compaction
+ * rewrites the array in place and the rewrite is shorter than the input, so an
+ * offset ran off the end and the reply was dropped. Each tool message gets its
+ * measured duration (`_ms`), its injection check (`_check`) and what its System
+ * One hooks did (`_hooks`; never a blocked result, which stays in the page). Note
+ * turns the run injected are removed (the run's own copy is in the reply), and
+ * the last compaction seam takes the run's folded view. */
+export function stitchTurn(args) {
+    const { result: res, toolChecks: checks } = args;
+    const hooks = args.toolHooks ?? {};
+    const created = res.messages.slice(res.messages.length - res.appended).map((m) => {
+        const tid = m.tool_call_id;
+        if (m.role !== 'tool' || !tid)
+            return m;
+        return {
+            ...m,
+            ...(res.toolMs[tid] != null ? { _ms: res.toolMs[tid] } : {}),
+            ...(checks[tid] ? { _check: checks[tid] } : {}),
+            ...(hooks[tid] ? { _hooks: hooks[tid] } : {}),
+        };
+    });
+    const stitched = args.turns
+        .filter((t) => !args.injectedTurnIds.includes(t.id))
+        .map((t) => (t.id === args.userTurnId
+        ? {
+            ...t,
+            messages: [t.messages[0], ...created],
+            stats: res.stats,
+            ...(args.verification ? { verification: args.verification } : {}),
+            ...(args.auditIncomplete ? { auditIncomplete: args.auditIncomplete } : {}),
+        }
+        : t));
+    const lastSeam = args.seamIds[args.seamIds.length - 1];
+    return lastSeam
+        ? stampFoldedView(stitched, lastSeam, res.messages.filter((m) => m.role !== 'system'), args.userTurnId)
+        : stitched;
+}
+//# sourceMappingURL=stitch.js.map

package/dist/chat/stitch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stitch.js","sourceRoot":"","sources":["../../chat/stitch.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7C;;;;;;;2DAO2D;AAC3D,MAAM,UAAU,UAAU,CAAC,IAU1B;IACC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/E,MAAM,GAAG,GAAI,CAA+B,CAAC,YAAY,CAAC;QAC1D,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC;QACxC,OAAO;YACL,GAAG,CAAC;YACJ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK;SACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACnD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,UAAU;QACnC,CAAC,CAAC;YACE,GAAG,CAAC;YACJ,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC;YACrC,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E;QACH,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACV,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvD,OAAO,QAAQ;QACb,CAAC,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC;QACvG,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC"}

package/dist/chat/types.d.ts

@@ -0,0 +1,163 @@
+import type { ChatCompletionMessageParam } from 'openai/resources/chat/completions';
+import type { AgentEvent, AskAnswers, AskQuestion, Usage } from '@corenel/protocol';
+import type { ConversationTurn, TurnStats } from '../conversation';
+import type { GuardVerdict } from '../guards';
+type Pascal<S extends string> = S extends `${infer H}-${infer T}` ? `${Capitalize<H>}${Pascal<T>}` : Capitalize<S>;
+/** Which conversation an event belongs to: one host serves every conversation. */
+export interface ChatEventContext {
+    conversationId: string;
+}
+/** One required handler per AgentEvent member, named `on` + the PascalCase type. */
+export type ChatEventHandlers = {
+    [E in AgentEvent as `on${Pascal<E['type']>}`]: (e: E, ctx: ChatEventContext) => void;
+};
+export interface ChatInput {
+    text: string;
+    images?: string[];
+}
+export interface ChatRequest {
+    conversationId: string | null;
+    input: ChatInput;
+    agent?: string;
+}
+export interface ChatTurnResult {
+    conversationId: string | null;
+    userTurnId: string;
+    outcome: 'done' | 'stopped' | 'failed' | 'refused';
+    stopReason?: string;
+    error?: string;
+    stats?: TurnStats;
+    /** True when runLoop was called, or hostTurn's produce ran. */
+    ran: boolean;
+    /** Which entry point started the turn. */
+    kind: 'send' | 'retry' | 'host-turn';
