@databricks/appkit 0.59.0 → 0.60.0

package/dist/plugins/agents/agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.js","names":["manifest"],"sources":["../../../src/plugins/agents/agents.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport path from \"node:path\";\nimport type express from \"express\";\nimport pc from \"picocolors\";\nimport type {\n  AgentAdapter,\n  AgentRunContext,\n  AgentToolDefinition,\n  IAppRouter,\n  Message,\n  PluginPhase,\n  ResponseOutputMessage,\n  ResponseStreamEvent,\n  Thread,\n  ToolAnnotations,\n  ToolProvider,\n} from \"shared\";\nimport {\n  isSupervisorTool,\n  SUPERVISOR_EXTENSION_KEY,\n  type SupervisorTool,\n} from \"../../agents/supervisor-api\";\nimport { AppKitMcpClient, buildMcpHostPolicy } from \"../../connectors/mcp\";\nimport { consumeAdapterStream } from \"../../core/agent/consume-adapter-stream\";\nimport { loadAgentsFromDir } from \"../../core/agent/load-agents\";\nimport { normalizeToolResult } from \"../../core/agent/normalize-result\";\nimport { createPluginsProxy } from \"../../core/agent/plugins-map\";\nimport {\n  buildBaseSystemPrompt,\n  composeSystemPrompt,\n} from \"../../core/agent/system-prompt\";\nimport { resolveToolkitFromProvider } from \"../../core/agent/toolkit-resolver\";\nimport {\n  functionToolToDefinition,\n  isFunctionTool,\n  isHostedTool,\n  resolveHostedTools,\n} from \"../../core/agent/tools\";\nimport type {\n  AgentDefinition,\n  AgentsPluginConfig,\n  AgentTools,\n  BaseSystemPromptOption,\n  Plugins,\n  PluginToolkitProvider,\n  PromptContext,\n  RegisteredAgent,\n  ResolvedToolEntry,\n} from \"../../core/agent/types\";\nimport { isToolkitEntry } from \"../../core/agent/types\";\nimport { createLogger } from \"../../logging/logger\";\nimport { Plugin, toPlugin } from \"../../plugin\";\nimport type { PluginManifest } from \"../../registry\";\nimport { agentStreamDefaults } from \"./defaults\";\nimport { EventChannel } from \"./event-channel\";\nimport { AgentEventTranslator } from \"./event-translator\";\nimport manifest from \"./manifest.json\";\nimport {\n  approvalRequestSchema,\n  cancelRequestSchema,\n  chatRequestSchema,\n  invocationsRequestSchema,\n} from \"./schemas\";\nimport { InMemoryThreadStore } from \"./thread-store\";\nimport { ToolApprovalGate } from \"./tool-approval-gate\";\n\nconst logger = createLogger(\"agents\");\n\nconst DEFAULT_AGENTS_DIR = \"./config/agents\";\n\n/**\n * Context flag recorded on the in-memory AgentDefinition to indicate whether\n * it came from markdown (file) or from user code. Drives the asymmetric\n * `autoInheritTools` default.\n */\ninterface AgentSource {\n  origin: \"file\" | \"code\";\n}\n\n/**\n * Decide whether a tool call must traverse the approval gate. Honours both\n * the modern `effect` field (mutating values: write / update / destructive)\n * and the legacy `destructive: true` boolean. The contract is documented on\n * `ToolAnnotations.effect` in shared/agent.ts.\n *\n * Without this, a tool authored only with `effect: \"destructive\"` (the\n * preferred API) bypassed the gate entirely.\n */\nfunction requiresApproval(annotations: ToolAnnotations | undefined): boolean {\n  if (!annotations) return false;\n  if (annotations.destructive === true) return true;\n  switch (annotations.effect) {\n    case \"write\":\n    case \"update\":\n    case \"destructive\":\n      return true;\n    case \"read\":\n    case undefined:\n      return false;\n    default: {\n      const _exhaustive: never = annotations.effect;\n      return false;\n    }\n  }\n}\n\n/**\n * Per-stream state shared between the top-level `executeTool` and any\n * `runSubAgent` calls below it. Carrying the budget counter, abort signal,\n * approval policy, and event-channel through one object is what lets the\n * sub-agent path enforce the same limits and approval gate as the parent.\n *\n * Without this shared state the sub-agent path silently bypassed both the\n * tool-call budget and the destructive-tool approval gate.\n */\ninterface RunState {\n  req: express.Request;\n  userId: string;\n  requestId: string;\n  abortController: AbortController;\n  signal: AbortSignal;\n  approvalPolicy: { requireForDestructive: boolean; timeoutMs: number };\n  limits: {\n    maxConcurrentStreamsPerUser: number;\n    maxToolCalls: number;\n    maxSubAgentDepth: number;\n    toolCallTimeoutMs: number;\n  };\n  translator: AgentEventTranslator;\n  outboundEvents: EventChannel<ResponseStreamEvent>;\n  /** Boxed mutable counter shared across parent + all sub-agent dispatches. */\n  toolCallsUsed: { count: number };\n}\n\nexport class AgentsPlugin extends Plugin implements ToolProvider {\n  static manifest = manifest as PluginManifest;\n  static phase: PluginPhase = \"deferred\";\n\n  protected declare config: AgentsPluginConfig;\n\n  private agents = new Map<string, RegisteredAgent>();\n  private defaultAgentName: string | null = null;\n  private activeStreams = new Map<\n    string,\n    { controller: AbortController; userId: string }\n  >();\n  /**\n   * Per-user stream count, kept in sync with `activeStreams` so the\n   * concurrent-stream rate limit check is O(1) instead of O(n) over every\n   * active stream on every request. Mutated only via {@link trackStream}\n   * and {@link untrackStream}.\n   */\n  private userStreamCounts = new Map<string, number>();\n  private mcpClient: AppKitMcpClient | null = null;\n  private threadStore;\n  private approvalGate = new ToolApprovalGate();\n\n  constructor(config: AgentsPluginConfig) {\n    super(config);\n    this.config = config;\n    if (config.threadStore) {\n      this.threadStore = config.threadStore;\n    } else {\n      this.threadStore = new InMemoryThreadStore();\n      if (process.env.NODE_ENV === \"production\") {\n        logger.warn(\n          \"InMemoryThreadStore is in use in a production build (NODE_ENV=production). \" +\n            \"Thread history is unbounded and lost on restart. \" +\n            \"Pass agents({ threadStore: <persistent impl> }) for real deployments.\",\n        );\n      } else {\n        logger.info(\n          \"Using default InMemoryThreadStore (dev-only — threads are lost on restart and grow without bound).\",\n        );\n      }\n    }\n  }\n\n  /**\n   * Effective approval policy with defaults applied. Memoised so the\n   * `timeoutMs` validation warning fires at most once per plugin instance —\n   * `resolvedApprovalPolicy` gets hit on every chat stream and a noisy\n   * misconfig would otherwise spam the logs.\n   *\n   * `timeoutMs` is clamped to a 1s floor so a misconfigured value (`0`,\n   * negative, or `NaN`) can't degrade into immediate auto-denial of every\n   * mutating tool call.\n   */\n  private cachedApprovalPolicy: {\n    requireForDestructive: boolean;\n    timeoutMs: number;\n  } | null = null;\n\n  private get resolvedApprovalPolicy(): {\n    requireForDestructive: boolean;\n    timeoutMs: number;\n  } {\n    if (this.cachedApprovalPolicy) return this.cachedApprovalPolicy;\n    const cfg = this.config.approval ?? {};\n    const APPROVAL_TIMEOUT_FLOOR_MS = 1_000;\n    const APPROVAL_TIMEOUT_DEFAULT_MS = 60_000;\n    let timeoutMs = cfg.timeoutMs ?? APPROVAL_TIMEOUT_DEFAULT_MS;\n    if (!Number.isFinite(timeoutMs) || timeoutMs < APPROVAL_TIMEOUT_FLOOR_MS) {\n      logger.warn(\n        \"approval.timeoutMs=%s is below the %sms floor; using default %sms instead. Mutating tool calls would otherwise auto-deny before any UI could respond.\",\n        cfg.timeoutMs,\n        APPROVAL_TIMEOUT_FLOOR_MS,\n        APPROVAL_TIMEOUT_DEFAULT_MS,\n      );\n      timeoutMs = APPROVAL_TIMEOUT_DEFAULT_MS;\n    }\n    this.cachedApprovalPolicy = {\n      requireForDestructive: cfg.requireForDestructive ?? true,\n      timeoutMs,\n    };\n    return this.cachedApprovalPolicy;\n  }\n\n  /** Effective DoS limits with defaults applied. */\n  private get resolvedLimits(): {\n    maxConcurrentStreamsPerUser: number;\n    maxToolCalls: number;\n    maxSubAgentDepth: number;\n    toolCallTimeoutMs: number;\n  } {\n    const cfg = this.config.limits ?? {};\n    return {\n      maxConcurrentStreamsPerUser: cfg.maxConcurrentStreamsPerUser ?? 5,\n      maxToolCalls: cfg.maxToolCalls ?? 50,\n      maxSubAgentDepth: cfg.maxSubAgentDepth ?? 3,\n      // 5 minutes is the floor for cold SQL Warehouse / long Genie /\n      // long Lakebase calls. The previous PluginContext default of 30s\n      // truncated legitimate analytics queries on cold compute.\n      toolCallTimeoutMs: cfg.toolCallTimeoutMs ?? 300_000,\n    };\n  }\n\n  /** Count active streams owned by a given user. O(1). */\n  private countUserStreams(userId: string): number {\n    return this.userStreamCounts.get(userId) ?? 0;\n  }\n\n  /**\n   * Register a stream for `userId` and bump the per-user counter. Paired\n   * with {@link untrackStream}; the two helpers are the only writers to\n   * `activeStreams` + `userStreamCounts`, so the counter cannot drift from\n   * the map.\n   */\n  private trackStream(\n    requestId: string,\n    userId: string,\n    controller: AbortController,\n  ): void {\n    this.activeStreams.set(requestId, { controller, userId });\n    this.userStreamCounts.set(\n      userId,\n      (this.userStreamCounts.get(userId) ?? 0) + 1,\n    );\n  }\n\n  /**\n   * Remove a stream from the active map and decrement the per-user\n   * counter. Idempotent — calling twice for the same `requestId` is a\n   * no-op (the second call sees no entry and returns early).\n   */\n  private untrackStream(requestId: string): void {\n    const entry = this.activeStreams.get(requestId);\n    if (!entry) return;\n    this.activeStreams.delete(requestId);\n    const next = (this.userStreamCounts.get(entry.userId) ?? 0) - 1;\n    if (next <= 0) {\n      this.userStreamCounts.delete(entry.userId);\n    } else {\n      this.userStreamCounts.set(entry.userId, next);\n    }\n  }\n\n  async setup() {\n    const { agents, defaultAgentName } = await this.buildAgentRegistry();\n    this.agents = agents;\n    this.defaultAgentName = defaultAgentName;\n    this.mountInvokeRoutes();\n    this.printRegistry();\n  }\n\n  /**\n   * Reload agents from the configured directory, preserving code-defined\n   * agents. Builds a fresh registry first and only swaps on success — if\n   * `loadAgents` throws (malformed markdown, missing tool reference) the\n   * existing live registry stays in place and serving requests keep working.\n   */\n  async reload(): Promise<void> {\n    const next = await this.buildAgentRegistry();\n    // Deliberately NOT closing the existing mcpClient here. Tool\n    // dispatch in `dispatchToolCall` reads `this.mcpClient` at call\n    // time; closing it mid-stream throws \"MCP client is closed\" from\n    // the next sendRpc and kills the in-flight conversation. The\n    // client owns only short-lived `fetch` handles (no keep-alive\n    // sockets) and the connections map persists in the live instance,\n    // so dropping `this.mcpClient` would also strand in-flight tool\n    // calls that resolved the field a moment earlier. Leave the live\n    // client in place; `buildAgentRegistry` -> `connectHostedTools`\n    // adds any new endpoints to the same instance, and stale\n    // connections from a removed config become unreachable through\n    // the new agent tool indexes (small memory cost, no correctness\n    // hazard). The shutdown path still closes — that's process\n    // teardown, where in-flight streams have already been aborted via\n    // `abortActiveOperations`.\n    this.agents = next.agents;\n    this.defaultAgentName = next.defaultAgentName;\n  }\n\n  /**\n   * Builds the agent registry into a fresh `Map` without touching live state.\n   * Called by both `setup` and `reload`; the latter only swaps the live\n   * registry once this resolves successfully (atomic reload).\n   */\n  private async buildAgentRegistry(): Promise<{\n    agents: Map<string, RegisteredAgent>;\n    defaultAgentName: string | null;\n  }> {\n    const { defs: fileDefs, defaultAgent: fileDefault } =\n      await this.loadFileDefinitions();\n\n    const codeDefs = this.config.agents ?? {};\n\n    for (const name of Object.keys(fileDefs)) {\n      if (codeDefs[name]) {\n        logger.warn(\n          \"Agent '%s' defined in both code and a markdown file. Code definition takes precedence.\",\n          name,\n        );\n      }\n    }\n\n    const merged: Record<string, { def: AgentDefinition; src: AgentSource }> =\n      {};\n    for (const [name, def] of Object.entries(fileDefs)) {\n      merged[name] = { def, src: { origin: \"file\" } };\n    }\n    for (const [name, def] of Object.entries(codeDefs)) {\n      merged[name] = { def, src: { origin: \"code\" } };\n    }\n\n    const agents = new Map<string, RegisteredAgent>();\n    let defaultAgentName: string | null = null;\n\n    if (Object.keys(merged).length === 0) {\n      logger.info(\n        \"No agents registered (no files in %s, no code-defined agents)\",\n        this.resolvedAgentsDir() ?? \"<disabled>\",\n      );\n      return { agents, defaultAgentName };\n    }\n\n    for (const [name, { def, src }] of Object.entries(merged)) {\n      try {\n        const registered = await this.buildRegisteredAgent(name, def, src);\n        agents.set(name, registered);\n        if (!defaultAgentName) defaultAgentName = name;\n      } catch (err) {\n        throw new Error(\n          `Failed to register agent '${name}' (${src.origin}): ${\n            err instanceof Error ? err.message : String(err)\n          }`,\n          { cause: err instanceof Error ? err : undefined },\n        );\n      }\n    }\n\n    if (this.config.defaultAgent) {\n      if (!agents.has(this.config.defaultAgent)) {\n        throw new Error(\n          `defaultAgent '${this.config.defaultAgent}' is not registered. Available: ${Array.from(agents.keys()).join(\", \")}`,\n        );\n      }\n      defaultAgentName = this.config.defaultAgent;\n    } else if (fileDefault && agents.has(fileDefault)) {\n      defaultAgentName = fileDefault;\n    }\n\n    return { agents, defaultAgentName };\n  }\n\n  private resolvedAgentsDir(): string | null {\n    if (this.config.dir === false) return null;\n    const dir = this.config.dir ?? DEFAULT_AGENTS_DIR;\n    return path.isAbsolute(dir) ? dir : path.resolve(process.cwd(), dir);\n  }\n\n  private async loadFileDefinitions(): Promise<{\n    defs: Record<string, AgentDefinition>;\n    defaultAgent: string | null;\n  }> {\n    const dir = this.resolvedAgentsDir();\n    if (!dir) return { defs: {}, defaultAgent: null };\n\n    const pluginToolProviders = this.pluginProviderIndex();\n    const ambient = this.config.tools ?? {};\n\n    const result = await loadAgentsFromDir(dir, {\n      defaultModel: this.config.defaultModel,\n      availableTools: ambient,\n      plugins: pluginToolProviders,\n      codeAgents: this.config.agents,\n    });\n\n    return result;\n  }\n\n  /**\n   * Builds the map of plugin-name → toolkit that the markdown loader consults\n   * when resolving `plugin:NAME` entries in the unified `tools:` frontmatter\n   * list (and, equivalently, that the code form passes as the `plugins`\n   * argument to `tools(plugins) => Record<...>`).\n   */\n  private pluginProviderIndex(): Map<\n    string,\n    { toolkit: (opts?: unknown) => Record<string, unknown> }\n  > {\n    const out = new Map();\n    if (!this.context) return out;\n    for (const { name, provider } of this.context.getToolProviders()) {\n      const withToolkit = provider as ToolProvider & {\n        toolkit?: (opts?: unknown) => Record<string, unknown>;\n      };\n      if (typeof withToolkit.toolkit === \"function\") {\n        out.set(name, {\n          toolkit: withToolkit.toolkit.bind(withToolkit),\n        });\n      }\n    }\n    return out;\n  }\n\n  private async buildRegisteredAgent(\n    name: string,\n    def: AgentDefinition,\n    src: AgentSource,\n  ): Promise<RegisteredAgent> {\n    const adapter = await this.resolveAdapter(def, name);\n    const toolIndex = await this.buildToolIndex(name, def, src);\n\n    warnOnCapabilityMismatch(name, adapter, toolIndex);\n\n    return {\n      name,\n      instructions: def.instructions,\n      adapter,\n      toolIndex,\n      baseSystemPrompt: def.baseSystemPrompt,\n      maxSteps: def.maxSteps,\n      maxTokens: def.maxTokens,\n      generationParams: def.generationParams,\n      ephemeral: def.ephemeral,\n    };\n  }\n\n  private async resolveAdapter(\n    def: AgentDefinition,\n    name: string,\n  ): Promise<AgentAdapter> {\n    const source = def.model ?? this.config.defaultModel;\n    // Per-agent adapter knobs from `AgentDefinition` / markdown frontmatter.\n    // Only applied when AppKit builds the adapter itself (string or omitted\n    // model). Users who pass a pre-built `AgentAdapter` own these settings.\n    const adapterOptions: {\n      maxSteps?: number;\n      maxTokens?: number;\n      generationParams?: AgentDefinition[\"generationParams\"];\n    } = {};\n    if (def.maxSteps !== undefined) adapterOptions.maxSteps = def.maxSteps;\n    if (def.maxTokens !== undefined) adapterOptions.maxTokens = def.maxTokens;\n    if (def.generationParams !== undefined)\n      adapterOptions.generationParams = def.generationParams;\n\n    if (!source) {\n      const { DatabricksAdapter } = await import(\"../../agents/databricks\");\n      try {\n        return await DatabricksAdapter.fromModelServing(\n          undefined,\n          adapterOptions,\n        );\n      } catch (err) {\n        throw new Error(\n          `Agent '${name}' has no model configured and no DATABRICKS_SERVING_ENDPOINT_NAME default available`,\n          { cause: err instanceof Error ? err : undefined },\n        );\n      }\n    }\n    if (typeof source === \"string\") {\n      const { DatabricksAdapter } = await import(\"../../agents/databricks\");\n      return DatabricksAdapter.fromModelServing(source, adapterOptions);\n    }\n    return await source;\n  }\n\n  /**\n   * Resolves an agent's tool record into a per-agent dispatch index. Connects\n   * hosted tools via MCP client. Applies `autoInheritTools` defaults when the\n   * definition has no declared tools/agents.\n   */\n  private async buildToolIndex(\n    agentName: string,\n    def: AgentDefinition,\n    src: AgentSource,\n  ): Promise<Map<string, ResolvedToolEntry>> {\n    const index = new Map<string, ResolvedToolEntry>();\n    const hasDeclaredTools = def.tools !== undefined;\n    const toolsRecord = this.resolveDefTools(agentName, def);\n    const hasExplicitSubAgents =\n      def.agents && Object.keys(def.agents).length > 0;\n\n    const inheritDefaults = normalizeAutoInherit(this.config.autoInheritTools);\n    // Declaring `tools` (object or function, even an empty record) opts out\n    // of auto-inherit. Same rule for both forms — see plan decision (E1/I1).\n    const shouldInherit =\n      !hasDeclaredTools &&\n      !hasExplicitSubAgents &&\n      (src.origin === \"file\" ? inheritDefaults.file : inheritDefaults.code);\n\n    if (shouldInherit) {\n      await this.applyAutoInherit(agentName, index);\n    }\n\n    // 1. Sub-agents → agent-<key>\n    for (const [childKey, childDef] of Object.entries(def.agents ?? {})) {\n      const toolName = `agent-${childKey}`;\n      index.set(toolName, {\n        source: \"subagent\",\n        agentName: childDef.name ?? childKey,\n        def: {\n          name: toolName,\n          description:\n            childDef.instructions.slice(0, 120) ||\n            `Delegate to the ${childKey} sub-agent`,\n          parameters: {\n            type: \"object\",\n            properties: {\n              input: {\n                type: \"string\",\n                description: \"Message to send to the sub-agent.\",\n              },\n            },\n            required: [\"input\"],\n          },\n        },\n      });\n    }\n\n    // 2. Explicit tools (toolkit entries, function tools, hosted tools)\n    const hostedToCollect: import(\"../../core/agent/tools/hosted-tools\").HostedTool[] =\n      [];\n    for (const [key, tool] of Object.entries(toolsRecord)) {\n      if (isToolkitEntry(tool)) {\n        index.set(key, {\n          source: \"toolkit\",\n          pluginName: tool.pluginName,\n          localName: tool.localName,\n          def: { ...tool.def, name: key },\n        });\n        continue;\n      }\n      if (isFunctionTool(tool)) {\n        index.set(key, {\n          source: \"function\",\n          functionTool: tool,\n          def: { ...functionToolToDefinition(tool), name: key },\n        });\n        continue;\n      }\n      if (isSupervisorTool(tool)) {\n        index.set(key, {\n          source: \"hosted-supervisor\",\n          spec: tool.spec,\n          def: {\n            // `def` is a placeholder so the index has a uniform shape; it\n            // is intentionally not passed to the adapter's `tools` array\n            // (the SA endpoint owns its own tool execution and would\n            // reject our synthetic schema).\n            name: key,\n            description: supervisorToolDescription(tool.spec),\n            parameters: { type: \"object\", properties: {} },\n          },\n        });\n        continue;\n      }\n      if (isHostedTool(tool)) {\n        hostedToCollect.push(tool);\n        continue;\n      }\n      throw new Error(\n        `Agent '${agentName}' tool '${key}' has an unrecognized shape`,\n      );\n    }\n\n    if (hostedToCollect.length > 0) {\n      await this.connectHostedTools(hostedToCollect, index);\n    }\n\n    return index;\n  }\n\n  /**\n   * Resolves an `AgentDefinition.tools` field to a plain tool record. The\n   * function form is invoked exactly once at agent setup with the typed\n   * {@link Plugins} map; the result replaces the function reference for the\n   * remainder of the registered agent's lifetime.\n   *\n   * Plain object form is returned as-is; an undefined `tools` returns an\n   * empty record. The function form is wrapped in a try/catch so a thrown\n   * callback fails registration with a useful message instead of leaking\n   * the raw stack.\n   */\n  private resolveDefTools(agentName: string, def: AgentDefinition): AgentTools {\n    if (typeof def.tools !== \"function\") {\n      return def.tools ?? {};\n    }\n    try {\n      return def.tools(this.buildPluginsMap());\n    } catch (err) {\n      throw new Error(\n        `Agent '${agentName}': tools(plugins) callback threw: ${\n          err instanceof Error ? err.message : String(err)\n        }`,\n        { cause: err instanceof Error ? err : undefined },\n      );\n    }\n  }\n\n  /**\n   * Builds the typed {@link Plugins} map passed to the function form of\n   * `AgentDefinition.tools`. Each entry exposes the plugin instance directly\n   * (so user code can call typed instance methods including `.toolkit()`);\n   * plugins missing `.toolkit()` get a synthesized fallback that walks\n   * `getAgentTools()` via `resolveToolkitFromProvider`.\n   *\n   * Wrapped in {@link createPluginsProxy} so that accessing an unknown\n   * plugin name throws a named \"not registered, Available: ...\" error\n   * instead of bubbling up a generic `Cannot read properties of undefined`\n   * from the agent's `tools(plugins)` callback.\n   */\n  private buildPluginsMap(): Plugins {\n    const out: Record<string, PluginToolkitProvider> = {};\n    if (!this.context) {\n      return createPluginsProxy(out, `Agent '${this.name}': tools(plugins)`);\n    }\n    for (const { name, provider } of this.context.getToolProviders()) {\n      const direct = (provider as { toolkit?: unknown }).toolkit;\n      if (typeof direct === \"function\") {\n        out[name] = provider as unknown as PluginToolkitProvider;\n      } else {\n        out[name] = {\n          toolkit: (opts) => resolveToolkitFromProvider(name, provider, opts),\n        };\n      }\n    }\n    return createPluginsProxy(out, `Agent '${this.name}': tools(plugins)`);\n  }\n\n  private async applyAutoInherit(\n    agentName: string,\n    index: Map<string, ResolvedToolEntry>,\n  ): Promise<void> {\n    if (!this.context) return;\n    const inherited: string[] = [];\n    const skippedByPlugin = new Map<string, string[]>();\n    const recordSkip = (pluginName: string, localName: string) => {\n      const list = skippedByPlugin.get(pluginName) ?? [];\n      list.push(localName);\n      skippedByPlugin.set(pluginName, list);\n    };\n\n    for (const {\n      name: pluginName,\n      provider,\n    } of this.context.getToolProviders()) {\n      if (pluginName === this.name) continue;\n      const entries = resolveToolkitFromProvider(pluginName, provider);\n      for (const [key, entry] of Object.entries(entries)) {\n        if (entry.autoInheritable !