@directive-run/ai 1.12.0 → 1.13.0

package/dist/index.d.cts

@@ -3304,6 +3304,49 @@ interface PredicateFromIntentOptions<_F = Record<string, unknown>> {
      * content that looks like prompt-injection.
      */
     redact?: (intent: string) => string;
+    /**
+     * Hard cap on the length of each `$in` / `$nin` array operand the LLM
+     * may emit. Defaults to 1000. Forwarded to
+     * `validatePredicateAgainstSchema`'s `maxArrayOperandLength`.
+     */
+    maxArrayOperandLength?: number;
+    /**
+     * Optional `AbortSignal` for cooperative cancellation. (N6)
+     *
+     * The retry loop checks `signal.aborted` between attempts AND forwards
+     * the signal into the runner call itself (`runner(agent, input, { signal })`).
+     * Whether the in-flight LLM call honors the signal depends on the runner:
+     * fetch-based adapters (the bundled OpenAI / Anthropic / Ollama runners)
+     * thread it through to `fetch`, so the network call aborts mid-stream.
+     * A custom runner that ignores the signal still delivers cancellation
+     * at the next retry boundary.
+     *
+     * On abort: throws `Error("aborted")`.
+     *
+     * NOTE: `predicateFromIntent` does NOT limit in-flight calls — callers
+     * MUST wrap with a concurrency limiter (e.g. `p-limit`) to bound
+     * fan-out under load.
+     */
+    signal?: AbortSignal;
+    /**
+     * When `true`, the {@link PredicateFromIntentProvenance} returned by
+     * `predicateFromIntentWithProvenance` omits the raw `intent` string and
+     * stores only the SHA-256 `intentHash`. Use this in PII-sensitive
+     * contexts where the original intent must not be persisted. (M6)
+     *
+     * **Default `false` for back-compat.** For PII-sensitive deployments,
+     * ALWAYS set `redactIntent: true` — the raw intent may contain
+     * user-supplied content (names, emails, medical or financial details,
+     * customer messages) that becomes a permanent record in
+     * `provenance.intent`. The default is opt-in only because flipping it
+     * now would silently strip diagnostic data from existing callers; v2
+     * may flip this default (tracked in IDEAS.md).
+     *
+     * Pair with a `redact:` sanitizer when the intent itself must be
+     * scrubbed BEFORE it lands in the LLM prompt — `redactIntent` controls
+     * only what enters the provenance record, not what the LLM sees.
+     */
+    redactIntent?: boolean;
 }
 interface PredicateFromIntentDiagnostics<F = Record<string, unknown>> {
     /** The validated predicate (`null` if all retries failed). */
@@ -3343,6 +3386,11 @@ declare class PredicateFromIntentError extends Error {
  * Throws {@link PredicateFromIntentError} on retry exhaustion. NEVER
  * returns a partial / unvalidated predicate.
  *
+ * **Rate limiting:** this function does NOT limit in-flight calls. Wrap
+ * with a concurrency limiter (e.g. `p-limit` / `Bottleneck`) before
+ * exposing it to user-driven traffic. Pass an `AbortSignal` via `opts.signal`
+ * for cooperative cancellation between retry attempts.
+ *
  * @example
  * ```ts
  * import { createOpenAIRunner } from "@directive-run/ai/openai";
@@ -3374,7 +3422,11 @@ interface PredicateToolSpecOptions {
     /** Optional dotted-path namespace to restrict the tool's scope. */
     factPath?: string;
 }
-interface PredicateToolSpec {
+/**
+ * Anthropic Messages API tool shape. Drop into the `tools: [...]` array.
+ * Anthropic's API expects `input_schema` at the top level of the tool.
+ */
+interface PredicateToolSpecAnthropic {
     name: string;
     description: string;
     input_schema: {
@@ -3390,24 +3442,170 @@ interface PredicateToolSpec {
     schemaSummary: string;
 }
 /**
- * Produce a function-calling tool spec for OpenAI / Anthropic / similar
- * APIs. Drop the result into your `tools: [...]` array; the model will
- * be told to emit a predicate matching this schema, and the resulting
- * tool call payload can be passed to `predicateFromIntent` /
- * `validatePredicateAgainstSchema` for safety.
+ * OpenAI Chat Completions / Responses API tool shape. Drop into the
+ * `tools: [...]` array. OpenAI nests the function payload under
+ * `function: { name, description, parameters }`.
+ */
+interface PredicateToolSpecOpenAI {
+    type: "function";
+    function: {
+        name: string;
+        description: string;
+        parameters: {
+            type: "object";
+            properties: {
+                predicate: {
+                    type: "object";
+                };
+            };
+            required: ["predicate"];
+        };
+    };
+    /** Human-readable schema description — embed in your tool's "description" if your provider concatenates them. */
+    schemaSummary: string;
+}
+/**
+ * @deprecated Use {@link PredicateToolSpecAnthropic} (or
+ * {@link PredicateToolSpecOpenAI}) directly. Kept as an alias for the
+ * pre-split shape that v1.12.x callers depend on; identical to
+ * `PredicateToolSpecAnthropic`.
+ */
+type PredicateToolSpec = PredicateToolSpecAnthropic;
+/**
+ * OpenAI Chat Completions / Responses API tool spec for predicate
+ * emission. Drop the result into your `tools: [...]` array; the model
+ * will be told to emit a predicate matching this schema.
  *
  * @example
  * ```ts
- * const tool = predicateToolSpec(myModule.schema, { name: "set_checkout_rule" });
+ * const tool = predicateToolSpecOpenAI(myModule.schema, { name: "set_checkout_rule" });
  *
- * await openai.messages.create({
+ * await openai.chat.completions.create({
  *   model: "gpt-4o-mini",
  *   tools: [tool],
  *   messages: [...],
  * });
  * ```
  */
+declare function predicateToolSpecOpenAI(schema: unknown, opts?: PredicateToolSpecOptions): PredicateToolSpecOpenAI;
+/**
+ * Anthropic Messages API tool spec for predicate emission. Drop the
+ * result into your `tools: [...]` array; the model will be told to emit
+ * a predicate matching this schema.
