@davidorex/pi-jit-agents 0.14.6

package/dist/jit-runtime.js

@@ -0,0 +1,583 @@
+/**
+ * In-process LLM dispatch with phantom-tool structured output enforcement.
+ *
+ * Implements D4 (jit-agents-spec.md §4): the unified `executeAgent` primitive
+ * that both workflow agent steps and monitor classify calls consume. There is
+ * one dispatch path across the framework — not one for workflows and another
+ * for monitors.
+ *
+ * Phantom tool pattern: when a compiled agent declares an outputSchema, the
+ * dispatch call passes a synthetic Tool constructed from the schema to pi-ai
+ * with forced toolChoice. The LLM produces ToolCall.arguments matching the
+ * schema; the arguments are extracted as the typed result. No text parsing,
+ * no JSON.parse of free-form output.
+ *
+ * Thinking: NOT passed. Anthropic's API rejects thinking + forced toolChoice.
+ * This is a documented active constraint. Agents that need thinking cannot use
+ * schema-bound output in this release.
+ */
+import fs from "node:fs";
+import { validateFromFile } from "@davidorex/pi-project/schema-validator";
+import { complete as piAiComplete, Type } from "@mariozechner/pi-ai";
+import { AgentDispatchError } from "./errors.js";
+import { loadProjectRedactionConfig, redactLlmResponse, redactSensitiveData, } from "./trace-redactor.js";
+import { writeAgentTrace } from "./trace-writer.js";
+/**
+ * Minimal ULID generator (Crockford base32, 26 chars: 10 timestamp + 16 random).
+ *
+ * Inline rather than a dependency: ulid is not in this workspace, the algorithm
+ * fits in a few lines, and the requirement is simply that ids be lexicographically
+ * sortable across concurrent executeAgent calls (the agent-trace.schema.json
+ * `traceId` pattern enforces 26-char Crockford base32).
+ *
+ * Monotonic-within-millisecond is approximated by the random-suffix component;
+ * we do not implement the strict ULID monotonic-tiebreaker because the trace
+ * pipeline tolerates rare same-ms collisions (entries are sorted by id, but
+ * same-ms ties resolve consistently within a single-process run via the random
+ * lower bits, and cross-process traces interleave at directory listing level).
+ */
+const CROCKFORD_BASE32 = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+function newUlid(now = Date.now()) {
+    // 48-bit timestamp → 10 base32 chars.
+    let ts = now;
+    const tsChars = new Array(10);
+    for (let i = 9; i >= 0; i--) {
+        tsChars[i] = CROCKFORD_BASE32[ts % 32] ?? "0";
+        ts = Math.floor(ts / 32);
+    }
+    // 80 random bits → 16 base32 chars. Math.random suffices (collision risk
+    // is non-zero but the trace use-case does not require crypto-grade ids).
+    const randChars = new Array(16);
+    for (let i = 0; i < 16; i++) {
+        randChars[i] = CROCKFORD_BASE32[Math.floor(Math.random() * 32)] ?? "0";
+    }
+    return tsChars.join("") + randChars.join("");
+}
+/**
+ * Recursively redact string leaves of an arbitrary value. Numbers, booleans,
+ * null, and undefined pass through unchanged. Strings run through
+ * redactSensitiveData. Arrays and plain objects are walked depth-first.
+ *
+ * Used for the `collectedValue` field of context_collection trace entries —
+ * collectors may return strings, arrays, or objects, so a single string-only
+ * redactor is insufficient.
+ */
+function deepRedact(value, config) {
+    if (typeof value === "string")
+        return redactSensitiveData(value, config);
+    if (value === null || value === undefined)
+        return value;
+    if (Array.isArray(value))
+        return value.map((v) => deepRedact(v, config));
+    if (typeof value === "object") {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            out[k] = deepRedact(v, config);
+        }
+        return out;
+    }
+    return value;
+}
+/**
+ * Map an executeAgent return value to the `verdictResult` shape required by
+ * agent-trace.schema.json (`{ verdict, description?, severity?, newPattern? }`).
+ *
+ * The schema's `verdict` enum is `clean | flag | new | error`. Phantom-tool
+ * outputs from monitor classifiers produce `CLEAN | FLAG | NEW` (uppercase) per
+ * verdict.schema.json — we lowercase here. Non-classifier agents produce
+ * arbitrary structured output or text; in that case we synthesize a `clean`
+ * verdict and attach a description so the trace remains schema-valid.
+ *
+ * `error` is reserved for the failure path (set in the catch handler).
+ */
+function normalizeVerdict(output) {
+    if (output && typeof output === "object" && !Array.isArray(output)) {
+        const obj = output;
+        const rawVerdict = typeof obj.verdict === "string" ? obj.verdict.toLowerCase() : undefined;
+        if (rawVerdict === "clean" || rawVerdict === "flag" || rawVerdict === "new" || rawVerdict === "error") {
+            const result = { verdict: rawVerdict };
+            if (typeof obj.description === "string")
+                result.description = obj.description;
+            if (typeof obj.severity === "string")
+                result.severity = obj.severity;
+            if (typeof obj.newPattern === "string")
+                result.newPattern = obj.newPattern;
+            return result;
+        }
+    }
+    // Non-verdict output (e.g. workflow agent step structured result, free text):
+    // stamp as `clean` and stringify-describe for trace fidelity.