== true) {\n          recordSkip(entry.pluginName, entry.localName);\n          continue;\n        }\n        index.set(key, {\n          source: \"toolkit\",\n          pluginName: entry.pluginName,\n          localName: entry.localName,\n          def: { ...entry.def, name: key },\n        });\n        inherited.push(key);\n      }\n    }\n\n    if (inherited.length > 0) {\n      logger.info(\n        \"[agent %s] auto-inherited %d tool(s): %s\",\n        agentName,\n        inherited.length,\n        inherited.join(\", \"),\n      );\n    }\n    if (skippedByPlugin.size > 0) {\n      const summary = Array.from(skippedByPlugin.entries())\n        .map(([p, tools]) => `${p}(${tools.length})`)\n        .join(\", \");\n      logger.info(\n        \"[agent %s] auto-inherit skipped %d tool(s) not marked autoInheritable: %s. Wire them explicitly via `tools:` if needed.\",\n        agentName,\n        Array.from(skippedByPlugin.values()).reduce(\n          (n, list) => n + list.length,\n          0,\n        ),\n        summary,\n      );\n    }\n  }\n\n  private async connectHostedTools(\n    hostedTools: import(\"../../core/agent/tools/hosted-tools\").HostedTool[],\n    index: Map<string, ResolvedToolEntry>,\n  ): Promise<void> {\n    let host: string | undefined;\n    let authenticate: () => Promise<Record<string, string>>;\n\n    try {\n      const { getWorkspaceClient } = await import(\"../../context\");\n      const wsClient = getWorkspaceClient();\n      await wsClient.config.ensureResolved();\n      host = wsClient.config.host;\n      authenticate = async () => {\n        const headers = new Headers();\n        await wsClient.config.authenticate(headers);\n        return Object.fromEntries(headers.entries());\n      };\n    } catch {\n      host = process.env.DATABRICKS_HOST;\n      authenticate = async (): Promise<Record<string, string>> => {\n        const token = process.env.DATABRICKS_TOKEN;\n        return token ? { Authorization: `Bearer ${token}` } : {};\n      };\n    }\n\n    if (!host) {\n      logger.warn(\n        \"No Databricks host available — skipping %d hosted tool(s)\",\n        hostedTools.length,\n      );\n      return;\n    }\n\n    if (!this.mcpClient) {\n      const policy = buildMcpHostPolicy(this.config.mcp, host);\n      this.mcpClient = new AppKitMcpClient(host, authenticate, policy);\n    }\n\n    const endpoints = resolveHostedTools(hostedTools);\n    const result = await this.mcpClient.connectAll(endpoints);\n    if (result.failed.length > 0) {\n      // Per-endpoint errors are already logged inside `connectAll`; this\n      // aggregate warning makes the partial-success state visible at the\n      // agent-registration boundary so operators see \"agent X registered\n      // without N hosted-tool endpoints\" alongside the connect-time\n      // errors, instead of just an opaque list of MCP failures.\n      logger.warn(\n        \"MCP: %s of %s endpoints failed to connect (%s). Agents that reference these endpoints will boot without their hosted tools.\",\n        result.failed.length,\n        endpoints.length,\n        result.failed.map((f) => f.name).join(\", \"),\n      );\n    }\n\n    for (const def of this.mcpClient.getAllToolDefinitions()) {\n      index.set(def.name, {\n        source: \"mcp\",\n        mcpToolName: def.name,\n        def,\n      });\n    }\n  }\n\n  // ----------------- ToolProvider (no tools of our own) --------------------\n\n  getAgentTools(): AgentToolDefinition[] {\n    return [];\n  }\n\n  async executeAgentTool(): Promise<unknown> {\n    throw new Error(\"AgentsPlugin does not expose executeAgentTool directly\");\n  }\n\n  // ----------------- Route mounting and handlers ---------------------------\n\n  /**\n   * Mount the non-streaming invoke endpoints outside the `/api/<plugin>`\n   * namespace. `/invocations` and `/responses` are aliases — both run the\n   * default agent to completion and return a single JSON response. Streaming\n   * lives on `POST /chat` (mounted in `injectRoutes`).\n   */\n  private mountInvokeRoutes() {\n    if (!this.context) return;\n    // Return the promise so the forwardAsyncErrors wrapper applied by\n    // PluginContext.addRoute can forward rejections to the error middleware.\n    const handler = (req: express.Request, res: express.Response) =>\n      this._handleInvoke(req, res);\n    this.context.addRoute(\"post\", \"/invocations\", handler);\n    this.context.addRoute(\"post\", \"/responses\", handler);\n  }\n\n  injectRoutes(router: IAppRouter) {\n    this.route(router, {\n      name: \"chat\",\n      method: \"post\",\n      path: \"/chat\",\n      handler: async (req, res) => this._handleChat(req, res),\n    });\n    this.route(router, {\n      name: \"cancel\",\n      method: \"post\",\n      path: \"/cancel\",\n      handler: async (req, res) => this._handleCancel(req, res),\n    });\n    this.route(router, {\n      name: \"approve\",\n      method: \"post\",\n      path: \"/approve\",\n      handler: async (req, res) => this._handleApprove(req, res),\n    });\n    this.route(router, {\n      name: \"threads\",\n      method: \"get\",\n      path: \"/threads\",\n      handler: async (req, res) => this._handleListThreads(req, res),\n    });\n    this.route(router, {\n      name: \"thread\",\n      method: \"get\",\n      path: \"/threads/:threadId\",\n      handler: async (req, res) => this._handleGetThread(req, res),\n    });\n    this.route(router, {\n      name: \"deleteThread\",\n      method: \"delete\",\n      path: \"/threads/:threadId\",\n      handler: async (req, res) => this._handleDeleteThread(req, res),\n    });\n    this.route(router, {\n      name: \"info\",\n      method: \"get\",\n      path: \"/info\",\n      handler: async (_req, res) => {\n        res.json({\n          agents: Array.from(this.agents.keys()),\n          defaultAgent: this.defaultAgentName,\n        });\n      },\n    });\n  }\n\n  clientConfig(): Record<string, unknown> {\n    return {\n      agents: Array.from(this.agents.keys()),\n      defaultAgent: this.defaultAgentName,\n    };\n  }\n\n  private async _handleChat(req: express.Request, res: express.Response) {\n    const parsed = chatRequestSchema.safeParse(req.body);\n    if (!parsed.success) {\n      res.status(400).json({\n        error: \"Invalid request\",\n        details: parsed.error.flatten().fieldErrors,\n      });\n      return;\n    }\n    const { message, threadId, agent: agentName } = parsed.data;\n\n    const registered = this.resolveAgent(agentName);\n    if (!registered) {\n      res.status(400).json({\n        error: agentName\n          ? `Agent \"${agentName}\" not found`\n          : \"No agent registered\",\n      });\n      return;\n    }\n\n    const userId = this.resolveUserId(req);\n\n    // Reject early (before allocating a thread) when the user is already at\n    // their concurrent-stream limit. Prevents a misbehaving client from\n    // churning thread rows while being denied elsewhere.\n    const limits = this.resolvedLimits;\n    if (this.countUserStreams(userId) >= limits.maxConcurrentStreamsPerUser) {\n      res.setHeader(\"Retry-After\", \"5\");\n      res.status(429).json({\n        error: `Too many concurrent streams for this user (limit ${limits.maxConcurrentStreamsPerUser}). Wait for an existing stream to complete before starting another.`,\n      });\n      return;\n    }\n\n    // ThreadStore can throw on backing-storage failures (DB unreachable,\n    // permission errors, transient I/O). Without a try/catch the\n    // `async` Express handler bubbles the rejection without a response and\n    // the client connection hangs until the proxy times out. Surface the\n    // failure as a 500 so the SSE client falls back instead of waiting.\n    let thread: Thread;\n    try {\n      const existing = threadId\n        ? await this.threadStore.get(threadId, userId)\n        : null;\n      if (threadId && !existing) {\n        res.status(404).json({ error: `Thread ${threadId} not found` });\n        return;\n      }\n      thread = existing ?? (await this.threadStore.create(userId));\n\n      const userMessage: Message = {\n        id: randomUUID(),\n        role: \"user\",\n        content: message,\n        createdAt: new Date(),\n      };\n      await this.threadStore.addMessage(thread.id, userId, userMessage);\n    } catch (err) {\n      logger.error(\"threadStore failed in /chat: %O\", err);\n      res.status(500).json({ error: \"Thread operation failed\" });\n      return;\n    }\n    return this._streamAgent(req, res, registered, thread, userId);\n  }\n\n  /**\n   * Returns the names of tools in `registered.toolIndex` whose annotations\n   * would trip the approval gate. Used by the non-streaming invoke path\n   * (`/invocations`, `/responses`) to fail-fast before the adapter runs:\n   * those endpoints have no channel back to the user mid-call, so an agent\n   * whose tool surface includes approval-gated tools cannot be served.\n   *\n   * Returns an empty list when the plugin is configured with\n   * `approval.requireForDestructive: false` — operators who explicitly\n   * disabled HITL keep the invoke surface unrestricted.\n   */\n  private collectApprovalRequiredToolNames(\n    registered: RegisteredAgent,\n  ): string[] {\n    if (!this.resolvedApprovalPolicy.requireForDestructive) return [];\n    const names: string[] = [];\n    for (const entry of registered.toolIndex.values()) {\n      if (requiresApproval(entry.def.annotations)) {\n        names.push(entry.def.name);\n      }\n    }\n    return names;\n  }\n\n  /**\n   * Shared handler for `POST /invocations` and `POST /responses`. Runs the\n   * default agent to completion and returns a single JSON response in the\n   * OpenAI Responses non-streaming shape. The two endpoints are aliases —\n   * streaming clients must use `POST /chat`.\n   *\n   * Rejects with HTTP 400 when the resolved agent has any approval-gated\n   * tool in scope: HITL requires a live SSE channel, which this surface\n   * does not provide. See {@link collectApprovalRequiredToolNames}.\n   */\n  private async _handleInvoke(req: express.Request, res: express.Response) {\n    const parsed = invocationsRequestSchema.safeParse(req.body);\n    if (!parsed.success) {\n      res.status(400).json({\n        error: \"Invalid request\",\n        details: parsed.error.flatten().fieldErrors,\n      });\n      return;\n    }\n    const { input } = parsed.data;\n    const registered = this.resolveAgent();\n    if (!registered) {\n      res.status(400).json({ error: \"No agent registered\" });\n      return;\n    }\n\n    // Pre-flight HITL gate. The non-streaming invoke surface has no way to\n    // surface an approval prompt back to the caller and no way to receive\n    // a decision mid-run, so we reject up-front instead of having the\n    // approval gate auto-deny mid-stream (which would leave the caller\n    // with a confusing \"denied by user\" tool result in the final text).\n    const approvalGated = this.collectApprovalRequiredToolNames(registered);\n    if (approvalGated.length > 0) {\n      res.status(400).json({\n        error:\n          `Agent '${registered.name}' exposes ${approvalGated.length} approval-gated tool(s) ` +\n          `(${approvalGated.join(\", \")}); /invocations and /responses are non-streaming and ` +\n          \"cannot run HITL. Use POST /chat for HITL-capable agents, or disable approval via \" +\n          \"agents({ approval: { requireForDestructive: false } }).\",\n      });\n      return;\n    }\n\n    const userId = this.resolveUserId(req);\n\n    // Match the rate-limit gate on /chat. Without this, a client can bypass\n    // `limits.maxConcurrentStreamsPerUser` by hitting /invocations instead.\n    const limits = this.resolvedLimits;\n    if (this.countUserStreams(userId) >= limits.maxConcurrentStreamsPerUser) {\n      res.setHeader(\"Retry-After\", \"5\");\n      res.status(429).json({\n        error: `Too many concurrent streams for this user (limit ${limits.maxConcurrentStreamsPerUser}). Wait for an existing stream to complete before starting another.`,\n      });\n      return;\n    }\n\n    // Same rationale as `_handleChat`: surface threadStore failures as a\n    // 500 instead of letting the async handler hang the client connection.\n    let thread: Thread;\n    try {\n      thread = await this.threadStore.create(userId);\n\n      if (typeof input === \"string\") {\n        await this.threadStore.addMessage(thread.id, userId, {\n          id: randomUUID(),\n          role: \"user\",\n          content: input,\n          createdAt: new Date(),\n        });\n      } else {\n        for (const item of input) {\n          const role = (item.role ?? \"user\") as Message[\"role\"];\n          const content =\n            typeof item.content === \"string\"\n              ? item.content\n              : JSON.stringify(item.content ?? \"\");\n          if (!content) continue;\n          await this.threadStore.addMessage(thread.id, userId, {\n            id: randomUUID(),\n            role,\n            content,\n            createdAt: new Date(),\n          });\n        }\n      }\n    } catch (err) {\n      logger.error(\"threadStore failed in /invocations: %O\", err);\n      res.status(500).json({ error: \"Thread operation failed\" });\n      return;\n    }\n\n    return this._runAgentNonStreaming(req, res, registered, thread, userId);\n  }\n\n  private async _streamAgent(\n    req: express.Request,\n    res: express.Response,\n    registered: RegisteredAgent,\n    thread: Thread,\n    userId: string,\n  ): Promise<void> {\n    const abortController = new AbortController();\n    const signal = abortController.signal;\n    const requestId = randomUUID();\n    this.trackStream(requestId, userId, abortController);\n\n    // `hosted-supervisor` entries are not callable from the Node process\n    // (the SA endpoint executes them server-side). Their `def` is a\n    // placeholder; including it in the adapter's `tools` array would\n    // make the SA endpoint reject the request with a schema mismatch.\n    // The hosted-tool specs are routed via `AgentInput.extensions` below.\n    const tools = Array.from(registered.toolIndex.values())\n      .filter((e) => e.source !== \"hosted-supervisor\")\n      .map((e) => e.def);\n    const approvalPolicy = this.resolvedApprovalPolicy;\n    const limits = this.resolvedLimits;\n    const outboundEvents = new EventChannel<ResponseStreamEvent>();\n    const translator = new AgentEventTranslator();\n\n    // Per-run state shared with any sub-agents this run invokes. The boxed\n    // tool-call counter, approval policy, and outbound event channel must\n    // travel through the sub-agent path so it enforces the same budget and\n    // approval gate as the top-level executeTool.\n    const runState: RunState = {\n      req,\n      userId,\n      requestId,\n      abortController,\n      signal,\n      approvalPolicy,\n      limits,\n      translator,\n      outboundEvents,\n      toolCallsUsed: { count: 0 },\n    };\n\n    const executeTool = (name: string, args: unknown): Promise<unknown> =>\n      this.dispatchToolCall(runState, registered.toolIndex, name, args, 0);\n\n    // Drive the adapter and the approval-event side-channel concurrently.\n    // Outbound events from both sources flow through `outboundEvents`; the\n    // generator below drains the channel in order. executeTool pushes\n    // approval-pending events into the same channel before awaiting the gate.\n    const driver = (async () => {\n      try {\n        for (const evt of translator.translate({\n          type: \"metadata\",\n          data: { threadId: thread.id },\n        })) {\n          outboundEvents.push(evt);\n        }\n\n        const pluginNames = this.context\n          ? this.context\n              .getPluginNames()\n              .filter((n) => n !== this.name && n !== \"server\")\n          : [];\n        const fullPrompt = composePromptForAgent(\n          registered,\n          this.config.baseSystemPrompt,\n          {\n            agentName: registered.name,\n            pluginNames,\n            toolNames: tools.map((t) => t.name),\n          },\n        );\n\n        const messagesWithSystem: Message[] = [\n          {\n            id: \"system\",\n            role: \"system\",\n            content: fullPrompt,\n            createdAt: new Date(),\n          },\n          ...thread.messages,\n        ];\n\n        const stream = registered.adapter.run(\n          {\n            messages: messagesWithSystem,\n            tools,\n            threadId: thread.id,\n            signal,\n            extensions: buildAdapterExtensions(registered.toolIndex),\n          },\n          { executeTool, signal },\n        );\n\n        // The accumulation rule (deltas append, `message` replaces) is shared\n        // with `runAgent` and `runSubAgent`; see `consumeAdapterStream` for\n        // the rationale.\n        const fullContent = await consumeAdapterStream(stream, {\n          signal,\n          onEvent: (event) => {\n            for (const translated of translator.translate(event)) {\n              outboundEvents.push(translated);\n            }\n          },\n        });\n\n        if (fullContent) {\n          await this.threadStore.addMessage(thread.id, userId, {\n            id: randomUUID(),\n            role: \"assistant\",\n            content: fullContent,\n            createdAt: new Date(),\n          });\n        }\n\n        for (const evt of translator.finalize()) outboundEvents.push(evt);\n      } catch (error) {\n        if (signal.aborted) {\n          outboundEvents.close();\n          return;\n        }\n        logger.error(\"Agent chat error: %O\", error);\n        outboundEvents.close(error);\n        return;\n      } finally {\n        // Any pending approval gates for this stream are auto-denied so the\n        // adapter can unwind if it was still waiting.\n        this.approvalGate.abortStream(requestId);\n        this.untrackStream(requestId);\n        // Stateless agents (e.g. autocomplete) don't persist history; drop\n        // the thread so `InMemoryThreadStore` doesn't accumulate one record\n        // per request. Swallow delete errors — the stream has already\n        // finished and the client has the response.\n        if (registered.ephemeral) {\n          try {\n            await this.threadStore.delete(thread.id, userId);\n          } catch (err) {\n            logger.warn(\n              \"Failed to delete ephemeral thread %s: %O\",\n              thread.id,\n              err,\n            );\n          }\n        }\n      }\n      outboundEvents.close();\n    })();\n\n    await this.executeStream<ResponseStreamEvent>(\n      res,\n      async function* () {\n        try {\n          for await (const ev of outboundEvents) {\n            yield ev;\n          }\n        } finally {\n          await driver.catch(() => undefined);\n        }\n      },\n      {\n        ...agentStreamDefaults,\n        stream: { ...agentStreamDefaults.stream, streamId: requestId },\n      },\n    );\n  }\n\n  /**\n   * Non-streaming counterpart to {@link _streamAgent} used by `/invocations`\n   * and `/responses`. Drives the adapter to completion, persists the\n   * assistant turn to the thread store, and returns a single JSON envelope\n   * shaped like the OpenAI Responses non-streaming API.\n   *\n   * No `EventChannel`, no `AgentEventTranslator`, no SSE — the caller is\n   * waiting on one HTTP response. The approval gate is force-disabled in\n   * the per-run state as defense-in-depth: `_handleInvoke` already rejects\n   * up-front if any tool in scope would require approval, but pinning\n   * `requireForDestructive: false` here means a tool that somehow slips\n   * past the precheck (e.g. annotations mutated at runtime) still won't\n   * stall the request waiting for an approval prompt that no one can\n   * answer.\n   *\n   * The `RunState` shape is otherwise unchanged so {@link dispatchToolCall}\n   * — including sub-agent recursion via {@link runSubAgent} — keeps the\n   * same tool-call budget, abort signal, and timeout enforcement as the\n   * streaming path. A still-typed translator is constructed but only\n   * consulted for `finalize()` so any in-flight `approval_pending` event\n   * synthesis (which would have been a coding bug given the precheck) is\n   * a dropped no-op instead of a runtime crash.\n   */\n  private async _runAgentNonStreaming(\n    req: express.Request,\n    res: express.Response,\n    registered: RegisteredAgent,\n    thread: Thread,\n    userId: string,\n  ): Promise<void> {\n    const abortController = new AbortController();\n    const signal = abortController.signal;\n    const requestId = randomUUID();\n    this.trackStream(requestId, userId, abortController);\n\n    const tools = Array.from(registered.toolIndex.values()).map((e) => e.def);\n    const limits = this.resolvedLimits;\n\n    const runState: RunState = {\n      req,\n      userId,\n      requestId,\n      abortController,\n      signal,\n      // Force approval off for the non-streaming invoke surface. The\n      // precheck in `_handleInvoke` already guarantees no approval-gated\n      // tool is reachable; this is belt-and-braces.\n      approvalPolicy: { requireForDestructive: false, timeoutMs: 0 },\n      limits,\n      translator: new AgentEventTranslator(),\n      outboundEvents: new EventChannel<ResponseStreamEvent>(),\n      toolCallsUsed: { count: 0 },\n    };\n\n    const executeTool = (name: string, args: unknown): Promise<unknown> =>\n      this.dispatchToolCall(runState, registered.toolIndex, name, args, 0);\n\n    let fullContent = \"\";\n    try {\n      const pluginNames = this.context\n        ? this.context\n            .getPluginNames()\n            .filter((n) => n !== this.name && n !== \"server\")\n        : [];\n      const fullPrompt = composePromptForAgent(\n        registered,\n        this.config.baseSystemPrompt,\n        {\n          agentName: registered.name,\n          pluginNames,\n          toolNames: tools.map((t) => t.name),\n        },\n      );\n\n      const messagesWithSystem: Message[] = [\n        {\n          id: \"system\",\n          role: \"system\",\n          content: fullPrompt,\n          createdAt: new Date(),\n        },\n        ...thread.messages,\n      ];\n\n      const stream = registered.adapter.run(\n        {\n          messages: messagesWithSystem,\n          tools,\n          threadId: thread.id,\n          signal,\n        },\n        { executeTool, signal },\n      );\n\n      fullContent = await consumeAdapterStream(stream, { signal });\n\n      if (fullContent) {\n        await this.threadStore.addMessage(thread.id, userId, {\n          id: randomUUID(),\n          role: \"assistant\",\n          content: fullContent,\n          createdAt: new Date(),\n        });\n      }\n    } catch (error) {\n      if (signal.aborted) {\n        res.status(499).json({ error: \"Request aborted\" });\n        return;\n      }\n      logger.error(\"Agent invoke error: %O\", error);\n      const message =\n        process.env.NODE_ENV === \"production\"\n          ? \"Internal server error\"\n          : error instanceof Error\n            ? error.message\n            : String(error);\n      res.status(500).json({ error: message });\n      return;\n    } finally {\n      this.approvalGate.abortStream(requestId);\n      this.untrackStream(requestId);\n      if (registered.ephemeral) {\n        try {\n          await this.threadStore.delete(thread.id, userId);\n        } catch (err) {\n          logger.warn(\n            \"Failed to delete ephemeral thread %s: %O\",\n            thread.id,\n            err,\n          );\n        }\n      }\n    }\n\n    const responseId = `resp_${randomUUID()}`;\n    const messageId = `msg_${randomUUID()}`;\n    const message: ResponseOutputMessage = {\n      type: \"message\",\n      id: messageId,\n      status: \"completed\",\n      role: \"assistant\",\n      content: [{ type: \"output_text\", text: fullContent }],\n    };\n    res.json({\n      id: responseId,\n      object: \"response\",\n      created_at: Math.floor(Date.now() / 1000),\n      status: \"completed\",\n      thread_id: thread.id,\n      output: [message],\n    });\n  }\n\n  /**\n   * Dispatch a single tool call from either the top-level adapter or a\n   * sub-agent. Centralising this in one method is what makes the budget\n   * counter, approval gate, and abort signal observe sub-agent activity:\n   * `runSubAgent` reuses the same `runState` and so increments the same\n   * counter and emits approval events through the same channel.\n   *\n   * `depth` is the current sub-agent recursion depth (0 at the top level).\n   * It is forwarded to `runSubAgent` when the dispatched entry is itself a\n   * sub-agent, so depth limits remain enforced.