+ *
+ * @example
+ * ```ts
+ * const tool = predicateToolSpecAnthropic(myModule.schema, { name: "set_checkout_rule" });
+ *
+ * await anthropic.messages.create({
+ *   model: "claude-3-5-sonnet-latest",
+ *   tools: [tool],
+ *   messages: [...],
+ * });
+ * ```
+ */
+declare function predicateToolSpecAnthropic(schema: unknown, opts?: PredicateToolSpecOptions): PredicateToolSpecAnthropic;
+/**
+ * @deprecated Use {@link predicateToolSpecAnthropic} (or
+ * {@link predicateToolSpecOpenAI}) directly. Back-compat alias for
+ * v1.12.x callers — emits the Anthropic shape, unchanged.
+ */
 declare function predicateToolSpec(schema: unknown, opts?: PredicateToolSpecOptions): PredicateToolSpec;
+interface PredicateFromIntentProvenance {
+    /**
+     * Resolved model name when the caller passes `agent: { model }`,
+     * otherwise `"unknown"`.
+     *
+     * NOTE: most callers omit `agent` (the default `predicate-emitter`
+     * agent has no model field set), so `model` is `"unknown"` by default.
+     * v1 does NOT read provider-detected model strings from `RunResult` —
+     * that requires every adapter to surface `runResult.model`, which the
+     * current `AgentRunner` contract does not. Tracked for v2; callers who
+     * need provider attribution today should pass `agent: { name, model: "..." }`.
+     */
+    readonly model: string;
+    /**
+     * Sanitized intent string actually sent to the LLM (post-redact). When
+     * `redactIntent: true` was passed, this field is omitted entirely — only
+     * `intentHash` is populated.
+     */
+    readonly intent?: string;
+    /**
+     * SHA-256 hex hash of the sanitized intent string (or djb2 fallback
+     * when `crypto.subtle` is unavailable). Always present — even when
+     * `intent` is omitted via `redactIntent`. (M6)
+     */
+    readonly intentHash: string;
+    /** Number of LLM calls that ran before the final predicate was accepted. */
+    readonly attemptCount: number;
+    /** ISO timestamp when the predicate was returned. */
+    readonly emittedAt: string;
+    /**
+     * Hash of the VALIDATED predicate (canonicalized via stableStringify
+     * before hashing). Two semantically-identical predicates emitted with
+     * different whitespace or key order produce the SAME `predicateHash`.
+     * Sufficient as a tamper-evident pointer alongside the persisted
+     * predicate. (N3)
+     *
+     * Renamed from `rawOutputHash` in v1.13.x — the old name hashed the
+     * raw LLM output string, which made two whitespace-different responses
+     * for the same logical predicate hash differently. Callers persisting
+     * the old `rawOutputHash` value should re-derive it from the stored
+     * predicate using `hashObject(predicate)` from `@directive-run/core/internals`.
+     */
+    readonly predicateHash: string;
+}
+interface PredicateFromIntentWithProvenanceResult<F = Record<string, unknown>> {
+    readonly predicate: FactPredicate<F>;
+    readonly provenance: PredicateFromIntentProvenance;
+}
+/**
+ * Like {@link predicateFromIntent} but additionally returns a structured
+ * provenance record — the model name, sanitized intent (or its hash),
+ * attempt count, timestamp, and a canonical hash of the validated
+ * predicate.
+ *
+ * **Production deployments MUST persist the provenance record alongside
+ * the predicate.** Without it, auditing "where did this rule come from?"
+ * becomes guesswork.
+ *
+ * Throws {@link PredicateFromIntentError} on retry exhaustion — same
+ * semantics as the un-provenanced variant.
+ *
+ * **PII guidance (M6):** pass `redactIntent: true` to omit the raw
+ * intent from the provenance record and persist only the `intentHash`.
+ * Useful when the intent itself is sensitive (medical, financial,
+ * customer messages, etc.).
+ *
+ * **Hash semantics (N3):**
+ * - `predicateHash` hashes the VALIDATED predicate object via stable
+ *   stringification — two whitespace-different LLM outputs that parse to
+ *   the same predicate produce the same hash.
+ * - `intentHash` hashes the sanitized intent STRING (SHA-256 when
+ *   available, djb2 fallback).
+ *
+ * @example
+ * ```ts
+ * const { predicate, provenance } = await predicateFromIntentWithProvenance({
+ *   intent: "block checkout when cart > 10k",
+ *   schema: checkoutModule.schema,
+ *   runner,
+ *   agent: { name: "predicate-emitter", model: "gpt-4o-mini" },
+ *   redactIntent: false, // default: store both intent + intentHash
+ * });
+ *
+ * await db.predicates.insert({
+ *   predicate,
+ *   model: provenance.model,
+ *   intent: provenance.intent,            // omitted when redactIntent: true
+ *   intentHash: provenance.intentHash,
+ *   emittedAt: provenance.emittedAt,
+ *   predicateHash: provenance.predicateHash,
+ *   attempts: provenance.attemptCount,
+ * });
+ * ```
+ */
+declare function predicateFromIntentWithProvenance<F = Record<string, unknown>>(opts: PredicateFromIntentOptions<F>): Promise<PredicateFromIntentWithProvenanceResult<F>>;
 
 /**
  * P5: Batch Queue — Application-level batching for agent calls.