+    const description = typeof output === "string" ? output : output === undefined ? "" : JSON.stringify(output).slice(0, 2_000);
+    return { verdict: "clean", description };
+}
+/**
+ * Extract token usage from an AssistantMessage in the shape required by the
+ * trace schema's `usage` definition (camelCase, totalTokens summed).
+ */
+function traceUsageFromMessage(msg) {
+    const u = msg.usage;
+    const input = u?.input ?? 0;
+    const output = u?.output ?? 0;
+    const cacheRead = u?.cacheRead ?? 0;
+    const cacheWrite = u?.cacheWrite ?? 0;
+    return {
+        inputTokens: input,
+        outputTokens: output,
+        cacheRead,
+        cacheWrite,
+        totalTokens: input + output,
+    };
+}
+/**
+ * Best-effort string identifier for a pi-ai Model<Api> instance. The Model
+ * shape carries `id` (model id) and `provider` (provider id); the trace schema
+ * wants a single string. Falls back to JSON.stringify for unrecognized shapes.
+ */
+function modelToString(model) {
+    if (model && typeof model === "object") {
+        const m = model;
+        const provider = typeof m.provider === "string" ? m.provider : undefined;
+        const id = typeof m.id === "string" ? m.id : undefined;
+        if (provider && id)
+            return `${provider}/${id}`;
+        if (id)
+            return id;
+        if (provider)
+            return provider;
+    }
+    return typeof model === "string" ? model : JSON.stringify(model);
+}
+/**
+ * Wrap a writeAgentTrace call with a try/catch so trace failures cannot abort
+ * dispatch (per DEC-0005's intentional independence of trace from classify).
+ * Failures emit a stderr diagnostic prefixed with the pi-jit-agents tag and
+ * are otherwise swallowed.
+ */
+function safeWriteTrace(entry, tracePath) {
+    try {
+        writeAgentTrace(entry, { tracePath });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        // eslint-disable-next-line no-console -- non-fatal diagnostic channel.
+        console.error(`[pi-jit-agents] trace write failed (${tracePath}): ${msg}`);
+    }
+}
+/**
+ * Build a phantom Tool from a JSON Schema file for forced structured output.
+ *
+ * For the common shape (top-level `type: object` with `required` and
+ * `properties` where each property has a primitive `type` and optional
+ * `enum`), produces a TypeBox Type.Object matching the schema. Complex shapes
+ * (allOf, anyOf, conditional) fall back to a relaxed Type.Object that accepts
+ * any object — post-hoc validation via `validateFromFile` catches violations.
+ *
+ * The tool is never executed — it exists only as a schema constraint that
+ * pi-ai enforces via forced toolChoice.
+ */
+export function buildPhantomTool(schemaPath, toolName = "jit_result", description = "Output the typed result") {
+    const raw = fs.readFileSync(schemaPath, "utf-8");
+    const schema = JSON.parse(raw);
+    const parameters = jsonSchemaToTypeBox(schema);
+    return {
+        name: toolName,
+        description,
+        parameters: parameters,
+    };
+}
+/**
+ * Map a pi-ai `Api` kind plus a phantom tool name to the `toolChoice` shape
+ * the corresponding driver expects.
+ *
+ * This is the architectural normalization point referenced by ADR-0003: the
+ * forced-toolChoice protocol divergence across Anthropic / OpenAI-compatible
+ * / Google providers is collapsed here, not at each consumer call site.
+ *
+ * Coverage map (pi-ai 0.70.2 — verified against
+ * `node_modules/@mariozechner/pi-ai/dist/providers/*`):
+ *
+ *   - `anthropic-messages` — passes object through unchanged. Anthropic
+ *     Messages API expects `{type:"tool", name}`.
+ *   - `bedrock-converse-stream` — accepts `{type:"tool", name}` and translates
+ *     internally to Bedrock Converse's `{tool:{name}}` shape (driver line
+ *     611-612 of amazon-bedrock.js).
+ *   - `openai-completions` — passthrough. OpenAI / OpenRouter / OpenAI-
+ *     compatible gateways expect `{type:"function", function:{name}}` or
+ *     string `"required"`. Mismatch here is the proximate cause of the
+ *     "Tool '' not found in provided tools" 400 surfaced post-7edf3a2.
+ *   - `mistral-conversations` — driver passes the object through its own
+ *     `mapToolChoice` which reads `choice.function.name`, so the OpenAI-
+ *     compatible function form is required.
+ *   - `openai-responses`, `openai-codex-responses`, `azure-openai-responses`
+ *     — pi-ai 0.70.2 drivers do NOT honor `options.toolChoice` (codex hard-
+ *     codes `tool_choice: "auto"`; the other two drop it entirely). The
+ *     OpenAI-compatible function form is emitted here as the canonical
+ *     shape for the day pi-ai begins forwarding it; today the value is
+ *     ignored and forced toolChoice is unenforceable on these drivers.