\n   */\n  private async dispatchToolCall(\n    runState: RunState,\n    toolIndex: Map<string, ResolvedToolEntry>,\n    name: string,\n    args: unknown,\n    depth: number,\n  ): Promise<unknown> {\n    if (runState.toolCallsUsed.count >= runState.limits.maxToolCalls) {\n      runState.abortController.abort(\n        new Error(\n          `Tool-call budget exhausted (limit ${runState.limits.maxToolCalls}).`,\n        ),\n      );\n      throw new Error(\n        `Tool-call budget exhausted (limit ${runState.limits.maxToolCalls}). Raise agents({ limits: { maxToolCalls } }) or review the agent's tool-selection logic.`,\n      );\n    }\n    runState.toolCallsUsed.count++;\n\n    const entry = toolIndex.get(name);\n    if (!entry) throw new Error(`Unknown tool: ${name}`);\n\n    if (\n      runState.approvalPolicy.requireForDestructive &&\n      requiresApproval(entry.def.annotations)\n    ) {\n      const approvalId = randomUUID();\n      for (const ev of runState.translator.translate({\n        type: \"approval_pending\",\n        approvalId,\n        streamId: runState.requestId,\n        toolName: name,\n        args,\n        annotations: entry.def.annotations,\n      })) {\n        runState.outboundEvents.push(ev);\n      }\n      const decision = await this.approvalGate.wait({\n        approvalId,\n        streamId: runState.requestId,\n        userId: runState.userId,\n        timeoutMs: runState.approvalPolicy.timeoutMs,\n      });\n      if (decision === \"deny\") {\n        return `Tool execution denied by user approval gate (tool: ${name}).`;\n      }\n    }\n\n    let result: unknown;\n    if (entry.source === \"toolkit\") {\n      if (!this.context) {\n        throw new Error(\n          \"Plugin tool execution requires PluginContext; this should never happen through createApp\",\n        );\n      }\n      result = await this.context.executeTool(\n        runState.req,\n        entry.pluginName,\n        entry.localName,\n        args,\n        runState.signal,\n        runState.limits.toolCallTimeoutMs,\n      );\n    } else if (entry.source === \"function\") {\n      // Function tools declare their parameters as a JSON-object schema,\n      // so adapters always serialize `args` as an object. A non-object\n      // value here means the upstream model emitted malformed tool-call\n      // JSON; surface a clear error rather than silently passing through\n      // a wrong-shape value the tool will then choke on.\n      if (typeof args !== \"object\" || args === null || Array.isArray(args)) {\n        throw new Error(\n          `Function tool '${name}' received non-object arguments (got ${args === null ? \"null\" : Array.isArray(args) ? \"array\" : typeof args}); expected a JSON object.`,\n        );\n      }\n      result = await entry.functionTool.execute(\n        args as Record<string, unknown>,\n      );\n    } else if (entry.source === \"mcp\") {\n      if (!this.mcpClient) throw new Error(\"MCP client not connected\");\n      const oboToken = runState.req.headers[\"x-forwarded-access-token\"];\n      const mcpAuth =\n        typeof oboToken === \"string\"\n          ? { Authorization: `Bearer ${oboToken}` }\n          : undefined;\n      result = await this.mcpClient.callTool(entry.mcpToolName, args, mcpAuth);\n    } else if (entry.source === \"subagent\") {\n      const childAgent = this.agents.get(entry.agentName);\n      if (!childAgent)\n        throw new Error(`Sub-agent not found: ${entry.agentName}`);\n      result = await this.runSubAgent(runState, childAgent, args, depth + 1);\n    } else if (entry.source === \"hosted-supervisor\") {\n      // Defense-in-depth: should never fire. Hosted-supervisor entries are\n      // routed via `AgentInput.extensions` and the SA endpoint executes\n      // them server-side; their `def` is filtered out of the adapter's\n      // `tools` array, so the model never sees a callable schema for them.\n      // If we reach here, the agent is paired with a non-SA adapter that\n      // somehow surfaced the placeholder def to the model — surface a\n      // clear error rather than crash later in `normalizeToolResult`.\n      throw new Error(\n        `Tool '${name}' is a hosted-supervisor tool and cannot be invoked from the Node process. ` +\n          \"It is executed server-side by the Databricks AI Gateway and is only reachable when the agent's model is a Supervisor API adapter.\",\n      );\n    }\n\n    return normalizeToolResult(result);\n  }\n\n  /**\n   * Runs a sub-agent in response to an `agent-<key>` tool call. Returns the\n   * concatenated text output to hand back to the parent adapter as the tool\n   * result.\n   *\n   * `depth` starts at 1 for a top-level sub-agent invocation (i.e. the\n   * outer `_streamAgent` calls `runSubAgent(..., 1)`) and increments on\n   * each nested `runSubAgent` call. Depths exceeding\n   * `limits.maxSubAgentDepth` are rejected before any adapter work.\n   *\n   * Sub-agent tool calls run through `dispatchToolCall` with the same\n   * `runState` as the parent — the budget counter and approval gate are\n   * therefore enforced for every nested call, not only at the top level.\n   */\n  private async runSubAgent(\n    runState: RunState,\n    child: RegisteredAgent,\n    args: unknown,\n    depth: number,\n  ): Promise<string> {\n    if (depth > runState.limits.maxSubAgentDepth) {\n      throw new Error(\n        `Sub-agent depth exceeded (limit ${runState.limits.maxSubAgentDepth}). ` +\n          `Raise agents({ limits: { maxSubAgentDepth } }) or break the delegation cycle.`,\n      );\n    }\n\n    const input =\n      typeof args === \"object\" &&\n      args !== null &&\n      typeof (args as { input?: unknown }).input === \"string\"\n        ? (args as { input: string }).input\n        : JSON.stringify(args);\n    // Same filter as the top-level path: hosted-supervisor `def` is a\n    // placeholder, not a callable function — exclude from the adapter's\n    // `tools` array. The specs are routed via `extensions` instead.\n    const childTools = Array.from(child.toolIndex.values())\n      .filter((e) => e.source !== \"hosted-supervisor\")\n      .map((e) => e.def);\n\n    const childExecute = (name: string, childArgs: unknown): Promise<unknown> =>\n      this.dispatchToolCall(runState, child.toolIndex, name, childArgs, depth);\n\n    const runContext: AgentRunContext = {\n      executeTool: childExecute,\n      signal: runState.signal,\n    };\n\n    const pluginNames = this.context\n      ? this.context\n          .getPluginNames()\n          .filter((n) => n !== this.name && n !== \"server\")\n      : [];\n    const systemPrompt = composePromptForAgent(\n      child,\n      this.config.baseSystemPrompt,\n      {\n        agentName: child.name,\n        pluginNames,\n        toolNames: childTools.map((t) => t.name),\n      },\n    );\n\n    const messages: Message[] = [\n      {\n        id: \"system\",\n        role: \"system\",\n        content: systemPrompt,\n        createdAt: new Date(),\n      },\n      {\n        id: randomUUID(),\n        role: \"user\",\n        content: input,\n        createdAt: new Date(),\n      },\n    ];\n\n    return consumeAdapterStream(\n      child.adapter.run(\n        {\n          messages,\n          tools: childTools,\n          threadId: randomUUID(),\n          signal: runState.signal,\n          extensions: buildAdapterExtensions(child.toolIndex),\n        },\n        runContext,\n      ),\n      {\n        signal: runState.signal,\n        // Forward every sub-agent event into the parent's outbound SSE\n        // stream so the client sees nested tool_call / tool_result events\n        // (UI-action tools like apply_filter / highlight_period rely on\n        // this) and the sub-agent's streaming text as it's generated.\n        //\n        // `metadata` is the one exception: sub-agents have their own\n        // threadId, and forwarding it would overwrite the parent's\n        // thread state on the client and break multi-turn continuity.\n        // Approval-pending events emitted by `dispatchToolCall` already\n        // reach `outboundEvents` directly, so they are not routed here.\n        onEvent: (event) => {\n          if (event.type === \"metadata\") return;\n          for (const translated of runState.translator.translate(event)) {\n            runState.outboundEvents.push(translated);\n          }\n        },\n      },\n    );\n  }\n\n  private async _handleCancel(req: express.Request, res: express.Response) {\n    const parsed = cancelRequestSchema.safeParse(req.body);\n    if (!parsed.success) {\n      res.status(400).json({\n        error: \"Invalid request\",\n        details: parsed.error.flatten().fieldErrors,\n      });\n      return;\n    }\n    const { streamId } = parsed.data;\n    const entry = this.activeStreams.get(streamId);\n    if (!entry) {\n      // Stream is unknown or already completed — idempotent no-op.\n      res.json({ cancelled: true });\n      return;\n    }\n    const userId = this.resolveUserId(req);\n    if (entry.userId !== userId) {\n      res.status(403).json({ error: \"Forbidden\" });\n      return;\n    }\n    entry.controller.abort(\"Cancelled by user\");\n    this.untrackStream(streamId);\n    this.approvalGate.abortStream(streamId);\n    res.json({ cancelled: true });\n  }\n\n  private async _handleApprove(req: express.Request, res: express.Response) {\n    const parsed = approvalRequestSchema.safeParse(req.body);\n    if (!parsed.success) {\n      res.status(400).json({\n        error: \"Invalid request\",\n        details: parsed.error.flatten().fieldErrors,\n      });\n      return;\n    }\n    const { streamId, approvalId, decision } = parsed.data;\n\n    const streamEntry = this.activeStreams.get(streamId);\n    if (!streamEntry) {\n      // Stream has already completed or never existed. Return 404 so the UI\n      // knows the approval token is no longer valid (the waiter, if any, has\n      // already been timed out or aborted).\n      res.status(404).json({ error: \"Stream not found or already completed\" });\n      return;\n    }\n\n    const userId = this.resolveUserId(req);\n    if (streamEntry.userId !== userId) {\n      res.status(403).json({ error: \"Forbidden\" });\n      return;\n    }\n\n    const result = this.approvalGate.submit({ approvalId, userId, decision });\n    if (!result.ok) {\n      if (result.reason === \"forbidden\") {\n        res.status(403).json({ error: \"Forbidden\" });\n        return;\n      }\n      res.status(404).json({ error: \"Approval not found or already settled\" });\n      return;\n    }\n\n    res.json({ decision });\n  }\n\n  private async _handleListThreads(\n    req: express.Request,\n    res: express.Response,\n  ) {\n    const userId = this.resolveUserId(req);\n    const threads = await this.threadStore.list(userId);\n    res.json({ threads });\n  }\n\n  private async _handleGetThread(req: express.Request, res: express.Response) {\n    const userId = this.resolveUserId(req);\n    const thread = await this.threadStore.get(req.params.threadId, userId);\n    if (!thread) {\n      res.status(404).json({ error: \"Thread not found\" });\n      return;\n    }\n    res.json(thread);\n  }\n\n  private async _handleDeleteThread(\n    req: express.Request,\n    res: express.Response,\n  ) {\n    const userId = this.resolveUserId(req);\n    const deleted = await this.threadStore.delete(req.params.threadId, userId);\n    if (!deleted) {\n      res.status(404).json({ error: \"Thread not found\" });\n      return;\n    }\n    res.json({ deleted: true });\n  }\n\n  private resolveAgent(name?: string): RegisteredAgent | null {\n    if (name) return this.agents.get(name) ?? null;\n    if (this.defaultAgentName) {\n      return this.agents.get(this.defaultAgentName) ?? null;\n    }\n    const first = this.agents.values().next();\n    return first.done ? null : first.value;\n  }\n\n  private printRegistry(): void {\n    if (this.agents.size === 0) return;\n    console.log(\"\");\n    console.log(`  ${pc.bold(\"Agents\")} ${pc.dim(`(${this.agents.size})`)}`);\n    console.log(`  ${pc.dim(\"─\".repeat(60))}`);\n    for (const [name, reg] of this.agents) {\n      const tools = reg.toolIndex.size;\n      const marker = name === this.defaultAgentName ? pc.green(\"●\") : \" \";\n      console.log(\n        `  ${marker} ${pc.bold(name.padEnd(24))} ${pc.dim(`${tools} tools`)}`,\n      );\n    }\n    console.log(`  ${pc.dim(\"─\".repeat(60))}`);\n    console.log(\"\");\n  }\n\n  async shutdown(): Promise<void> {\n    this.approvalGate.abortAll();\n    if (this.mcpClient) {\n      await this.mcpClient.close();\n      this.mcpClient = null;\n    }\n  }\n\n  exports() {\n    return {\n      register: (name: string, def: AgentDefinition) =>\n        this.registerCodeAgent(name, def),\n      list: () => Array.from(this.agents.keys()),\n      get: (name: string) => this.agents.get(name) ?? null,\n      reload: () => this.reload(),\n      getDefault: () => this.defaultAgentName,\n      getThreads: (userId: string) => this.threadStore.list(userId),\n    };\n  }\n\n  private async registerCodeAgent(\n    name: string,\n    def: AgentDefinition,\n  ): Promise<void> {\n    const registered = await this.buildRegisteredAgent(name, def, {\n      origin: \"code\",\n    });\n    this.agents.set(name, registered);\n    if (!this.defaultAgentName) this.defaultAgentName = name;\n  }\n}\n\nfunction normalizeAutoInherit(value: AgentsPluginConfig[\"autoInheritTools\"]): {\n  file: boolean;\n  code: boolean;\n} {\n  // Default is opt-out for both origins. A markdown agent or code-defined\n  // agent with no declared `tools:` gets an empty tool index unless the\n  // developer explicitly flips `autoInheritTools` on. Even then, only tools\n  // whose plugin author marked `autoInheritable: true` are spread — see\n  // `applyAutoInherit` for the filter.\n  if (value === undefined) return { file: false, code: false };\n  if (typeof value === \"boolean\") return { file: value, code: value };\n  return { file: value.file ?? false, code: value.code ?? false };\n}\n\nfunction composePromptForAgent(\n  registered: RegisteredAgent,\n  pluginLevel: BaseSystemPromptOption | undefined,\n  ctx: PromptContext,\n): string {\n  const perAgent = registered.baseSystemPrompt;\n  const resolved = perAgent !== undefined ? perAgent : pluginLevel;\n\n  let base = \"\";\n  if (resolved === false) {\n    base = \"\";\n  } else if (typeof resolved === \"string\") {\n    base = resolved;\n  } else if (typeof resolved === \"function\") {\n    base = resolved(ctx);\n  } else {\n    base = buildBaseSystemPrompt(ctx);\n  }\n\n  return composeSystemPrompt(base, registered.instructions);\n}\n\n/**\n * Pulls the LLM-readable description off any {@link SupervisorTool} kind.\n * Used to populate the synthetic placeholder `def.description` on\n * hosted-supervisor tool-index entries.\n */\nfunction supervisorToolDescription(spec: SupervisorTool): string {\n  switch (spec.type) {\n    case \"genie_space\":\n      return spec.genie_space.description;\n    case \"uc_function\":\n      return spec.uc_function.description;\n    case \"knowledge_assistant\":\n      return spec.knowledge_assistant.description;\n    case \"app\":\n      return spec.app.description;\n    case \"uc_connection\":\n      return spec.uc_connection.description;\n  }\n}\n\n/**\n * Builds the `AgentInput.extensions` payload from a tool index, aggregating\n * the hosted-supervisor specs under {@link SUPERVISOR_EXTENSION_KEY}. Returns\n * `undefined` when there are no adapter-side hosted tools so the field stays\n * absent on the wire — adapters that don't read extensions never see it.\n */\nfunction buildAdapterExtensions(\n  toolIndex: Map<string, ResolvedToolEntry>,\n): Readonly<Record<string, unknown>> | undefined {\n  const supervisorSpecs: SupervisorTool[] = [];\n  for (const entry of toolIndex.values()) {\n    if (entry.source === \"hosted-supervisor\") {\n      supervisorSpecs.push(entry.spec);\n    }\n  }\n  if (supervisorSpecs.length === 0) return undefined;\n  return {\n    [SUPERVISOR_EXTENSION_KEY]: { hostedTools: supervisorSpecs },\n  };\n}\n\n/**\n * Compares the adapter's declared capabilities against the tool index and\n * logs a warning when the agent's tool declarations would be silently\n * dropped at runtime. Warn-not-throw: misconfiguration is loud enough to\n * notice without taking the whole app down.\n */\nfunction warnOnCapabilityMismatch(\n  agentName: string,\n  adapter: AgentAdapter,\n  toolIndex: Map<string, ResolvedToolEntry>,\n): void {\n  const accepted = new Set(adapter.acceptsExtensions ?? []);\n\n  const hostedSupervisorKeys: string[] = [];\n  const inputToolKeys: string[] = [];\n  for (const [key, entry] of toolIndex) {\n    if (entry.source === \"hosted-supervisor\") {\n      hostedSupervisorKeys.push(key);\n    } else {\n      inputToolKeys.push(key);\n    }\n  }\n\n  if (\n    hostedSupervisorKeys.length > 0 &&\n    !accepted.has(SUPERVISOR_EXTENSION_KEY)\n  ) {\n    logger.warn(\n      `Agent '${agentName}' declares hosted-supervisor tools (${hostedSupervisorKeys.join(\", \")}) ` +\n        \"but its model adapter does not accept the 'databricks.supervisor' extension. \" +\n        \"These tools will not reach the model. Pair them with `DatabricksAdapter.fromSupervisorApi(...)`, or remove them.\",\n    );\n  }\n\n  // `consumesInputTools` defaults to true. Only warn when an adapter\n  // explicitly opts out (`false`) and an input tool would be silently\n  // ignored.\n  if (adapter.consumesInputTools === false && inputToolKeys.length > 0) {\n    logger.warn(\n      `Agent '${agentName}' declares function tools / sub-agents / MCP tools (${inputToolKeys.join(\", \")}) ` +\n        \"but its model adapter does not consume input.tools (Supervisor API owns its own tool loop). \" +\n        \"These tools will not be exposed to the model. See docs/plugins/agents.md.\",\n    );\n  }\n}\n\n/**\n * Plugin factory for the agents plugin. Reads `config/agents/*.md` by default,\n * resolves toolkits/tools from registered plugins, exposes `appkit.agents.*`\n * runtime API and mounts `POST /invocations` and `POST /responses` (aliased\n * non-streaming invoke endpoints) plus `POST /chat` (streaming, HITL-capable).\n *\n * @example\n * ```ts\n * import { agents, analytics, createApp, server } from \"@databricks/appkit\";\n *\n * await createApp({\n *   plugins: [server(), analytics(), agents()],\n * });\n * ```\n */\nexport const agents = toPlugin(AgentsPlugin);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkEA,MAAM,SAAS,aAAa,SAAS;AAErC,MAAM,qBAAqB;;;;;;;;;;AAoB3B,SAAS,iBAAiB,aAAmD;AAC3E,KAAI,CAAC,YAAa,QAAO;AACzB,KAAI,YAAY,gBAAgB,KAAM,QAAO;AAC7C,SAAQ,YAAY,QAApB;EACE,KAAK;EACL,KAAK;EACL,KAAK,cACH,QAAO;EACT,KAAK;EACL,KAAK,OACH,QAAO;EACT;AAC6B,eAAY;AACvC,UAAO;;;AAiCb,IAAa,eAAb,cAAkC,OAA+B;CAC/D,OAAO,WAAWA;CAClB,OAAO,QAAqB;CAI5B,AAAQ,yBAAS,IAAI,KAA8B;CACnD,AAAQ,mBAAkC;CAC1C,AAAQ,gCAAgB,IAAI,KAGzB;;;;;;;CAOH,AAAQ,mCAAmB,IAAI,KAAqB;CACpD,AAAQ,YAAoC;CAC5C,AAAQ;CACR,AAAQ,eAAe,IAAI,kBAAkB;CAE7C,YAAY,QAA4B;AACtC,QAAM,OAAO;AACb,OAAK,SAAS;AACd,MAAI,OAAO,YACT,MAAK,cAAc,OAAO;OACrB;AACL,QAAK,cAAc,IAAI,qBAAqB;AAC5C,OAAI,QAAQ,IAAI,aAAa,aAC3B,QAAO,KACL,oMAGD;OAED,QAAO,KACL,qGACD;;;;;;;;;;;;;CAeP,AAAQ,uBAGG;CAEX,IAAY,yBAGV;AACA,MAAI,KAAK,qBAAsB,QAAO,KAAK;EAC3C,MAAM,MAAM,KAAK,OAAO,YAAY,EAAE;EACtC,MAAM,4BAA4B;EAClC,MAAM,8BAA8B;EACpC,IAAI,YAAY,IAAI,aAAa;AACjC,MAAI,CAAC,OAAO,SAAS,UAAU,IAAI,YAAY,2BAA2B;AACxE,UAAO,KACL,yJACA,IAAI,WACJ,2BACA,4BACD;AACD,eAAY;;AAEd,OAAK,uBAAuB;GAC1B,uBAAuB,IAAI,yBAAyB;GACpD;GACD;AACD,SAAO,KAAK;;;CAId,IAAY,iBAKV;EACA,MAAM,MAAM,KAAK,OAAO,UAAU,EAAE;AACpC,SAAO;GACL,6BAA6B,IAAI,+BAA+B;GAChE,cAAc,IAAI,gBAAgB;GAClC,kBAAkB,IAAI,oBAAoB;GAI1C,mBAAmB,IAAI,qBAAqB;GAC7C;;;CAIH,AAAQ,iBAAiB,QAAwB;AAC/C,SAAO,KAAK,iBAAiB,IAAI,OAAO,IAAI;;;;;;;;CAS9C,AAAQ,YACN,WACA,QACA,YACM;AACN,OAAK,cAAc,IAAI,WAAW;GAAE;GAAY;GAAQ,CAAC;AACzD,OAAK,iBAAiB,IACpB,SACC,KAAK,iBAAiB,IAAI,OAAO,IAAI,KAAK,EAC5C;;;;;;;CAQH,AAAQ,cAAc,WAAyB;EAC7C,MAAM,QAAQ,KAAK,cAAc,IAAI,UAAU;AAC/C,MAAI,CAAC,MAAO;AACZ,OAAK,cAAc,OAAO,UAAU;EACpC,MAAM,QAAQ,KAAK,iBAAiB,IAAI,MAAM,OAAO,IAAI,KAAK;AAC9D,MAAI,QAAQ,EACV,MAAK,iBAAiB,OAAO,MAAM,OAAO;MAE1C,MAAK,iBAAiB,IAAI,MAAM,QAAQ,KAAK;;CAIjD,MAAM,QAAQ;EACZ,MAAM,EAAE,QAAQ,qBAAqB,MAAM,KAAK,oBAAoB;AACpE,OAAK,SAAS;AACd,OAAK,mBAAmB;AACxB,OAAK,mBAAmB;AACxB,OAAK,eAAe;;;;;;;;CAStB,MAAM,SAAwB;EAC5B,MAAM,OAAO,MAAM,KAAK,oBAAoB;AAgB5C,OAAK,SAAS,KAAK;AACnB,OAAK,mBAAmB,KAAK;;;;;;;CAQ/B,MAAc,qBAGX;EACD,MAAM,EAAE,MAAM,UAAU,cAAc,gBACpC,MAAM,KAAK,qBAAqB;EAElC,MAAM,WAAW,KAAK,OAAO,UAAU,EAAE;AAEzC,OAAK,MAAM,QAAQ,OAAO,KAAK,SAAS,CACtC,KAAI,SAAS,MACX,QAAO,KACL,0FACA,KACD;EAIL,MAAM,SACJ,EAAE;AACJ,OAAK,MAAM,CAAC,MAAM,QAAQ,OAAO,QAAQ,SAAS,CAChD,QAAO,QAAQ;GAAE;GAAK,KAAK,EAAE,QAAQ,QAAQ;GAAE;AAEjD,OAAK,MAAM,CAAC,MAAM,QAAQ,OAAO,QAAQ,SAAS,CAChD,QAAO,QAAQ;GAAE;GAAK,KAAK,EAAE,QAAQ,QAAQ;GAAE;EAGjD,MAAM,yBAAS,IAAI,KAA8B;EACjD,IAAI,mBAAkC;AAEtC,MAAI,OAAO,KAAK,OAAO,CAAC,WAAW,GAAG;AACpC,UAAO,KACL,iEACA,KAAK,mBAAmB,IAAI,aAC7B;AACD,UAAO;IAAE;IAAQ;IAAkB;;AAGrC,OAAK,MAAM,CAAC,MAAM,EAAE,KAAK,UAAU,OAAO,QAAQ,OAAO,CACvD,KAAI;GACF,MAAM,aAAa,MAAM,KAAK,qBAAqB,MAAM,KAAK,IAAI;AAClE,UAAO,IAAI,MAAM,WAAW;AAC5B,OAAI,CAAC,iBAAkB,oBAAmB;WACnC,KAAK;AACZ,SAAM,IAAI,MACR,6BAA6B,KAAK,KAAK,IAAI,OAAO,KAChD,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAElD,EAAE,OAAO,eAAe,QAAQ,MAAM,QAAW,CAClD;;AAIL,MAAI,KAAK,OAAO,cAAc;AAC5B,OAAI,CAAC,OAAO,IAAI,KAAK,OAAO,aAAa,CACvC,OAAM,IAAI,MACR,iBAAiB,KAAK,OAAO,aAAa,kCAAkC,MAAM,KAAK,OAAO,MAAM,CAAC,CAAC,KAAK,KAAK,GACjH;AAEH,sBAAmB,KAAK,OAAO;aACtB,eAAe,OAAO,IAAI,YAAY,CAC/C,oBAAmB;AAGrB,SAAO;GAAE;GAAQ;GAAkB;;CAGrC,AAAQ,oBAAmC;AACzC,MAAI,KAAK,OAAO,QAAQ,MAAO,QAAO;EACtC,MAAM,MAAM,KAAK,OAAO,OAAO;AAC/B,SAAO,KAAK,WAAW,IAAI,GAAG,MAAM,KAAK,QAAQ,QAAQ,KAAK,EAAE,IAAI;;CAGtE,MAAc,sBAGX;EACD,MAAM,MAAM,KAAK,mBAAmB;AACpC,MAAI,CAAC,IAAK,QAAO;GAAE,MAAM,EAAE;GAAE,cAAc;GAAM;EAEjD,MAAM,sBAAsB,KAAK,qBAAqB;EACtD,MAAM,UAAU,KAAK,OAAO,SAAS,EAAE;AASvC,SAPe,MAAM,kBAAkB,KAAK;GAC1C,cAAc,KAAK,OAAO;GAC1B,gBAAgB;GAChB,SAAS;GACT,YAAY,KAAK,OAAO;GACzB,CAAC;;;;;;;;CAWJ,AAAQ,sBAGN;EACA,MAAM,sBAAM,IAAI,KAAK;AACrB,MAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,OAAK,MAAM,EAAE,MAAM,cAAc,KAAK,QAAQ,kBAAkB,EAAE;GAChE,MAAM,cAAc;AAGpB,OAAI,OAAO,YAAY,YAAY,WACjC,KAAI,IAAI,MAAM,EACZ,SAAS,YAAY,QAAQ,KAAK,YAAY,EAC/C,CAAC;;AAGN,SAAO;;CAGT,MAAc,qBACZ,MACA,KACA,KAC0B;EAC1B,MAAM,UAAU,MAAM,KAAK,eAAe,KAAK,KAAK;EACpD,MAAM,YAAY,MAAM,KAAK,eAAe,MAAM,KAAK,IAAI;AAE3D,2BAAyB,MAAM,SAAS,UAAU;AAElD,SAAO;GACL;GACA,cAAc,IAAI;GAClB;GACA;GACA,kBAAkB,IAAI;GACtB,UAAU,IAAI;GACd,WAAW,IAAI;GACf,kBAAkB,IAAI;GACtB,WAAW,IAAI;GAChB;;CAGH,MAAc,eACZ,KACA,MACuB;EACvB,MAAM,SAAS,IAAI,SAAS,KAAK,OAAO;EAIxC,MAAM,iBAIF,EAAE;AACN,MAAI,IAAI,aAAa,OAAW,gBAAe,WAAW,IAAI;AAC9D,MAAI,IAAI,cAAc,OAAW,gBAAe,YAAY,IAAI;AAChE,MAAI,IAAI,qBAAqB,OAC3B,gBAAe,mBAAmB,IAAI;AAExC,MAAI,CAAC,QAAQ;GACX,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,OAAI;AACF,WAAO,MAAM,kBAAkB,iBAC7B,QACA,eACD;YACM,KAAK;AACZ,UAAM,IAAI,MACR,UAAU,KAAK,sFACf,EAAE,OAAO,eAAe,QAAQ,MAAM,QAAW,CAClD;;;AAGL,MAAI,OAAO,WAAW,UAAU;GAC9B,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,UAAO,kBAAkB,iBAAiB,QAAQ,eAAe;;AAEnE,SAAO,MAAM;;;;;;;CAQf,MAAc,eACZ,WACA,KACA,KACyC;EACzC,MAAM,wBAAQ,IAAI,KAAgC;EAClD,MAAM,mBAAmB,IAAI,UAAU;EACvC,MAAM,cAAc,KAAK,gBAAgB,WAAW,IAAI;EACxD,MAAM,uBACJ,IAAI,UAAU,OAAO,KAAK,IAAI,OAAO,CAAC,SAAS;EAEjD,MAAM,kBAAkB,qBAAqB,KAAK,OAAO,iBAAiB;AAQ1E,MAJE,CAAC,oBACD,CAAC,yBACA,IAAI,WAAW,SAAS,gBAAgB,OAAO,gBAAgB,MAGhE,OAAM,KAAK,iBAAiB,WAAW,MAAM;AAI/C,OAAK,MAAM,CAAC,UAAU,aAAa,OAAO,QAAQ,IAAI,UAAU,EAAE,CAAC,EAAE;GACnE,MAAM,WAAW,SAAS;AAC1B,SAAM,IAAI,UAAU;IAClB,QAAQ;IACR,WAAW,SAAS,QAAQ;IAC5B,KAAK;KACH,MAAM;KACN,aACE,SAAS,aAAa,MAAM,GAAG,IAAI,IACnC,mBAAmB,SAAS;KAC9B,YAAY;MACV,MAAM;MACN,YAAY,EACV,OAAO;OACL,MAAM;OACN,aAAa;OACd,EACF;MACD,UAAU,CAAC,QAAQ;MACpB;KACF;IACF,CAAC;;EAIJ,MAAM,kBACJ,EAAE;AACJ,OAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,YAAY,EAAE;AACrD,OAAI,eAAe,KAAK,EAAE;AACxB,UAAM,IAAI,KAAK;KACb,QAAQ;KACR,YAAY,KAAK;KACjB,WAAW,KAAK;KAChB,KAAK;MAAE,GAAG,KAAK;MAAK,MAAM;MAAK;KAChC,CAAC;AACF;;AAEF,OAAI,eAAe,KAAK,EAAE;AACxB,UAAM,IAAI,KAAK;KACb,QAAQ;KACR,cAAc;KACd,KAAK;MAAE,GAAG,yBAAyB,KAAK;MAAE,MAAM;MAAK;KACtD,CAAC;AACF;;AAEF,OAAI,iBAAiB,KAAK,EAAE;AAC1B,UAAM,IAAI,KAAK;KACb,QAAQ;KACR,MAAM,KAAK;KACX,KAAK;MAKH,MAAM;MACN,aAAa,0BAA0B,KAAK,KAAK;MACjD,YAAY;OAAE,MAAM;OAAU,YAAY,EAAE;OAAE;MAC/C;KACF,CAAC;AACF;;AAEF,OAAI,aAAa,KAAK,EAAE;AACtB,oBAAgB,KAAK,KAAK;AAC1B;;AAEF,SAAM,IAAI,MACR,UAAU,UAAU,UAAU,IAAI,6BACnC;;AAGH,MAAI,gBAAgB,SAAS,EAC3B,OAAM,KAAK,mBAAmB,iBAAiB,MAAM;AAGvD,SAAO;;;;;;;;;;;;;CAcT,AAAQ,gBAAgB,WAAmB,KAAkC;AAC3E,MAAI,OAAO,IAAI,UAAU,WACvB,QAAO,IAAI,SAAS,EAAE;AAExB,MAAI;AACF,UAAO,IAAI,MAAM,KAAK,iBAAiB,CAAC;WACjC,KAAK;AACZ,SAAM,IAAI,MACR,UAAU,UAAU,oCAClB,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAElD,EAAE,OAAO,eAAe,QAAQ,MAAM,QAAW,CAClD;;;;;;;;;;;;;;;CAgBL,AAAQ,kBAA2B;EACjC,MAAM,MAA6C,EAAE;AACrD,MAAI,CAAC,KAAK,QACR,QAAO,mBAAmB,KAAK,UAAU,KAAK,KAAK,mBAAmB;AAExE,OAAK,MAAM,EAAE,MAAM,cAAc,KAAK,QAAQ,kBAAkB,CAE9D,KAAI,OADY,SAAmC,YAC7B,WACpB,KAAI,QAAQ;MAEZ,KAAI,QAAQ,EACV,UAAU,SAAS,2BAA2B,MAAM,UAAU,KAAK,EACpE;AAGL,SAAO,mBAAmB,KAAK,UAAU,KAAK,KAAK,mBAAmB;;CAGxE,MAAc,iBACZ,WACA,OACe;AACf,MAAI,CAAC,KAAK,QAAS;EACnB,MAAM,YAAsB,EAAE;EAC9B,MAAM,kCAAkB,IAAI,KAAuB;EACnD,MAAM,cAAc,YAAoB,cAAsB;GAC5D,MAAM,OAAO,gBAAgB,IAAI,WAAW,IAAI,EAAE;AAClD,QAAK,KAAK,UAAU;AACpB,mBAAgB,IAAI,YAAY,KAAK;;AAGvC,OAAK,MAAM,EACT,MAAM,YACN,cACG,KAAK,QAAQ,kBAAkB,EAAE;AACpC,OAAI,eAAe,KAAK,KAAM;GAC9B,MAAM,UAAU,2BAA2B,YAAY,SAAS;AAChE,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,EAAE;AAClD,QAAI,MAAM,oBAAoB,MAAM;AAClC,gBAAW,MAAM,YAAY,MAAM,UAAU;AAC7C;;AAEF,UAAM,IAAI,KAAK;KACb,QAAQ;KACR,YAAY,MAAM;KAClB,WAAW,MAAM;KACjB,KAAK;MAAE,GAAG,MAAM;MAAK,MAAM;MAAK;KACjC,CAAC;AACF,cAAU,KAAK,IAAI;;;AAIvB,MAAI,UAAU,SAAS,EACrB,QAAO,KACL,4CACA,WACA,UAAU,QACV,UAAU,KAAK,KAAK,CACrB;AAEH,MAAI,gBAAgB,OAAO,GAAG;GAC5B,MAAM,UAAU,MAAM,KAAK,gBAAgB,SAAS,CAAC,CAClD,KAAK,CAAC,GAAG,WAAW,GAAG,EAAE,GAAG,MAAM,OAAO,GAAG,CAC5C,KAAK,KAAK;AACb,UAAO,KACL,2HACA,WACA,MAAM,KAAK,gBAAgB,QAAQ,CAAC,CAAC,QAClC,GAAG,SAAS,IAAI,KAAK,QACtB,EACD,EACD,QACD;;;CAIL,MAAc,mBACZ,aACA,OACe;EACf,IAAI;EACJ,IAAI;AAEJ,MAAI;GACF,MAAM,EAAE,uBAAuB,MAAM,OAAO;GAC5C,MAAM,WAAW,oBAAoB;AACrC,SAAM,SAAS,OAAO,gBAAgB;AACtC,UAAO,SAAS,OAAO;AACvB,kBAAe,YAAY;IACzB,MAAM,UAAU,IAAI,SAAS;AAC7B,UAAM,SAAS,OAAO,aAAa,QAAQ;AAC3C,WAAO,OAAO,YAAY,QAAQ,SAAS,CAAC;;UAExC;AACN,UAAO,QAAQ,IAAI;AACnB,kBAAe,YAA6C;IAC1D,MAAM,QAAQ,QAAQ,IAAI;AAC1B,WAAO,QAAQ,EAAE,eAAe,UAAU,SAAS,GAAG,EAAE;;;AAI5D,MAAI,CAAC,MAAM;AACT,UAAO,KACL,6DACA,YAAY,OACb;AACD;;AAGF,MAAI,CAAC,KAAK,WAAW;GACnB,MAAM,SAAS,mBAAmB,KAAK,OAAO,KAAK,KAAK;AACxD,QAAK,YAAY,IAAI,gBAAgB,MAAM,cAAc,OAAO;;EAGlE,MAAM,YAAY,mBAAmB,YAAY;EACjD,MAAM,SAAS,MAAM,KAAK,UAAU,WAAW,UAAU;AACzD,MAAI,OAAO,OAAO,SAAS,EAMzB,QAAO,KACL,+HACA,OAAO,OAAO,QACd,UAAU,QACV,OAAO,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,KAAK,KAAK,CAC5C;AAGH,OAAK,MAAM,OAAO,KAAK,UAAU,uBAAuB,CACtD,OAAM,IAAI,IAAI,MAAM;GAClB,QAAQ;GACR,aAAa,IAAI;GACjB;GACD,CAAC;;CAMN,gBAAuC;AACrC,SAAO,EAAE;;CAGX,MAAM,mBAAqC;AACzC,QAAM,IAAI,MAAM,yDAAyD;;;;;;;;CAW3E,AAAQ,oBAAoB;AAC1B,MAAI,CAAC,KAAK,QAAS;EAGnB,MAAM,WAAW,KAAsB,QACrC,KAAK,cAAc,KAAK,IAAI;AAC9B,OAAK,QAAQ,SAAS,QAAQ,gBAAgB,QAAQ;AACtD,OAAK,QAAQ,SAAS,QAAQ,cAAc,QAAQ;;CAGtD,aAAa,QAAoB;AAC/B,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,KAAK,QAAQ,KAAK,YAAY,KAAK,IAAI;GACxD,CAAC;AACF,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,KAAK,QAAQ,KAAK,cAAc,KAAK,IAAI;GAC1D,CAAC;AACF,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,KAAK,QAAQ,KAAK,eAAe,KAAK,IAAI;GAC3D,CAAC;AACF,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,KAAK,QAAQ,KAAK,mBAAmB,KAAK,IAAI;GAC/D,CAAC;AACF,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,KAAK,QAAQ,KAAK,iBAAiB,KAAK,IAAI;GAC7D,CAAC;AACF,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,KAAK,QAAQ,KAAK,oBAAoB,KAAK,IAAI;GAChE,CAAC;AACF,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,MAAM,QAAQ;AAC5B,QAAI,KAAK;KACP,QAAQ,MAAM,KAAK,KAAK,OAAO,MAAM,CAAC;KACtC,cAAc,KAAK;KACpB,CAAC;;GAEL,CAAC;;CAGJ,eAAwC;AACtC,SAAO;GACL,QAAQ,MAAM,KAAK,KAAK,OAAO,MAAM,CAAC;GACtC,cAAc,KAAK;GACpB;;CAGH,MAAc,YAAY,KAAsB,KAAuB;EACrE,MAAM,SAAS,kBAAkB,UAAU,IAAI,KAAK;AACpD,MAAI,CAAC,OAAO,SAAS;AACnB,OAAI,OAAO,IAAI,CAAC,KAAK;IACnB,OAAO;IACP,SAAS,OAAO,MAAM,SAAS,CAAC;IACjC,CAAC;AACF;;EAEF,MAAM,EAAE,SAAS,UAAU,OAAO,cAAc,OAAO;EAEvD,MAAM,aAAa,KAAK,aAAa,UAAU;AAC/C,MAAI,CAAC,YAAY;AACf,OAAI,OAAO,IAAI,CAAC,KAAK,EACnB,OAAO,YACH,UAAU,UAAU,eACpB,uBACL,CAAC;AACF;;EAGF,MAAM,SAAS,KAAK,cAAc,IAAI;EAKtC,MAAM,SAAS,KAAK;AACpB,MAAI,KAAK,iBAAiB,OAAO,IAAI,OAAO,6BAA6B;AACvE,OAAI,UAAU,eAAe,IAAI;AACjC,OAAI,OAAO,IAAI,CAAC,KAAK,EACnB,OAAO,oDAAoD,OAAO,4BAA4B,sEAC/F,CAAC;AACF;;EAQF,IAAI;AACJ,MAAI;GACF,MAAM,WAAW,WACb,MAAM,KAAK,YAAY,IAAI,UAAU,OAAO,GAC5C;AACJ,OAAI,YAAY,CAAC,UAAU;AACzB,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,UAAU,SAAS,aAAa,CAAC;AAC/D;;AAEF,YAAS,YAAa,MAAM,KAAK,YAAY,OAAO,OAAO;GAE3D,MAAM,cAAuB;IAC3B,IAAI,YAAY;IAChB,MAAM;IACN,SAAS;IACT,2BAAW,IAAI,MAAM;IACtB;AACD,SAAM,KAAK,YAAY,WAAW,OAAO,IAAI,QAAQ,YAAY;WAC1D,KAAK;AACZ,UAAO,MAAM,mCAAmC,IAAI;AACpD,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC1D;;AAEF,SAAO,KAAK,aAAa,KAAK,KAAK,YAAY,QAAQ,OAAO;;;;;;;;;;;;;CAchE,AAAQ,iCACN,YACU;AACV,MAAI,CAAC,KAAK,uBAAuB,sBAAuB,QAAO,EAAE;EACjE,MAAM,QAAkB,EAAE;AAC1B,OAAK,MAAM,SAAS,WAAW,UAAU,QAAQ,CAC/C,KAAI,iBAAiB,MAAM,IAAI,YAAY,CACzC,OAAM,KAAK,MAAM,IAAI,KAAK;AAG9B,SAAO;;;;;;;;;;;;CAaT,MAAc,cAAc,KAAsB,KAAuB;EACvE,MAAM,SAAS,yBAAyB,UAAU,IAAI,KAAK;AAC3D,MAAI,CAAC,OAAO,SAAS;AACnB,OAAI,OAAO,IAAI,CAAC,KAAK;IACnB,OAAO;IACP,SAAS,OAAO,MAAM,SAAS,CAAC;IACjC,CAAC;AACF;;EAEF,MAAM,EAAE,UAAU,OAAO;EACzB,MAAM,aAAa,KAAK,cAAc;AACtC,MAAI,CAAC,YAAY;AACf,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,uBAAuB,CAAC;AACtD;;EAQF,MAAM,gBAAgB,KAAK,iCAAiC,WAAW;AACvE,MAAI,cAAc,SAAS,GAAG;AAC5B,OAAI,OAAO,IAAI,CAAC,KAAK,EACnB,OACE,UAAU,WAAW,KAAK,YAAY,cAAc,OAAO,2BACvD,cAAc,KAAK,KAAK,CAAC,gMAGhC,CAAC;AACF;;EAGF,MAAM,SAAS,KAAK,cAAc,IAAI;EAItC,MAAM,SAAS,KAAK;AACpB,MAAI,KAAK,iBAAiB,OAAO,IAAI,OAAO,6BAA6B;AACvE,OAAI,UAAU,eAAe,IAAI;AACjC,OAAI,OAAO,IAAI,CAAC,KAAK,EACnB,OAAO,oDAAoD,OAAO,4BAA4B,sEAC/F,CAAC;AACF;;EAKF,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,KAAK,YAAY,OAAO,OAAO;AAE9C,OAAI,OAAO,UAAU,SACnB,OAAM,KAAK,YAAY,WAAW,OAAO,IAAI,QAAQ;IACnD,IAAI,YAAY;IAChB,MAAM;IACN,SAAS;IACT,2BAAW,IAAI,MAAM;IACtB,CAAC;OAEF,MAAK,MAAM,QAAQ,OAAO;IACxB,MAAM,OAAQ,KAAK,QAAQ;IAC3B,MAAM,UACJ,OAAO,KAAK,YAAY,WACpB,KAAK,UACL,KAAK,UAAU,KAAK,WAAW,GAAG;AACxC,QAAI,CAAC,QAAS;AACd,UAAM,KAAK,YAAY,WAAW,OAAO,IAAI,QAAQ;KACnD,IAAI,YAAY;KAChB;KACA;KACA,2BAAW,IAAI,MAAM;KACtB,CAAC;;WAGC,KAAK;AACZ,UAAO,MAAM,0CAA0C,IAAI;AAC3D,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC1D;;AAGF,SAAO,KAAK,sBAAsB,KAAK,KAAK,YAAY,QAAQ,OAAO;;CAGzE,MAAc,aACZ,KACA,KACA,YACA,QACA,QACe;EACf,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,SAAS,gBAAgB;EAC/B,MAAM,YAAY,YAAY;AAC9B,OAAK,YAAY,WAAW,QAAQ,gBAAgB;EAOpD,MAAM,QAAQ,MAAM,KAAK,WAAW,UAAU,QAAQ,CAAC,CACpD,QAAQ,MAAM,EAAE,WAAW,oBAAoB,CAC/C,KAAK,MAAM,EAAE,IAAI;EACpB,MAAM,iBAAiB,KAAK;EAC5B,MAAM,SAAS,KAAK;EACpB,MAAM,iBAAiB,IAAI,cAAmC;EAC9D,MAAM,aAAa,IAAI,sBAAsB;EAM7C,MAAM,WAAqB;GACzB;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,eAAe,EAAE,OAAO,GAAG;GAC5B;EAED,MAAM,eAAe,MAAc,SACjC,KAAK,iBAAiB,UAAU,WAAW,WAAW,MAAM,MAAM,EAAE;EAMtE,MAAM,UAAU,YAAY;AAC1B,OAAI;AACF,SAAK,MAAM,OAAO,WAAW,UAAU;KACrC,MAAM;KACN,MAAM,EAAE,UAAU,OAAO,IAAI;KAC9B,CAAC,CACA,gBAAe,KAAK,IAAI;IAG1B,MAAM,cAAc,KAAK,UACrB,KAAK,QACF,gBAAgB,CAChB,QAAQ,MAAM,MAAM,KAAK,QAAQ,MAAM,SAAS,GACnD,EAAE;IAWN,MAAM,qBAAgC,CACpC;KACE,IAAI;KACJ,MAAM;KACN,SAde,sBACjB,YACA,KAAK,OAAO,kBACZ;MACE,WAAW,WAAW;MACtB;MACA,WAAW,MAAM,KAAK,MAAM,EAAE,KAAK;MACpC,CACF;KAOG,2BAAW,IAAI,MAAM;KACtB,EACD,GAAG,OAAO,SACX;IAgBD,MAAM,cAAc,MAAM,qBAdX,WAAW,QAAQ,IAChC;KACE,UAAU;KACV;KACA,UAAU,OAAO;KACjB;KACA,YAAY,uBAAuB,WAAW,UAAU;KACzD,EACD;KAAE;KAAa;KAAQ,CACxB,EAKsD;KACrD;KACA,UAAU,UAAU;AAClB,WAAK,MAAM,cAAc,WAAW,UAAU,MAAM,CAClD,gBAAe,KAAK,WAAW;;KAGpC,CAAC;AAEF,QAAI,YACF,OAAM,KAAK,YAAY,WAAW,OAAO,IAAI,QAAQ;KACnD,IAAI,YAAY;KAChB,MAAM;KACN,SAAS;KACT,2BAAW,IAAI,MAAM;KACtB,CAAC;AAGJ,SAAK,MAAM,OAAO,WAAW,UAAU,CAAE,gBAAe,KAAK,IAAI;YAC1D,OAAO;AACd,QAAI,OAAO,SAAS;AAClB,oBAAe,OAAO;AACtB;;AAEF,WAAO,MAAM,wBAAwB,MAAM;AAC3C,mBAAe,MAAM,MAAM;AAC3B;aACQ;AAGR,SAAK,aAAa,YAAY,UAAU;AACxC,SAAK,cAAc,UAAU;AAK7B,QAAI,WAAW,UACb,KAAI;AACF,WAAM,KAAK,YAAY,OAAO,OAAO,IAAI,OAAO;aACzC,KAAK;AACZ,YAAO,KACL,4CACA,OAAO,IACP,IACD;;;AAIP,kBAAe,OAAO;MACpB;AAEJ,QAAM,KAAK,cACT,KACA,mBAAmB;AACjB,OAAI;AACF,eAAW,MAAM,MAAM,eACrB,OAAM;aAEA;AACR,UAAM,OAAO,YAAY,OAAU;;KAGvC;GACE,GAAG;GACH,QAAQ;IAAE,GAAG,oBAAoB;IAAQ,UAAU;IAAW;GAC/D,CACF;;;;;;;;;;;;;;;;;;;;;;;;;CA0BH,MAAc,sBACZ,KACA,KACA,YACA,QACA,QACe;EACf,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,SAAS,gBAAgB;EAC/B,MAAM,YAAY,YAAY;AAC9B,OAAK,YAAY,WAAW,QAAQ,gBAAgB;EAEpD,MAAM,QAAQ,MAAM,KAAK,WAAW,UAAU,QAAQ,CAAC,CAAC,KAAK,MAAM,EAAE,IAAI;EAGzE,MAAM,WAAqB;GACzB;GACA;GACA;GACA;GACA;GAIA,gBAAgB;IAAE,uBAAuB;IAAO,WAAW;IAAG;GAC9D,QAZa,KAAK;GAalB,YAAY,IAAI,sBAAsB;GACtC,gBAAgB,IAAI,cAAmC;GACvD,eAAe,EAAE,OAAO,GAAG;GAC5B;EAED,MAAM,eAAe,MAAc,SACjC,KAAK,iBAAiB,UAAU,WAAW,WAAW,MAAM,MAAM,EAAE;EAEtE,IAAI,cAAc;AAClB,MAAI;GACF,MAAM,cAAc,KAAK,UACrB,KAAK,QACF,gBAAgB,CAChB,QAAQ,MAAM,MAAM,KAAK,QAAQ,MAAM,SAAS,GACnD,EAAE;GAWN,MAAM,qBAAgC,CACpC;IACE,IAAI;IACJ,MAAM;IACN,SAde,sBACjB,YACA,KAAK,OAAO,kBACZ;KACE,WAAW,WAAW;KACtB;KACA,WAAW,MAAM,KAAK,MAAM,EAAE,KAAK;KACpC,CACF;IAOG,2BAAW,IAAI,MAAM;IACtB,EACD,GAAG,OAAO,SACX;AAYD,iBAAc,MAAM,qBAVL,WAAW,QAAQ,IAChC;IACE,UAAU;IACV;IACA,UAAU,OAAO;IACjB;IACD,EACD;IAAE;IAAa;IAAQ,CACxB,EAEgD,EAAE,QAAQ,CAAC;AAE5D,OAAI,YACF,OAAM,KAAK,YAAY,WAAW,OAAO,IAAI,QAAQ;IACnD,IAAI,YAAY;IAChB,MAAM;IACN,SAAS;IACT,2BAAW,IAAI,MAAM;IACtB,CAAC;WAEG,OAAO;AACd,OAAI,OAAO,SAAS;AAClB,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,mBAAmB,CAAC;AAClD;;AAEF,UAAO,MAAM,0BAA0B,MAAM;GAC7C,MAAM,UACJ,QAAQ,IAAI,aAAa,eACrB,0BACA,iBAAiB,QACf,MAAM,UACN,OAAO,MAAM;AACrB,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,SAAS,CAAC;AACxC;YACQ;AACR,QAAK,aAAa,YAAY,UAAU;AACxC,QAAK,cAAc,UAAU;AAC7B,OAAI,WAAW,UACb,KAAI;AACF,UAAM,KAAK,YAAY,OAAO,OAAO,IAAI,OAAO;YACzC,KAAK;AACZ,WAAO,KACL,4CACA,OAAO,IACP,IACD;;;EAKP,MAAM,aAAa,QAAQ,YAAY;EAEvC,MAAM,UAAiC;GACrC,MAAM;GACN,IAHgB,OAAO,YAAY;GAInC,QAAQ;GACR,MAAM;GACN,SAAS,CAAC;IAAE,MAAM;IAAe,MAAM;IAAa,CAAC;GACtD;AACD,MAAI,KAAK;GACP,IAAI;GACJ,QAAQ;GACR,YAAY,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;GACzC,QAAQ;GACR,WAAW,OAAO;GAClB,QAAQ,CAAC,QAAQ;GAClB,CAAC;;;;;;;;;;;;;CAcJ,MAAc,iBACZ,UACA,WACA,MACA,MACA,OACkB;AAClB,MAAI,SAAS,cAAc,SAAS,SAAS,OAAO,cAAc;AAChE,YAAS,gBAAgB,sBACvB,IAAI,MACF,qCAAqC,SAAS,OAAO,aAAa,IACnE,CACF;AACD,SAAM,IAAI,MACR,qCAAqC,SAAS,OAAO,aAAa,2FACnE;;AAEH,WAAS,cAAc;EAEvB,MAAM,QAAQ,UAAU,IAAI,KAAK;AACjC,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,iBAAiB,OAAO;AAEpD,MACE,SAAS,eAAe,yBACxB,iBAAiB,MAAM,IAAI,YAAY,EACvC;GACA,MAAM,aAAa,YAAY;AAC/B,QAAK,MAAM,MAAM,SAAS,WAAW,UAAU;IAC7C,MAAM;IACN;IACA,UAAU,SAAS;IACnB,UAAU;IACV;IACA,aAAa,MAAM,IAAI;IACxB,CAAC,CACA,UAAS,eAAe,KAAK,GAAG;AAQlC,OANiB,MAAM,KAAK,aAAa,KAAK;IAC5C;IACA,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,WAAW,SAAS,eAAe;IACpC,CAAC,KACe,OACf,QAAO,sDAAsD,KAAK;;EAItE,IAAI;AACJ,MAAI,MAAM,WAAW,WAAW;AAC9B,OAAI,CAAC,KAAK,QACR,OAAM,IAAI,MACR,2FACD;AAEH,YAAS,MAAM,KAAK,QAAQ,YAC1B,SAAS,KACT,MAAM,YACN,MAAM,WACN,MACA,SAAS,QACT,SAAS,OAAO,kBACjB;aACQ,MAAM,WAAW,YAAY;AAMtC,OAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,MAAM,QAAQ,KAAK,CAClE,OAAM,IAAI,MACR,kBAAkB,KAAK,uCAAuC,SAAS,OAAO,SAAS,MAAM,QAAQ,KAAK,GAAG,UAAU,OAAO,KAAK,4BACpI;AAEH,YAAS,MAAM,MAAM,aAAa,QAChC,KACD;aACQ,MAAM,WAAW,OAAO;AACjC,OAAI,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,2BAA2B;GAChE,MAAM,WAAW,SAAS,IAAI,QAAQ;GACtC,MAAM,UACJ,OAAO,aAAa,WAChB,EAAE,eAAe,UAAU,YAAY,GACvC;AACN,YAAS,MAAM,KAAK,UAAU,SAAS,MAAM,aAAa,MAAM,QAAQ;aAC/D,MAAM,WAAW,YAAY;GACtC,MAAM,aAAa,KAAK,OAAO,IAAI,MAAM,UAAU;AACnD,OAAI,CAAC,WACH,OAAM,IAAI,MAAM,wBAAwB,MAAM,YAAY;AAC5D,YAAS,MAAM,KAAK,YAAY,UAAU,YAAY,MAAM,QAAQ,EAAE;aAC7D,MAAM,WAAW,oBAQ1B,OAAM,IAAI,MACR,SAAS,KAAK,8MAEf;AAGH,SAAO,oBAAoB,OAAO;;;;;;;;;;;;;;;;CAiBpC,MAAc,YACZ,UACA,OACA,MACA,OACiB;AACjB,MAAI,QAAQ,SAAS,OAAO,iBAC1B,OAAM,IAAI,MACR,mCAAmC,SAAS,OAAO,iBAAiB,kFAErE;EAGH,MAAM,QACJ,OAAO,SAAS,YAChB,SAAS,QACT,OAAQ,KAA6B,UAAU,WAC1C,KAA2B,QAC5B,KAAK,UAAU,KAAK;EAI1B,MAAM,aAAa,MAAM,KAAK,MAAM,UAAU,QAAQ,CAAC,CACpD,QAAQ,MAAM,EAAE,WAAW,oBAAoB,CAC/C,KAAK,MAAM,EAAE,IAAI;EAEpB,MAAM,gBAAgB,MAAc,cAClC,KAAK,iBAAiB,UAAU,MAAM,WAAW,MAAM,WAAW,MAAM;EAE1E,MAAM,aAA8B;GAClC,aAAa;GACb,QAAQ,SAAS;GAClB;EAED,MAAM,cAAc,KAAK,UACrB,KAAK,QACF,gBAAgB,CAChB,QAAQ,MAAM,MAAM,KAAK,QAAQ,MAAM,SAAS,GACnD,EAAE;EAWN,MAAM,WAAsB,CAC1B;GACE,IAAI;GACJ,MAAM;GACN,SAdiB,sBACnB,OACA,KAAK,OAAO,kBACZ;IACE,WAAW,MAAM;IACjB;IACA,WAAW,WAAW,KAAK,MAAM,EAAE,KAAK;IACzC,CACF;GAOG,2BAAW,IAAI,MAAM;GACtB,EACD;GACE,IAAI,YAAY;GAChB,MAAM;GACN,SAAS;GACT,2BAAW,IAAI,MAAM;GACtB,CACF;AAED,SAAO,qBACL,MAAM,QAAQ,IACZ;GACE;GACA,OAAO;GACP,UAAU,YAAY;GACtB,QAAQ,SAAS;GACjB,YAAY,uBAAuB,MAAM,UAAU;GACpD,EACD,WACD,EACD;GACE,QAAQ,SAAS;GAWjB,UAAU,UAAU;AAClB,QAAI,MAAM,SAAS,WAAY;AAC/B,SAAK,MAAM,cAAc,SAAS,WAAW,UAAU,MAAM,CAC3D,UAAS,eAAe,KAAK,WAAW;;GAG7C,CACF;;CAGH,MAAc,cAAc,KAAsB,KAAuB;EACvE,MAAM,SAAS,oBAAoB,UAAU,IAAI,KAAK;AACtD,MAAI,CAAC,OAAO,SAAS;AACnB,OAAI,OAAO,IAAI,CAAC,KAAK;IACnB,OAAO;IACP,SAAS,OAAO,MAAM,SAAS,CAAC;IACjC,CAAC;AACF;;EAEF,MAAM,EAAE,aAAa,OAAO;EAC5B,MAAM,QAAQ,KAAK,cAAc,IAAI,SAAS;AAC9C,MAAI,CAAC,OAAO;AAEV,OAAI,KAAK,EAAE,WAAW,MAAM,CAAC;AAC7B;;EAEF,MAAM,SAAS,KAAK,cAAc,IAAI;AACtC,MAAI,MAAM,WAAW,QAAQ;AAC3B,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,aAAa,CAAC;AAC5C;;AAEF,QAAM,WAAW,MAAM,oBAAoB;AAC3C,OAAK,cAAc,SAAS;AAC5B,OAAK,aAAa,YAAY,SAAS;AACvC,MAAI,KAAK,EAAE,WAAW,MAAM,CAAC;;CAG/B,MAAc,eAAe,KAAsB,KAAuB;EACxE,MAAM,SAAS,sBAAsB,UAAU,IAAI,KAAK;AACxD,MAAI,CAAC,OAAO,SAAS;AACnB,OAAI,OAAO,IAAI,CAAC,KAAK;IACnB,OAAO;IACP,SAAS,OAAO,MAAM,SAAS,CAAC;IACjC,CAAC;AACF;;EAEF,MAAM,EAAE,UAAU,YAAY,aAAa,OAAO;EAElD,MAAM,cAAc,KAAK,cAAc,IAAI,SAAS;AACpD,MAAI,CAAC,aAAa;AAIhB,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,yCAAyC,CAAC;AACxE;;EAGF,MAAM,SAAS,KAAK,cAAc,IAAI;AACtC,MAAI,YAAY,WAAW,QAAQ;AACjC,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,aAAa,CAAC;AAC5C;;EAGF,MAAM,SAAS,KAAK,aAAa,OAAO;GAAE;GAAY;GAAQ;GAAU,CAAC;AACzE,MAAI,CAAC,OAAO,IAAI;AACd,OAAI,OAAO,WAAW,aAAa;AACjC,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,aAAa,CAAC;AAC5C;;AAEF,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,yCAAyC,CAAC;AACxE;;AAGF,MAAI,KAAK,EAAE,UAAU,CAAC;;CAGxB,MAAc,mBACZ,KACA,KACA;EACA,MAAM,SAAS,KAAK,cAAc,IAAI;EACtC,MAAM,UAAU,MAAM,KAAK,YAAY,KAAK,OAAO;AACnD,MAAI,KAAK,EAAE,SAAS,CAAC;;CAGvB,MAAc,iBAAiB,KAAsB,KAAuB;EAC1E,MAAM,SAAS,KAAK,cAAc,IAAI;EACtC,MAAM,SAAS,MAAM,KAAK,YAAY,IAAI,IAAI,OAAO,UAAU,OAAO;AACtE,MAAI,CAAC,QAAQ;AACX,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;;AAEF,MAAI,KAAK,OAAO;;CAGlB,MAAc,oBACZ,KACA,KACA;EACA,MAAM,SAAS,KAAK,cAAc,IAAI;AAEtC,MAAI,CADY,MAAM,KAAK,YAAY,OAAO,IAAI,OAAO,UAAU,OAAO,EAC5D;AACZ,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;;AAEF,MAAI,KAAK,EAAE,SAAS,MAAM,CAAC;;CAG7B,AAAQ,aAAa,MAAuC;AAC1D,MAAI,KAAM,QAAO,KAAK,OAAO,IAAI,KAAK,IAAI;AAC1C,MAAI,KAAK,iBACP,QAAO,KAAK,OAAO,IAAI,KAAK,iBAAiB,IAAI;EAEnD,MAAM,QAAQ,KAAK,OAAO,QAAQ,CAAC,MAAM;AACzC,SAAO,MAAM,OAAO,OAAO,MAAM;;CAGnC,AAAQ,gBAAsB;AAC5B,MAAI,KAAK,OAAO,SAAS,EAAG;AAC5B,UAAQ,IAAI,GAAG;AACf,UAAQ,IAAI,KAAK,GAAG,KAAK,SAAS,CAAC,GAAG,GAAG,IAAI,IAAI,KAAK,OAAO,KAAK,GAAG,GAAG;AACxE,UAAQ,IAAI,KAAK,GAAG,IAAI,IAAI,OAAO,GAAG,CAAC,GAAG;AAC1C,OAAK,MAAM,CAAC,MAAM,QAAQ,KAAK,QAAQ;GACrC,MAAM,QAAQ,IAAI,UAAU;GAC5B,MAAM,SAAS,SAAS,KAAK,mBAAmB,GAAG,MAAM,IAAI,GAAG;AAChE,WAAQ,IACN,KAAK,OAAO,GAAG,GAAG,KAAK,KAAK,OAAO,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,MAAM,QAAQ,GACpE;;AAEH,UAAQ,IAAI,KAAK,GAAG,IAAI,IAAI,OAAO,GAAG,CAAC,GAAG;AAC1C,UAAQ,IAAI,GAAG;;CAGjB,MAAM,WAA0B;AAC9B,OAAK,aAAa,UAAU;AAC5B,MAAI,KAAK,WAAW;AAClB,SAAM,KAAK,UAAU,OAAO;AAC5B,QAAK,YAAY;;;CAIrB,UAAU;AACR,SAAO;GACL,WAAW,MAAc,QACvB,KAAK,kBAAkB,MAAM,IAAI;GACnC,YAAY,MAAM,KAAK,KAAK,OAAO,MAAM,CAAC;GAC1C,MAAM,SAAiB,KAAK,OAAO,IAAI,KAAK,IAAI;GAChD,cAAc,KAAK,QAAQ;GAC3B,kBAAkB,KAAK;GACvB,aAAa,WAAmB,KAAK,YAAY,KAAK,OAAO;GAC9D;;CAGH,MAAc,kBACZ,MACA,KACe;EACf,MAAM,aAAa,MAAM,KAAK,qBAAqB,MAAM,KAAK,EAC5D,QAAQ,QACT,CAAC;AACF,OAAK,OAAO,IAAI,MAAM,WAAW;AACjC,MAAI,CAAC,KAAK,iBAAkB,MAAK,mBAAmB;;;AAIxD,SAAS,qBAAqB,OAG5B;AAMA,KAAI,UAAU,OAAW,QAAO;EAAE,MAAM;EAAO,MAAM;EAAO;AAC5D,KAAI,OAAO,UAAU,UAAW,QAAO;EAAE,MAAM;EAAO,MAAM;EAAO;AACnE,QAAO;EAAE,MAAM,MAAM,QAAQ;EAAO,MAAM,MAAM,QAAQ;EAAO;;AAGjE,SAAS,sBACP,YACA,aACA,KACQ;CACR,MAAM,WAAW,WAAW;CAC5B,MAAM,WAAW,aAAa,SAAY,WAAW;CAErD,IAAI,OAAO;AACX,KAAI,aAAa,MACf,QAAO;UACE,OAAO,aAAa,SAC7B,QAAO;UACE,OAAO,aAAa,WAC7B,QAAO,SAAS,IAAI;KAEpB,QAAO,sBAAsB,IAAI;AAGnC,QAAO,oBAAoB,MAAM,WAAW,aAAa;;;;;;;AAQ3D,SAAS,0BAA0B,MAA8B;AAC/D,SAAQ,KAAK,MAAb;EACE,KAAK,cACH,QAAO,KAAK,YAAY;EAC1B,KAAK,cACH,QAAO,KAAK,YAAY;EAC1B,KAAK,sBACH,QAAO,KAAK,oBAAoB;EAClC,KAAK,MACH,QAAO,KAAK,IAAI;EAClB,KAAK,gBACH,QAAO,KAAK,cAAc;;;;;;;;;AAUhC,SAAS,uBACP,WAC+C;CAC/C,MAAM,kBAAoC,EAAE;AAC5C,MAAK,MAAM,SAAS,UAAU,QAAQ,CACpC,KAAI,MAAM,WAAW,oBACnB,iBAAgB,KAAK,MAAM,KAAK;AAGpC,KAAI,gBAAgB,WAAW,EAAG,QAAO;AACzC,QAAO,GACJ,2BAA2B,EAAE,aAAa,iBAAiB,EAC7D;;;;;;;;AASH,SAAS,yBACP,WACA,SACA,WACM;CACN,MAAM,WAAW,IAAI,IAAI,QAAQ,qBAAqB,EAAE,CAAC;CAEzD,MAAM,uBAAiC,EAAE;CACzC,MAAM,gBAA0B,EAAE;AAClC,MAAK,MAAM,CAAC,KAAK,UAAU,UACzB,KAAI,MAAM,WAAW,oBACnB,sBAAqB,KAAK,IAAI;KAE9B,eAAc,KAAK,IAAI;AAI3B,KACE,qBAAqB,SAAS,KAC9B,CAAC,SAAS,IAAI,yBAAyB,CAEvC,QAAO,KACL,UAAU,UAAU,sCAAsC,qBAAqB,KAAK,KAAK,CAAC,mMAG3F;AAMH,KAAI,QAAQ,uBAAuB,SAAS,cAAc,SAAS,EACjE,QAAO,KACL,UAAU,UAAU,sDAAsD,cAAc,KAAK,KAAK,CAAC,yKAGpG;;;;;;;;;;;;;;;;;AAmBL,MAAa,SAAS,SAAS,aAAa"}
+{"version":3,"file":"agents.js","names":["manifest"],"sources":["../../../src/plugins/agents/agents.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport path from \"node:path\";\nimport type express from \"express\";\nimport pc from \"picocolors\";\nimport type {\n  AgentAdapter,\n  AgentRunContext,\n  AgentToolDefinition,\n  IAppRouter,\n  Message,\n  PluginPhase,\n  ResponseOutputMessage,\n  ResponseStreamEvent,\n  Thread,\n  ToolAnnotations,\n  ToolProvider,\n} from \"shared\";\nimport {\n  isSupervisorTool,\n  SUPERVISOR_EXTENSION_KEY,\n  type SupervisorTool,\n} from \"../../agents/supervisor-api\";\nimport { AppKitMcpClient, buildMcpHostPolicy } from \"../../connectors/mcp\";\nimport { consumeAdapterStream } from \"../../core/agent/consume-adapter-stream\";\nimport { loadAgentsFromDir } from \"../../core/agent/load-agents\";\nimport { normalizeToolResult } from \"../../core/agent/normalize-result\";\nimport { createPluginsProxy } from \"../../core/agent/plugins-map\";\nimport {\n  buildBaseSystemPrompt,\n  composeSystemPrompt,\n} from \"../../core/agent/system-prompt\";\nimport { resolveToolkitFromProvider } from \"../../core/agent/toolkit-resolver\";\nimport {\n  functionToolToDefinition,\n  isFunctionTool,\n  isHostedTool,\n  resolveHostedTools,\n} from \"../../core/agent/tools\";\nimport type {\n  AgentDefinition,\n  AgentsPluginConfig,\n  AgentTools,\n  BaseSystemPromptOption,\n  Plugins,\n  PluginToolkitProvider,\n  PromptContext,\n  RegisteredAgent,\n  ResolvedToolEntry,\n} from \"../../core/agent/types\";\nimport { isToolkitEntry } from \"../../core/agent/types\";\nimport { createLogger } from \"../../logging/logger\";\nimport { Plugin, toPlugin } from \"../../plugin\";\nimport type { PluginManifest } from \"../../registry\";\nimport { agentStreamDefaults } from \"./defaults\";\nimport { EventChannel } from \"./event-channel\";\nimport { AgentEventTranslator } from \"./event-translator\";\nimport manifest from \"./manifest.json\";\nimport {\n  currentTraceId,\n  initAgentTracing,\n  linkTraceToRun,\n  traceAgent,\n  traceTool,\n} from \"./mlflow\";\nimport {\n  approvalRequestSchema,\n  cancelRequestSchema,\n  chatRequestSchema,\n  invocationsRequestSchema,\n} from \"./schemas\";\nimport { InMemoryThreadStore } from \"./thread-store\";\nimport { ToolApprovalGate } from \"./tool-approval-gate\";\n\nconst logger = createLogger(\"agents\");\n\nconst DEFAULT_AGENTS_DIR = \"./config/agents\";\n\n/**\n * Context flag recorded on the in-memory AgentDefinition to indicate whether\n * it came from markdown (file) or from user code. Drives the asymmetric\n * `autoInheritTools` default.\n */\ninterface AgentSource {\n  origin: \"file\" | \"code\";\n}\n\n/**\n * Decide whether a tool call must traverse the approval gate. Honours both\n * the modern `effect` field (mutating values: write / update / destructive)\n * and the legacy `destructive: true` boolean. The contract is documented on\n * `ToolAnnotations.effect` in shared/agent.ts.\n *\n * Without this, a tool authored only with `effect: \"destructive\"` (the\n * preferred API) bypassed the gate entirely.\n */\nfunction requiresApproval(annotations: ToolAnnotations | undefined): boolean {\n  if (!annotations) return false;\n  if (annotations.destructive === true) return true;\n  switch (annotations.effect) {\n    case \"write\":\n    case \"update\":\n    case \"destructive\":\n      return true;\n    case \"read\":\n    case undefined:\n      return false;\n    default: {\n      const _exhaustive: never = annotations.effect;\n      return false;\n    }\n  }\n}\n\n/**\n * Per-stream state shared between the top-level `executeTool` and any\n * `runSubAgent` calls below it. Carrying the budget counter, abort signal,\n * approval policy, and event-channel through one object is what lets the\n * sub-agent path enforce the same limits and approval gate as the parent.\n *\n * Without this shared state the sub-agent path silently bypassed both the\n * tool-call budget and the destructive-tool approval gate.\n */\ninterface RunState {\n  req: express.Request;\n  userId: string;\n  requestId: string;\n  abortController: AbortController;\n  signal: AbortSignal;\n  approvalPolicy: { requireForDestructive: boolean; timeoutMs: number };\n  limits: {\n    maxConcurrentStreamsPerUser: number;\n    maxToolCalls: number;\n    maxSubAgentDepth: number;\n    toolCallTimeoutMs: number;\n  };\n  translator: AgentEventTranslator;\n  outboundEvents: EventChannel<ResponseStreamEvent>;\n  /** Boxed mutable counter shared across parent + all sub-agent dispatches. */\n  toolCallsUsed: { count: number };\n}\n\nexport class AgentsPlugin extends Plugin implements ToolProvider {\n  // Routed through `unknown`: the optional resources have differing `fields`\n  // keys (serving `name`, experiment `experimentId`), which TS widens to an\n  // incompatible union on the JSON import. The shape is validated at runtime\n  // against the plugin-manifest schema.\n  static manifest = manifest as unknown as PluginManifest;\n  static phase: PluginPhase = \"deferred\";\n\n  protected declare config: AgentsPluginConfig;\n\n  private agents = new Map<string, RegisteredAgent>();\n  private defaultAgentName: string | null = null;\n  private activeStreams = new Map<\n    string,\n    { controller: AbortController; userId: string }\n  >();\n  /**\n   * Per-user stream count, kept in sync with `activeStreams` so the\n   * concurrent-stream rate limit check is O(1) instead of O(n) over every\n   * active stream on every request. Mutated only via {@link trackStream}\n   * and {@link untrackStream}.\n   */\n  private userStreamCounts = new Map<string, number>();\n  private mcpClient: AppKitMcpClient | null = null;\n  private threadStore;\n  private approvalGate = new ToolApprovalGate();\n\n  constructor(config: AgentsPluginConfig) {\n    super(config);\n    this.config = config;\n    if (config.threadStore) {\n      this.threadStore = config.threadStore;\n    } else {\n      this.threadStore = new InMemoryThreadStore();\n      if (process.env.NODE_ENV === \"production\") {\n        logger.warn(\n          \"InMemoryThreadStore is in use in a production build (NODE_ENV=production). \" +\n            \"Thread history is unbounded and lost on restart. \" +\n            \"Pass agents({ threadStore: <persistent impl> }) for real deployments.\",\n        );\n      } else {\n        logger.info(\n          \"Using default InMemoryThreadStore (dev-only — threads are lost on restart and grow without bound).\",\n        );\n      }\n    }\n  }\n\n  /**\n   * Effective approval policy with defaults applied. Memoised so the\n   * `timeoutMs` validation warning fires at most once per plugin instance —\n   * `resolvedApprovalPolicy` gets hit on every chat stream and a noisy\n   * misconfig would otherwise spam the logs.\n   *\n   * `timeoutMs` is clamped to a 1s floor so a misconfigured value (`0`,\n   * negative, or `NaN`) can't degrade into immediate auto-denial of every\n   * mutating tool call.\n   */\n  private cachedApprovalPolicy: {\n    requireForDestructive: boolean;\n    timeoutMs: number;\n  } | null = null;\n\n  private get resolvedApprovalPolicy(): {\n    requireForDestructive: boolean;\n    timeoutMs: number;\n  } {\n    if (this.cachedApprovalPolicy) return this.cachedApprovalPolicy;\n    const cfg = this.config.approval ?? {};\n    const APPROVAL_TIMEOUT_FLOOR_MS = 1_000;\n    const APPROVAL_TIMEOUT_DEFAULT_MS = 60_000;\n    let timeoutMs = cfg.timeoutMs ?? APPROVAL_TIMEOUT_DEFAULT_MS;\n    if (!Number.isFinite(timeoutMs) || timeoutMs < APPROVAL_TIMEOUT_FLOOR_MS) {\n      logger.warn(\n        \"approval.timeoutMs=%s is below the %sms floor; using default %sms instead. Mutating tool calls would otherwise auto-deny before any UI could respond.\",\n        cfg.timeoutMs,\n        APPROVAL_TIMEOUT_FLOOR_MS,\n        APPROVAL_TIMEOUT_DEFAULT_MS,\n      );\n      timeoutMs = APPROVAL_TIMEOUT_DEFAULT_MS;\n    }\n    this.cachedApprovalPolicy = {\n      requireForDestructive: cfg.requireForDestructive ?? true,\n      timeoutMs,\n    };\n    return this.cachedApprovalPolicy;\n  }\n\n  /** Effective DoS limits with defaults applied. */\n  private get resolvedLimits(): {\n    maxConcurrentStreamsPerUser: number;\n    maxToolCalls: number;\n    maxSubAgentDepth: number;\n    toolCallTimeoutMs: number;\n  } {\n    const cfg = this.config.limits ?? {};\n    return {\n      maxConcurrentStreamsPerUser: cfg.maxConcurrentStreamsPerUser ?? 5,\n      maxToolCalls: cfg.maxToolCalls ?? 50,\n      maxSubAgentDepth: cfg.maxSubAgentDepth ?? 3,\n      // 5 minutes is the floor for cold SQL Warehouse / long Genie /\n      // long Lakebase calls. The previous PluginContext default of 30s\n      // truncated legitimate analytics queries on cold compute.\n      toolCallTimeoutMs: cfg.toolCallTimeoutMs ?? 300_000,\n    };\n  }\n\n  /** Count active streams owned by a given user. O(1). */\n  private countUserStreams(userId: string): number {\n    return this.userStreamCounts.get(userId) ?? 0;\n  }\n\n  /**\n   * Register a stream for `userId` and bump the per-user counter. Paired\n   * with {@link untrackStream}; the two helpers are the only writers to\n   * `activeStreams` + `userStreamCounts`, so the counter cannot drift from\n   * the map.\n   */\n  private trackStream(\n    requestId: string,\n    userId: string,\n    controller: AbortController,\n  ): void {\n    this.activeStreams.set(requestId, { controller, userId });\n    this.userStreamCounts.set(\n      userId,\n      (this.userStreamCounts.get(userId) ?? 0) + 1,\n    );\n  }\n\n  /**\n   * Remove a stream from the active map and decrement the per-user\n   * counter. Idempotent — calling twice for the same `requestId` is a\n   * no-op (the second call sees no entry and returns early).\n   */\n  private untrackStream(requestId: string): void {\n    const entry = this.activeStreams.get(requestId);\n    if (!entry) return;\n    this.activeStreams.delete(requestId);\n    const next = (this.userStreamCounts.get(entry.userId) ?? 0) - 1;\n    if (next <= 0) {\n      this.userStreamCounts.delete(entry.userId);\n    } else {\n      this.userStreamCounts.set(entry.userId, next);\n    }\n  }\n\n  async setup() {\n    await initAgentTracing();\n    const { agents, defaultAgentName } = await this.buildAgentRegistry();\n    this.agents = agents;\n    this.defaultAgentName = defaultAgentName;\n    this.mountInvokeRoutes();\n    this.printRegistry();\n  }\n\n  /**\n   * Reload agents from the configured directory, preserving code-defined\n   * agents. Builds a fresh registry first and only swaps on success — if\n   * `loadAgents` throws (malformed markdown, missing tool reference) the\n   * existing live registry stays in place and serving requests keep working.\n   */\n  async reload(): Promise<void> {\n    const next = await this.buildAgentRegistry();\n    // Deliberately NOT closing the existing mcpClient here. Tool\n    // dispatch in `dispatchToolCall` reads `this.mcpClient` at call\n    // time; closing it mid-stream throws \"MCP client is closed\" from\n    // the next sendRpc and kills the in-flight conversation. The\n    // client owns only short-lived `fetch` handles (no keep-alive\n    // sockets) and the connections map persists in the live instance,\n    // so dropping `this.mcpClient` would also strand in-flight tool\n    // calls that resolved the field a moment earlier. Leave the live\n    // client in place; `buildAgentRegistry` -> `connectHostedTools`\n    // adds any new endpoints to the same instance, and stale\n    // connections from a removed config become unreachable through\n    // the new agent tool indexes (small memory cost, no correctness\n    // hazard). The shutdown path still closes — that's process\n    // teardown, where in-flight streams have already been aborted via\n    // `abortActiveOperations`.\n    this.agents = next.agents;\n    this.defaultAgentName = next.defaultAgentName;\n  }\n\n  /**\n   * Builds the agent registry into a fresh `Map` without touching live state.\n   * Called by both `setup` and `reload`; the latter only swaps the live\n   * registry once this resolves successfully (atomic reload).\n   */\n  private async buildAgentRegistry(): Promise<{\n    agents: Map<string, RegisteredAgent>;\n    defaultAgentName: string | null;\n  }> {\n    const { defs: fileDefs, defaultAgent: fileDefault } =\n      await this.loadFileDefinitions();\n\n    const codeDefs = this.config.agents ?? {};\n\n    for (const name of Object.keys(fileDefs)) {\n      if (codeDefs[name]) {\n        logger.warn(\n          \"Agent '%s' defined in both code and a markdown file. Code definition takes precedence.\",\n          name,\n        );\n      }\n    }\n\n    const merged: Record<string, { def: AgentDefinition; src: AgentSource }> =\n      {};\n    for (const [name, def] of Object.entries(fileDefs)) {\n      merged[name] = { def, src: { origin: \"file\" } };\n    }\n    for (const [name, def] of Object.entries(codeDefs)) {\n      merged[name] = { def, src: { origin: \"code\" } };\n    }\n\n    const agents = new Map<string, RegisteredAgent>();\n    let defaultAgentName: string | null = null;\n\n    if (Object.keys(merged).length === 0) {\n      logger.info(\n        \"No agents registered (no files in %s, no code-defined agents)\",\n        this.resolvedAgentsDir() ?? \"<disabled>\",\n      );\n      return { agents, defaultAgentName };\n    }\n\n    for (const [name, { def, src }] of Object.entries(merged)) {\n      try {\n        const registered = await this.buildRegisteredAgent(name, def, src);\n        agents.set(name, registered);\n        if (!defaultAgentName) defaultAgentName = name;\n      } catch (err) {\n        throw new Error(\n          `Failed to register agent '${name}' (${src.origin}): ${\n            err instanceof Error ? err.message : String(err)\n          }`,\n          { cause: err instanceof Error ? err : undefined },\n        );\n      }\n    }\n\n    if (this.config.defaultAgent) {\n      if (!agents.has(this.config.defaultAgent)) {\n        throw new Error(\n          `defaultAgent '${this.config.defaultAgent}' is not registered. Available: ${Array.from(agents.keys()).join(\", \")}`,\n        );\n      }\n      defaultAgentName = this.config.defaultAgent;\n    } else if (fileDefault && agents.has(fileDefault)) {\n      defaultAgentName = fileDefault;\n    }\n\n    return { agents, defaultAgentName };\n  }\n\n  private resolvedAgentsDir(): string | null {\n    if (this.config.dir === false) return null;\n    const dir = this.config.dir ?? DEFAULT_AGENTS_DIR;\n    return path.isAbsolute(dir) ? dir : path.resolve(process.cwd(), dir);\n  }\n\n  private async loadFileDefinitions(): Promise<{\n    defs: Record<string, AgentDefinition>;\n    defaultAgent: string | null;\n  }> {\n    const dir = this.resolvedAgentsDir();\n    if (!dir) return { defs: {}, defaultAgent: null };\n\n    const pluginToolProviders = this.pluginProviderIndex();\n    const ambient = this.config.tools ?? {};\n\n    const result = await loadAgentsFromDir(dir, {\n      defaultModel: this.config.defaultModel,\n      availableTools: ambient,\n      plugins: pluginToolProviders,\n      codeAgents: this.config.agents,\n    });\n\n    return result;\n  }\n\n  /**\n   * Builds the map of plugin-name → toolkit that the markdown loader consults\n   * when resolving `plugin:NAME` entries in the unified `tools:` frontmatter\n   * list (and, equivalently, that the code form passes as the `plugins`\n   * argument to `tools(plugins) => Record<...>`).\n   */\n  private pluginProviderIndex(): Map<\n    string,\n    { toolkit: (opts?: unknown) => Record<string, unknown> }\n  > {\n    const out = new Map();\n    if (!this.context) return out;\n    for (const { name, provider } of this.context.getToolProviders()) {\n      const withToolkit = provider as ToolProvider & {\n        toolkit?: (opts?: unknown) => Record<string, unknown>;\n      };\n      if (typeof withToolkit.toolkit === \"function\") {\n        out.set(name, {\n          toolkit: withToolkit.toolkit.bind(withToolkit),\n        });\n      }\n    }\n    return out;\n  }\n\n  private async buildRegisteredAgent(\n    name: string,\n    def: AgentDefinition,\n    src: AgentSource,\n  ): Promise<RegisteredAgent> {\n    const adapter = await this.resolveAdapter(def, name);\n    const toolIndex = await this.buildToolIndex(name, def, src);\n\n    warnOnCapabilityMismatch(name, adapter, toolIndex);\n\n    return {\n      name,\n      instructions: def.instructions,\n      adapter,\n      toolIndex,\n      baseSystemPrompt: def.baseSystemPrompt,\n      maxSteps: def.maxSteps,\n      maxTokens: def.maxTokens,\n      generationParams: def.generationParams,\n      ephemeral: def.ephemeral,\n    };\n  }\n\n  private async resolveAdapter(\n    def: AgentDefinition,\n    name: string,\n  ): Promise<AgentAdapter> {\n    const source = def.model ?? this.config.defaultModel;\n    // Per-agent adapter knobs from `AgentDefinition` / markdown frontmatter.\n    // Only applied when AppKit builds the adapter itself (string or omitted\n    // model). Users who pass a pre-built `AgentAdapter` own these settings.\n    const adapterOptions: {\n      maxSteps?: number;\n      maxTokens?: number;\n      generationParams?: AgentDefinition[\"generationParams\"];\n    } = {};\n    if (def.maxSteps !== undefined) adapterOptions.maxSteps = def.maxSteps;\n    if (def.maxTokens !== undefined) adapterOptions.maxTokens = def.maxTokens;\n    if (def.generationParams !== undefined)\n      adapterOptions.generationParams = def.generationParams;\n\n    if (!source) {\n      const { DatabricksAdapter } = await import(\"../../agents/databricks\");\n      try {\n        return await DatabricksAdapter.fromModelServing(\n          undefined,\n          adapterOptions,\n        );\n      } catch (err) {\n        throw new Error(\n          `Agent '${name}' has no model configured and no DATABRICKS_SERVING_ENDPOINT_NAME default available`,\n          { cause: err instanceof Error ? err : undefined },\n        );\n      }\n    }\n    if (typeof source === \"string\") {\n      const { DatabricksAdapter } = await import(\"../../agents/databricks\");\n      return DatabricksAdapter.fromModelServing(source, adapterOptions);\n    }\n    return await source;\n  }\n\n  /**\n   * Resolves an agent's tool record into a per-agent dispatch index. Connects\n   * hosted tools via MCP client. Applies `autoInheritTools` defaults when the\n   * definition has no declared tools/agents.\n   */\n  private async buildToolIndex(\n    agentName: string,\n    def: AgentDefinition,\n    src: AgentSource,\n  ): Promise<Map<string, ResolvedToolEntry>> {\n    const index = new Map<string, ResolvedToolEntry>();\n    const hasDeclaredTools = def.tools !== undefined;\n    const toolsRecord = this.resolveDefTools(agentName, def);\n    const hasExplicitSubAgents =\n      def.agents && Object.keys(def.agents).length > 0;\n\n    const inheritDefaults = normalizeAutoInherit(this.config.autoInheritTools);\n    // Declaring `tools` (object or function, even an empty record) opts out\n    // of auto-inherit. Same rule for both forms — see plan decision (E1/I1).\n    const shouldInherit =\n      !hasDeclaredTools &&\n      !hasExplicitSubAgents &&\n      (src.origin === \"file\" ? inheritDefaults.file : inheritDefaults.code);\n\n    if (shouldInherit) {\n      await this.applyAutoInherit(agentName, index);\n    }\n\n    // 1. Sub-agents → agent-<key>\n    for (const [childKey, childDef] of Object.entries(def.agents ?? {})) {\n      const toolName = `agent-${childKey}`;\n      index.set(toolName, {\n        source: \"subagent\",\n        agentName: childDef.name ?? childKey,\n        def: {\n          name: toolName,\n          description:\n            childDef.instructions.slice(0, 120) ||\n            `Delegate to the ${childKey} sub-agent`,\n          parameters: {\n            type: \"object\",\n            properties: {\n              input: {\n                type: \"string\",\n                description: \"Message to send to the sub-agent.\",\n              },\n            },\n            required: [\"input\"],\n          },\n        },\n      });\n    }\n\n    // 2. Explicit tools (toolkit entries, function tools, hosted tools)\n    const hostedToCollect: import(\"../../core/agent/tools/hosted-tools\").HostedTool[] =\n      [];\n    for (const [key, tool] of Object.entries(toolsRecord)) {\n      if (isToolkitEntry(tool)) {\n        index.set(key, {\n          source: \"toolkit\",\n          pluginName: tool.pluginName,\n          localName: tool.localName,\n          def: { ...tool.def, name: key },\n        });\n        continue;\n      }\n      if (isFunctionTool(tool)) {\n        index.set(key, {\n          source: \"function\",\n          functionTool: tool,\n          def: { ...functionToolToDefinition(tool), name: key },\n        });\n        continue;\n      }\n      if (isSupervisorTool(tool)) {\n        index.set(key, {\n          source: \"hosted-supervisor\",\n          spec: tool.spec,\n          def: {\n            // `def` is a placeholder so the index has a uniform shape; it\n            // is intentionally not passed to the adapter's `tools` array\n            // (the SA endpoint owns its own tool execution and would\n            // reject our synthetic schema).\n            name: key,\n            description: supervisorToolDescription(tool.spec),\n            parameters: { type: \"object\", properties: {} },\n          },\n        });\n        continue;\n      }\n      if (isHostedTool(tool)) {\n        hostedToCollect.push(tool);\n        continue;\n      }\n      throw new Error(\n        `Agent '${agentName}' tool '${key}' has an unrecognized shape`,\n      );\n    }\n\n    if (hostedToCollect.length > 0) {\n      await this.connectHostedTools(hostedToCollect, index);\n    }\n\n    return index;\n  }\n\n  /**\n   * Resolves an `AgentDefinition.tools` field to a plain tool record. The\n   * function form is invoked exactly once at agent setup with the typed\n   * {@link Plugins} map; the result replaces the function reference for the\n   * remainder of the registered agent's lifetime.\n   *\n   * Plain object form is returned as-is; an undefined `tools` returns an\n   * empty record. The function form is wrapped in a try/catch so a thrown\n   * callback fails registration with a useful message instead of leaking\n   * the raw stack.\n   */\n  private resolveDefTools(agentName: string, def: AgentDefinition): AgentTools {\n    if (typeof def.tools !== \"function\") {\n      return def.tools ?? {};\n    }\n    try {\n      return def.tools(this.buildPluginsMap());\n    } catch (err) {\n      throw new Error(\n        `Agent '${agentName}': tools(plugins) callback threw: ${\n          err instanceof Error ? err.message : String(err)\n        }`,\n        { cause: err instanceof Error ? err : undefined },\n      );\n    }\n  }\n\n  /**\n   * Builds the typed {@link Plugins} map passed to the function form of\n   * `AgentDefinition.tools`. Each entry exposes the plugin instance directly\n   * (so user code can call typed instance methods including `.toolkit()`);\n   * plugins missing `.toolkit()` get a synthesized fallback that walks\n   * `getAgentTools()` via `resolveToolkitFromProvider`.\n   *\n   * Wrapped in {@link createPluginsProxy} so that accessing an unknown\n   * plugin name throws a named \"not registered, Available: ...\" error\n   * instead of bubbling up a generic `Cannot read properties of undefined`\n   * from the agent's `tools(plugins)` callback.\n   */\n  private buildPluginsMap(): Plugins {\n    const out: Record<string, PluginToolkitProvider> = {};\n    if (!this.context) {\n      return createPluginsProxy(out, `Agent '${this.name}': tools(plugins)`);\n    }\n    for (const { name, provider } of this.context.getToolProviders()) {\n      const direct = (provider as { toolkit?: unknown }).toolkit;\n      if (typeof direct === \"function\") {\n        out[name] = provider as unknown as PluginToolkitProvider;\n      } else {\n        out[name] = {\n          toolkit: (opts) => resolveToolkitFromProvider(name, provider, opts),\n        };\n      }\n    }\n    return createPluginsProxy(out, `Agent '${this.name}': tools(plugins)`);\n  }\n\n  private async applyAutoInherit(\n    agentName: string,\n    index: Map<string, ResolvedToolEntry>,\n  ): Promise<void> {\n    if (!this.context) return;\n    const inherited: string[] = [];\n    const skippedByPlugin = new Map<string, string[]>();\n    const recordSkip = (pluginName: string, localName: string) => {\n      const list = skippedByPlugin.get(pluginName) ?? [];\n      list.push(localName);\n      skippedByPlugin.set(pluginName, list);\n    };\n\n    for (const {\n      name: pluginName,\n      provider,\n    } of this.context.getToolProviders()) {\n      if (pluginName === this.name) continue;\n      const entries = resolveToolkitFromProvider(pluginName, provider);\n      for (const [key, entry] of Object.entries(entries)) {\n        if (entry.autoInheritable !== true) {\n          recordSkip(entry.pluginName, entry.localName);\n          continue;\n        }\n        index.set(key, {\n          source: \"toolkit\",\n          pluginName: entry.pluginName,\n          localName: entry.localName,\n          def: { ...entry.def, name: key },\n        });\n        inherited.push(key);\n      }\n    }\n\n    if (inherited.length > 0) {\n      logger.info(\n        \"[agent %s] auto-inherited %d tool(s): %s\",\n        agentName,\n        inherited.length,\n        inherited.join(\", \"),\n      );\n    }\n    if (skippedByPlugin.size > 0) {\n      const summary = Array.from(skippedByPlugin.entries())\n        .map(([p, tools]) => `${p}(${tools.length})`)\n        .join(\", \");\n      logger.info(\n        \"[agent %s] auto-inherit skipped %d tool(s) not marked autoInheritable: %s. Wire them explicitly via `tools:` if needed.\",\n        agentName,\n        Array.from(skippedByPlugin.values()).reduce(\n          (n, list) => n + list.length,\n          0,\n        ),\n        summary,\n      );\n    }\n  }\n\n  private async connectHostedTools(\n    hostedTools: import(\"../../core/agent/tools/hosted-tools\").HostedTool[],\n    index: Map<string, ResolvedToolEntry>,\n  ): Promise<void> {\n    let host: string | undefined;\n    let authenticate: () => Promise<Record<string, string>>;\n\n    try {\n      const { getWorkspaceClient } = await import(\"../../context\");\n      const wsClient = getWorkspaceClient();\n      await wsClient.config.ensureResolved();\n      host = wsClient.config.host;\n      authenticate = async () => {\n        const headers = new Headers();\n        await wsClient.config.authenticate(headers);\n        return Object.fromEntries(headers.entries());\n      };\n    } catch {\n      host = process.env.DATABRICKS_HOST;\n      authenticate = async (): Promise<Record<string, string>> => {\n        const token = process.env.DATABRICKS_TOKEN;\n        return token ? { Authorization: `Bearer ${token}` } : {};\n      };\n    }\n\n    if (!host) {\n      logger.warn(\n        \"No Databricks host available — skipping %d hosted tool(s)\",\n        hostedTools.length,\n      );\n      return;\n    }\n\n    if (!this.mcpClient) {\n      const policy = buildMcpHostPolicy(this.config.mcp, host);\n      this.mcpClient = new AppKitMcpClient(host, authenticate, policy);\n    }\n\n    const endpoints = resolveHostedTools(hostedTools);\n    const result = await this.mcpClient.connectAll(endpoints);\n    if (result.failed.length > 0) {\n      // Per-endpoint errors are already logged inside `connectAll`; this\n      // aggregate warning makes the partial-success state visible at the\n      // agent-registration boundary so operators see \"agent X registered\n      // without N hosted-tool endpoints\" alongside the connect-time\n      // errors, instead of just an opaque list of MCP failures.\n      logger.warn(\n        \"MCP: %s of %s endpoints failed to connect (%s). Agents that reference these endpoints will boot without their hosted tools.\",\n        result.failed.length,\n        endpoints.length,\n        result.failed.map((f) => f.name).join(\", \"),\n      );\n    }\n\n    for (const def of this.mcpClient.getAllToolDefinitions()) {\n      index.set(def.name, {\n        source: \"mcp\",\n        mcpToolName: def.name,\n        def,\n      });\n    }\n  }\n\n  // ----------------- ToolProvider (no tools of our own) --------------------\n\n  getAgentTools(): AgentToolDefinition[] {\n    return [];\n  }\n\n  async executeAgentTool(): Promise<unknown> {\n    throw new Error(\"AgentsPlugin does not expose executeAgentTool directly\");\n  }\n\n  // ----------------- Route mounting and handlers ---------------------------\n\n  /**\n   * Mount the non-streaming invoke endpoints outside the `/api/<plugin>`\n   * namespace. `/invocations` and `/responses` are aliases — both run the\n   * default agent to completion and return a single JSON response. Streaming\n   * lives on `POST /chat` (mounted in `injectRoutes`).\n   */\n  private mountInvokeRoutes() {\n    if (!this.context) return;\n    // Return the promise so the forwardAsyncErrors wrapper applied by\n    // PluginContext.addRoute can forward rejections to the error middleware.\n    const handler = (req: express.Request, res: express.Response) =>\n      this._handleInvoke(req, res);\n    this.context.addRoute(\"post\", \"/invocations\", handler);\n    this.context.addRoute(\"post\", \"/responses\", handler);\n  }\n\n  injectRoutes(router: IAppRouter) {\n    this.route(router, {\n      name: \"chat\",\n      method: \"post\",\n      path: \"/chat\",\n      handler: async (req, res) => this._handleChat(req, res),\n    });\n    this.route(router, {\n      name: \"cancel\",\n      method: \"post\",\n      path: \"/cancel\",\n      handler: async (req, res) => this._handleCancel(req, res),\n    });\n    this.route(router, {\n      name: \"approve\",\n      method: \"post\",\n      path: \"/approve\",\n      handler: async (req, res) => this._handleApprove(req, res),\n    });\n    this.route(router, {\n      name: \"threads\",\n      method: \"get\",\n      path: \"/threads\",\n      handler: async (req, res) => this._handleListThreads(req, res),\n    });\n    this.route(router, {\n      name: \"thread\",\n      method: \"get\",\n      path: \"/threads/:threadId\",\n      handler: async (req, res) => this._handleGetThread(req, res),\n    });\n    this.route(router, {\n      name: \"deleteThread\",\n      method: \"delete\",\n      path: \"/threads/:threadId\",\n      handler: async (req, res) => this._handleDeleteThread(req, res),\n    });\n    this.route(router, {\n      name: \"info\",\n      method: \"get\",\n      path: \"/info\",\n      handler: async (_req, res) => {\n        res.json({\n          agents: Array.from(this.agents.keys()),\n          defaultAgent: this.defaultAgentName,\n        });\n      },\n    });\n  }\n\n  clientConfig(): Record<string, unknown> {\n    return {\n      agents: Array.from(this.agents.keys()),\n      defaultAgent: this.defaultAgentName,\n    };\n  }\n\n  private async _handleChat(req: express.Request, res: express.Response) {\n    const parsed = chatRequestSchema.safeParse(req.body);\n    if (!parsed.success) {\n      res.status(400).json({\n        error: \"Invalid request\",\n        details: parsed.error.flatten().fieldErrors,\n      });\n      return;\n    }\n    const { message, threadId, agent: agentName, mlflowRunId } = parsed.data;\n\n    const registered = this.resolveAgent(agentName);\n    if (!registered) {\n      res.status(400).json({\n        error: agentName\n          ? `Agent \"${agentName}\" not found`\n          : \"No agent registered\",\n      });\n      return;\n    }\n\n    const userId = this.resolveUserId(req);\n\n    // Reject early (before allocating a thread) when the user is already at\n    // their concurrent-stream limit. Prevents a misbehaving client from\n    // churning thread rows while being denied elsewhere.\n    const limits = this.resolvedLimits;\n    if (this.countUserStreams(userId) >= limits.maxConcurrentStreamsPerUser) {\n      res.setHeader(\"Retry-After\", \"5\");\n      res.status(429).json({\n        error: `Too many concurrent streams for this user (limit ${limits.maxConcurrentStreamsPerUser}). Wait for an existing stream to complete before starting another.`,\n      });\n      return;\n    }\n\n    // ThreadStore can throw on backing-storage failures (DB unreachable,\n    // permission errors, transient I/O). Without a try/catch the\n    // `async` Express handler bubbles the rejection without a response and\n    // the client connection hangs until the proxy times out. Surface the\n    // failure as a 500 so the SSE client falls back instead of waiting.