@@ -5146,4 +5344,4 @@ interface OtelPlugin {
  */
 declare function createOtelPlugin(config: OtelPluginConfig): OtelPlugin;
 
-export { type ANNIndex, type ANNSearchResult, AdapterHooks, AgentHealthMetrics, type AgentInfo, AgentLike, type AgentMessage, type AgentMessageType, type AgentNetwork, type AgentNetworkConfig, AgentRegistry, AgentRunner, AgentSelectionStrategy, AgentState, AllProvidersFailedError, ApprovalState, type AuditEventType, type AuditInstance, type AuditPluginConfig, type BatchQueue, type BatchQueueConfig, type BidirectionalStream, type BudgetConfig, type BudgetExceededDetails, BudgetExceededError, type BudgetRunner, type BudgetWindow, CheckpointDiff, CheckpointProgress, CheckpointStore, type ComplianceConfig, type ComplianceInstance, type ComplianceStorage, type ConnectDevToolsOptions, type ConstraintRouterConfig, type ConstraintRouterRunner, type CreateRunnerOptions, DEFAULT_INJECTION_PATTERNS, DagExecutionContext, DagNode, DagPattern, type DebateConfig, DebatePattern, DebateResult, DebugEvent, DebugTimeline, type DelegationMessage, type DelegationResultMessage, type DetectedPII, type DevToolsClient, type DevToolsClientMessage, type DevToolsCompatibleOrchestrator, type DevToolsServer, type DevToolsServerConfig, type DevToolsServerMessage, type DevToolsSnapshot, type DevToolsTransport, EmbedderFn, Embedding, type EnhancedPIIGuardrailOptions, type EvalAgentSummary, type EvalAssertOptions, type EvalCase, type EvalCaseResult, type EvalContext, type EvalCostOptions, type EvalCriterion, type EvalCriterionFn, type EvalJudgeOptions, type EvalLatencyOptions, type EvalMatchOptions, type EvalOutputLengthOptions, type EvalResults, type EvalSafetyOptions, type EvalScore, type EvalSemanticOptions, type EvalStructureOptions, type EvalSuite, type EvalSuiteConfig, ExecutionPattern, type FallbackConfig, type GoalAgentDeclaration, type GoalDependencyEdge, type GoalDependencyGraph, type GoalExecutionPlan, type GoalExplanation, type GoalExplanationStep, GoalMetrics, GoalNode, GoalPattern, type GoalPlanStep, GoalResult, type GoalValidationResult, GuardrailFn, HealthMonitor, type InformMessage, type InjectionDetectionResult, InputGuardrailData, type JSONFileStoreOptions, type MCPAdapter, type MCPAdapterConfig, type MCPApprovalRequest, type MCPCallToolRequirement, type MCPGetPromptRequirement, type MCPReadResourceRequirement, type MCPRequirement, type MCPResource, type MCPServerConfig, type MCPSyncResourcesRequirement, type MCPTool, type MCPToolConstraint, type MCPToolResult, type MermaidDirection, type MermaidNodeShapes, type MermaidOptions, Message, type MessageBus, type MessageBusConfig, type MessageFilter, type MessageHandler, type ModelRule, type ModelSelectionConfig, MultiAgentOrchestrator, MultiAgentOrchestratorOptions, OrchestratorConstraint, type OtelPlugin, type OtelPluginConfig, type OtelSpan, OtelStatusCode, type OtelTracer, OutputGuardrailData, type PIIDetectionResult, type PIIDetector, type PIIType, ParallelPattern, type ParsedResponse, PatternCheckpointConfig, PatternCheckpointState, type PredicateFromIntentDiagnostics, PredicateFromIntentError, type PredicateFromIntentOptions, type PredicateToolSpec, type PredicateToolSpecOptions, type PromptInjectionGuardrailOptions, type ProviderStats, type QueryMessage, type RAGChunk, type RAGEnrichOptions, type RAGEnricher, type RAGEnricherConfig, type RAGStorage, RacePattern, type RateLimitGuardrail, type RedactionStyle, ReflectIterationRecord, ReflectPattern, ReflectionEvaluation, RelaxationTier, type RequestMessage, type ResponseMessage, type RetryConfig, RetryExhaustedError, type RoutingConstraint, type RoutingFacts, type RoutingProvider, RunAgentRequirement, RunOptions, RunResult, type RunnerMiddleware, type SSEEvent, type SSETransport, type SSETransportConfig, STRICT_INJECTION_PATTERNS, SchemaValidator, Semaphore, SequentialPattern, type SerializedDagNode, type SerializedGoalNode, type SerializedPattern, type SpanData, type SpawnOnConditionOptions, type SpawnPoolConfig, type StreamChannel, type StreamChannelConfig, type StreamChannelState, type Subscription, SupervisorPattern, type TokenPricing, ToolCallGuardrailData, type TypedAgentMessage, type UpdateMessage, type VPTreeIndexConfig, type WsTransportConfig, aggregateTokens, allReadyStrategy, byAgentName, byInputLength, byPattern, capabilityRoute, collectOutputs, composePatterns, concatResults, connectDevTools, convertToolsForLLM, costEfficientStrategy, createAgentAuditHandlers, createAgentNetwork, createAuditTrail, createBatchQueue, createBidirectionalStream, createBruteForceIndex, createCompliance, createConstraintRouter, createContentFilterGuardrail, createDelegator, createDevToolsServer, createEnhancedPIIGuardrail, createEvalSuite, createInMemoryComplianceStorage, createJSONFileStore, createLengthGuardrail, createMCPAdapter, createMessageBus, createModerationGuardrail, createMultiAgentOrchestrator, createOtelPlugin, createOutputPIIGuardrail, createOutputSchemaGuardrail, createOutputTypeGuardrail, createPIIGuardrail, createPromptInjectionGuardrail, createPubSub, createRAGEnricher, createRateLimitGuardrail, createResponder, createRunner, createSSETransport, createStreamChannel, createToolGuardrail, createUntrustedContentGuardrail, createVPTreeIndex, createWsTransport, dag, debate, derivedConstraint, detectAndRedactPII, detectPII, detectPromptInjection, diffCheckpoints, estimateCost, evalAssert, evalCoherence, evalCost, evalFaithfulness, evalJudge, evalLatency, evalMatch, evalOutputLength, evalRelevance, evalSafety, evalStructure, explainGoal, findAgentsByCapability, forkFromCheckpoint, formatSystemMeta, getCheckpointProgress, getDependencyGraph, getPatternStep, goal, hasPendingApprovals, highestImpactStrategy, isAgentRunning, markUntrustedContent, mcpCallTool, mcpGetPrompt, mcpReadResource, mcpSyncResources, mergeStreams, parallel, parseHttpStatus, parseRetryAfter, patternFromJSON, patternToJSON, patternToMermaid, pickBestResult, pipe, pipeThrough, planGoal, predicateFromIntent, predicateFromIntentRaw, predicateToolSpec, race, redactPII, reflect, runAgentRequirement, runDebate, sanitizeInjection, selectAgent, sequential, spawnOnCondition, spawnPool, supervisor, toAIContext, validateBaseURL, validateGoal, withBudget, withFallback, withModelSelection, withRetry };
+export { type ANNIndex, type ANNSearchResult, AdapterHooks, AgentHealthMetrics, type AgentInfo, AgentLike, type AgentMessage, type AgentMessageType, type AgentNetwork, type AgentNetworkConfig, AgentRegistry, AgentRunner, AgentSelectionStrategy, AgentState, AllProvidersFailedError, ApprovalState, type AuditEventType, type AuditInstance, type AuditPluginConfig, type BatchQueue, type BatchQueueConfig, type BidirectionalStream, type BudgetConfig, type BudgetExceededDetails, BudgetExceededError, type BudgetRunner, type BudgetWindow, CheckpointDiff, CheckpointProgress, CheckpointStore, type ComplianceConfig, type ComplianceInstance, type ComplianceStorage, type ConnectDevToolsOptions, type ConstraintRouterConfig, type ConstraintRouterRunner, type CreateRunnerOptions, DEFAULT_INJECTION_PATTERNS, DagExecutionContext, DagNode, DagPattern, type DebateConfig, DebatePattern, DebateResult, DebugEvent, DebugTimeline, type DelegationMessage, type DelegationResultMessage, type DetectedPII, type DevToolsClient, type DevToolsClientMessage, type DevToolsCompatibleOrchestrator, type DevToolsServer, type DevToolsServerConfig, type DevToolsServerMessage, type DevToolsSnapshot, type DevToolsTransport, EmbedderFn, Embedding, type EnhancedPIIGuardrailOptions, type EvalAgentSummary, type EvalAssertOptions, type EvalCase, type EvalCaseResult, type EvalContext, type EvalCostOptions, type EvalCriterion, type EvalCriterionFn, type EvalJudgeOptions, type EvalLatencyOptions, type EvalMatchOptions, type EvalOutputLengthOptions, type EvalResults, type EvalSafetyOptions, type EvalScore, type EvalSemanticOptions, type EvalStructureOptions, type EvalSuite, type EvalSuiteConfig, ExecutionPattern, type FallbackConfig, type GoalAgentDeclaration, type GoalDependencyEdge, type GoalDependencyGraph, type GoalExecutionPlan, type GoalExplanation, type GoalExplanationStep, GoalMetrics, GoalNode, GoalPattern, type GoalPlanStep, GoalResult, type GoalValidationResult, GuardrailFn, HealthMonitor, type InformMessage, type InjectionDetectionResult, InputGuardrailData, type JSONFileStoreOptions, type MCPAdapter, type MCPAdapterConfig, type MCPApprovalRequest, type MCPCallToolRequirement, type MCPGetPromptRequirement, type MCPReadResourceRequirement, type MCPRequirement, type MCPResource, type MCPServerConfig, type MCPSyncResourcesRequirement, type MCPTool, type MCPToolConstraint, type MCPToolResult, type MermaidDirection, type MermaidNodeShapes, type MermaidOptions, Message, type MessageBus, type MessageBusConfig, type MessageFilter, type MessageHandler, type ModelRule, type ModelSelectionConfig, MultiAgentOrchestrator, MultiAgentOrchestratorOptions, OrchestratorConstraint, type OtelPlugin, type OtelPluginConfig, type OtelSpan, OtelStatusCode, type OtelTracer, OutputGuardrailData, type PIIDetectionResult, type PIIDetector, type PIIType, ParallelPattern, type ParsedResponse, PatternCheckpointConfig, PatternCheckpointState, type PredicateFromIntentDiagnostics, PredicateFromIntentError, type PredicateFromIntentOptions, type PredicateFromIntentProvenance, type PredicateFromIntentWithProvenanceResult, type PredicateToolSpec, type PredicateToolSpecAnthropic, type PredicateToolSpecOpenAI, type PredicateToolSpecOptions, type PromptInjectionGuardrailOptions, type ProviderStats, type QueryMessage, type RAGChunk, type RAGEnrichOptions, type RAGEnricher, type RAGEnricherConfig, type RAGStorage, RacePattern, type RateLimitGuardrail, type RedactionStyle, ReflectIterationRecord, ReflectPattern, ReflectionEvaluation, RelaxationTier, type RequestMessage, type ResponseMessage, type RetryConfig, RetryExhaustedError, type RoutingConstraint, type RoutingFacts, type RoutingProvider, RunAgentRequirement, RunOptions, RunResult, type RunnerMiddleware, type SSEEvent, type SSETransport, type SSETransportConfig, STRICT_INJECTION_PATTERNS, SchemaValidator, Semaphore, SequentialPattern, type SerializedDagNode, type SerializedGoalNode, type SerializedPattern, type SpanData, type SpawnOnConditionOptions, type SpawnPoolConfig, type StreamChannel, type StreamChannelConfig, type StreamChannelState, type Subscription, SupervisorPattern, type TokenPricing, ToolCallGuardrailData, type TypedAgentMessage, type UpdateMessage, type VPTreeIndexConfig, type