+ *     Tracked as a pi-ai upstream gap; do not paper over here.
+ *   - `google-generative-ai`, `google-gemini-cli`, `google-vertex` — drivers
+ *     accept only string `"any" | "auto" | "none"` (mapped to FunctionCalling-
+ *     ConfigMode). Specific-tool pinning is not exposed. `"any"` forces
+ *     tool use; adequate for the phantom-tool single-tool pattern (the model
+ *     has only one tool to call) but fails to pin a specific tool when
+ *     multiple tools are present.
+ *   - Unknown / custom api strings — Anthropic-format default. Matches the
+ *     pre-fix behavior that worked end-to-end for `anthropic-messages` and
+ *     preserves backward compatibility for any consumer that registered a
+ *     custom api provider expecting that shape.
+ */
+export function normalizeToolChoice(api, toolName) {
+    switch (api) {
+        case "anthropic-messages":
+        case "bedrock-converse-stream":
+            return { type: "tool", name: toolName };
+        case "openai-completions":
+        case "mistral-conversations":
+        case "openai-responses":
+        case "openai-codex-responses":
+        case "azure-openai-responses":
+            return { type: "function", function: { name: toolName } };
+        case "google-generative-ai":
+        case "google-gemini-cli":
+        case "google-vertex":
+            return "any";
+        default:
+            return { type: "tool", name: toolName };
+    }
+}
+/**
+ * Convert a JSON Schema object to a TypeBox schema.
+ *
+ * Handles the shape used by verdict.schema.json and the initial test fixtures.
+ * Falls back to Type.Any() for unsupported constructs — the phantom tool
+ * enforces structural shape; full validation is post-hoc.
+ */
+function jsonSchemaToTypeBox(schema) {
+    const type = schema.type;
+    if (type !== "object") {
+        return Type.Any();
+    }
+    const properties = (schema.properties ?? {});
+    const required = new Set(Array.isArray(schema.required) ? schema.required : []);
+    const props = {};
+    for (const [key, propSchema] of Object.entries(properties)) {
+        const propType = propertyToTypeBox(propSchema);
+        props[key] = required.has(key) ? propType : Type.Optional(propType);
+    }
+    return Type.Object(props);
+}
+function propertyToTypeBox(propSchema) {
+    const t = propSchema.type;
+    const enumValues = propSchema.enum;
+    const description = typeof propSchema.description === "string" ? propSchema.description : undefined;
+    const opts = description ? { description } : {};
+    if (Array.isArray(enumValues) && enumValues.every((v) => typeof v === "string")) {
+        return Type.Union(enumValues.map((v) => Type.Literal(v)), opts);
+    }
+    switch (t) {
+        case "string":
+            return Type.String(opts);
+        case "number":
+            return Type.Number(opts);
+        case "integer":
+            return Type.Integer(opts);
+        case "boolean":
+            return Type.Boolean(opts);
+        case "array":
+            return Type.Array(Type.Any(), opts);
+        case "object":
+            return jsonSchemaToTypeBox(propSchema);
+        default:
+            return Type.Any();
+    }
+}
+/**
+ * Extract concatenated text content from an AssistantMessage.
+ */
+function extractText(msg) {
+    return msg.content
+        .filter((c) => c.type === "text")
+        .map((c) => c.text)
+        .join("");
+}
+/**
+ * Default usage object. Populated from AssistantMessage.usage when available.
+ */
+function emptyUsage() {
+    return { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, cost: 0 };
+}
+function usageFromMessage(msg) {
+    const usage = emptyUsage();
+    if (!msg.usage)
+        return usage;
+    usage.input = msg.usage.input ?? 0;
+    usage.output = msg.usage.output ?? 0;
+    usage.cacheRead = msg.usage.cacheRead ?? 0;
+    usage.cacheWrite = msg.usage.cacheWrite ?? 0;
+    usage.cost =
+        (msg.usage.cost?.input ?? 0) +
+            (msg.usage.cost?.output ?? 0) +
+            (msg.usage.cost?.cacheRead ?? 0) +
+            (msg.usage.cost?.cacheWrite ?? 0);
+    return usage;
+}
+/**
+ * Execute a compiled agent in-process.
+ *
+ * When `compiled.outputSchema` is set: build a phantom tool from the schema,
+ * call pi-ai's `complete` with forced toolChoice, extract ToolCall.arguments,
+ * and validate post-hoc against the schema file.
+ *
+ * When `compiled.outputSchema` is absent: call `complete` without tools and
+ * return the extracted text as `output`.
+ *
+ * Test hook: `completeFn` overrides the pi-ai `complete` import for unit
+ * tests that do not make real LLM calls.
+ */
+export async function executeAgent(compiled, dispatch, completeFn = piAiComplete) {
+    // --- Trace bootstrap -----------------------------------------------------
+    // Trace capture is gated on dispatch.tracePath being a non-empty string.