+}
+export interface ChatRun {
+    conversationId: Promise<string | null>;
+    done: Promise<ChatTurnResult>;
+    stop(reason: 'user' | 'budget' | 'access'): void;
+    inject(messages: {
+        id: string;
+        text: string;
+    }[], hard: boolean): boolean;
+}
+export interface LiveTool {
+    id: string;
+    name: string;
+    args?: Record<string, unknown>;
+    result?: string;
+    isError?: boolean;
+    done?: boolean;
+    ms?: number;
+    partial?: string;
+}
+export interface LiveState {
+    text: string;
+    tools: LiveTool[];
+}
+export interface ChatState {
+    turns: ConversationTurn[];
+    live: LiveState | null;
+    running: boolean;
+    error: string;
+    lastStopReason: string | null;
+    injectedIds: string[];
+    runId: string | null;
+    loaded: boolean;
+    loadMissed: boolean;
+    persistedLen: number | null;
+    saveBlocked: 'load-failed' | null;
+    mergeTick: number;
+    /** A console command typed into the chat that is still running, or null. */
+    pendingCommand: {
+        command: string;
+        startedAt: number;
+    } | null;
+}
+export interface StoredConversation {
+    id: string;
+    title: string;
+    titleLocked?: boolean;
+    model?: string;
+    messages: unknown[];
+    /** The system prompt frozen on the first turn. Saved while the engine holds one; a loaded one is used without asking host.system. */
+    system?: string;
+}
+export interface ChatPermissionRequest {
+    tool: string;
+    summary: string;
+    agent?: string;
+    input?: unknown;
+    signal: AbortSignal;
+}
+/** `by` says who allowed: 'session' when an earlier always-allow answered it without asking. */
+export interface ChatPermissionAnswer {
+    allow: boolean;
+    always?: boolean;
+    note?: string;
+    by?: 'human' | 'session';
+}
+export interface RunLoopControl {
+    conversationId: string;
+    system: string;
+    signal: AbortSignal;
+    onEvent(e: AgentEvent): void;
+    onStart(runId: string): void;
+    onInjected(ids: string[]): void;
+    askPermission(req: ChatPermissionRequest): Promise<ChatPermissionAnswer>;
+    askUser(questions: AskQuestion[]): Promise<AskAnswers | null>;
+    reviewEdit(callId: string): Promise<unknown>;
+    /** Holds the watchdog while a host-owned prompt (a budget ask, a move offer) waits on a person. */
+    paused<T>(ask: () => Promise<T>): Promise<T>;
+}
+export interface RunLoopResult {
+    messages: ChatCompletionMessageParam[];
+    appended: number;
+    stopReason: string;
+    usage?: Usage;
+    stats?: TurnStats;
+    toolMs: Record<string, number>;
+}
+export interface ChatHost<O> extends ChatEventHandlers {
+    /** 'inject' is asked before each mid-run message is delivered; a refusal delivers nothing. */
+    guard(ctx: {
+        conversationId: string | null;
+        agent?: string;
+        kind: 'send' | 'retry' | 'host-turn' | 'inject';
+    }): Promise<GuardVerdict>;
+    createConversation(title: string): Promise<string>;
+    loadConversation(id: string): Promise<StoredConversation | null>;
+    writeConversation(c: StoredConversation, opts: {
+        allowTruncate: boolean;
+    }): Promise<void>;
+    runOptions(ctx: {
+        conversationId: string;
+        agent?: string;
+    }): Promise<O>;
+    /** Asked on a conversation's first turn, or when none is held (after Chat.resetSystem); the text is reused after that. */
+    system(ctx: {
+        conversationId: string;
+        agent?: string;
+    }): Promise<string>;
+    runLoop(messages: ChatCompletionMessageParam[], opts: O, control: RunLoopControl): Promise<RunLoopResult>;
+    injectInto(runId: string, messages: {
+        id: string;
+        text: string;
+    }[], hard: boolean): boolean;
+    askPermission(conversationId: string, req: ChatPermissionRequest): Promise<ChatPermissionAnswer>;
+    askUser(conversationId: string, questions: AskQuestion[], signal: AbortSignal): Promise<AskAnswers | null>;
+    reviewEdit(conversationId: string, callId: string, signal: AbortSignal): Promise<unknown>;
+    suggestFollowups(ctx: {
+        conversationId: string;
+        messages: ChatCompletionMessageParam[];