\n    let thread: Thread;\n    try {\n      const existing = threadId\n        ? await this.threadStore.get(threadId, userId)\n        : null;\n      if (threadId && !existing) {\n        res.status(404).json({ error: `Thread ${threadId} not found` });\n        return;\n      }\n      thread = existing ?? (await this.threadStore.create(userId));\n\n      const userMessage: Message = {\n        id: randomUUID(),\n        role: \"user\",\n        content: message,\n        createdAt: new Date(),\n      };\n      await this.threadStore.addMessage(thread.id, userId, userMessage);\n    } catch (err) {\n      logger.error(\"threadStore failed in /chat: %O\", err);\n      res.status(500).json({ error: \"Thread operation failed\" });\n      return;\n    }\n    return this._streamAgent(req, res, registered, thread, userId, mlflowRunId);\n  }\n\n  /**\n   * Returns the names of tools in `registered.toolIndex` whose annotations\n   * would trip the approval gate. Used by the non-streaming invoke path\n   * (`/invocations`, `/responses`) to fail-fast before the adapter runs:\n   * those endpoints have no channel back to the user mid-call, so an agent\n   * whose tool surface includes approval-gated tools cannot be served.\n   *\n   * Returns an empty list when the plugin is configured with\n   * `approval.requireForDestructive: false` — operators who explicitly\n   * disabled HITL keep the invoke surface unrestricted.\n   */\n  private collectApprovalRequiredToolNames(\n    registered: RegisteredAgent,\n  ): string[] {\n    if (!this.resolvedApprovalPolicy.requireForDestructive) return [];\n    const names: string[] = [];\n    for (const entry of registered.toolIndex.values()) {\n      if (requiresApproval(entry.def.annotations)) {\n        names.push(entry.def.name);\n      }\n    }\n    return names;\n  }\n\n  /**\n   * Shared handler for `POST /invocations` and `POST /responses`. Runs the\n   * default agent to completion and returns a single JSON response in the\n   * OpenAI Responses non-streaming shape. The two endpoints are aliases —\n   * streaming clients must use `POST /chat`.\n   *\n   * Rejects with HTTP 400 when the resolved agent has any approval-gated\n   * tool in scope: HITL requires a live SSE channel, which this surface\n   * does not provide. See {@link collectApprovalRequiredToolNames}.\n   */\n  private async _handleInvoke(req: express.Request, res: express.Response) {\n    const parsed = invocationsRequestSchema.safeParse(req.body);\n    if (!parsed.success) {\n      res.status(400).json({\n        error: \"Invalid request\",\n        details: parsed.error.flatten().fieldErrors,\n      });\n      return;\n    }\n    const { input, mlflowRunId } = parsed.data;\n    const registered = this.resolveAgent();\n    if (!registered) {\n      res.status(400).json({ error: \"No agent registered\" });\n      return;\n    }\n\n    // Pre-flight HITL gate. The non-streaming invoke surface has no way to\n    // surface an approval prompt back to the caller and no way to receive\n    // a decision mid-run, so we reject up-front instead of having the\n    // approval gate auto-deny mid-stream (which would leave the caller\n    // with a confusing \"denied by user\" tool result in the final text).\n    const approvalGated = this.collectApprovalRequiredToolNames(registered);\n    if (approvalGated.length > 0) {\n      res.status(400).json({\n        error:\n          `Agent '${registered.name}' exposes ${approvalGated.length} approval-gated tool(s) ` +\n          `(${approvalGated.join(\", \")}); /invocations and /responses are non-streaming and ` +\n          \"cannot run HITL. Use POST /chat for HITL-capable agents, or disable approval via \" +\n          \"agents({ approval: { requireForDestructive: false } }).\",\n      });\n      return;\n    }\n\n    const userId = this.resolveUserId(req);\n\n    // Match the rate-limit gate on /chat. Without this, a client can bypass\n    // `limits.maxConcurrentStreamsPerUser` by hitting /invocations instead.\n    const limits = this.resolvedLimits;\n    if (this.countUserStreams(userId) >= limits.maxConcurrentStreamsPerUser) {\n      res.setHeader(\"Retry-After\", \"5\");\n      res.status(429).json({\n        error: `Too many concurrent streams for this user (limit ${limits.maxConcurrentStreamsPerUser}). Wait for an existing stream to complete before starting another.`,\n      });\n      return;\n    }\n\n    // Same rationale as `_handleChat`: surface threadStore failures as a\n    // 500 instead of letting the async handler hang the client connection.\n    let thread: Thread;\n    try {\n      thread = await this.threadStore.create(userId);\n\n      if (typeof input === \"string\") {\n        await this.threadStore.addMessage(thread.id, userId, {\n          id: randomUUID(),\n          role: \"user\",\n          content: input,\n          createdAt: new Date(),\n        });\n      } else {\n        for (const item of input) {\n          const role = (item.role ?? \"user\") as Message[\"role\"];\n          const content =\n            typeof item.content === \"string\"\n              ? item.content\n              : JSON.stringify(item.content ?? \"\");\n          if (!content) continue;\n          await this.threadStore.addMessage(thread.id, userId, {\n            id: randomUUID(),\n            role,\n            content,\n            createdAt: new Date(),\n          });\n        }\n      }\n    } catch (err) {\n      logger.error(\"threadStore failed in /invocations: %O\", err);\n      res.status(500).json({ error: \"Thread operation failed\" });\n      return;\n    }\n\n    return this._runAgentNonStreaming(\n      req,\n      res,\n      registered,\n      thread,\n      userId,\n      mlflowRunId,\n    );\n  }\n\n  private async _streamAgent(\n    req: express.Request,\n    res: express.Response,\n    registered: RegisteredAgent,\n    thread: Thread,\n    userId: string,\n    mlflowRunId?: string,\n  ): Promise<void> {\n    const abortController = new AbortController();\n    const signal = abortController.signal;\n    const requestId = randomUUID();\n    this.trackStream(requestId, userId, abortController);\n\n    // `hosted-supervisor` entries are not callable from the Node process\n    // (the SA endpoint executes them server-side). Their `def` is a\n    // placeholder; including it in the adapter's `tools` array would\n    // make the SA endpoint reject the request with a schema mismatch.\n    // The hosted-tool specs are routed via `AgentInput.extensions` below.\n    const tools = Array.from(registered.toolIndex.values())\n      .filter((e) => e.source !== \"hosted-supervisor\")\n      .map((e) => e.def);\n    const approvalPolicy = this.resolvedApprovalPolicy;\n    const limits = this.resolvedLimits;\n    const outboundEvents = new EventChannel<ResponseStreamEvent>();\n    const translator = new AgentEventTranslator();\n\n    // Per-run state shared with any sub-agents this run invokes. The boxed\n    // tool-call counter, approval policy, and outbound event channel must\n    // travel through the sub-agent path so it enforces the same budget and\n    // approval gate as the top-level executeTool.\n    const runState: RunState = {\n      req,\n      userId,\n      requestId,\n      abortController,\n      signal,\n      approvalPolicy,\n      limits,\n      translator,\n      outboundEvents,\n      toolCallsUsed: { count: 0 },\n    };\n\n    const executeTool = (name: string, args: unknown): Promise<unknown> =>\n      this.dispatchToolCall(runState, registered.toolIndex, name, args, 0);\n\n    // Drive the adapter and the approval-event side-channel concurrently.\n    // Outbound events from both sources flow through `outboundEvents`; the\n    // generator below drains the channel in order. executeTool pushes\n    // approval-pending events into the same channel before awaiting the gate.\n    const driver = (async () => {\n      try {\n        for (const evt of translator.translate({\n          type: \"metadata\",\n          data: { threadId: thread.id },\n        })) {\n          outboundEvents.push(evt);\n        }\n\n        // Root MLflow span for the turn; tool-call spans nest under it.\n        await traceAgent(\n          registered.name ?? \"agent\",\n          {\n            messages: thread.messages.map((m) => ({\n              role: m.role,\n              content: m.content,\n            })),\n          },\n          async (span) => {\n            // Link this turn's trace to an eval run when the eval runner\n            // supplied one, so the trace shows under the MLflow evaluation run.\n            if (mlflowRunId) linkTraceToRun(mlflowRunId);\n\n            const pluginNames = this.context\n              ? this.context\n                  .getPluginNames()\n                  .filter((n) => n !== this.name && n !== \"server\")\n              : [];\n            const fullPrompt = composePromptForAgent(\n              registered,\n              this.config.baseSystemPrompt,\n              {\n                agentName: registered.name,\n                pluginNames,\n                toolNames: tools.map((t) => t.name),\n              },\n            );\n\n            const messagesWithSystem: Message[] = [\n              {\n                id: \"system\",\n                role: \"system\",\n                content: fullPrompt,\n                createdAt: new Date(),\n              },\n              ...thread.messages,\n            ];\n\n            const stream = registered.adapter.run(\n              {\n                messages: messagesWithSystem,\n                tools,\n                threadId: thread.id,\n                signal,\n                extensions: buildAdapterExtensions(registered.toolIndex),\n              },\n              { executeTool, signal },\n            );\n\n            // The accumulation rule (deltas append, `message` replaces) is\n            // shared with `runAgent` and `runSubAgent`; see\n            // `consumeAdapterStream` for the rationale.\n            const fullContent = await consumeAdapterStream(stream, {\n              signal,\n              onEvent: (event) => {\n                for (const translated of translator.translate(event)) {\n                  outboundEvents.push(translated);\n                }\n              },\n            });\n\n            if (fullContent) {\n              span.setOutputs({ role: \"assistant\", content: fullContent });\n              await this.threadStore.addMessage(thread.id, userId, {\n                id: randomUUID(),\n                role: \"assistant\",\n                content: fullContent,\n                createdAt: new Date(),\n              });\n            }\n\n            // Surface the MLflow trace id so eval runs can attach assessments\n            // to this turn's trace. No-op when tracing is disabled.\n            const mlflowTraceId = currentTraceId();\n            if (mlflowTraceId) {\n              for (const evt of translator.translate({\n                type: \"metadata\",\n                data: { mlflowTraceId },\n              })) {\n                outboundEvents.push(evt);\n              }\n            }\n          },\n        );\n\n        for (const evt of translator.finalize()) outboundEvents.push(evt);\n      } catch (error) {\n        if (signal.aborted) {\n          outboundEvents.close();\n          return;\n        }\n        logger.error(\"Agent chat error: %O\", error);\n        outboundEvents.close(error);\n        return;\n      } finally {\n        // Any pending approval gates for this stream are auto-denied so the\n        // adapter can unwind if it was still waiting.\n        this.approvalGate.abortStream(requestId);\n        this.untrackStream(requestId);\n        // Stateless agents (e.g. autocomplete) don't persist history; drop\n        // the thread so `InMemoryThreadStore` doesn't accumulate one record\n        // per request. Swallow delete errors — the stream has already\n        // finished and the client has the response.\n        if (registered.ephemeral) {\n          try {\n            await this.threadStore.delete(thread.id, userId);\n          } catch (err) {\n            logger.warn(\n              \"Failed to delete ephemeral thread %s: %O\",\n              thread.id,\n              err,\n            );\n          }\n        }\n      }\n      outboundEvents.close();\n    })();\n\n    await this.executeStream<ResponseStreamEvent>(\n      res,\n      async function* () {\n        try {\n          for await (const ev of outboundEvents) {\n            yield ev;\n          }\n        } finally {\n          await driver.catch(() => undefined);\n        }\n      },\n      {\n        ...agentStreamDefaults,\n        stream: { ...agentStreamDefaults.stream, streamId: requestId },\n      },\n    );\n  }\n\n  /**\n   * Non-streaming counterpart to {@link _streamAgent} used by `/invocations`\n   * and `/responses`. Drives the adapter to completion, persists the\n   * assistant turn to the thread store, and returns a single JSON envelope\n   * shaped like the OpenAI Responses non-streaming API.\n   *\n   * No `EventChannel`, no `AgentEventTranslator`, no SSE — the caller is\n   * waiting on one HTTP response. The approval gate is force-disabled in\n   * the per-run state as defense-in-depth: `_handleInvoke` already rejects\n   * up-front if any tool in scope would require approval, but pinning\n   * `requireForDestructive: false` here means a tool that somehow slips\n   * past the precheck (e.g. annotations mutated at runtime) still won't\n   * stall the request waiting for an approval prompt that no one can\n   * answer.\n   *\n   * The `RunState` shape is otherwise unchanged so {@link dispatchToolCall}\n   * — including sub-agent recursion via {@link runSubAgent} — keeps the\n   * same tool-call budget, abort signal, and timeout enforcement as the\n   * streaming path. A still-typed translator is constructed but only\n   * consulted for `finalize()` so any in-flight `approval_pending` event\n   * synthesis (which would have been a coding bug given the precheck) is\n   * a dropped no-op instead of a runtime crash.\n   */\n  private async _runAgentNonStreaming(\n    req: express.Request,\n    res: express.Response,\n    registered: RegisteredAgent,\n    thread: Thread,\n    userId: string,\n    mlflowRunId?: string,\n  ): Promise<void> {\n    const abortController = new AbortController();\n    const signal = abortController.signal;\n    const requestId = randomUUID();\n    this.trackStream(requestId, userId, abortController);\n\n    const tools = Array.from(registered.toolIndex.values()).map((e) => e.def);\n    const limits = this.resolvedLimits;\n\n    // Assigned inside the span below (the only place the active trace id\n    // resolves), read into the response envelope after.\n    let mlflowTraceId: string | undefined;\n\n    const runState: RunState = {\n      req,\n      userId,\n      requestId,\n      abortController,\n      signal,\n      // Force approval off for the non-streaming invoke surface. The\n      // precheck in `_handleInvoke` already guarantees no approval-gated\n      // tool is reachable; this is belt-and-braces.\n      approvalPolicy: { requireForDestructive: false, timeoutMs: 0 },\n      limits,\n      translator: new AgentEventTranslator(),\n      outboundEvents: new EventChannel<ResponseStreamEvent>(),\n      toolCallsUsed: { count: 0 },\n    };\n\n    const executeTool = (name: string, args: unknown): Promise<unknown> =>\n      this.dispatchToolCall(runState, registered.toolIndex, name, args, 0);\n\n    let fullContent = \"\";\n    try {\n      // Root MLflow span for the turn; tool-call spans nest under it. Mirrors\n      // the streaming path so the invoke surface produces the same trace shape\n      // instead of orphan root TOOL spans.\n      await traceAgent(\n        registered.name ?? \"agent\",\n        {\n          messages: thread.messages.map((m) => ({\n            role: m.role,\n            content: m.content,\n          })),\n        },\n        async (span) => {\n          // Link this turn's trace to an eval run when the eval runner\n          // supplied one, so the trace shows under the MLflow evaluation run.\n          if (mlflowRunId) linkTraceToRun(mlflowRunId);\n\n          const pluginNames = this.context\n            ? this.context\n                .getPluginNames()\n                .filter((n) => n !== this.name && n !== \"server\")\n            : [];\n          const fullPrompt = composePromptForAgent(\n            registered,\n            this.config.baseSystemPrompt,\n            {\n              agentName: registered.name,\n              pluginNames,\n              toolNames: tools.map((t) => t.name),\n            },\n          );\n\n          const messagesWithSystem: Message[] = [\n            {\n              id: \"system\",\n              role: \"system\",\n              content: fullPrompt,\n              createdAt: new Date(),\n            },\n            ...thread.messages,\n          ];\n\n          const stream = registered.adapter.run(\n            {\n              messages: messagesWithSystem,\n              tools,\n              threadId: thread.id,\n              signal,\n            },\n            { executeTool, signal },\n          );\n\n          fullContent = await consumeAdapterStream(stream, { signal });\n\n          if (fullContent) {\n            span.setOutputs({ role: \"assistant\", content: fullContent });\n            await this.threadStore.addMessage(thread.id, userId, {\n              id: randomUUID(),\n              role: \"assistant\",\n              content: fullContent,\n              createdAt: new Date(),\n            });\n          }\n\n          mlflowTraceId = currentTraceId();\n        },\n      );\n    } catch (error) {\n      if (signal.aborted) {\n        res.status(499).json({ error: \"Request aborted\" });\n        return;\n      }\n      logger.error(\"Agent invoke error: %O\", error);\n      const message =\n        process.env.NODE_ENV === \"production\"\n          ? \"Internal server error\"\n          : error instanceof Error\n            ? error.message\n            : String(error);\n      res.status(500).json({ error: message });\n      return;\n    } finally {\n      this.approvalGate.abortStream(requestId);\n      this.untrackStream(requestId);\n      if (registered.ephemeral) {\n        try {\n          await this.threadStore.delete(thread.id, userId);\n        } catch (err) {\n          logger.warn(\n            \"Failed to delete ephemeral thread %s: %O\",\n            thread.id,\n            err,\n          );\n        }\n      }\n    }\n\n    const responseId = `resp_${randomUUID()}`;\n    const messageId = `msg_${randomUUID()}`;\n    const message: ResponseOutputMessage = {\n      type: \"message\",\n      id: messageId,\n      status: \"completed\",\n      role: \"assistant\",\n      content: [{ type: \"output_text\", text: fullContent }],\n    };\n    res.json({\n      id: responseId,\n      object: \"response\",\n      created_at: Math.floor(Date.now() / 1000),\n      status: \"completed\",\n      thread_id: thread.id,\n      // Lets an eval runner attach assessments to this turn's trace; absent\n      // when tracing is disabled.\n      ...(mlflowTraceId ? { mlflow_trace_id: mlflowTraceId } : {}),\n      output: [message],\n    });\n  }\n\n  /**\n   * Dispatch a single tool call from either the top-level adapter or a\n   * sub-agent. Centralising this in one method is what makes the budget\n   * counter, approval gate, and abort signal observe sub-agent activity:\n   * `runSubAgent` reuses the same `runState` and so increments the same\n   * counter and emits approval events through the same channel.\n   *\n   * `depth` is the current sub-agent recursion depth (0 at the top level).\n   * It is forwarded to `runSubAgent` when the dispatched entry is itself a\n   * sub-agent, so depth limits remain enforced.\n   */\n  private async dispatchToolCall(\n    runState: RunState,\n    toolIndex: Map<string, ResolvedToolEntry>,\n    name: string,\n    args: unknown,\n    depth: number,\n  ): Promise<unknown> {\n    if (runState.toolCallsUsed.count >= runState.limits.maxToolCalls) {\n      runState.abortController.abort(\n        new Error(\n          `Tool-call budget exhausted (limit ${runState.limits.maxToolCalls}).`,\n        ),\n      );\n      throw new Error(\n        `Tool-call budget exhausted (limit ${runState.limits.maxToolCalls}). Raise agents({ limits: { maxToolCalls } }) or review the agent's tool-selection logic.`,\n      );\n    }\n    runState.toolCallsUsed.count++;\n\n    const entry = toolIndex.get(name);\n    if (!entry) throw new Error(`Unknown tool: ${name}`);\n\n    if (\n      runState.approvalPolicy.requireForDestructive &&\n      requiresApproval(entry.def.annotations)\n    ) {\n      const approvalId = randomUUID();\n      for (const ev of runState.translator.translate({\n        type: \"approval_pending\",\n        approvalId,\n        streamId: runState.requestId,\n        toolName: name,\n        args,\n        annotations: entry.def.annotations,\n      })) {\n        runState.outboundEvents.push(ev);\n      }\n      const decision = await this.approvalGate.wait({\n        approvalId,\n        streamId: runState.requestId,\n        userId: runState.userId,\n        timeoutMs: runState.approvalPolicy.timeoutMs,\n      });\n      if (decision === \"deny\") {\n        return `Tool execution denied by user approval gate (tool: ${name}).`;\n      }\n    }\n\n    // Traced from here so the span covers execution only, not the approval\n    // wait above (which is human latency).\n    const toolResult = await traceTool(name, args, async () => {\n      let result: unknown;\n      if (entry.source === \"toolkit\") {\n        if (!this.context) {\n          throw new Error(\n            \"Plugin tool execution requires PluginContext; this should never happen through createApp\",\n          );\n        }\n        result = await this.context.executeTool(\n          runState.req,\n          entry.pluginName,\n          entry.localName,\n          args,\n          runState.signal,\n          runState.limits.toolCallTimeoutMs,\n        );\n      } else if (entry.source === \"function\") {\n        // Function tools declare their parameters as a JSON-object schema,\n        // so adapters always serialize `args` as an object. A non-object\n        // value here means the upstream model emitted malformed tool-call\n        // JSON; surface a clear error rather than silently passing through\n        // a wrong-shape value the tool will then choke on.\n        if (typeof args !== \"object\" || args === null || Array.isArray(args)) {\n          throw new Error(\n            `Function tool '${name}' received non-object arguments (got ${args === null ? \"null\" : Array.isArray(args) ? \"array\" : typeof args}); expected a JSON object.`,\n          );\n        }\n        result = await entry.functionTool.execute(\n          args as Record<string, unknown>,\n        );\n      } else if (entry.source === \"mcp\") {\n        if (!this.mcpClient) throw new Error(\"MCP client not connected\");\n        const oboToken = runState.req.headers[\"x-forwarded-access-token\"];\n        const mcpAuth =\n          typeof oboToken === \"string\"\n            ? { Authorization: `Bearer ${oboToken}` }\n            : undefined;\n        result = await this.mcpClient.callTool(\n          entry.mcpToolName,\n          args,\n          mcpAuth,\n        );\n      } else if (entry.source === \"subagent\") {\n        const childAgent = this.agents.get(entry.agentName);\n        if (!childAgent)\n          throw new Error(`Sub-agent not found: ${entry.agentName}`);\n        result = await this.runSubAgent(runState, childAgent, args, depth + 1);\n      } else if (entry.source === \"hosted-supervisor\") {\n        // Defense-in-depth: should never fire. Hosted-supervisor entries are\n        // routed via `AgentInput.extensions` and the SA endpoint executes\n        // them server-side; their `def` is filtered out of the adapter's\n        // `tools` array, so the model never sees a callable schema for them.\n        // If we reach here, the agent is paired with a non-SA adapter that\n        // somehow surfaced the placeholder def to the model — surface a\n        // clear error rather than crash later in `normalizeToolResult`.\n        throw new Error(\n          `Tool '${name}' is a hosted-supervisor tool and cannot be invoked from the Node process. ` +\n            \"It is executed server-side by the Databricks AI Gateway and is only reachable when the agent's model is a Supervisor API adapter.\",\n        );\n      }\n\n      return result;\n    });\n\n    return normalizeToolResult(toolResult);\n  }\n\n  /**\n   * Runs a sub-agent in response to an `agent-<key>` tool call. Returns the\n   * concatenated text output to hand back to the parent adapter as the tool\n   * result.\n   *\n   * `depth` starts at 1 for a top-level sub-agent invocation (i.e. the\n   * outer `_streamAgent` calls `runSubAgent(..., 1)`) and increments on\n   * each nested `runSubAgent` call. Depths exceeding\n   * `limits.maxSubAgentDepth` are rejected before any adapter work.