+    // `undefined` and `null` both disable tracing. When disabled, every trace
+    // emission below short-circuits via the `tracePath !== null` guard at the
+    // safeWriteTrace call sites, leaving the pre-existing dispatch behavior
+    // observably unchanged.
+    const tracePath = typeof dispatch.tracePath === "string" ? dispatch.tracePath : null;
+    const tracingEnabled = tracePath !== null;
+    // Resolve the redaction config once per executeAgent call. Failure here
+    // must not abort dispatch — a malformed config falls back to the builtin
+    // pattern set with a stderr diagnostic.
+    let redactionConfig;
+    if (tracingEnabled && typeof dispatch.redactionConfigPath === "string") {
+        try {
+            const patterns = loadProjectRedactionConfig(dispatch.redactionConfigPath);
+            redactionConfig = { patterns };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            // eslint-disable-next-line no-console -- non-fatal diagnostic channel.
+            console.error(`[pi-jit-agents] redaction config load failed (${dispatch.redactionConfigPath}): ${msg}`);
+        }
+    }
+    const sessionStartMs = Date.now();
+    const sessionStartId = newUlid(sessionStartMs);
+    let classifyCallId = null;
+    let classifyResponseId = null;
+    if (tracingEnabled && tracePath !== null) {
+        safeWriteTrace({
+            type: "session_start",
+            id: sessionStartId,
+            parentId: null,
+            timestamp: new Date(sessionStartMs).toISOString(),
+            sessionId: sessionStartId,
+            monitorName: typeof dispatch.monitorName === "string" ? dispatch.monitorName : null,
+            agentName: compiled.spec.name,
+            model: modelToString(dispatch.model),
+            cwd: process.cwd(),
+        }, tracePath);
+    }
+    // --- Existing dispatch logic --------------------------------------------
+    const messages = [
+        {
+            role: "user",
+            content: [{ type: "text", text: compiled.taskPrompt }],
+            timestamp: Date.now(),
+        },
+    ];
+    const systemPrompt = compiled.systemPrompt;
+    const maxTokens = dispatch.maxTokens ?? 1024;
+    // classify_call is emitted just before the LLM call: at this point the
+    // rendered prompts (system + task) are fully available. Per the schema,
+    // `renderedPrompt` is a single string — we concatenate system and task
+    // with a delimiter so trace consumers see exactly what dispatch sent.
+    if (tracingEnabled && tracePath !== null) {
+        const renderedPromptRaw = systemPrompt
+            ? `[SYSTEM]\n${systemPrompt}\n[TASK]\n${compiled.taskPrompt}`
+            : compiled.taskPrompt;
+        classifyCallId = newUlid();
+        safeWriteTrace({
+            type: "classify_call",
+            id: classifyCallId,
+            parentId: sessionStartId,
+            timestamp: new Date().toISOString(),
+            renderedPrompt: redactSensitiveData(renderedPromptRaw, redactionConfig),
+            inputText: redactSensitiveData(compiled.taskPrompt, redactionConfig),
+        }, tracePath);
+        // One context_collection entry per resolved collector. Path A: the
+        // CompiledAgent now carries `contextValues` populated by compileAgent.
+        // We deep-redact each collected value and emit immediately after
+        // classify_call so the parent chain is intact even when downstream
+        // dispatch fails.
+        const ts = new Date().toISOString();
+        for (const [collectorId, collectedValue] of Object.entries(compiled.contextValues)) {
+            safeWriteTrace({
+                type: "context_collection",
+                id: newUlid(),
+                parentId: classifyCallId,
+                timestamp: ts,
+                collectorId,
+                collectedValue: deepRedact(collectedValue, redactionConfig),
+                // Collection time is not yet measured at the compileAgent boundary;
+                // reserved for a future instrumentation pass.
+                collectionTimeMs: 0,
+            }, tracePath);
+        }
+    }
+    let response;
+    try {
+        const context = { messages };
+        if (systemPrompt)
+            context.systemPrompt = systemPrompt;
+        const options = {
+            apiKey: dispatch.auth.apiKey,
+            headers: dispatch.auth.headers,
+            maxTokens,
+            signal: dispatch.signal,
+        };
+        if (compiled.outputSchema) {
+            const phantomTool = buildPhantomTool(compiled.outputSchema);
+            context.tools = [phantomTool];
+            options.toolChoice = normalizeToolChoice(dispatch.model.api, phantomTool.name);
+        }
+        response = await completeFn(dispatch.model, context, options);
+    }
+    catch (err) {
+        // Dispatch itself failed — emit a synthetic verdict_decision + trace_end
+        // with verdict=error so the trace remains parent-chain complete, then
+        // rethrow per the original contract.
+        if (tracingEnabled && tracePath !== null) {
+            const errorMsg = err instanceof Error ? err.message : String(err);
+            const verdictId = newUlid();
+            const errVerdict = {
+                verdict: "error",
+                description: redactSensitiveData(errorMsg.slice(0, 2_000), redactionConfig),
+            };
+            safeWriteTrace({
+                type: "verdict_decision",
+                id: verdictId,
+                // classify_response did not happen — chain off classify_call when
+                // available, otherwise off session_start.