WsTransportConfig, aggregateTokens, allReadyStrategy, byAgentName, byInputLength, byPattern, capabilityRoute, collectOutputs, composePatterns, concatResults, connectDevTools, convertToolsForLLM, costEfficientStrategy, createAgentAuditHandlers, createAgentNetwork, createAuditTrail, createBatchQueue, createBidirectionalStream, createBruteForceIndex, createCompliance, createConstraintRouter, createContentFilterGuardrail, createDelegator, createDevToolsServer, createEnhancedPIIGuardrail, createEvalSuite, createInMemoryComplianceStorage, createJSONFileStore, createLengthGuardrail, createMCPAdapter, createMessageBus, createModerationGuardrail, createMultiAgentOrchestrator, createOtelPlugin, createOutputPIIGuardrail, createOutputSchemaGuardrail, createOutputTypeGuardrail, createPIIGuardrail, createPromptInjectionGuardrail, createPubSub, createRAGEnricher, createRateLimitGuardrail, createResponder, createRunner, createSSETransport, createStreamChannel, createToolGuardrail, createUntrustedContentGuardrail, createVPTreeIndex, createWsTransport, dag, debate, derivedConstraint, detectAndRedactPII, detectPII, detectPromptInjection, diffCheckpoints, estimateCost, evalAssert, evalCoherence, evalCost, evalFaithfulness, evalJudge, evalLatency, evalMatch, evalOutputLength, evalRelevance, evalSafety, evalStructure, explainGoal, findAgentsByCapability, forkFromCheckpoint, formatSystemMeta, getCheckpointProgress, getDependencyGraph, getPatternStep, goal, hasPendingApprovals, highestImpactStrategy, isAgentRunning, markUntrustedContent, mcpCallTool, mcpGetPrompt, mcpReadResource, mcpSyncResources, mergeStreams, parallel, parseHttpStatus, parseRetryAfter, patternFromJSON, patternToJSON, patternToMermaid, pickBestResult, pipe, pipeThrough, planGoal, predicateFromIntent, predicateFromIntentRaw, predicateFromIntentWithProvenance, predicateToolSpec, predicateToolSpecAnthropic, predicateToolSpecOpenAI, race, redactPII, reflect, runAgentRequirement, runDebate, sanitizeInjection, selectAgent, sequential, spawnOnCondition, spawnPool, supervisor, toAIContext, validateBaseURL, validateGoal, withBudget, withFallback, withModelSelection, withRetry };

package/dist/index.d.ts

@@ -3304,6 +3304,49 @@ interface PredicateFromIntentOptions<_F = Record<string, unknown>> {
      * content that looks like prompt-injection.
      */
     redact?: (intent: string) => string;
+    /**
+     * Hard cap on the length of each `$in` / `$nin` array operand the LLM
+     * may emit. Defaults to 1000. Forwarded to
+     * `validatePredicateAgainstSchema`'s `maxArrayOperandLength`.
+     */
+    maxArrayOperandLength?: number;
+    /**
+     * Optional `AbortSignal` for cooperative cancellation. (N6)
+     *
+     * The retry loop checks `signal.aborted` between attempts AND forwards
+     * the signal into the runner call itself (`runner(agent, input, { signal })`).
+     * Whether the in-flight LLM call honors the signal depends on the runner:
+     * fetch-based adapters (the bundled OpenAI / Anthropic / Ollama runners)
+     * thread it through to `fetch`, so the network call aborts mid-stream.
+     * A custom runner that ignores the signal still delivers cancellation
+     * at the next retry boundary.
+     *
+     * On abort: throws `Error("aborted")`.
+     *
+     * NOTE: `predicateFromIntent` does NOT limit in-flight calls — callers
+     * MUST wrap with a concurrency limiter (e.g. `p-limit`) to bound
+     * fan-out under load.
+     */
+    signal?: AbortSignal;
+    /**
+     * When `true`, the {@link PredicateFromIntentProvenance} returned by
+     * `predicateFromIntentWithProvenance` omits the raw `intent` string and
+     * stores only the SHA-256 `intentHash`. Use this in PII-sensitive
+     * contexts where the original intent must not be persisted. (M6)
+     *
+     * **Default `false` for back-compat.** For PII-sensitive deployments,
+     * ALWAYS set `redactIntent: true` — the raw intent may contain
+     * user-supplied content (names, emails, medical or financial details,
+     * customer messages) that becomes a permanent record in
+     * `provenance.intent`. The default is opt-in only because flipping it
+     * now would silently strip diagnostic data from existing callers; v2
+     * may flip this default (tracked in IDEAS.md).
+     *
+     * Pair with a `redact:` sanitizer when the intent itself must be
+     * scrubbed BEFORE it lands in the LLM prompt — `redactIntent` controls
+     * only what enters the provenance record, not what the LLM sees.
+     */
+    redactIntent?: boolean;
 }
 interface PredicateFromIntentDiagnostics<F = Record<string, unknown>> {
     /** The validated predicate (`null` if all retries failed). */
@@ -3343,6 +3386,11 @@ declare class PredicateFromIntentError extends Error {
  * Throws {@link PredicateFromIntentError} on retry exhaustion. NEVER
  * returns a partial / unvalidated predicate.
  *
+ * **Rate limiting:** this function does NOT limit in-flight calls. Wrap
+ * with a concurrency limiter (e.g. `p-limit` / `Bottleneck`) before
+ * exposing it to user-driven traffic. Pass an `AbortSignal` via `opts.signal`
+ * for cooperative cancellation between retry attempts.
+ *
  * @example
  * ```ts
  * import { createOpenAIRunner } from "@directive-run/ai/openai";
@@ -3374,7 +3422,11 @@ interface PredicateToolSpecOptions {
     /** Optional dotted-path namespace to restrict the tool's scope. */
     factPath?: string;
 }
-interface PredicateToolSpec {
+/**
+ * Anthropic Messages API tool shape. Drop into the `tools: [...]` array.
+ * Anthropic's API expects `input_schema` at the top level of the tool.