\n   *\n   * Sub-agent tool calls run through `dispatchToolCall` with the same\n   * `runState` as the parent — the budget counter and approval gate are\n   * therefore enforced for every nested call, not only at the top level.\n   */\n  private async runSubAgent(\n    runState: RunState,\n    child: RegisteredAgent,\n    args: unknown,\n    depth: number,\n  ): Promise<string> {\n    if (depth > runState.limits.maxSubAgentDepth) {\n      throw new Error(\n        `Sub-agent depth exceeded (limit ${runState.limits.maxSubAgentDepth}). ` +\n          `Raise agents({ limits: { maxSubAgentDepth } }) or break the delegation cycle.`,\n      );\n    }\n\n    const input =\n      typeof args === \"object\" &&\n      args !== null &&\n      typeof (args as { input?: unknown }).input === \"string\"\n        ? (args as { input: string }).input\n        : JSON.stringify(args);\n    // Same filter as the top-level path: hosted-supervisor `def` is a\n    // placeholder, not a callable function — exclude from the adapter's\n    // `tools` array. The specs are routed via `extensions` instead.\n    const childTools = Array.from(child.toolIndex.values())\n      .filter((e) => e.source !== \"hosted-supervisor\")\n      .map((e) => e.def);\n\n    const childExecute = (name: string, childArgs: unknown): Promise<unknown> =>\n      this.dispatchToolCall(runState, child.toolIndex, name, childArgs, depth);\n\n    const runContext: AgentRunContext = {\n      executeTool: childExecute,\n      signal: runState.signal,\n    };\n\n    const pluginNames = this.context\n      ? this.context\n          .getPluginNames()\n          .filter((n) => n !== this.name && n !== \"server\")\n      : [];\n    const systemPrompt = composePromptForAgent(\n      child,\n      this.config.baseSystemPrompt,\n      {\n        agentName: child.name,\n        pluginNames,\n        toolNames: childTools.map((t) => t.name),\n      },\n    );\n\n    const messages: Message[] = [\n      {\n        id: \"system\",\n        role: \"system\",\n        content: systemPrompt,\n        createdAt: new Date(),\n      },\n      {\n        id: randomUUID(),\n        role: \"user\",\n        content: input,\n        createdAt: new Date(),\n      },\n    ];\n\n    return consumeAdapterStream(\n      child.adapter.run(\n        {\n          messages,\n          tools: childTools,\n          threadId: randomUUID(),\n          signal: runState.signal,\n          extensions: buildAdapterExtensions(child.toolIndex),\n        },\n        runContext,\n      ),\n      {\n        signal: runState.signal,\n        // Forward every sub-agent event into the parent's outbound SSE\n        // stream so the client sees nested tool_call / tool_result events\n        // (UI-action tools like apply_filter / highlight_period rely on\n        // this) and the sub-agent's streaming text as it's generated.\n        //\n        // `metadata` is the one exception: sub-agents have their own\n        // threadId, and forwarding it would overwrite the parent's\n        // thread state on the client and break multi-turn continuity.\n        // Approval-pending events emitted by `dispatchToolCall` already\n        // reach `outboundEvents` directly, so they are not routed here.\n        onEvent: (event) => {\n          if (event.type === \"metadata\") return;\n          for (const translated of runState.translator.translate(event)) {\n            runState.outboundEvents.push(translated);\n          }\n        },\n      },\n    );\n  }\n\n  private async _handleCancel(req: express.Request, res: express.Response) {\n    const parsed = cancelRequestSchema.safeParse(req.body);\n    if (!parsed.success) {\n      res.status(400).json({\n        error: \"Invalid request\",\n        details: parsed.error.flatten().fieldErrors,\n      });\n      return;\n    }\n    const { streamId } = parsed.data;\n    const entry = this.activeStreams.get(streamId);\n    if (!entry) {\n      // Stream is unknown or already completed — idempotent no-op.\n      res.json({ cancelled: true });\n      return;\n    }\n    const userId = this.resolveUserId(req);\n    if (entry.userId !== userId) {\n      res.status(403).json({ error: \"Forbidden\" });\n      return;\n    }\n    entry.controller.abort(\"Cancelled by user\");\n    this.untrackStream(streamId);\n    this.approvalGate.abortStream(streamId);\n    res.json({ cancelled: true });\n  }\n\n  private async _handleApprove(req: express.Request, res: express.Response) {\n    const parsed = approvalRequestSchema.safeParse(req.body);\n    if (!parsed.success) {\n      res.status(400).json({\n        error: \"Invalid request\",\n        details: parsed.error.flatten().fieldErrors,\n      });\n      return;\n    }\n    const { streamId, approvalId, decision } = parsed.data;\n\n    const streamEntry = this.activeStreams.get(streamId);\n    if (!streamEntry) {\n      // Stream has already completed or never existed. Return 404 so the UI\n      // knows the approval token is no longer valid (the waiter, if any, has\n      // already been timed out or aborted).\n      res.status(404).json({ error: \"Stream not found or already completed\" });\n      return;\n    }\n\n    const userId = this.resolveUserId(req);\n    if (streamEntry.userId !== userId) {\n      res.status(403).json({ error: \"Forbidden\" });\n      return;\n    }\n\n    const result = this.approvalGate.submit({ approvalId, userId, decision });\n    if (!result.ok) {\n      if (result.reason === \"forbidden\") {\n        res.status(403).json({ error: \"Forbidden\" });\n        return;\n      }\n      res.status(404).json({ error: \"Approval not found or already settled\" });\n      return;\n    }\n\n    res.json({ decision });\n  }\n\n  private async _handleListThreads(\n    req: express.Request,\n    res: express.Response,\n  ) {\n    const userId = this.resolveUserId(req);\n    const threads = await this.threadStore.list(userId);\n    res.json({ threads });\n  }\n\n  private async _handleGetThread(req: express.Request, res: express.Response) {\n    const userId = this.resolveUserId(req);\n    const thread = await this.threadStore.get(req.params.threadId, userId);\n    if (!thread) {\n      res.status(404).json({ error: \"Thread not found\" });\n      return;\n    }\n    res.json(thread);\n  }\n\n  private async _handleDeleteThread(\n    req: express.Request,\n    res: express.Response,\n  ) {\n    const userId = this.resolveUserId(req);\n    const deleted = await this.threadStore.delete(req.params.threadId, userId);\n    if (!deleted) {\n      res.status(404).json({ error: \"Thread not found\" });\n      return;\n    }\n    res.json({ deleted: true });\n  }\n\n  private resolveAgent(name?: string): RegisteredAgent | null {\n    if (name) return this.agents.get(name) ?? null;\n    if (this.defaultAgentName) {\n      return this.agents.get(this.defaultAgentName) ?? null;\n    }\n    const first = this.agents.values().next();\n    return first.done ? null : first.value;\n  }\n\n  private printRegistry(): void {\n    if (this.agents.size === 0) return;\n    console.log(\"\");\n    console.log(`  ${pc.bold(\"Agents\")} ${pc.dim(`(${this.agents.size})`)}`);\n    console.log(`  ${pc.dim(\"─\".repeat(60))}`);\n    for (const [name, reg] of this.agents) {\n      const tools = reg.toolIndex.size;\n      const marker = name === this.defaultAgentName ? pc.green(\"●\") : \" \";\n      console.log(\n        `  ${marker} ${pc.bold(name.padEnd(24))} ${pc.dim(`${tools} tools`)}`,\n      );\n    }\n    console.log(`  ${pc.dim(\"─\".repeat(60))}`);\n    console.log(\"\");\n  }\n\n  async shutdown(): Promise<void> {\n    this.approvalGate.abortAll();\n    if (this.mcpClient) {\n      await this.mcpClient.close();\n      this.mcpClient = null;\n    }\n  }\n\n  exports() {\n    return {\n      register: (name: string, def: AgentDefinition) =>\n        this.registerCodeAgent(name, def),\n      list: () => Array.from(this.agents.keys()),\n      get: (name: string) => this.agents.get(name) ?? null,\n      reload: () => this.reload(),\n      getDefault: () => this.defaultAgentName,\n      getThreads: (userId: string) => this.threadStore.list(userId),\n    };\n  }\n\n  private async registerCodeAgent(\n    name: string,\n    def: AgentDefinition,\n  ): Promise<void> {\n    const registered = await this.buildRegisteredAgent(name, def, {\n      origin: \"code\",\n    });\n    this.agents.set(name, registered);\n    if (!this.defaultAgentName) this.defaultAgentName = name;\n  }\n}\n\nfunction normalizeAutoInherit(value: AgentsPluginConfig[\"autoInheritTools\"]): {\n  file: boolean;\n  code: boolean;\n} {\n  // Default is opt-out for both origins. A markdown agent or code-defined\n  // agent with no declared `tools:` gets an empty tool index unless the\n  // developer explicitly flips `autoInheritTools` on. Even then, only tools\n  // whose plugin author marked `autoInheritable: true` are spread — see\n  // `applyAutoInherit` for the filter.\n  if (value === undefined) return { file: false, code: false };\n  if (typeof value === \"boolean\") return { file: value, code: value };\n  return { file: value.file ?? false, code: value.code ?? false };\n}\n\nfunction composePromptForAgent(\n  registered: RegisteredAgent,\n  pluginLevel: BaseSystemPromptOption | undefined,\n  ctx: PromptContext,\n): string {\n  const perAgent = registered.baseSystemPrompt;\n  const resolved = perAgent !== undefined ? perAgent : pluginLevel;\n\n  let base = \"\";\n  if (resolved === false) {\n    base = \"\";\n  } else if (typeof resolved === \"string\") {\n    base = resolved;\n  } else if (typeof resolved === \"function\") {\n    base = resolved(ctx);\n  } else {\n    base = buildBaseSystemPrompt(ctx);\n  }\n\n  return composeSystemPrompt(base, registered.instructions);\n}\n\n/**\n * Pulls the LLM-readable description off any {@link SupervisorTool} kind.\n * Used to populate the synthetic placeholder `def.description` on\n * hosted-supervisor tool-index entries.\n */\nfunction supervisorToolDescription(spec: SupervisorTool): string {\n  switch (spec.type) {\n    case \"genie_space\":\n      return spec.genie_space.description;\n    case \"uc_function\":\n      return spec.uc_function.description;\n    case \"knowledge_assistant\":\n      return spec.knowledge_assistant.description;\n    case \"app\":\n      return spec.app.description;\n    case \"uc_connection\":\n      return spec.uc_connection.description;\n  }\n}\n\n/**\n * Builds the `AgentInput.extensions` payload from a tool index, aggregating\n * the hosted-supervisor specs under {@link SUPERVISOR_EXTENSION_KEY}. Returns\n * `undefined` when there are no adapter-side hosted tools so the field stays\n * absent on the wire — adapters that don't read extensions never see it.\n */\nfunction buildAdapterExtensions(\n  toolIndex: Map<string, ResolvedToolEntry>,\n): Readonly<Record<string, unknown>> | undefined {\n  const supervisorSpecs: SupervisorTool[] = [];\n  for (const entry of toolIndex.values()) {\n    if (entry.source === \"hosted-supervisor\") {\n      supervisorSpecs.push(entry.spec);\n    }\n  }\n  if (supervisorSpecs.length === 0) return undefined;\n  return {\n    [SUPERVISOR_EXTENSION_KEY]: { hostedTools: supervisorSpecs },\n  };\n}\n\n/**\n * Compares the adapter's declared capabilities against the tool index and\n * logs a warning when the agent's tool declarations would be silently\n * dropped at runtime. Warn-not-throw: misconfiguration is loud enough to\n * notice without taking the whole app down.\n */\nfunction warnOnCapabilityMismatch(\n  agentName: string,\n  adapter: AgentAdapter,\n  toolIndex: Map<string, ResolvedToolEntry>,\n): void {\n  const accepted = new Set(adapter.acceptsExtensions ?? []);\n\n  const hostedSupervisorKeys: string[] = [];\n  const inputToolKeys: string[] = [];\n  for (const [key, entry] of toolIndex) {\n    if (entry.source === \"hosted-supervisor\") {\n      hostedSupervisorKeys.push(key);\n    } else {\n      inputToolKeys.push(key);\n    }\n  }\n\n  if (\n    hostedSupervisorKeys.length > 0 &&\n    !accepted.has(SUPERVISOR_EXTENSION_KEY)\n  ) {\n    logger.warn(\n      `Agent '${agentName}' declares hosted-supervisor tools (${hostedSupervisorKeys.join(\", \")}) ` +\n        \"but its model adapter does not accept the 'databricks.supervisor' extension. \" +\n        \"These tools will not reach the model. Pair them with `DatabricksAdapter.fromSupervisorApi(...)`, or remove them.\",\n    );\n  }\n\n  // `consumesInputTools` defaults to true. Only warn when an adapter\n  // explicitly opts out (`false`) and an input tool would be silently\n  // ignored.\n  if (adapter.consumesInputTools === false && inputToolKeys.length > 0) {\n    logger.warn(\n      `Agent '${agentName}' declares function tools / sub-agents / MCP tools (${inputToolKeys.join(\", \")}) ` +\n        \"but its model adapter does not consume input.tools (Supervisor API owns its own tool loop). \" +\n        \"These tools will not be exposed to the model. See docs/plugins/agents.md.\",\n    );\n  }\n}\n\n/**\n * Plugin factory for the agents plugin. Reads `config/agents/*.md` by default,\n * resolves toolkits/tools from registered plugins, exposes `appkit.agents.*`\n * runtime API and mounts `POST /invocations` and `POST /responses` (aliased\n * non-streaming invoke endpoints) plus `POST /chat` (streaming, HITL-capable).\n *\n * @example\n * ```ts\n * import { agents, analytics, createApp, server } from \"@databricks/appkit\";\n *\n * await createApp({\n *   plugins: [server(), analytics(), agents()],\n * });\n * ```\n */\nexport const agents = toPlugin(AgentsPlugin);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyEA,MAAM,SAAS,aAAa,SAAS;AAErC,MAAM,qBAAqB;;;;;;;;;;AAoB3B,SAAS,iBAAiB,aAAmD;AAC3E,KAAI,CAAC,YAAa,QAAO;AACzB,KAAI,YAAY,gBAAgB,KAAM,QAAO;AAC7C,SAAQ,YAAY,QAApB;EACE,KAAK;EACL,KAAK;EACL,KAAK,cACH,QAAO;EACT,KAAK;EACL,KAAK,OACH,QAAO;EACT;AAC6B,eAAY;AACvC,UAAO;;;AAiCb,IAAa,eAAb,cAAkC,OAA+B;CAK/D,OAAO,WAAWA;CAClB,OAAO,QAAqB;CAI5B,AAAQ,yBAAS,IAAI,KAA8B;CACnD,AAAQ,mBAAkC;CAC1C,AAAQ,gCAAgB,IAAI,KAGzB;;;;;;;CAOH,AAAQ,mCAAmB,IAAI,KAAqB;CACpD,AAAQ,YAAoC;CAC5C,AAAQ;CACR,AAAQ,eAAe,IAAI,kBAAkB;CAE7C,YAAY,QAA4B;AACtC,QAAM,OAAO;AACb,OAAK,SAAS;AACd,MAAI,OAAO,YACT,MAAK,cAAc,OAAO;OACrB;AACL,QAAK,cAAc,IAAI,qBAAqB;AAC5C,OAAI,QAAQ,IAAI,aAAa,aAC3B,QAAO,KACL,oMAGD;OAED,QAAO,KACL,qGACD;;;;;;;;;;;;;CAeP,AAAQ,uBAGG;CAEX,IAAY,yBAGV;AACA,MAAI,KAAK,qBAAsB,QAAO,KAAK;EAC3C,MAAM,MAAM,KAAK,OAAO,YAAY,EAAE;EACtC,MAAM,4BAA4B;EAClC,MAAM,8BAA8B;EACpC,IAAI,YAAY,IAAI,aAAa;AACjC,MAAI,CAAC,OAAO,SAAS,UAAU,IAAI,YAAY,2BAA2B;AACxE,UAAO,KACL,yJACA,IAAI,WACJ,2BACA,4BACD;AACD,eAAY;;AAEd,OAAK,uBAAuB;GAC1B,uBAAuB,IAAI,yBAAyB;GACpD;GACD;AACD,SAAO,KAAK;;;CAId,IAAY,iBAKV;EACA,MAAM,MAAM,KAAK,OAAO,UAAU,EAAE;AACpC,SAAO;GACL,6BAA6B,IAAI,+BAA+B;GAChE,cAAc,IAAI,gBAAgB;GAClC,kBAAkB,IAAI,oBAAoB;GAI1C,mBAAmB,IAAI,qBAAqB;GAC7C;;;CAIH,AAAQ,iBAAiB,QAAwB;AAC/C,SAAO,KAAK,iBAAiB,IAAI,OAAO,IAAI;;;;;;;;CAS9C,AAAQ,YACN,WACA,QACA,YACM;AACN,OAAK,cAAc,IAAI,WAAW;GAAE;GAAY;GAAQ,CAAC;AACzD,OAAK,iBAAiB,IACpB,SACC,KAAK,iBAAiB,IAAI,OAAO,IAAI,KAAK,EAC5C;;;;;;;CAQH,AAAQ,cAAc,WAAyB;EAC7C,MAAM,QAAQ,KAAK,cAAc,IAAI,UAAU;AAC/C,MAAI,CAAC,MAAO;AACZ,OAAK,cAAc,OAAO,UAAU;EACpC,MAAM,QAAQ,KAAK,iBAAiB,IAAI,MAAM,OAAO,IAAI,KAAK;AAC9D,MAAI,QAAQ,EACV,MAAK,iBAAiB,OAAO,MAAM,OAAO;MAE1C,MAAK,iBAAiB,IAAI,MAAM,QAAQ,KAAK;;CAIjD,MAAM,QAAQ;AACZ,QAAM,kBAAkB;EACxB,MAAM,EAAE,QAAQ,qBAAqB,MAAM,KAAK,oBAAoB;AACpE,OAAK,SAAS;AACd,OAAK,mBAAmB;AACxB,OAAK,mBAAmB;AACxB,OAAK,eAAe;;;;;;;;CAStB,MAAM,SAAwB;EAC5B,MAAM,OAAO,MAAM,KAAK,oBAAoB;AAgB5C,OAAK,SAAS,KAAK;AACnB,OAAK,mBAAmB,KAAK;;;;;;;CAQ/B,MAAc,qBAGX;EACD,MAAM,EAAE,MAAM,UAAU,cAAc,gBACpC,MAAM,KAAK,qBAAqB;EAElC,MAAM,WAAW,KAAK,OAAO,UAAU,EAAE;AAEzC,OAAK,MAAM,QAAQ,OAAO,KAAK,SAAS,CACtC,KAAI,SAAS,MACX,QAAO,KACL,0FACA,KACD;EAIL,MAAM,SACJ,EAAE;AACJ,OAAK,MAAM,CAAC,MAAM,QAAQ,OAAO,QAAQ,SAAS,CAChD,QAAO,QAAQ;GAAE;GAAK,KAAK,EAAE,QAAQ,QAAQ;GAAE;AAEjD,OAAK,MAAM,CAAC,MAAM,QAAQ,OAAO,QAAQ,SAAS,CAChD,QAAO,QAAQ;GAAE;GAAK,KAAK,EAAE,QAAQ,QAAQ;GAAE;EAGjD,MAAM,yBAAS,IAAI,KAA8B;EACjD,IAAI,mBAAkC;AAEtC,MAAI,OAAO,KAAK,OAAO,CAAC,WAAW,GAAG;AACpC,UAAO,KACL,iEACA,KAAK,mBAAmB,IAAI,aAC7B;AACD,UAAO;IAAE;IAAQ;IAAkB;;AAGrC,OAAK,MAAM,CAAC,MAAM,EAAE,KAAK,UAAU,OAAO,QAAQ,OAAO,CACvD,KAAI;GACF,MAAM,aAAa,MAAM,KAAK,qBAAqB,MAAM,KAAK,IAAI;AAClE,UAAO,IAAI,MAAM,WAAW;AAC5B,OAAI,CAAC,iBAAkB,oBAAmB;WACnC,KAAK;AACZ,SAAM,IAAI,MACR,6BAA6B,KAAK,KAAK,IAAI,OAAO,KAChD,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAElD,EAAE,OAAO,eAAe,QAAQ,MAAM,QAAW,CAClD;;AAIL,MAAI,KAAK,OAAO,cAAc;AAC5B,OAAI,CAAC,OAAO,IAAI,KAAK,OAAO,aAAa,CACvC,OAAM,IAAI,MACR,iBAAiB,KAAK,OAAO,aAAa,kCAAkC,MAAM,KAAK,OAAO,MAAM,CAAC,CAAC,KAAK,KAAK,GACjH;AAEH,sBAAmB,KAAK,OAAO;aACtB,eAAe,OAAO,IAAI,YAAY,CAC/C,oBAAmB;AAGrB,SAAO;GAAE;GAAQ;GAAkB;;CAGrC,AAAQ,oBAAmC;AACzC,MAAI,KAAK,OAAO,QAAQ,MAAO,QAAO;EACtC,MAAM,MAAM,KAAK,OAAO,OAAO;AAC/B,SAAO,KAAK,WAAW,IAAI,GAAG,MAAM,KAAK,QAAQ,QAAQ,KAAK,EAAE,IAAI;;CAGtE,MAAc,sBAGX;EACD,MAAM,MAAM,KAAK,mBAAmB;AACpC,MAAI,CAAC,IAAK,QAAO;GAAE,MAAM,EAAE;GAAE,cAAc;GAAM;EAEjD,MAAM,sBAAsB,KAAK,qBAAqB;EACtD,MAAM,UAAU,KAAK,OAAO,SAAS,EAAE;AASvC,SAPe,MAAM,kBAAkB,KAAK;GAC1C,cAAc,KAAK,OAAO;GAC1B,gBAAgB;GAChB,SAAS;GACT,YAAY,KAAK,OAAO;GACzB,CAAC;;;;;;;;CAWJ,AAAQ,sBAGN;EACA,MAAM,sBAAM,IAAI,KAAK;AACrB,MAAI,CAAC,KAAK,QAAS,QAAO;AAC1B,OAAK,MAAM,EAAE,MAAM,cAAc,KAAK,QAAQ,kBAAkB,EAAE;GAChE,MAAM,cAAc;AAGpB,OAAI,OAAO,YAAY,YAAY,WACjC,KAAI,IAAI,MAAM,EACZ,SAAS,YAAY,QAAQ,KAAK,YAAY,EAC/C,CAAC;;AAGN,SAAO;;CAGT,MAAc,qBACZ,MACA,KACA,KAC0B;EAC1B,MAAM,UAAU,MAAM,KAAK,eAAe,KAAK,KAAK;EACpD,MAAM,YAAY,MAAM,KAAK,eAAe,MAAM,KAAK,IAAI;AAE3D,2BAAyB,MAAM,SAAS,UAAU;AAElD,SAAO;GACL;GACA,cAAc,IAAI;GAClB;GACA;GACA,kBAAkB,IAAI;GACtB,UAAU,IAAI;GACd,WAAW,IAAI;GACf,kBAAkB,IAAI;GACtB,WAAW,IAAI;GAChB;;CAGH,MAAc,eACZ,KACA,MACuB;EACvB,MAAM,SAAS,IAAI,SAAS,KAAK,OAAO;EAIxC,MAAM,iBAIF,EAAE;AACN,MAAI,IAAI,aAAa,OAAW,gBAAe,WAAW,IAAI;AAC9D,MAAI,IAAI,cAAc,OAAW,gBAAe,YAAY,IAAI;AAChE,MAAI,IAAI,qBAAqB,OAC3B,gBAAe,mBAAmB,IAAI;AAExC,MAAI,CAAC,QAAQ;GACX,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,OAAI;AACF,WAAO,MAAM,kBAAkB,iBAC7B,QACA,eACD;YACM,KAAK;AACZ,UAAM,IAAI,MACR,UAAU,KAAK,sFACf,EAAE,OAAO,eAAe,QAAQ,MAAM,QAAW,CAClD;;;AAGL,MAAI,OAAO,WAAW,UAAU;GAC9B,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,UAAO,kBAAkB,iBAAiB,QAAQ,eAAe;;AAEnE,SAAO,MAAM;;;;;;;CAQf,MAAc,eACZ,WACA,KACA,KACyC;EACzC,MAAM,wBAAQ,IAAI,KAAgC;EAClD,MAAM,mBAAmB,IAAI,UAAU;EACvC,MAAM,cAAc,KAAK,gBAAgB,WAAW,IAAI;EACxD,MAAM,uBACJ,IAAI,UAAU,OAAO,KAAK,IAAI,OAAO,CAAC,SAAS;EAEjD,MAAM,kBAAkB,qBAAqB,KAAK,OAAO,iBAAiB;AAQ1E,MAJE,CAAC,oBACD,CAAC,yBACA,IAAI,WAAW,SAAS,gBAAgB,OAAO,gBAAgB,MAGhE,OAAM,KAAK,iBAAiB,WAAW,MAAM;AAI/C,OAAK,MAAM,CAAC,UAAU,aAAa,OAAO,QAAQ,IAAI,UAAU,EAAE,CAAC,EAAE;GACnE,MAAM,WAAW,SAAS;AAC1B,SAAM,IAAI,UAAU;IAClB,QAAQ;IACR,WAAW,SAAS,QAAQ;IAC5B,KAAK;KACH,MAAM;KACN,aACE,SAAS,aAAa,MAAM,GAAG,IAAI,IACnC,mBAAmB,SAAS;KAC9B,YAAY;MACV,MAAM;MACN,YAAY,EACV,OAAO;OACL,MAAM;OACN,aAAa;OACd,EACF;MACD,UAAU,CAAC,QAAQ;MACpB;KACF;IACF,CAAC;;EAIJ,MAAM,kBACJ,EAAE;AACJ,OAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,YAAY,EAAE;AACrD,OAAI,eAAe,KAAK,EAAE;AACxB,UAAM,IAAI,KAAK;KACb,QAAQ;KACR,YAAY,KAAK;KACjB,WAAW,KAAK;KAChB,KAAK;MAAE,GAAG,KAAK;MAAK,MAAM;MAAK;KAChC,CAAC;AACF;;AAEF,OAAI,eAAe,KAAK,EAAE;AACxB,UAAM,IAAI,KAAK;KACb,QAAQ;KACR,cAAc;KACd,KAAK;MAAE,GAAG,yBAAyB,KAAK;MAAE,MAAM;MAAK;KACtD,CAAC;AACF;;AAEF,OAAI,iBAAiB,KAAK,EAAE;AAC1B,UAAM,IAAI,KAAK;KACb,QAAQ;KACR,MAAM,KAAK;KACX,KAAK;MAKH,MAAM;MACN,aAAa,0BAA0B,KAAK,KAAK;MACjD,YAAY;OAAE,MAAM;OAAU,YAAY,EAAE;OAAE;MAC/C;KACF,CAAC;AACF;;AAEF,OAAI,aAAa,KAAK,EAAE;AACtB,oBAAgB,KAAK,KAAK;AAC1B;;AAEF,SAAM,IAAI,MACR,UAAU,UAAU,UAAU,IAAI,6BACnC;;AAGH,MAAI,gBAAgB,SAAS,EAC3B,OAAM,KAAK,mBAAmB,iBAAiB,MAAM;AAGvD,SAAO;;;;;;;;;;;;;CAcT,AAAQ,gBAAgB,WAAmB,KAAkC;AAC3E,MAAI,OAAO,IAAI,UAAU,WACvB,QAAO,IAAI,SAAS,EAAE;AAExB,MAAI;AACF,UAAO,IAAI,MAAM,KAAK,iBAAiB,CAAC;WACjC,KAAK;AACZ,SAAM,IAAI,MACR,UAAU,UAAU,oCAClB,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAElD,EAAE,OAAO,eAAe,QAAQ,MAAM,QAAW,CAClD;;;;;;;;;;;;;;;CAgBL,AAAQ,kBAA2B;EACjC,MAAM,MAA6C,EAAE;AACrD,MAAI,CAAC,KAAK,QACR,QAAO,mBAAmB,KAAK,UAAU,KAAK,KAAK,mBAAmB;AAExE,OAAK,MAAM,EAAE,MAAM,cAAc,KAAK,QAAQ,kBAAkB,CAE9D,KAAI,OADY,SAAmC,YAC7B,WACpB,KAAI,QAAQ;MAEZ,KAAI,QAAQ,EACV,UAAU,SAAS,2BAA2B,MAAM,UAAU,KAAK,EACpE;AAGL,SAAO,mBAAmB,KAAK,UAAU,KAAK,KAAK,mBAAmB;;CAGxE,MAAc,iBACZ,WACA,OACe;AACf,MAAI,CAAC,KAAK,QAAS;EACnB,MAAM,YAAsB,EAAE;EAC9B,MAAM,kCAAkB,IAAI,KAAuB;EACnD,MAAM,cAAc,YAAoB,cAAsB;GAC5D,MAAM,OAAO,gBAAgB,IAAI,WAAW,IAAI,EAAE;AAClD,QAAK,KAAK,UAAU;AACpB,mBAAgB,IAAI,YAAY,KAAK;;AAGvC,OAAK,MAAM,EACT,MAAM,YACN,cACG,KAAK,QAAQ,kBAAkB,EAAE;AACpC,OAAI,eAAe,KAAK,KAAM;GAC9B,MAAM,UAAU,2BAA2B,YAAY,SAAS;AAChE,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,EAAE;AAClD,QAAI,MAAM,oBAAoB,MAAM;AAClC,gBAAW,MAAM,YAAY,MAAM,UAAU;AAC7C;;AAEF,UAAM,IAAI,KAAK;KACb,QAAQ;KACR,YAAY,MAAM;KAClB,WAAW,MAAM;KACjB,KAAK;MAAE,GAAG,MAAM;MAAK,MAAM;MAAK;KACjC,CAAC;AACF,cAAU,KAAK,IAAI;;;AAIvB,MAAI,UAAU,SAAS,EACrB,QAAO,KACL,4CACA,WACA,UAAU,QACV,UAAU,KAAK,KAAK,CACrB;AAEH,MAAI,gBAAgB,OAAO,GAAG;GAC5B,MAAM,UAAU,MAAM,KAAK,gBAAgB,SAAS,CAAC,CAClD,KAAK,CAAC,GAAG,WAAW,GAAG,EAAE,GAAG,MAAM,OAAO,GAAG,CAC5C,KAAK,KAAK;AACb,UAAO,KACL,2HACA,WACA,MAAM,KAAK,gBAAgB,QAAQ,CAAC,CAAC,QAClC,GAAG,SAAS,IAAI,KAAK,QACtB,EACD,EACD,QACD;;;CAIL,MAAc,mBACZ,aACA,OACe;EACf,IAAI;EACJ,IAAI;AAEJ,MAAI;GACF,MAAM,EAAE,uBAAuB,MAAM,OAAO;GAC5C,MAAM,WAAW,oBAAoB;AACrC,SAAM,SAAS,OAAO,gBAAgB;AACtC,UAAO,SAAS,OAAO;AACvB,kBAAe,YAAY;IACzB,MAAM,UAAU,IAAI,SAAS;AAC7B,UAAM,SAAS,OAAO,aAAa,QAAQ;AAC3C,WAAO,OAAO,YAAY,QAAQ,SAAS,CAAC;;UAExC;AACN,UAAO,QAAQ,IAAI;AACnB,kBAAe,YAA6C;IAC1D,MAAM,QAAQ,QAAQ,IAAI;AAC1B,WAAO,QAAQ,EAAE,eAAe,UAAU,SAAS,GAAG,EAAE;;;AAI5D,MAAI,CAAC,MAAM;AACT,UAAO,KACL,6DACA,YAAY,OACb;AACD;;AAGF,MAAI,CAAC,KAAK,WAAW;GACnB,MAAM,SAAS,mBAAmB,KAAK,OAAO,KAAK,KAAK;AACxD,QAAK,YAAY,IAAI,gBAAgB,MAAM,cAAc,OAAO;;EAGlE,MAAM,YAAY,mBAAmB,YAAY;EACjD,MAAM,SAAS,MAAM,KAAK,UAAU,WAAW,UAAU;AACzD,MAAI,OAAO,OAAO,SAAS,EAMzB,QAAO,KACL,+HACA,OAAO,OAAO,QACd,UAAU,QACV,OAAO,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,KAAK,KAAK,CAC5C;AAGH,OAAK,MAAM,OAAO,KAAK,UAAU,uBAAuB,CACtD,OAAM,IAAI,IAAI,MAAM;GAClB,QAAQ;GACR,aAAa,IAAI;GACjB;GACD,CAAC;;CAMN,gBAAuC;AACrC,SAAO,EAAE;;CAGX,MAAM,mBAAqC;AACzC,QAAM,IAAI,MAAM,yDAAyD;;;;;;;;CAW3E,AAAQ,oBAAoB;AAC1B,MAAI,CAAC,KAAK,QAAS;EAGnB,MAAM,WAAW,KAAsB,QACrC,KAAK,cAAc,KAAK,IAAI;AAC9B,OAAK,QAAQ,SAAS,QAAQ,gBAAgB,QAAQ;AACtD,OAAK,QAAQ,SAAS,QAAQ,cAAc,QAAQ;;CAGtD,aAAa,QAAoB;AAC/B,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,KAAK,QAAQ,KAAK,YAAY,KAAK,IAAI;GACxD,CAAC;AACF,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,KAAK,QAAQ,KAAK,cAAc,KAAK,IAAI;GAC1D,CAAC;AACF,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,KAAK,QAAQ,KAAK,eAAe,KAAK,IAAI;GAC3D,CAAC;AACF,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,KAAK,QAAQ,KAAK,mBAAmB,KAAK,IAAI;GAC/D,CAAC;AACF,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,KAAK,QAAQ,KAAK,iBAAiB,KAAK,IAAI;GAC7D,CAAC;AACF,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,KAAK,QAAQ,KAAK,oBAAoB,KAAK,IAAI;GAChE,CAAC;AACF,OAAK,MAAM,QAAQ;GACjB,MAAM;GACN,QAAQ;GACR,MAAM;GACN,SAAS,OAAO,MAAM,QAAQ;AAC5B,QAAI,KAAK;KACP,QAAQ,MAAM,KAAK,KAAK,OAAO,MAAM,CAAC;KACtC,cAAc,KAAK;KACpB,CAAC;;GAEL,CAAC;;CAGJ,eAAwC;AACtC,SAAO;GACL,QAAQ,MAAM,KAAK,KAAK,OAAO,MAAM,CAAC;GACtC,cAAc,KAAK;GACpB;;CAGH,MAAc,YAAY,KAAsB,KAAuB;EACrE,MAAM,SAAS,kBAAkB,UAAU,IAAI,KAAK;AACpD,MAAI,CAAC,OAAO,SAAS;AACnB,OAAI,OAAO,IAAI,CAAC,KAAK;IACnB,OAAO;IACP,SAAS,OAAO,MAAM,SAAS,CAAC;IACjC,CAAC;AACF;;EAEF,MAAM,EAAE,SAAS,UAAU,OAAO,WAAW,gBAAgB,OAAO;EAEpE,MAAM,aAAa,KAAK,aAAa,UAAU;AAC/C,MAAI,CAAC,YAAY;AACf,OAAI,OAAO,IAAI,CAAC,KAAK,EACnB,OAAO,YACH,UAAU,UAAU,eACpB,uBACL,CAAC;AACF;;EAGF,MAAM,SAAS,KAAK,cAAc,IAAI;EAKtC,MAAM,SAAS,KAAK;AACpB,MAAI,KAAK,iBAAiB,OAAO,IAAI,OAAO,6BAA6B;AACvE,OAAI,UAAU,eAAe,IAAI;AACjC,OAAI,OAAO,IAAI,CAAC,KAAK,EACnB,OAAO,oDAAoD,OAAO,4BAA4B,sEAC/F,CAAC;AACF;;EAQF,IAAI;AACJ,MAAI;GACF,MAAM,WAAW,WACb,MAAM,KAAK,YAAY,IAAI,UAAU,OAAO,GAC5C;AACJ,OAAI,YAAY,CAAC,UAAU;AACzB,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,UAAU,SAAS,aAAa,CAAC;AAC/D;;AAEF,YAAS,YAAa,MAAM,KAAK,YAAY,OAAO,OAAO;GAE3D,MAAM,cAAuB;IAC3B,IAAI,YAAY;IAChB,MAAM;IACN,SAAS;IACT,2BAAW,IAAI,MAAM;IACtB;AACD,SAAM,KAAK,YAAY,WAAW,OAAO,IAAI,QAAQ,YAAY;WAC1D,KAAK;AACZ,UAAO,MAAM,mCAAmC,IAAI;AACpD,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC1D;;AAEF,SAAO,KAAK,aAAa,KAAK,KAAK,YAAY,QAAQ,QAAQ,YAAY;;;;;;;;;;;;;CAc7E,AAAQ,iCACN,YACU;AACV,MAAI,CAAC,KAAK,uBAAuB,sBAAuB,QAAO,EAAE;EACjE,MAAM,QAAkB,EAAE;AAC1B,OAAK,MAAM,SAAS,WAAW,UAAU,QAAQ,CAC/C,KAAI,iBAAiB,MAAM,IAAI,YAAY,CACzC,OAAM,KAAK,MAAM,IAAI,KAAK;AAG9B,SAAO;;;;;;;;;;;;CAaT,MAAc,cAAc,KAAsB,KAAuB;EACvE,MAAM,SAAS,yBAAyB,UAAU,IAAI,KAAK;AAC3D,MAAI,CAAC,OAAO,SAAS;AACnB,OAAI,OAAO,IAAI,CAAC,KAAK;IACnB,OAAO;IACP,SAAS,OAAO,MAAM,SAAS,CAAC;IACjC,CAAC;AACF;;EAEF,MAAM,EAAE,OAAO,gBAAgB,OAAO;EACtC,MAAM,aAAa,KAAK,cAAc;AACtC,MAAI,CAAC,YAAY;AACf,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,uBAAuB,CAAC;AACtD;;EAQF,MAAM,gBAAgB,KAAK,iCAAiC,WAAW;AACvE,MAAI,cAAc,SAAS,GAAG;AAC5B,OAAI,OAAO,IAAI,CAAC,KAAK,EACnB,OACE,UAAU,WAAW,KAAK,YAAY,cAAc,OAAO,2BACvD,cAAc,KAAK,KAAK,CAAC,gMAGhC,CAAC;AACF;;EAGF,MAAM,SAAS,KAAK,cAAc,IAAI;EAItC,MAAM,SAAS,KAAK;AACpB,MAAI,KAAK,iBAAiB,OAAO,IAAI,OAAO,6BAA6B;AACvE,OAAI,UAAU,eAAe,IAAI;AACjC,OAAI,OAAO,IAAI,CAAC,KAAK,EACnB,OAAO,oDAAoD,OAAO,4BAA4B,sEAC/F,CAAC;AACF;;EAKF,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,KAAK,YAAY,OAAO,OAAO;AAE9C,OAAI,OAAO,UAAU,SACnB,OAAM,KAAK,YAAY,WAAW,OAAO,IAAI,QAAQ;IACnD,IAAI,YAAY;IAChB,MAAM;IACN,SAAS;IACT,2BAAW,IAAI,MAAM;IACtB,CAAC;OAEF,MAAK,MAAM,QAAQ,OAAO;IACxB,MAAM,OAAQ,KAAK,QAAQ;IAC3B,MAAM,UACJ,OAAO,KAAK,YAAY,WACpB,KAAK,UACL,KAAK,UAAU,KAAK,WAAW,GAAG;AACxC,QAAI,CAAC,QAAS;AACd,UAAM,KAAK,YAAY,WAAW,OAAO,IAAI,QAAQ;KACnD,IAAI,YAAY;KAChB;KACA;KACA,2BAAW,IAAI,MAAM;KACtB,CAAC;;WAGC,KAAK;AACZ,UAAO,MAAM,0CAA0C,IAAI;AAC3D,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC1D;;AAGF,SAAO,KAAK,sBACV,KACA,KACA,YACA,QACA,QACA,YACD;;CAGH,MAAc,aACZ,KACA,KACA,YACA,QACA,QACA,aACe;EACf,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,SAAS,gBAAgB;EAC/B,MAAM,YAAY,YAAY;AAC9B,OAAK,YAAY,WAAW,QAAQ,gBAAgB;EAOpD,MAAM,QAAQ,MAAM,KAAK,WAAW,UAAU,QAAQ,CAAC,CACpD,QAAQ,MAAM,EAAE,WAAW,oBAAoB,CAC/C,KAAK,MAAM,EAAE,IAAI;EACpB,MAAM,iBAAiB,KAAK;EAC5B,MAAM,SAAS,KAAK;EACpB,MAAM,iBAAiB,IAAI,cAAmC;EAC9D,MAAM,aAAa,IAAI,sBAAsB;EAM7C,MAAM,WAAqB;GACzB;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,eAAe,EAAE,OAAO,GAAG;GAC5B;EAED,MAAM,eAAe,MAAc,SACjC,KAAK,iBAAiB,UAAU,WAAW,WAAW,MAAM,MAAM,EAAE;EAMtE,MAAM,UAAU,YAAY;AAC1B,OAAI;AACF,SAAK,MAAM,OAAO,WAAW,UAAU;KACrC,MAAM;KACN,MAAM,EAAE,UAAU,OAAO,IAAI;KAC9B,CAAC,CACA,gBAAe,KAAK,IAAI;AAI1B,UAAM,WACJ,WAAW,QAAQ,SACnB,EACE,UAAU,OAAO,SAAS,KAAK,OAAO;KACpC,MAAM,EAAE;KACR,SAAS,EAAE;KACZ,EAAE,EACJ,EACD,OAAO,SAAS;AAGd,SAAI,YAAa,gBAAe,YAAY;KAE5C,MAAM,cAAc,KAAK,UACrB,KAAK,QACF,gBAAgB,CAChB,QAAQ,MAAM,MAAM,KAAK,QAAQ,MAAM,SAAS,GACnD,EAAE;KAWN,MAAM,qBAAgC,CACpC;MACE,IAAI;MACJ,MAAM;MACN,SAde,sBACjB,YACA,KAAK,OAAO,kBACZ;OACE,WAAW,WAAW;OACtB;OACA,WAAW,MAAM,KAAK,MAAM,EAAE,KAAK;OACpC,CACF;MAOG,2BAAW,IAAI,MAAM;MACtB,EACD,GAAG,OAAO,SACX;KAgBD,MAAM,cAAc,MAAM,qBAdX,WAAW,QAAQ,IAChC;MACE,UAAU;MACV;MACA,UAAU,OAAO;MACjB;MACA,YAAY,uBAAuB,WAAW,UAAU;MACzD,EACD;MAAE;MAAa;MAAQ,CACxB,EAKsD;MACrD;MACA,UAAU,UAAU;AAClB,YAAK,MAAM,cAAc,WAAW,UAAU,MAAM,CAClD,gBAAe,KAAK,WAAW;;MAGpC,CAAC;AAEF,SAAI,aAAa;AACf,WAAK,WAAW;OAAE,MAAM;OAAa,SAAS;OAAa,CAAC;AAC5D,YAAM,KAAK,YAAY,WAAW,OAAO,IAAI,QAAQ;OACnD,IAAI,YAAY;OAChB,MAAM;OACN,SAAS;OACT,2BAAW,IAAI,MAAM;OACtB,CAAC;;KAKJ,MAAM,gBAAgB,gBAAgB;AACtC,SAAI,cACF,MAAK,MAAM,OAAO,WAAW,UAAU;MACrC,MAAM;MACN,MAAM,EAAE,eAAe;MACxB,CAAC,CACA,gBAAe,KAAK,IAAI;MAI/B;AAED,SAAK,MAAM,OAAO,WAAW,UAAU,CAAE,gBAAe,KAAK,IAAI;YAC1D,OAAO;AACd,QAAI,OAAO,SAAS;AAClB,oBAAe,OAAO;AACtB;;AAEF,WAAO,MAAM,wBAAwB,MAAM;AAC3C,mBAAe,MAAM,MAAM;AAC3B;aACQ;AAGR,SAAK,aAAa,YAAY,UAAU;AACxC,SAAK,cAAc,UAAU;AAK7B,QAAI,WAAW,UACb,KAAI;AACF,WAAM,KAAK,YAAY,OAAO,OAAO,IAAI,OAAO;aACzC,KAAK;AACZ,YAAO,KACL,4CACA,OAAO,IACP,IACD;;;AAIP,kBAAe,OAAO;MACpB;AAEJ,QAAM,KAAK,cACT,KACA,mBAAmB;AACjB,OAAI;AACF,eAAW,MAAM,MAAM,eACrB,OAAM;aAEA;AACR,UAAM,OAAO,YAAY,OAAU;;KAGvC;GACE,GAAG;GACH,QAAQ;IAAE,GAAG,oBAAoB;IAAQ,UAAU;IAAW;GAC/D,CACF;;;;;;;;;;;;;;;;;;;;;;;;;CA0BH,MAAc,sBACZ,KACA,KACA,YACA,QACA,QACA,aACe;EACf,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,SAAS,gBAAgB;EAC/B,MAAM,YAAY,YAAY;AAC9B,OAAK,YAAY,WAAW,QAAQ,gBAAgB;EAEpD,MAAM,QAAQ,MAAM,KAAK,WAAW,UAAU,QAAQ,CAAC,CAAC,KAAK,MAAM,EAAE,IAAI;EACzE,MAAM,SAAS,KAAK;EAIpB,IAAI;EAEJ,MAAM,WAAqB;GACzB;GACA;GACA;GACA;GACA;GAIA,gBAAgB;IAAE,uBAAuB;IAAO,WAAW;IAAG;GAC9D;GACA,YAAY,IAAI,sBAAsB;GACtC,gBAAgB,IAAI,cAAmC;GACvD,eAAe,EAAE,OAAO,GAAG;GAC5B;EAED,MAAM,eAAe,MAAc,SACjC,KAAK,iBAAiB,UAAU,WAAW,WAAW,MAAM,MAAM,EAAE;EAEtE,IAAI,cAAc;AAClB,MAAI;AAIF,SAAM,WACJ,WAAW,QAAQ,SACnB,EACE,UAAU,OAAO,SAAS,KAAK,OAAO;IACpC,MAAM,EAAE;IACR,SAAS,EAAE;IACZ,EAAE,EACJ,EACD,OAAO,SAAS;AAGd,QAAI,YAAa,gBAAe,YAAY;IAE5C,MAAM,cAAc,KAAK,UACrB,KAAK,QACF,gBAAgB,CAChB,QAAQ,MAAM,MAAM,KAAK,QAAQ,MAAM,SAAS,GACnD,EAAE;IAWN,MAAM,qBAAgC,CACpC;KACE,IAAI;KACJ,MAAM;KACN,SAde,sBACjB,YACA,KAAK,OAAO,kBACZ;MACE,WAAW,WAAW;MACtB;MACA,WAAW,MAAM,KAAK,MAAM,EAAE,KAAK;MACpC,CACF;KAOG,2BAAW,IAAI,MAAM;KACtB,EACD,GAAG,OAAO,SACX;AAYD,kBAAc,MAAM,qBAVL,WAAW,QAAQ,IAChC;KACE,UAAU;KACV;KACA,UAAU,OAAO;KACjB;KACD,EACD;KAAE;KAAa;KAAQ,CACxB,EAEgD,EAAE,QAAQ,CAAC;AAE5D,QAAI,aAAa;AACf,UAAK,WAAW;MAAE,MAAM;MAAa,SAAS;MAAa,CAAC;AAC5D,WAAM,KAAK,YAAY,WAAW,OAAO,IAAI,QAAQ;MACnD,IAAI,YAAY;MAChB,MAAM;MACN,SAAS;MACT,2BAAW,IAAI,MAAM;MACtB,CAAC;;AAGJ,oBAAgB,gBAAgB;KAEnC;WACM,OAAO;AACd,OAAI,OAAO,SAAS;AAClB,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,mBAAmB,CAAC;AAClD;;AAEF,UAAO,MAAM,0BAA0B,MAAM;GAC7C,MAAM,UACJ,QAAQ,IAAI,aAAa,eACrB,0BACA,iBAAiB,QACf,MAAM,UACN,OAAO,MAAM;AACrB,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,SAAS,CAAC;AACxC;YACQ;AACR,QAAK,aAAa,YAAY,UAAU;AACxC,QAAK,cAAc,UAAU;AAC7B,OAAI,WAAW,UACb,KAAI;AACF,UAAM,KAAK,YAAY,OAAO,OAAO,IAAI,OAAO;YACzC,KAAK;AACZ,WAAO,KACL,4CACA,OAAO,IACP,IACD;;;EAKP,MAAM,aAAa,QAAQ,YAAY;EAEvC,MAAM,UAAiC;GACrC,MAAM;GACN,IAHgB,OAAO,YAAY;GAInC,QAAQ;GACR,MAAM;GACN,SAAS,CAAC;IAAE,MAAM;IAAe,MAAM;IAAa,CAAC;GACtD;AACD,MAAI,KAAK;GACP,IAAI;GACJ,QAAQ;GACR,YAAY,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;GACzC,QAAQ;GACR,WAAW,OAAO;GAGlB,GAAI,gBAAgB,EAAE,iBAAiB,eAAe,GAAG,EAAE;GAC3D,QAAQ,CAAC,QAAQ;GAClB,CAAC;;;;;;;;;;;;;CAcJ,MAAc,iBACZ,UACA,WACA,MACA,MACA,OACkB;AAClB,MAAI,SAAS,cAAc,SAAS,SAAS,OAAO,cAAc;AAChE,YAAS,gBAAgB,sBACvB,IAAI,MACF,qCAAqC,SAAS,OAAO,aAAa,IACnE,CACF;AACD,SAAM,IAAI,MACR,qCAAqC,SAAS,OAAO,aAAa,2FACnE;;AAEH,WAAS,cAAc;EAEvB,MAAM,QAAQ,UAAU,IAAI,KAAK;AACjC,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,iBAAiB,OAAO;AAEpD,MACE,SAAS,eAAe,yBACxB,iBAAiB,MAAM,IAAI,YAAY,EACvC;GACA,MAAM,aAAa,YAAY;AAC/B,QAAK,MAAM,MAAM,SAAS,WAAW,UAAU;IAC7C,MAAM;IACN;IACA,UAAU,SAAS;IACnB,UAAU;IACV;IACA,aAAa,MAAM,IAAI;IACxB,CAAC,CACA,UAAS,eAAe,KAAK,GAAG;AAQlC,OANiB,MAAM,KAAK,aAAa,KAAK;IAC5C;IACA,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,WAAW,SAAS,eAAe;IACpC,CAAC,KACe,OACf,QAAO,sDAAsD,KAAK;;AAsEtE,SAAO,oBAhEY,MAAM,UAAU,MAAM,MAAM,YAAY;GACzD,IAAI;AACJ,OAAI,MAAM,WAAW,WAAW;AAC9B,QAAI,CAAC,KAAK,QACR,OAAM,IAAI,MACR,2FACD;AAEH,aAAS,MAAM,KAAK,QAAQ,YAC1B,SAAS,KACT,MAAM,YACN,MAAM,WACN,MACA,SAAS,QACT,SAAS,OAAO,kBACjB;cACQ,MAAM,WAAW,YAAY;AAMtC,QAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,MAAM,QAAQ,KAAK,CAClE,OAAM,IAAI,MACR,kBAAkB,KAAK,uCAAuC,SAAS,OAAO,SAAS,MAAM,QAAQ,KAAK,GAAG,UAAU,OAAO,KAAK,4BACpI;AAEH,aAAS,MAAM,MAAM,aAAa,QAChC,KACD;cACQ,MAAM,WAAW,OAAO;AACjC,QAAI,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,2BAA2B;IAChE,MAAM,WAAW,SAAS,IAAI,QAAQ;IACtC,MAAM,UACJ,OAAO,aAAa,WAChB,EAAE,eAAe,UAAU,YAAY,GACvC;AACN,aAAS,MAAM,KAAK,UAAU,SAC5B,MAAM,aACN,MACA,QACD;cACQ,MAAM,WAAW,YAAY;IACtC,MAAM,aAAa,KAAK,OAAO,IAAI,MAAM,UAAU;AACnD,QAAI,CAAC,WACH,OAAM,IAAI,MAAM,wBAAwB,MAAM,YAAY;AAC5D,aAAS,MAAM,KAAK,YAAY,UAAU,YAAY,MAAM,QAAQ,EAAE;cAC7D,MAAM,WAAW,oBAQ1B,OAAM,IAAI,MACR,SAAS,KAAK,8MAEf;AAGH,UAAO;IACP,CAEoC;;;;;;;;;;;;;;;;CAiBxC,MAAc,YACZ,UACA,OACA,MACA,OACiB;AACjB,MAAI,QAAQ,SAAS,OAAO,iBAC1B,OAAM,IAAI,MACR,mCAAmC,SAAS,OAAO,iBAAiB,kFAErE;EAGH,MAAM,QACJ,OAAO,SAAS,YAChB,SAAS,QACT,OAAQ,KAA6B,UAAU,WAC1C,KAA2B,QAC5B,KAAK,UAAU,KAAK;EAI1B,MAAM,aAAa,MAAM,KAAK,MAAM,UAAU,QAAQ,CAAC,CACpD,QAAQ,MAAM,EAAE,WAAW,oBAAoB,CAC/C,KAAK,MAAM,EAAE,IAAI;EAEpB,MAAM,gBAAgB,MAAc,cAClC,KAAK,iBAAiB,UAAU,MAAM,WAAW,MAAM,WAAW,MAAM;EAE1E,MAAM,aAA8B;GAClC,aAAa;GACb,QAAQ,SAAS;GAClB;EAED,MAAM,cAAc,KAAK,UACrB,KAAK,QACF,gBAAgB,CAChB,QAAQ,MAAM,MAAM,KAAK,QAAQ,MAAM,SAAS,GACnD,EAAE;EAWN,MAAM,WAAsB,CAC1B;GACE,IAAI;GACJ,MAAM;GACN,SAdiB,sBACnB,OACA,KAAK,OAAO,kBACZ;IACE,WAAW,MAAM;IACjB;IACA,WAAW,WAAW,KAAK,MAAM,EAAE,KAAK;IACzC,CACF;GAOG,2BAAW,IAAI,MAAM;GACtB,EACD;GACE,IAAI,YAAY;GAChB,MAAM;GACN,SAAS;GACT,2BAAW,IAAI,MAAM;GACtB,CACF;AAED,SAAO,qBACL,MAAM,QAAQ,IACZ;GACE;GACA,OAAO;GACP,UAAU,YAAY;GACtB,QAAQ,SAAS;GACjB,YAAY,uBAAuB,MAAM,UAAU;GACpD,EACD,WACD,EACD;GACE,QAAQ,SAAS;GAWjB,UAAU,UAAU;AAClB,QAAI,MAAM,SAAS,WAAY;AAC/B,SAAK,MAAM,cAAc,SAAS,WAAW,UAAU,MAAM,CAC3D,UAAS,eAAe,KAAK,WAAW;;GAG7C,CACF;;CAGH,MAAc,cAAc,KAAsB,KAAuB;EACvE,MAAM,SAAS,oBAAoB,UAAU,IAAI,KAAK;AACtD,MAAI,CAAC,OAAO,SAAS;AACnB,OAAI,OAAO,IAAI,CAAC,KAAK;IACnB,OAAO;IACP,SAAS,OAAO,MAAM,SAAS,CAAC;IACjC,CAAC;AACF;;EAEF,MAAM,EAAE,aAAa,OAAO;EAC5B,MAAM,QAAQ,KAAK,cAAc,IAAI,SAAS;AAC9C,MAAI,CAAC,OAAO;AAEV,OAAI,KAAK,EAAE,WAAW,MAAM,CAAC;AAC7B;;EAEF,MAAM,SAAS,KAAK,cAAc,IAAI;AACtC,MAAI,MAAM,WAAW,QAAQ;AAC3B,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,aAAa,CAAC;AAC5C;;AAEF,QAAM,WAAW,MAAM,oBAAoB;AAC3C,OAAK,cAAc,SAAS;AAC5B,OAAK,aAAa,YAAY,SAAS;AACvC,MAAI,KAAK,EAAE,WAAW,MAAM,CAAC;;CAG/B,MAAc,eAAe,KAAsB,KAAuB;EACxE,MAAM,SAAS,sBAAsB,UAAU,IAAI,KAAK;AACxD,MAAI,CAAC,OAAO,SAAS;AACnB,OAAI,OAAO,IAAI,CAAC,KAAK;IACnB,OAAO;IACP,SAAS,OAAO,MAAM,SAAS,CAAC;IACjC,CAAC;AACF;;EAEF,MAAM,EAAE,UAAU,YAAY,aAAa,OAAO;EAElD,MAAM,cAAc,KAAK,cAAc,IAAI,SAAS;AACpD,MAAI,CAAC,aAAa;AAIhB,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,yCAAyC,CAAC;AACxE;;EAGF,MAAM,SAAS,KAAK,cAAc,IAAI;AACtC,MAAI,YAAY,WAAW,QAAQ;AACjC,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,aAAa,CAAC;AAC5C;;EAGF,MAAM,SAAS,KAAK,aAAa,OAAO;GAAE;GAAY;GAAQ;GAAU,CAAC;AACzE,MAAI,CAAC,OAAO,IAAI;AACd,OAAI,OAAO,WAAW,aAAa;AACjC,QAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,aAAa,CAAC;AAC5C;;AAEF,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,yCAAyC,CAAC;AACxE;;AAGF,MAAI,KAAK,EAAE,UAAU,CAAC;;CAGxB,MAAc,mBACZ,KACA,KACA;EACA,MAAM,SAAS,KAAK,cAAc,IAAI;EACtC,MAAM,UAAU,MAAM,KAAK,YAAY,KAAK,OAAO;AACnD,MAAI,KAAK,EAAE,SAAS,CAAC;;CAGvB,MAAc,iBAAiB,KAAsB,KAAuB;EAC1E,MAAM,SAAS,KAAK,cAAc,IAAI;EACtC,MAAM,SAAS,MAAM,KAAK,YAAY,IAAI,IAAI,OAAO,UAAU,OAAO;AACtE,MAAI,CAAC,QAAQ;AACX,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;;AAEF,MAAI,KAAK,OAAO;;CAGlB,MAAc,oBACZ,KACA,KACA;EACA,MAAM,SAAS,KAAK,cAAc,IAAI;AAEtC,MAAI,CADY,MAAM,KAAK,YAAY,OAAO,IAAI,OAAO,UAAU,OAAO,EAC5D;AACZ,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;;AAEF,MAAI,KAAK,EAAE,SAAS,MAAM,CAAC;;CAG7B,AAAQ,aAAa,MAAuC;AAC1D,MAAI,KAAM,QAAO,KAAK,OAAO,IAAI,KAAK,IAAI;AAC1C,MAAI,KAAK,iBACP,QAAO,KAAK,OAAO,IAAI,KAAK,iBAAiB,IAAI;EAEnD,MAAM,QAAQ,KAAK,OAAO,QAAQ,CAAC,MAAM;AACzC,SAAO,MAAM,OAAO,OAAO,MAAM;;CAGnC,AAAQ,gBAAsB;AAC5B,MAAI,KAAK,OAAO,SAAS,EAAG;AAC5B,UAAQ,IAAI,GAAG;AACf,UAAQ,IAAI,KAAK,GAAG,KAAK,SAAS,CAAC,GAAG,GAAG,IAAI,IAAI,KAAK,OAAO,KAAK,GAAG,GAAG;AACxE,UAAQ,IAAI,KAAK,GAAG,IAAI,IAAI,OAAO,GAAG,CAAC,GAAG;AAC1C,OAAK,MAAM,CAAC,MAAM,QAAQ,KAAK,QAAQ;GACrC,MAAM,QAAQ,IAAI,UAAU;GAC5B,MAAM,SAAS,SAAS,KAAK,mBAAmB,GAAG,MAAM,IAAI,GAAG;AAChE,WAAQ,IACN,KAAK,OAAO,GAAG,GAAG,KAAK,KAAK,OAAO,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,MAAM,QAAQ,GACpE;;AAEH,UAAQ,IAAI,KAAK,GAAG,IAAI,IAAI,OAAO,GAAG,CAAC,GAAG;AAC1C,UAAQ,IAAI,GAAG;;CAGjB,MAAM,WAA0B;AAC9B,OAAK,aAAa,UAAU;AAC5B,MAAI,KAAK,WAAW;AAClB,SAAM,KAAK,UAAU,OAAO;AAC5B,QAAK,YAAY;;;CAIrB,UAAU;AACR,SAAO;GACL,WAAW,MAAc,QACvB,KAAK,kBAAkB,MAAM,IAAI;GACnC,YAAY,MAAM,KAAK,KAAK,OAAO,MAAM,CAAC;GAC1C,MAAM,SAAiB,KAAK,OAAO,IAAI,KAAK,IAAI;GAChD,cAAc,KAAK,QAAQ;GAC3B,kBAAkB,KAAK;GACvB,aAAa,WAAmB,KAAK,YAAY,KAAK,OAAO;GAC9D;;CAGH,MAAc,kBACZ,MACA,KACe;EACf,MAAM,aAAa,MAAM,KAAK,qBAAqB,MAAM,KAAK,EAC5D,QAAQ,QACT,CAAC;AACF,OAAK,OAAO,IAAI,MAAM,WAAW;AACjC,MAAI,CAAC,KAAK,iBAAkB,MAAK,mBAAmB;;;AAIxD,SAAS,qBAAqB,OAG5B;AAMA,KAAI,UAAU,OAAW,QAAO;EAAE,MAAM;EAAO,MAAM;EAAO;AAC5D,KAAI,OAAO,UAAU,UAAW,QAAO;EAAE,MAAM;EAAO,MAAM;EAAO;AACnE,QAAO;EAAE,MAAM,MAAM,QAAQ;EAAO,MAAM,MAAM,QAAQ;EAAO;;AAGjE,SAAS,sBACP,YACA,aACA,KACQ;CACR,MAAM,WAAW,WAAW;CAC5B,MAAM,WAAW,aAAa,SAAY,WAAW;CAErD,IAAI,OAAO;AACX,KAAI,aAAa,MACf,QAAO;UACE,OAAO,aAAa,SAC7B,QAAO;UACE,OAAO,aAAa,WAC7B,QAAO,SAAS,IAAI;KAEpB,QAAO,sBAAsB,IAAI;AAGnC,QAAO,oBAAoB,MAAM,WAAW,aAAa;;;;;;;AAQ3D,SAAS,0BAA0B,MAA8B;AAC/D,SAAQ,KAAK,MAAb;EACE,KAAK,cACH,QAAO,KAAK,YAAY;EAC1B,KAAK,cACH,QAAO,KAAK,YAAY;EAC1B,KAAK,sBACH,QAAO,KAAK,oBAAoB;EAClC,KAAK,MACH,QAAO,KAAK,IAAI;EAClB,KAAK,gBACH,QAAO,KAAK,cAAc;;;;;;;;;AAUhC,SAAS,uBACP,WAC+C;CAC/C,MAAM,kBAAoC,EAAE;AAC5C,MAAK,MAAM,SAAS,UAAU,QAAQ,CACpC,KAAI,MAAM,WAAW,oBACnB,iBAAgB,KAAK,MAAM,KAAK;AAGpC,KAAI,gBAAgB,WAAW,EAAG,QAAO;AACzC,QAAO,GACJ,2BAA2B,EAAE,aAAa,iBAAiB,EAC7D;;;;;;;;AASH,SAAS,yBACP,WACA,SACA,WACM;CACN,MAAM,WAAW,IAAI,IAAI,QAAQ,qBAAqB,EAAE,CAAC;CAEzD,MAAM,uBAAiC,EAAE;CACzC,MAAM,gBAA0B,EAAE;AAClC,MAAK,MAAM,CAAC,KAAK,UAAU,UACzB,KAAI,MAAM,WAAW,oBACnB,sBAAqB,KAAK,IAAI;KAE9B,eAAc,KAAK,IAAI;AAI3B,KACE,qBAAqB,SAAS,KAC9B,CAAC,SAAS,IAAI,yBAAyB,CAEvC,QAAO,KACL,UAAU,UAAU,sCAAsC,qBAAqB,KAAK,KAAK,CAAC,mMAG3F;AAMH,KAAI,QAAQ,uBAAuB,SAAS,cAAc,SAAS,EACjE,QAAO,KACL,UAAU,UAAU,sDAAsD,cAAc,KAAK,KAAK,CAAC,yKAGpG;;;;;;;;;;;;;;;;;AAmBL,MAAa,SAAS,SAAS,aAAa"}

package/dist/plugins/agents/manifest.js

@@ -17,6 +17,16 @@ var manifest_default = {
 				"env": "DATABRICKS_SERVING_ENDPOINT_NAME",
 				"description": "Default LLM serving endpoint name"
 			} }
+		}, {
+			"type": "experiment",
+			"alias": "MLflow experiment for agent traces",
+			"resourceKey": "agents-mlflow-experiment",
+			"description": "When bound, agent turns and tool calls are traced to this MLflow experiment via OpenTelemetry. Tracing is a no-op when unset.",
+			"permission": "CAN_EDIT",
+			"fields": { "experimentId": {
+				"env": "MLFLOW_EXPERIMENT_ID",
+				"description": "MLflow experiment id traces are logged to"
+			} }
 		}]
 	}
 };

package/dist/plugins/agents/mlflow.js

@@ -0,0 +1,123 @@
+import { createLogger } from "../../logging/logger.js";
+
+//#region src/plugins/agents/mlflow.ts
+const logger = createLogger("agents");
+let mlflow;
+let enabled = false;
+let initStarted = false;
+/** The bound MLflow experiment id, from the optional `experiment` resource. */
+function experimentId() {
+	return process.env.MLFLOW_EXPERIMENT_ID?.trim() || void 0;
+}
+/**
+* Databricks host with a scheme. The mlflow-tracing SDK uses `DATABRICKS_HOST`
+* verbatim to build request URLs and doesn't add `https://`, so a bare host
+* (`workspace.cloud.databricks.com`) makes `new URL()` throw. Pass an explicit
+* normalized host when the env var is set; when it isn't (profile-based auth),
+* return undefined and let the SDK read the host from `~/.databrickscfg`.
+*/
+function normalizedDatabricksHost() {
+	const raw = process.env.DATABRICKS_HOST?.trim();
+	if (!raw) return void 0;
+	return /^https?:\/\//i.test(raw) ? raw : `https://${raw}`;
+}
+/**
+* Initialize MLflow agent tracing once, when an experiment is bound — i.e. the
+* agents plugin's optional `experiment` resource is set (`MLFLOW_EXPERIMENT_ID`).
+*
+* Auth is resolved by the `mlflow-tracing` SDK from the app's own Databricks
+* credentials — `DATABRICKS_HOST`/`DATABRICKS_TOKEN` or a `~/.databrickscfg`
+* profile (`MLFLOW_TRACKING_URI=databricks://profile`) — so no tokens or OTLP
+* headers are wired by hand. A failure (missing creds, bad experiment) logs and
+* leaves tracing disabled rather than breaking the agent.
+*
+* Safe to call repeatedly; only the first call does work.
+*/
+async function initAgentTracing() {
+	if (initStarted) return;
+	initStarted = true;
+	const id = experimentId();
+	if (!id) return;
+	try {
+		mlflow = await import("mlflow-tracing");
+		const host = normalizedDatabricksHost();
+		mlflow.init({
+			trackingUri: process.env.MLFLOW_TRACKING_URI?.trim() || "databricks",
+			experimentId: id,
+			...host ? { host } : {}
+		});
+		enabled = true;
+		logger.info("MLflow agent tracing enabled (experiment %s)", id);
+	} catch (err) {
+		logger.warn("MLflow agent tracing disabled: %O", err);
+	}
+}
+const noopRecorder = { setOutputs() {} };
+/**
+* Run `fn` inside an MLflow span of `spanType` when tracing is enabled,
+* otherwise just run it (zero overhead). Spans auto-nest via the SDK's active
+* context, so a TOOL span opened inside an AGENT span's callback becomes its
+* child. The callback's resolved value is recorded as the span's outputs unless
+* it called `setOutputs` first; return `undefined` (or set outputs explicitly)
+* when the return value isn't the output you want traced.
+*/
+async function trace(spanType, name, inputs, fn) {
+	if (!enabled || !mlflow) return fn(noopRecorder);
+	const type = spanType === "AGENT" ? mlflow.SpanType.AGENT : mlflow.SpanType.TOOL;
+	return await mlflow.withSpan(async (span) => {
+		if (inputs !== void 0) span.setInputs(inputs);
+		let outputsSet = false;
+		const result = await fn({ setOutputs(outputs) {
+			outputsSet = true;
+			span.setOutputs(outputs);
+		} });
+		if (!outputsSet && result !== void 0) span.setOutputs(result);
+		return result;
+	}, {
+		name,
+		spanType: type
+	});
+}
+/** Trace a turn's root AGENT span. See {@link trace}. */
+function traceAgent(name, inputs, fn) {
+	return trace("AGENT", name, inputs, fn);
+}
+/** Trace a TOOL span, nested under the active AGENT span. See {@link trace}. */
+function traceTool(name, inputs, fn) {
+	return trace("TOOL", name, inputs, fn);
+}
+/**
+* The MLflow trace id for the active turn, when tracing is enabled. Must be
+* read inside an agent span so eval runs can correlate the turn to its trace
+* and attach assessments. Returns undefined when tracing is off.
+*
+* Reads the context-active span rather than `getLastActiveTraceId()`: the
+* latter is only populated when a root span *ends* (on export), so mid-turn it
+* returns the previous turn's id — or, under concurrent turns, another turn's.
+*/
+function currentTraceId() {
+	if (!enabled || !mlflow) return void 0;
+	try {
+		return mlflow.getCurrentActiveSpan()?.traceId;
+	} catch {
+		return;
+	}
+}
+/**
+* Link the active turn's trace to an MLflow run by id, via the `mlflow.sourceRun`
+* trace metadata. Used by eval runs so each case's trace shows under the run.
+* Must be called while a trace is active (inside an agent span). No-op when
+* tracing is disabled.
+*/
+function linkTraceToRun(runId) {
+	if (!enabled || !mlflow) return;
+	try {
+		mlflow.updateCurrentTrace({ metadata: { "mlflow.sourceRun": runId } });
+	} catch (err) {
+		logger.warn("Failed to link trace to run %s: %O", runId, err);
+	}
+}
+
+//#endregion
+export { currentTraceId, initAgentTracing, linkTraceToRun, traceAgent, traceTool };
+//# sourceMappingURL=mlflow.js.map

package/dist/plugins/agents/mlflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mlflow.js","names":[],"sources":["../../../src/plugins/agents/mlflow.ts"],"sourcesContent":["import { createLogger } from \"../../logging/logger\";\n\nconst logger = createLogger(\"agents\");\n\ntype MlflowModule = typeof import(\"mlflow-tracing\");\n\nlet mlflow: MlflowModule | undefined;\nlet enabled = false;\nlet initStarted = false;\n\n/** The bound MLflow experiment id, from the optional `experiment` resource. */\nfunction experimentId(): string | undefined {\n  const id = process.env.MLFLOW_EXPERIMENT_ID?.trim();\n  return id || undefined;\n}\n\n/**\n * Databricks host with a scheme. The mlflow-tracing SDK uses `DATABRICKS_HOST`\n * verbatim to build request URLs and doesn't add `https://`, so a bare host\n * (`workspace.cloud.databricks.com`) makes `new URL()` throw. Pass an explicit\n * normalized host when the env var is set; when it isn't (profile-based auth),\n * return undefined and let the SDK read the host from `~/.databrickscfg`.\n */\nfunction normalizedDatabricksHost(): string | undefined {\n  const raw = process.env.DATABRICKS_HOST?.trim();\n  if (!raw) return undefined;\n  return /^https?:\\/\\//i.test(raw) ? raw : `https://${raw}`;\n}\n\n/**\n * Initialize MLflow agent tracing once, when an experiment is bound — i.e. the\n * agents plugin's optional `experiment` resource is set (`MLFLOW_EXPERIMENT_ID`).\n *\n * Auth is resolved by the `mlflow-tracing` SDK from the app's own Databricks\n * credentials — `DATABRICKS_HOST`/`DATABRICKS_TOKEN` or a `~/.databrickscfg`\n * profile (`MLFLOW_TRACKING_URI=databricks://profile`) — so no tokens or OTLP\n * headers are wired by hand. A failure (missing creds, bad experiment) logs and\n * leaves tracing disabled rather than breaking the agent.\n *\n * Safe to call repeatedly; only the first call does work.\n */\nexport async function initAgentTracing(): Promise<void> {\n  if (initStarted) return;\n  initStarted = true;\n\n  const id = experimentId();\n  if (!id) return;\n\n  try {\n    mlflow = await import(\"mlflow-tracing\");\n    const host = normalizedDatabricksHost();\n    mlflow.init({\n      trackingUri: process.env.MLFLOW_TRACKING_URI?.trim() || \"databricks\",\n      experimentId: id,\n      ...(host ? { host } : {}),\n    });\n    enabled = true;\n    logger.info(\"MLflow agent tracing enabled (experiment %s)\", id);\n  } catch (err) {\n    logger.warn(\"MLflow agent tracing disabled: %O\", err);\n  }\n}\n\n/**\n * Records a span's outputs. Callers get one from `traceAgent`/`traceTool`;\n * it's a no-op when tracing is disabled, so call sites never branch on it.\n */\nexport interface SpanRecorder {\n  setOutputs(outputs: unknown): void;\n}\n\nconst noopRecorder: SpanRecorder = { setOutputs() {} };\n\n/**\n * Run `fn` inside an MLflow span of `spanType` when tracing is enabled,\n * otherwise just run it (zero overhead). Spans auto-nest via the SDK's active\n * context, so a TOOL span opened inside an AGENT span's callback becomes its\n * child. The callback's resolved value is recorded as the span's outputs unless\n * it called `setOutputs` first; return `undefined` (or set outputs explicitly)\n * when the return value isn't the output you want traced.\n */\nasync function trace<T>(\n  spanType: \"AGENT\" | \"TOOL\",\n  name: string,\n  inputs: unknown,\n  fn: (span: SpanRecorder) => Promise<T>,\n): Promise<T> {\n  if (!enabled || !mlflow) return fn(noopRecorder);\n  const type =\n    spanType === \"AGENT\" ? mlflow.SpanType.AGENT : mlflow.SpanType.TOOL;\n  return await mlflow.withSpan<T>(\n    async (span) => {\n      if (inputs !== undefined) span.setInputs(inputs);\n      let outputsSet = false;\n      const result = await fn({\n        setOutputs(outputs) {\n          outputsSet = true;\n          span.setOutputs(outputs);\n        },\n      });\n      if (!outputsSet && result !== undefined) span.setOutputs(result);\n      return result;\n    },\n    { name, spanType: type },\n  );\n}\n\n/** Trace a turn's root AGENT span. See {@link trace}. */\nexport function traceAgent<T>(\n  name: string,\n  inputs: unknown,\n  fn: (span: SpanRecorder) => Promise<T>,\n): Promise<T> {\n  return trace(\"AGENT\", name, inputs, fn);\n}\n\n/** Trace a TOOL span, nested under the active AGENT span. See {@link trace}. */\nexport function traceTool<T>(\n  name: string,\n  inputs: unknown,\n  fn: (span: SpanRecorder) => Promise<T>,\n): Promise<T> {\n  return trace(\"TOOL\", name, inputs, fn);\n}\n\n/**\n * The MLflow trace id for the active turn, when tracing is enabled. Must be\n * read inside an agent span so eval runs can correlate the turn to its trace\n * and attach assessments. Returns undefined when tracing is off.\n *\n * Reads the context-active span rather than `getLastActiveTraceId()`: the\n * latter is only populated when a root span *ends* (on export), so mid-turn it\n * returns the previous turn's id — or, under concurrent turns, another turn's.\n */\nexport function currentTraceId(): string | undefined {\n  if (!enabled || !mlflow) return undefined;\n  try {\n    return mlflow.getCurrentActiveSpan()?.traceId;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Link the active turn's trace to an MLflow run by id, via the `mlflow.sourceRun`\n * trace metadata. Used by eval runs so each case's trace shows under the run.\n * Must be called while a trace is active (inside an agent span). No-op when\n * tracing is disabled.\n */\nexport function linkTraceToRun(runId: string): void {\n  if (!enabled || !mlflow) return;\n  try {\n    mlflow.updateCurrentTrace({ metadata: { \"mlflow.sourceRun\": runId } });\n  } catch (err) {\n    logger.warn(\"Failed to link trace to run %s: %O\", runId, err);\n  }\n}\n"],"mappings":";;;AAEA,MAAM,SAAS,aAAa,SAAS;AAIrC,IAAI;AACJ,IAAI,UAAU;AACd,IAAI,cAAc;;AAGlB,SAAS,eAAmC;AAE1C,QADW,QAAQ,IAAI,sBAAsB,MAAM,IACtC;;;;;;;;;AAUf,SAAS,2BAA+C;CACtD,MAAM,MAAM,QAAQ,IAAI,iBAAiB,MAAM;AAC/C,KAAI,CAAC,IAAK,QAAO;AACjB,QAAO,gBAAgB,KAAK,IAAI,GAAG,MAAM,WAAW;;;;;;;;;;;;;;AAetD,eAAsB,mBAAkC;AACtD,KAAI,YAAa;AACjB,eAAc;CAEd,MAAM,KAAK,cAAc;AACzB,KAAI,CAAC,GAAI;AAET,KAAI;AACF,WAAS,MAAM,OAAO;EACtB,MAAM,OAAO,0BAA0B;AACvC,SAAO,KAAK;GACV,aAAa,QAAQ,IAAI,qBAAqB,MAAM,IAAI;GACxD,cAAc;GACd,GAAI,OAAO,EAAE,MAAM,GAAG,EAAE;GACzB,CAAC;AACF,YAAU;AACV,SAAO,KAAK,gDAAgD,GAAG;UACxD,KAAK;AACZ,SAAO,KAAK,qCAAqC,IAAI;;;AAYzD,MAAM,eAA6B,EAAE,aAAa,IAAI;;;;;;;;;AAUtD,eAAe,MACb,UACA,MACA,QACA,IACY;AACZ,KAAI,CAAC,WAAW,CAAC,OAAQ,QAAO,GAAG,aAAa;CAChD,MAAM,OACJ,aAAa,UAAU,OAAO,SAAS,QAAQ,OAAO,SAAS;AACjE,QAAO,MAAM,OAAO,SAClB,OAAO,SAAS;AACd,MAAI,WAAW,OAAW,MAAK,UAAU,OAAO;EAChD,IAAI,aAAa;EACjB,MAAM,SAAS,MAAM,GAAG,EACtB,WAAW,SAAS;AAClB,gBAAa;AACb,QAAK,WAAW,QAAQ;KAE3B,CAAC;AACF,MAAI,CAAC,cAAc,WAAW,OAAW,MAAK,WAAW,OAAO;AAChE,SAAO;IAET;EAAE;EAAM,UAAU;EAAM,CACzB;;;AAIH,SAAgB,WACd,MACA,QACA,IACY;AACZ,QAAO,MAAM,SAAS,MAAM,QAAQ,GAAG;;;AAIzC,SAAgB,UACd,MACA,QACA,IACY;AACZ,QAAO,MAAM,QAAQ,MAAM,QAAQ,GAAG;;;;;;;;;;;AAYxC,SAAgB,iBAAqC;AACnD,KAAI,CAAC,WAAW,CAAC,OAAQ,QAAO;AAChC,KAAI;AACF,SAAO,OAAO,sBAAsB,EAAE;SAChC;AACN;;;;;;;;;AAUJ,SAAgB,eAAe,OAAqB;AAClD,KAAI,CAAC,WAAW,CAAC,OAAQ;AACzB,KAAI;AACF,SAAO,mBAAmB,EAAE,UAAU,EAAE,oBAAoB,OAAO,EAAE,CAAC;UAC/D,KAAK;AACZ,SAAO,KAAK,sCAAsC,OAAO,IAAI"}