+                parentId: classifyCallId ?? sessionStartId,
+                timestamp: new Date().toISOString(),
+                finalResult: errVerdict,
+                mappingDecisionRationale: redactSensitiveData("dispatch failed before LLM response", redactionConfig),
+            }, tracePath);
+            safeWriteTrace({
+                type: "trace_end",
+                id: newUlid(),
+                parentId: sessionStartId,
+                timestamp: new Date().toISOString(),
+                totalDurationMs: Date.now() - sessionStartMs,
+                verdict: errVerdict,
+            }, tracePath);
+        }
+        if (dispatch.signal?.aborted) {
+            throw new AgentDispatchError(compiled.spec.name, "cancelled", {
+                cause: err instanceof Error ? err : new Error(String(err)),
+            });
+        }
+        const cause = err instanceof Error ? err : new Error(String(err));
+        throw new AgentDispatchError(compiled.spec.name, cause.message, { cause });
+    }
+    // classify_response: emitted after the AssistantMessage is in hand. The
+    // content array runs through redactLlmResponse to strip credentials echoed
+    // in the model output; usage / stopReason are passthrough numerics/enums.
+    if (tracingEnabled && tracePath !== null) {
+        const redactedResponse = redactLlmResponse({ content: response.content }, redactionConfig);
+        classifyResponseId = newUlid();
+        const responseEntry = {
+            type: "classify_response",
+            id: classifyResponseId,
+            parentId: classifyCallId ?? sessionStartId,
+            timestamp: new Date().toISOString(),
+            stopReason: response.stopReason ?? "unknown",
+            usage: traceUsageFromMessage(response),
+            content: redactedResponse.content,
+        };
+        if (typeof response.errorMessage === "string") {
+            responseEntry.errorMessage = redactSensitiveData(response.errorMessage, redactionConfig);
+        }
+        safeWriteTrace(responseEntry, tracePath);
+    }
+    const usage = usageFromMessage(response);
+    let result;
+    try {
+        if (compiled.outputSchema) {
+            const toolCall = response.content.find((c) => c.type === "toolCall");
+            if (!toolCall) {
+                const contentTypes = response.content.map((c) => c.type).join(", ");
+                const errMsg = response.errorMessage ? ` error: ${response.errorMessage}` : "";
+                throw new AgentDispatchError(compiled.spec.name, `no tool call in response (content types: [${contentTypes}]${errMsg})`, { stopReason: response.stopReason });
+            }
+            const args = toolCall.arguments;
+            validateFromFile(compiled.outputSchema, args, `output for agent '${compiled.spec.name}'`);
+            result = { output: args, raw: response, usage };
+        }
+        else {
+            result = { output: extractText(response), raw: response, usage };
+        }
+    }
+    catch (err) {
+        // Output validation / tool-call extraction failed. Mirror the dispatch-
+        // failure trace pattern so the parent chain remains complete, then
+        // rethrow so callers see the original error.
+        if (tracingEnabled && tracePath !== null) {
+            const errorMsg = err instanceof Error ? err.message : String(err);
+            const errVerdict = {
+                verdict: "error",
+                description: redactSensitiveData(errorMsg.slice(0, 2_000), redactionConfig),
+            };
+            safeWriteTrace({
+                type: "verdict_decision",
+                id: newUlid(),
+                parentId: classifyResponseId ?? classifyCallId ?? sessionStartId,
+                timestamp: new Date().toISOString(),
+                finalResult: errVerdict,
+                mappingDecisionRationale: redactSensitiveData("output extraction or validation failed", redactionConfig),
+            }, tracePath);
+            safeWriteTrace({
+                type: "trace_end",
+                id: newUlid(),
+                parentId: sessionStartId,
+                timestamp: new Date().toISOString(),
+                totalDurationMs: Date.now() - sessionStartMs,
+                verdict: errVerdict,
+            }, tracePath);
+        }
+        throw err;
+    }
+    // Success path: verdict_decision + trace_end. The verdict normalizer maps
+    // classifier output (CLEAN/FLAG/NEW) to the schema enum (clean/flag/new)
+    // and synthesizes a `clean` verdict for non-classifier agents so the trace
+    // remains schema-valid for both surfaces.