+ */
+interface PredicateToolSpecAnthropic {
     name: string;
     description: string;
     input_schema: {
@@ -3390,24 +3442,170 @@ interface PredicateToolSpec {
     schemaSummary: string;
 }
 /**
- * Produce a function-calling tool spec for OpenAI / Anthropic / similar
- * APIs. Drop the result into your `tools: [...]` array; the model will
- * be told to emit a predicate matching this schema, and the resulting
- * tool call payload can be passed to `predicateFromIntent` /
- * `validatePredicateAgainstSchema` for safety.
+ * OpenAI Chat Completions / Responses API tool shape. Drop into the
+ * `tools: [...]` array. OpenAI nests the function payload under
+ * `function: { name, description, parameters }`.
+ */
+interface PredicateToolSpecOpenAI {
+    type: "function";
+    function: {
+        name: string;
+        description: string;
+        parameters: {
+            type: "object";
+            properties: {
+                predicate: {
+                    type: "object";
+                };
+            };
+            required: ["predicate"];
+        };
+    };
+    /** Human-readable schema description — embed in your tool's "description" if your provider concatenates them. */
+    schemaSummary: string;
+}
+/**
+ * @deprecated Use {@link PredicateToolSpecAnthropic} (or
+ * {@link PredicateToolSpecOpenAI}) directly. Kept as an alias for the
+ * pre-split shape that v1.12.x callers depend on; identical to
+ * `PredicateToolSpecAnthropic`.
+ */
+type PredicateToolSpec = PredicateToolSpecAnthropic;
+/**
+ * OpenAI Chat Completions / Responses API tool spec for predicate
+ * emission. Drop the result into your `tools: [...]` array; the model
+ * will be told to emit a predicate matching this schema.
  *
  * @example
  * ```ts
- * const tool = predicateToolSpec(myModule.schema, { name: "set_checkout_rule" });
+ * const tool = predicateToolSpecOpenAI(myModule.schema, { name: "set_checkout_rule" });
  *
- * await openai.messages.create({
+ * await openai.chat.completions.create({
  *   model: "gpt-4o-mini",
  *   tools: [tool],
  *   messages: [...],
  * });
  * ```
  */
+declare function predicateToolSpecOpenAI(schema: unknown, opts?: PredicateToolSpecOptions): PredicateToolSpecOpenAI;
+/**
+ * Anthropic Messages API tool spec for predicate emission. Drop the
+ * result into your `tools: [...]` array; the model will be told to emit
+ * a predicate matching this schema.
+ *
+ * @example
+ * ```ts
+ * const tool = predicateToolSpecAnthropic(myModule.schema, { name: "set_checkout_rule" });
+ *
+ * await anthropic.messages.create({
+ *   model: "claude-3-5-sonnet-latest",
+ *   tools: [tool],
+ *   messages: [...],
+ * });
+ * ```
+ */
+declare function predicateToolSpecAnthropic(schema: unknown, opts?: PredicateToolSpecOptions): PredicateToolSpecAnthropic;
+/**
+ * @deprecated Use {@link predicateToolSpecAnthropic} (or
+ * {@link predicateToolSpecOpenAI}) directly. Back-compat alias for
+ * v1.12.x callers — emits the Anthropic shape, unchanged.
+ */
 declare function predicateToolSpec(schema: unknown, opts?: PredicateToolSpecOptions): PredicateToolSpec;
+interface PredicateFromIntentProvenance {
+    /**
+     * Resolved model name when the caller passes `agent: { model }`,
+     * otherwise `"unknown"`.
+     *
+     * NOTE: most callers omit `agent` (the default `predicate-emitter`
+     * agent has no model field set), so `model` is `"unknown"` by default.
+     * v1 does NOT read provider-detected model strings from `RunResult` —
+     * that requires every adapter to surface `runResult.model`, which the
+     * current `AgentRunner` contract does not. Tracked for v2; callers who
+     * need provider attribution today should pass `agent: { name, model: "..." }`.
+     */
+    readonly model: string;
+    /**
+     * Sanitized intent string actually sent to the LLM (post-redact). When
+     * `redactIntent: true` was passed, this field is omitted entirely — only
+     * `intentHash` is populated.
+     */
+    readonly intent?: string;
+    /**
+     * SHA-256 hex hash of the sanitized intent string (or djb2 fallback
+     * when `crypto.subtle` is unavailable). Always present — even when
+     * `intent` is omitted via `redactIntent`. (M6)
+     */
+    readonly intentHash: string;
+    /** Number of LLM calls that ran before the final predicate was accepted. */
+    readonly attemptCount: number;
+    /** ISO timestamp when the predicate was returned. */
+    readonly emittedAt: string;
+    /**
+     * Hash of the VALIDATED predicate (canonicalized via stableStringify
+     * before hashing). Two semantically-identical predicates emitted with
+     * different whitespace or key order produce the SAME `predicateHash`.
+     * Sufficient as a tamper-evident pointer alongside the persisted
+     * predicate. (N3)
+     *
+     * Renamed from `rawOutputHash` in v1.13.x — the old name hashed the
+     * raw LLM output string, which made two whitespace-different responses
+     * for the same logical predicate hash differently. Callers persisting
+     * the old `rawOutputHash` value should re-derive it from the stored
+     * predicate using `hashObject(predicate)` from `@directive-run/core/internals`.
+     */
+    readonly predicateHash: string;
+}
+interface PredicateFromIntentWithProvenanceResult<F = Record<string, unknown>> {
+    readonly predicate: FactPredicate<F>;
+    readonly provenance: PredicateFromIntentProvenance;
+}
+/**
+ * Like {@link predicateFromIntent} but additionally returns a structured
+ * provenance record — the model name, sanitized intent (or its hash),
+ * attempt count, timestamp, and a canonical hash of the validated
+ * predicate.
+ *
+ * **Production deployments MUST persist the provenance record alongside
+ * the predicate.** Without it, auditing "where did this rule come from?"
+ * becomes guesswork.
+ *
+ * Throws {@link PredicateFromIntentError} on retry exhaustion — same
+ * semantics as the un-provenanced variant.
+ *
+ * **PII guidance (M6):** pass `redactIntent: true` to omit the raw
+ * intent from the provenance record and persist only the `intentHash`.