+        signal: AbortSignal;
+    }): void;
+    /** Called exactly once per turn, on every path of send, retry and hostTurn,
+     * including a refusal before the guard (empty input, a run already going, a
+     * load that lost a race to another run, a retry refused up front). `ran`
+     * says whether runLoop (or hostTurn's produce) was called. */
+    turnComplete(result: ChatTurnResult): void;
+    stateChanged(conversationId: string, global: boolean): void;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/chat/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../chat/types.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9C,KAAK,MAAM,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,MAAM,CAAC,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;AAEnH,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAAG,cAAc,EAAE,MAAM,CAAA;CAAE;AAE5D,oFAAoF;AACpF,MAAM,MAAM,iBAAiB,GAAG;KAAG,CAAC,IAAI,UAAU,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,gBAAgB,KAAK,IAAI;CAAE,CAAC;AAEzH,MAAM,WAAW,SAAS;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE;AAC9D,MAAM,WAAW,WAAW;IAAG,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAEhG,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,+DAA+D;IAC/D,GAAG,EAAE,OAAO,CAAC;IACb,0CAA0C;IAC1C,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC;CACtC;AAED,MAAM,WAAW,OAAO;IACtB,cAAc,EAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACvC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAC;IACjD,MAAM,CAAC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;CAC1E;AAED,MAAM,WAAW,QAAQ;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AACzK,MAAM,WAAW,SAAS;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,EAAE,CAAA;CAAE;AAE9D,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,aAAa,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,cAAc,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/D;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,qIAAqI;IACrI,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE;AAC9H,gGAAgG;AAChG,MAAM,WAAW,oBAAoB;IAAG,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAE;AAEnH,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,aAAa,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzE,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC9D,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,mGAAmG;IACnG,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,QAAQ,CAAC,CAAC,CAAE,SAAQ,iBAAiB;IACpD,8FAA8F;IAC9F,KAAK,CAAC,GAAG,EAAE;QAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACtI,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACjE,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAAE,aAAa,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1F,UAAU,CAAC,GAAG,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxE,0HAA0H;IAC1H,MAAM,CAAC,GAAG,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,CAAC,QAAQ,EAAE,0BAA0B,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1G,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IAC5F,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjG,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC3G,UAAU,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1F,gBAAgB,CAAC,GAAG,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,0BAA0B,EAAE,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GAAG,IAAI,CAAC;IACrH;;;kEAG8D;IAC9D,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;IAC3C,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;CAC7D"}

package/dist/chat/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/chat/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../chat/types.ts"],"names":[],"mappings":""}