+    if (tracingEnabled && tracePath !== null) {
+        const finalResultRaw = normalizeVerdict(result.output);
+        const finalResult = { verdict: finalResultRaw.verdict };
+        if (finalResultRaw.description !== undefined) {
+            finalResult.description = redactSensitiveData(finalResultRaw.description, redactionConfig);
+        }
+        if (finalResultRaw.severity !== undefined) {
+            finalResult.severity = finalResultRaw.severity;
+        }
+        if (finalResultRaw.newPattern !== undefined) {
+            finalResult.newPattern = redactSensitiveData(finalResultRaw.newPattern, redactionConfig);
+        }
+        safeWriteTrace({
+            type: "verdict_decision",
+            id: newUlid(),
+            parentId: classifyResponseId ?? classifyCallId ?? sessionStartId,
+            timestamp: new Date().toISOString(),
+            finalResult,
+            mappingDecisionRationale: redactSensitiveData("executeAgent returned", redactionConfig),
+        }, tracePath);
+        safeWriteTrace({
+            type: "trace_end",
+            id: newUlid(),
+            parentId: sessionStartId,
+            timestamp: new Date().toISOString(),
+            totalDurationMs: Date.now() - sessionStartMs,
+            verdict: finalResult,
+        }, tracePath);
+    }
+    return result;
+}
+//# sourceMappingURL=jit-runtime.js.map

package/dist/jit-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jit-runtime.js","sourceRoot":"","sources":["../src/jit-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAE1E,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EACN,0BAA0B,EAG1B,iBAAiB,EACjB,mBAAmB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD;;;;;;;;;;;;;GAaG;AACH,MAAM,gBAAgB,GAAG,kCAAkC,CAAC;AAE5D,SAAS,OAAO,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;IACxC,sCAAsC;IACtC,IAAI,EAAE,GAAG,GAAG,CAAC;IACb,MAAM,OAAO,GAAG,IAAI,KAAK,CAAS,EAAE,CAAC,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,OAAO,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC;QAC9C,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1B,CAAC;IACD,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,SAAS,GAAG,IAAI,KAAK,CAAS,EAAE,CAAC,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,SAAS,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC;IACxE,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,KAAc,EAAE,MAAwB;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,gBAAgB,CAAC,MAAe;IAMxC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpE,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YACvG,MAAM,MAAM,GAAwC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;YAC5E,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;gBAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;YAC9E,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YACrE,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;gBAAE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;YAC3E,OAAO,MAAM,CAAC;QACf,CAAC;IACF,CAAC;IACD,8EAA8E;IAC9E,8DAA8D;IAC9D,MAAM,WAAW,GAChB,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1G,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,GAAqB;IAOnD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,CAAC,EAAE,SAAS,IAAI,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC;IACtC,OAAO;QACN,WAAW,EAAE,KAAK;QAClB,YAAY,EAAE,MAAM;QACpB,SAAS;QACT,UAAU;QACV,WAAW,EAAE,KAAK,GAAG,MAAM;KAC3B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,KAA4D,CAAC;QACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,IAAI,QAAQ,IAAI,EAAE;YAAE,OAAO,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC/C,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;QAClB,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAC/B,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAc,EAAE,SAAiB;IACxD,IAAI,CAAC;QACJ,eAAe,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,uEAAuE;QACvE,OAAO,CAAC,KAAK,CAAC,uCAAuC,SAAS,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5E,CAAC;AACF,CAAC;AASD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC/B,UAAkB,EAClB,QAAQ,GAAG,YAAY,EACvB,WAAW,GAAG,yBAAyB;IAEvC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IAC1D,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,WAAW;QACX,UAAU,EAAE,UAAgC;KAC5C,CAAC;AACH,CAAC;AAyBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAQ,EAAE,QAAgB;IAC7D,QAAQ,GAAG,EAAE,CAAC;QACb,KAAK,oBAAoB,CAAC;QAC1B,KAAK,yBAAyB;YAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACzC,KAAK,oBAAoB,CAAC;QAC1B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,kBAAkB,CAAC;QACxB,KAAK,wBAAwB,CAAC;QAC9B,KAAK,wBAAwB;YAC5B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC3D,KAAK,sBAAsB,CAAC;QAC5B,KAAK,mBAAmB,CAAC;QACzB,KAAK,eAAe;YACnB,OAAO,KAAK,CAAC;QACd;YACC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC1C,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,MAA+B;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAA4C,CAAC;IACxF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,QAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE9F,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC/C,KAAK,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAA+C,CAAC,CAAC;IAC5G,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,KAA4D,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAmC;IAC7D,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC;IAC1B,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC;IACnC,MAAM,WAAW,GAAG,