+ * Useful when the intent itself is sensitive (medical, financial,
+ * customer messages, etc.).
+ *
+ * **Hash semantics (N3):**
+ * - `predicateHash` hashes the VALIDATED predicate object via stable
+ *   stringification — two whitespace-different LLM outputs that parse to
+ *   the same predicate produce the same hash.
+ * - `intentHash` hashes the sanitized intent STRING (SHA-256 when
+ *   available, djb2 fallback).
+ *
+ * @example
+ * ```ts
+ * const { predicate, provenance } = await predicateFromIntentWithProvenance({
+ *   intent: "block checkout when cart > 10k",
+ *   schema: checkoutModule.schema,
+ *   runner,
+ *   agent: { name: "predicate-emitter", model: "gpt-4o-mini" },
+ *   redactIntent: false, // default: store both intent + intentHash
+ * });
+ *
+ * await db.predicates.insert({
+ *   predicate,
+ *   model: provenance.model,
+ *   intent: provenance.intent,            // omitted when redactIntent: true
+ *   intentHash: provenance.intentHash,
+ *   emittedAt: provenance.emittedAt,
+ *   predicateHash: provenance.predicateHash,
+ *   attempts: provenance.attemptCount,
+ * });
+ * ```
+ */
+declare function predicateFromIntentWithProvenance<F = Record<string, unknown>>(opts: PredicateFromIntentOptions<F>): Promise<PredicateFromIntentWithProvenanceResult<F>>;
 
 /**
  * P5: Batch Queue — Application-level batching for agent calls.
@@ -5146,4 +5344,4 @@ interface OtelPlugin {
  */
 declare function createOtelPlugin(config: OtelPluginConfig): OtelPlugin;
 
-export { type ANNIndex, type ANNSearchResult, AdapterHooks, AgentHealthMetrics, type AgentInfo, AgentLike, type AgentMessage, type AgentMessageType, type AgentNetwork, type AgentNetworkConfig, AgentRegistry, AgentRunner, AgentSelectionStrategy, AgentState, AllProvidersFailedError, ApprovalState, type AuditEventType, type AuditInstance, type AuditPluginConfig, type BatchQueue, type BatchQueueConfig, type BidirectionalStream, type BudgetConfig, type BudgetExceededDetails, BudgetExceededError, type BudgetRunner, type BudgetWindow, CheckpointDiff, CheckpointProgress, CheckpointStore, type ComplianceConfig, type ComplianceInstance, type ComplianceStorage, type ConnectDevToolsOptions, type ConstraintRouterConfig, type ConstraintRouterRunner, type CreateRunnerOptions, DEFAULT_INJECTION_PATTERNS, DagExecutionContext, DagNode, DagPattern, type DebateConfig, DebatePattern, DebateResult, DebugEvent, DebugTimeline, type DelegationMessage, type DelegationResultMessage, type DetectedPII, type DevToolsClient, type DevToolsClientMessage, type DevToolsCompatibleOrchestrator, type DevToolsServer, type DevToolsServerConfig, type DevToolsServerMessage, type DevToolsSnapshot, type DevToolsTransport, EmbedderFn, Embedding, type EnhancedPIIGuardrailOptions, type EvalAgentSummary, type EvalAssertOptions, type EvalCase, type EvalCaseResult, type EvalContext, type EvalCostOptions, type EvalCriterion, type EvalCriterionFn, type EvalJudgeOptions, type EvalLatencyOptions, type EvalMatchOptions, type EvalOutputLengthOptions, type EvalResults, type EvalSafetyOptions, type EvalScore, type EvalSemanticOptions, type EvalStructureOptions, type EvalSuite, type EvalSuiteConfig, ExecutionPattern, type FallbackConfig, type GoalAgentDeclaration, type GoalDependencyEdge, type GoalDependencyGraph, type GoalExecutionPlan, type GoalExplanation, type GoalExplanationStep, GoalMetrics, GoalNode, GoalPattern, type GoalPlanStep, GoalResult, type GoalValidationResult, GuardrailFn, HealthMonitor, type InformMessage, type InjectionDetectionResult, InputGuardrailData, type JSONFileStoreOptions, type MCPAdapter, type MCPAdapterConfig, type MCPApprovalRequest, type MCPCallToolRequirement, type MCPGetPromptRequirement, type MCPReadResourceRequirement, type MCPRequirement, type MCPResource, type MCPServerConfig, type MCPSyncResourcesRequirement, type MCPTool, type MCPToolConstraint, type MCPToolResult, type MermaidDirection, type MermaidNodeShapes, type MermaidOptions, Message, type MessageBus, type MessageBusConfig, type MessageFilter, type MessageHandler, type ModelRule, type ModelSelectionConfig, MultiAgentOrchestrator, MultiAgentOrchestratorOptions, OrchestratorConstraint, type OtelPlugin, type OtelPluginConfig, type OtelSpan, OtelStatusCode, type OtelTracer, OutputGuardrailData, type PIIDetectionResult, type PIIDetector, type PIIType, ParallelPattern, type ParsedResponse, PatternCheckpointConfig, PatternCheckpointState, type PredicateFromIntentDiagnostics, PredicateFromIntentError, type PredicateFromIntentOptions, type PredicateToolSpec, type PredicateToolSpecOptions, type PromptInjectionGuardrailOptions, type ProviderStats, type QueryMessage, type RAGChunk, type RAGEnrichOptions, type RAGEnricher, type RAGEnricherConfig, type RAGStorage, RacePattern, type RateLimitGuardrail, type RedactionStyle, ReflectIterationRecord, ReflectPattern, ReflectionEvaluation, RelaxationTier, type RequestMessage, type ResponseMessage, type RetryConfig, RetryExhaustedError, type RoutingConstraint, type RoutingFacts, type RoutingProvider, RunAgentRequirement, RunOptions, RunResult, type RunnerMiddleware, type SSEEvent, type SSETransport, type