package/dist/core/loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loop.d.ts","sourceRoot":"","sources":["../../core/loop.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,0BAA0B,EAAsB,MAAM,mCAAmC,CAAC;AACxG,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAA4B,MAAM,mBAAmB,CAAC;AAE7G,OAAO,EACY,KAAK,cAAc,EAErC,MAAM,YAAY,CAAC;AAMpB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,mBAAmB,CAAC;AAKrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAA0D,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAChH,OAAO,EAA2B,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK/C,OAAO,EAA+B,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAKlF,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,0IAA0I,CAAC;AAExK;8CAC8C;AAC9C,eAAO,MAAM,gBAAgB,yJAAyJ,CAAC;AAEvL;8EAC8E;AAC9E,eAAO,MAAM,oBAAoB,uHAAuH,CAAC;AAMzJ,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd;kDAC8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;;;kFAG8E;IAC9E,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B;oFACgF;IAChF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB;;;;0EAIsE;IACtE,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;IACtB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B;kEAC8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;gDAI4C;IAC5C,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB;;;;;;;;6EAQyE;IACzE,wBAAwB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IACxD,oEAAoE;IACpE,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;uCAKmC;IACnC,UAAU,CAAC,EAAE;QACX,SAAS,EAAE,CAAC,SAAS,EAAE,0BAA0B,EAAE,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;QAC7E;mEAC2D;QAC3D,OAAO,CAAC,EAAE,WAAW,CAAC;KACvB,CAAC;IACF;0EACsE;IACtE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACnC;0FACsF;IACtF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;yEAOqE;IACrE,aAAa,CAAC,EAAE,MAAM,0BAA0B,EAAE,CAAC;IACnD;;4DAEwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC;IACpC;;;;;8EAK0E;IAC1E,UAAU,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACjC;;;0EAGsE;IACtE,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IACpD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;oFAYgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;yFAIqF;IACrF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;gEAWgE;AAChE,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;wEACwE;AACxE,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAoyB1E"}
+{"version":3,"file":"loop.d.ts","sourceRoot":"","sources":["../../core/loop.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,0BAA0B,EAAsB,MAAM,mCAAmC,CAAC;AACxG,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAA4B,MAAM,mBAAmB,CAAC;AAE7G,OAAO,EACY,KAAK,cAAc,EAErC,MAAM,YAAY,CAAC;AAMpB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,mBAAmB,CAAC;AAKrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAA0D,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAChH,OAAO,EAA2B,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C,OAAO,EAA+B,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAKlF,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,0IAA0I,CAAC;AAExK;8CAC8C;AAC9C,eAAO,MAAM,gBAAgB,yJAAyJ,CAAC;AAEvL;8EAC8E;AAC9E,eAAO,MAAM,oBAAoB,uHAAuH,CAAC;AAMzJ,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd;kDAC8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;;;kFAG8E;IAC9E,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B;oFACgF;IAChF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB;;;;0EAIsE;IACtE,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;IACtB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B;kEAC8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;gDAI4C;IAC5C,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB;;;;;;;;6EAQyE;IACzE,wBAAwB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IACxD,oEAAoE;IACpE,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;uCAKmC;IACnC,UAAU,CAAC,EAAE;QACX,SAAS,EAAE,CAAC,SAAS,EAAE,0BAA0B,EAAE,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;QAC7E;mEAC2D;QAC3D,OAAO,CAAC,EAAE,WAAW,CAAC;KACvB,CAAC;IACF;0EACsE;IACtE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACnC;0FACsF;IACtF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;yEAOqE;IACrE,aAAa,CAAC,EAAE,MAAM,0BAA0B,EAAE,CAAC;IACnD;;4DAEwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC;IACpC;;;;;8EAK0E;IAC1E,UAAU,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACjC;;;0EAGsE;IACtE,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IACpD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;oFAYgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;yFAIqF;IACrF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;gEAWgE;AAChE,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;wEACwE;AACxE,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAq0B1E"}