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACpG,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC,KAAK,CACf,UAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EACpD,IAAI,CACJ,CAAC;IACH,CAAC;IACD,QAAQ,CAAC,EAAE,CAAC;QACX,KAAK,QAAQ;YACZ,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,KAAK,QAAQ;YACZ,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,KAAK,SAAS;YACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,SAAS;YACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,OAAO;YACX,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACrC,KAAK,QAAQ;YACZ,OAAO,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACxC;YACC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;AACF,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,GAAqB;IACzC,OAAO,GAAG,CAAC,OAAO;SAChB,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;SACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,SAAS,UAAU;IAClB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAqB;IAC9C,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC7B,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACnC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IACrC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;IAC3C,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI;QACT,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC;YAC5B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC;YAC7B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,IAAI,CAAC,CAAC;YAChC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,QAAuB,EACvB,QAAyB,EACzB,aAAyB,YAAY;IAErC,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,wBAAwB;IACxB,MAAM,SAAS,GAAkB,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACpG,MAAM,cAAc,GAAG,SAAS,KAAK,IAAI,CAAC;IAE1C,wEAAwE;IACxE,yEAAyE;IACzE,wCAAwC;IACxC,IAAI,eAA4C,CAAC;IACjD,IAAI,cAAc,IAAI,OAAO,QAAQ,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;QACxE,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAuB,0BAA0B,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YAC9F,eAAe,GAAG,EAAE,QAAQ,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,uEAAuE;YACvE,OAAO,CAAC,KAAK,CAAC,iDAAiD,QAAQ,CAAC,mBAAmB,MAAM,GAAG,EAAE,CAAC,CAAC;QACzG,CAAC;IACF,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,IAAI,kBAAkB,GAAkB,IAAI,CAAC;IAE7C,IAAI,cAAc,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAC1C,cAAc,CACb;YACC,IAAI,EAAE,eAAe;YACrB,EAAE,EAAE,cAAc;YAClB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE;YACjD,SAAS,EAAE,cAAc;YACzB,WAAW,EAAE,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YACnF,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;YAC7B,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC;YACpC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;SAClB,EACD,SAAS,CACT,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,MAAM,QAAQ,GAAG;QAChB;YACC,IAAI,EAAE,MAAe;YACrB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC/D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB;KACD,CAAC;IAEF,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;IAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC;IAE7C,uEAAuE;IACvE,wEAAwE;IACxE,uEAAuE;IACvE,sEAAsE;IACtE,IAAI,cAAc,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,iBAAiB,GAAG,YAAY;YACrC,CAAC,CAAC,aAAa,YAAY,aAAa,QAAQ,CAAC,UAAU,EAAE;YAC7D,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QACvB,cAAc,GAAG,OAAO,EAAE,CAAC;QAC3B,cAAc,CACb;YACC,IAAI,EAAE,eAAe;YACrB,EAAE,EAAE,cAAc;YAClB,QAAQ,EAAE,cAAc;YACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,cAAc,EAAE,mBAAmB,CAAC,iBAAiB,EAAE,eAAe,CAAC;YACvE,SAAS,EAAE,mBAAmB,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;SACpE,EACD,SAAS,CACT,CAAC;QAEF,mEAAmE;QACnE,uEAAuE;QACvE,iEAAiE;QACjE,mEAAmE;QACnE,kBAAkB;QAClB,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACpF,cAAc,CACb;gBACC,IAAI,EAAE,oBAAoB;gBAC1B,EAAE,EAAE,OAAO,EAAE;gBACb,QAAQ,EAAE,cAAc;gBACxB,SAAS,EAAE,EAAE;gBACb,WAAW;gBACX,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,eAAe,CAAC;gBAC3D,oEAAoE;gBACpE,8CAA8C;gBAC9C,gBAAgB,EAAE,CAAC;aACnB,EACD,SAAS,CACT,CAAC;QACH,CAAC;IACF,CAAC;IAED,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACJ,MAAM,OAAO,GAIT,EAAE,QAAQ,EAAE,CAAC;QACjB,IAAI,YAAY;YAAE,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;QAEtD,MAAM,OAAO,GAA0B;YACtC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;YAC5B,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO;YAC9B,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;SACvB,CAAC;QAEF,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC5D,OAAO,CAAC,KAAK,GAAG,CAAC,WAAW,CAAC,CAAC;YAC9B,OAAO,CAAC,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;QAED,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,KAAmB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,yEAAyE;QACzE,sEAAsE;QACtE,qCAAqC;QACrC,IAAI,cAAc,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,OAAO,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG;gBAClB,OAAO,EAAE,OAAgB;gBACzB,WAAW,EAAE,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,eAAe,CAAC;aAC3E,CAAC;YACF,cAAc,CACb;gBACC,IAAI,EAAE,kBAAkB;gBACxB,EAAE,EAAE,SAAS;gBACb,kEAAkE;gBAClE,0CAA0C;gBAC1C,QAAQ,EAAE,cAAc,IAAI,cAAc;gBAC1C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,WAAW,EAAE,UAAU;gBACvB,wBAAwB,EAAE,mBAAmB,CAAC,qCAAqC,EAAE,eAAe,CAAC;aACrG,EACD,SAAS,CACT,CAAC;YACF,cAAc,CACb;gBACC,IAAI,EAAE,WAAW;gBACjB,EAAE,EAAE,OAAO,EAAE;gBACb,QAAQ,EAAE,cAAc;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc;gBAC5C,OAAO,EAAE,UAAU;aACnB,EACD,SAAS,CACT,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE;gBAC7D,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aAC1D,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,cAAc,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;QAC3F,kBAAkB,GAAG,OAAO,EAAE,CAAC;QAC/B,MAAM,aAAa,GAA4B;YAC9C,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,kBAAkB;YACtB,QAAQ,EAAE,cAAc,IAAI,cAAc;YAC1C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,SAAS;YAC5C,KAAK,EAAE,qBAAqB,CAAC,QAAQ,CAAC;YACtC,OAAO,EAAE,gBAAgB,CAAC,OAAO;SACjC,CAAC;QACF,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC/C,aAAa,CAAC,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QAC1F,CAAC;QACD,cAAc,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACJ,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;YACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,MAAM,IAAI,kBAAkB,CAC3B,QAAQ,CAAC,IAAI,CAAC,IAAI,EAClB,6CAA6C,YAAY,IAAI,MAAM,GAAG,EACtE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CACnC,CAAC;YACH,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAoC,CAAC;YAC3D,gBAAgB,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,qBAAqB,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YAC1F,MAAM,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACjD,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAClE,CAAC;IACF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,wEAAwE;QACxE,mEAAmE;QACnE,6CAA6C;QAC7C,IAAI,cAAc,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClE,MAAM,UAAU,GAAG;gBAClB,OAAO,EAAE,OAAgB;gBACzB,WAAW,EAAE,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,eAAe,CAAC;aAC3E,CAAC;YACF,cAAc,CACb;gBACC,IAAI,EAAE,kBAAkB;gBACxB,EAAE,EAAE,OAAO,EAAE;gBACb,QAAQ,EAAE,kBAAkB,IAAI,cAAc,IAAI,cAAc;gBAChE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,WAAW,EAAE,UAAU;gBACvB,wBAAwB,EAAE,mBAAmB,CAAC,wCAAwC,EAAE,eAAe,CAAC;aACxG,EACD,SAAS,CACT,CAAC;YACF,cAAc,CACb;gBACC,IAAI,EAAE,WAAW;gBACjB,EAAE,EAAE,OAAO,EAAE;gBACb,QAAQ,EAAE,cAAc;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc;gBAC5C,OAAO,EAAE,UAAU;aACnB,EACD,SAAS,CACT,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC;IACX,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,0CAA0C;IAC1C,IAAI,cAAc,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,WAAW,GAA0B,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;QAC/E,IAAI,cAAc,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9C,WAAW,CAAC,WAAW,GAAG,mBAAmB,CAAC,cAAc,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,cAAc,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3C,WAAW,CAAC,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;QAChD,CAAC;QACD,IAAI,cAAc,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7C,WAAW,CAAC,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAC1F,CAAC;QACD,cAAc,CACb;YACC,IAAI,EAAE,kBAAkB;YACxB,EAAE,EAAE,OAAO,EAAE;YACb,QAAQ,EAAE,kBAAkB,IAAI,cAAc,IAAI,cAAc;YAChE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,wBAAwB,EAAE,mBAAmB,CAAC,uBAAuB,EAAE,eAAe,CAAC;SACvF,EACD,SAAS,CACT,CAAC;QACF,cAAc,CACb;YACC,IAAI,EAAE,WAAW;YACjB,EAAE,EAAE,OAAO,EAAE;YACb,QAAQ,EAAE,cAAc;YACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc;YAC5C,OAAO,EAAE,WAAW;SACpB,EACD,SAAS,CACT,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/template.d.ts

@@ -0,0 +1,36 @@
+import nunjucks from "nunjucks";
+export interface TemplateEnvContext {
+    /** Project root. Resolves the project-level tier. */
+    cwd: string;
+    /** Optional consumer-supplied builtin template directory. */
+    builtinDir?: string;
+    /** Test hook to override the user tier. Defaults to `~/.pi/agent/templates/`. */
+    userDir?: string;
+}
+/**
+ * Create a Nunjucks environment with three-tier template discovery.
+ *
+ * Returns a no-op loader environment (plain strings pass through) when no
+ * tier directory exists. This is not an error — an agent with an entirely
+ * inline prompt uses no templates at all.
+ */
+export declare function createTemplateEnv(ctx: TemplateEnvContext): nunjucks.Environment;
+/**
+ * Render a template string through Nunjucks.
+ *
+ * Protects `${{ }}` workflow expressions from Nunjucks by escaping them
+ * before rendering and restoring them after.
+ */
+export declare function renderTemplate(env: nunjucks.Environment, templateStr: string, context: Record<string, unknown>): string;
+/**
+ * Render a named template file through Nunjucks.
+ *
+ * The template name is resolved by the environment's FileSystemLoader through
+ * the configured three-tier search.
+ *
+ * Absolute paths bypass the loader and are read directly. This supports
+ * fully-resolved AgentSpec fields where systemPromptTemplate / taskPromptTemplate
+ * carry absolute paths after loadAgent (per D1).
+ */
+export declare function renderTemplateFile(env: nunjucks.Environment, templateName: string, context: Record<string, unknown>): string;
+//# sourceMappingURL=template.d.ts.map

package/dist/template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../src/template.ts"],"names":[],"mappings":"AAoBA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAEhC,MAAM,WAAW,kBAAkB;IAClC,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,QAAQ,CAAC,WAAW,CAe/E;AASD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC7B,GAAG,EAAE,QAAQ,CAAC,WAAW,EACzB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAIR;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CACjC,GAAG,EAAE,QAAQ,CAAC,WAAW,EACzB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAMR"}