package/dist/core/loop.js

@@ -1,7 +1,7 @@
 import { streamCompletion } from '../providers/gateway.js';
 import { resolveRecovery, classifyStreamError, classifyToolError, shouldRetryStream, backoffDelay, toolRecoveryHint, ToolFailureTracker, abortableSleep, } from './recovery.js';
 import { alog } from '../log.js';
-import { initialState, evaluateTurnStart, evaluateToolCall, evaluateCompletion } from '../guardrail/guardrail.js';
+import { initialState, evaluateTurnStart, evaluateToolCall, evaluateCompletion, toolGateAdmits } from '../guardrail/guardrail.js';
 import { checkFeature } from '../guards.js';
 import { STANDARD_POLICY } from '../guardrail/builtins.js';
 import { toolAddress } from '../tools/namespaces.js';
@@ -13,7 +13,8 @@ import { afterCompaction, compactHistory, compactionDecision, estimateFill, isCo
 import { makeRecallHistoryTool, makeUpdateDirectivesTool } from '../tools/foldTools.js';
 import { contextNote, contextWindowLine, initialPressureGate, pressureDecision } from './contextPressure.js';
 import { fillToolsMarker } from '../prompts/toolsMarker.js';
-import { createToolLoader, serverIndex } from '../tools/toolSearch.js';
+import { createToolLoader, serverIndex, isMcpTool } from '../tools/toolSearch.js';
+import { listedIndex, shellToolLine } from '../tools/toolFacts.js';
 import { createSkillTool, skillIndex } from '../tools/skillTool.js';
 import { crewToolGuidance } from '../tools/crewList.js';
 import { createTurnVerifier } from './turnVerify.js';
@@ -145,7 +146,13 @@ export async function runAgent(args) {
      * `activeTools` is what one request may carry right now -- the eager tools,
      * `tool_search`, then the loaded ones, capped. Eager first so a full loaded
      * set can never push out `read_file`. */
-    const deferred = args.deferredTools ?? [];
+    /* A tool the policy's tools gate refuses is not something this run can do,
+     * so it is never offered: not sent as a function, not named in the Listed or
+     * shell lines, and not in the pool `tool_search` searches. Calling it by name
+     * still reaches the policy gate below (`refused`), which refuses it. */
+    const admitted = (t) => toolGateAdmits(policy, { name: t.name, address: toolAddress(t) });
+    const deferred = (args.deferredTools ?? []).filter(admitted);
+    const refused = new Map([...tools, ...(args.deferredTools ?? [])].filter((t) => !admitted(t)).map((t) => [t.name, t]));
     const loader = deferred.length
         ? createToolLoader({ deferred, loaded: args.loadedTools, onChange: (names) => emit({ type: 'tools-loaded', names }) })
         : null;
@@ -157,7 +164,7 @@ export async function runAgent(args) {
     ];
     /* Fold tools LAST: when MAX_PROVIDER_TOOLS caps this list, they must never be
      * what pushes `use_skill` or `tool_search` off the end. */
-    const eager = [...tools, ...(skills.length ? [createSkillTool(skills)] : []), ...(loader ? [loader.searchTool] : []), ...foldTools];
+    const eager = [...tools.filter(admitted), ...(skills.length ? [createSkillTool(skills)] : []), ...(loader ? [loader.searchTool] : []), ...foldTools];
     const capped = (list) => (list.length > MAX_PROVIDER_TOOLS ? list.slice(0, MAX_PROVIDER_TOOLS) : list);
     const activeTools = () => capped(loader ? [...eager, ...loader.loaded()] : eager);
     let sent = activeTools();
@@ -171,8 +178,20 @@ export async function runAgent(args) {
      * the indexes: the browser composes its prompt with a tools marker, so
      * PromptHost.toolGuidance is handed no names there and cannot key on them.
      * Only when there is a system prompt to add it to. */
-    const crewGuidance = system ? crewToolGuidance(eager.map((t) => t.name)) : '';
-    const systemParts = [system, skillIndex(skills), loader ? serverIndex(deferred) : '', crewGuidance, contextWindowLine(ctxWindow)].filter(Boolean);
+    const reachable = [...eager.filter(admitted), ...deferred].map((t) => t.name);
+    // Held = sent on this request. A shell tool only reachable by search does
+    // not let the run run commands until a search loads it.
+    const held = sent.filter(admitted).map((t) => t.name);
+    const crewGuidance = system ? crewToolGuidance(reachable) : '';
+    const systemParts = [
+        system,
+        skillIndex(skills),
+        loader ? serverIndex(deferred.filter(isMcpTool)) : '',
+        loader ? listedIndex(deferred) : '',
+        system ? shellToolLine(held) : '',
+        crewGuidance,
+        contextWindowLine(ctxWindow),
+    ].filter(Boolean);
     const indexedSystem = systemParts.length ? systemParts.join('\n\n') : system;
     const filledSystem = indexedSystem ? fillToolsMarker(indexedSystem, sent) : indexedSystem;
     if (filledSystem && !messages.some((m) => m.role === 'system')) {
@@ -207,15 +226,26 @@ export async function runAgent(args) {
     let toolDefs = defsFor(sent);
     /* Dispatch from the SAME trimmed set. A tool that was not advertised must not
      * be callable either, or a model that guessed a name would reach something
-     * the request never offered -- which includes a deferred tool nobody loaded. */
+     * the request never offered. The one exception is the run's deferred pool:
+     * those tools ARE offered, by name in the prompt and through `tool_search`,
+     * so calling one loads it (see the dispatch below). */
     let toolByName = new Map(sent.map((t) => [t.name, t]));
     /* What `list_tools` reports when the host supplied no listing of its own:
-     * the tools THIS request carries, read at call time so tools a
-     * `tool_search` loaded are included. Every loop answers for itself, so a
-     * delegated callee lists its own surface, never its caller's. Without it a
-     * host that never wired `ctx.listTools` (the daemon did not) tells the model
-     * discovery is unavailable, and a model can read that as having no tools. */
-    const listSent = () => sent.map((t) => ({ name: t.name, description: t.description, parameters: t.parameters }));
+     * everything the run can reach. The tools THIS request carries, read at call
+     * time so tools a `tool_search` loaded are included, then the rest of the
+     * deferred pool (already policy-filtered), marked: a Listed tool is one
+     * search away, and leaving it out reads as not having it. Every loop answers
+     * for itself, so a delegated callee lists its own surface, never its
+     * caller's. Without it a host that never wired `ctx.listTools` (the daemon
+     * did not) tells the model discovery is unavailable, and a model can read
+     * that as having no tools. */
+    const listReachable = () => {
+        const names = new Set(sent.map((t) => t.name));
+        return [
+            ...sent.map((t) => ({ name: t.name, description: t.description, parameters: t.parameters })),
+            ...deferred.filter((t) => !names.has(t.name)).map((t) => ({ name: t.name, description: t.description, parameters: t.parameters, deferred: true })),
+        ];
+    };
     // 'deferred' strategy only, and CRITICAL to the design: compact the INCOMING
     // history too, not just what this run produces. Without this, a result that
     // was sent full and never got a "subsequent call" WITHIN the run that
@@ -663,7 +693,12 @@ export async function runAgent(args) {
             const checkedLevel = dontsChecked.get(call.id) ?? null;
             if (checkedLevel === null)
                 emit({ type: 'tool-call', id: call.id, name: call.name, args: parsed });
-            const tool = toolByName.get(call.name);
+            /* A deferred tool called by name without a search: the prompt names the
+             * Listed ones, so this is the model doing what it was told. It is loaded
+             * as a search would load it (sent from the next call, counted toward the
+             * cap) and goes through every gate below. A tool the policy refuses was
+             * never offered; it is not loaded, and the policy gate refuses it. */
+            const tool = toolByName.get(call.name) ?? loader?.load(call.name) ?? refused.get(call.name);
             if (!tool) {
                 messages.push({ role: 'tool', tool_call_id: call.id, content: `Error: unknown tool "${call.name}"` });
                 emit({ type: 'tool-result', id: call.id, name: call.name, result: 'unknown tool', isError: true });
@@ -793,7 +828,7 @@ export async function runAgent(args) {
             try {
                 // Per-call context: callId lets a tool correlate with UI state keyed by
                 // tool_call id (propose_edit blocks on its review).
-                const result = await tool.run(parsed, { ...toolCtx, listTools: toolCtx.listTools ?? listSent, callId: call.id, stream });
+                const result = await tool.run(parsed, { ...toolCtx, listTools: toolCtx.listTools ?? listReachable, callId: call.id, stream });
                 callSettled = true;
                 if (tool.mutates)
                     await verifier.after(call.id, 'ok');