SSETransportConfig, STRICT_INJECTION_PATTERNS, SchemaValidator, Semaphore, SequentialPattern, type SerializedDagNode, type SerializedGoalNode, type SerializedPattern, type SpanData, type SpawnOnConditionOptions, type SpawnPoolConfig, type StreamChannel, type StreamChannelConfig, type StreamChannelState, type Subscription, SupervisorPattern, type TokenPricing, ToolCallGuardrailData, type TypedAgentMessage, type UpdateMessage, type VPTreeIndexConfig, type WsTransportConfig, aggregateTokens, allReadyStrategy, byAgentName, byInputLength, byPattern, capabilityRoute, collectOutputs, composePatterns, concatResults, connectDevTools, convertToolsForLLM, costEfficientStrategy, createAgentAuditHandlers, createAgentNetwork, createAuditTrail, createBatchQueue, createBidirectionalStream, createBruteForceIndex, createCompliance, createConstraintRouter, createContentFilterGuardrail, createDelegator, createDevToolsServer, createEnhancedPIIGuardrail, createEvalSuite, createInMemoryComplianceStorage, createJSONFileStore, createLengthGuardrail, createMCPAdapter, createMessageBus, createModerationGuardrail, createMultiAgentOrchestrator, createOtelPlugin, createOutputPIIGuardrail, createOutputSchemaGuardrail, createOutputTypeGuardrail, createPIIGuardrail, createPromptInjectionGuardrail, createPubSub, createRAGEnricher, createRateLimitGuardrail, createResponder, createRunner, createSSETransport, createStreamChannel, createToolGuardrail, createUntrustedContentGuardrail, createVPTreeIndex, createWsTransport, dag, debate, derivedConstraint, detectAndRedactPII, detectPII, detectPromptInjection, diffCheckpoints, estimateCost, evalAssert, evalCoherence, evalCost, evalFaithfulness, evalJudge, evalLatency, evalMatch, evalOutputLength, evalRelevance, evalSafety, evalStructure, explainGoal, findAgentsByCapability, forkFromCheckpoint, formatSystemMeta, getCheckpointProgress, getDependencyGraph, getPatternStep, goal, hasPendingApprovals, highestImpactStrategy, isAgentRunning, markUntrustedContent, mcpCallTool, mcpGetPrompt, mcpReadResource, mcpSyncResources, mergeStreams, parallel, parseHttpStatus, parseRetryAfter, patternFromJSON, patternToJSON, patternToMermaid, pickBestResult, pipe, pipeThrough, planGoal, predicateFromIntent, predicateFromIntentRaw, predicateToolSpec, race, redactPII, reflect, runAgentRequirement, runDebate, sanitizeInjection, selectAgent, sequential, spawnOnCondition, spawnPool, supervisor, toAIContext, validateBaseURL, validateGoal, withBudget, withFallback, withModelSelection, withRetry };
+export { type ANNIndex, type ANNSearchResult, AdapterHooks, AgentHealthMetrics, type AgentInfo, AgentLike, type AgentMessage, type AgentMessageType, type AgentNetwork, type AgentNetworkConfig, AgentRegistry, AgentRunner, AgentSelectionStrategy, AgentState, AllProvidersFailedError, ApprovalState, type AuditEventType, type AuditInstance, type AuditPluginConfig, type BatchQueue, type BatchQueueConfig, type BidirectionalStream, type BudgetConfig, type BudgetExceededDetails, BudgetExceededError, type BudgetRunner, type BudgetWindow, CheckpointDiff, CheckpointProgress, CheckpointStore, type ComplianceConfig, type ComplianceInstance, type ComplianceStorage, type ConnectDevToolsOptions, type ConstraintRouterConfig, type ConstraintRouterRunner, type CreateRunnerOptions, DEFAULT_INJECTION_PATTERNS, DagExecutionContext, DagNode, DagPattern, type DebateConfig, DebatePattern, DebateResult, DebugEvent, DebugTimeline, type DelegationMessage, type DelegationResultMessage, type DetectedPII, type DevToolsClient, type DevToolsClientMessage, type DevToolsCompatibleOrchestrator, type DevToolsServer, type DevToolsServerConfig, type DevToolsServerMessage, type DevToolsSnapshot, type DevToolsTransport, EmbedderFn, Embedding, type EnhancedPIIGuardrailOptions, type EvalAgentSummary, type EvalAssertOptions, type EvalCase, type EvalCaseResult, type EvalContext, type EvalCostOptions, type EvalCriterion, type EvalCriterionFn, type EvalJudgeOptions, type EvalLatencyOptions, type EvalMatchOptions, type EvalOutputLengthOptions, type EvalResults, type EvalSafetyOptions, type EvalScore, type EvalSemanticOptions, type EvalStructureOptions, type EvalSuite, type EvalSuiteConfig, ExecutionPattern, type FallbackConfig, type GoalAgentDeclaration, type GoalDependencyEdge, type GoalDependencyGraph, type GoalExecutionPlan, type GoalExplanation, type GoalExplanationStep, GoalMetrics, GoalNode, GoalPattern, type GoalPlanStep, GoalResult, type GoalValidationResult, GuardrailFn, HealthMonitor, type InformMessage, type InjectionDetectionResult, InputGuardrailData, type JSONFileStoreOptions, type MCPAdapter, type MCPAdapterConfig, type MCPApprovalRequest, type MCPCallToolRequirement, type MCPGetPromptRequirement, type MCPReadResourceRequirement, type MCPRequirement, type MCPResource, type MCPServerConfig, type MCPSyncResourcesRequirement, type MCPTool, type MCPToolConstraint, type MCPToolResult, type MermaidDirection, type MermaidNodeShapes, type MermaidOptions, Message, type MessageBus, type MessageBusConfig, type MessageFilter, type MessageHandler, type ModelRule, type ModelSelectionConfig, MultiAgentOrchestrator, MultiAgentOrchestratorOptions, OrchestratorConstraint, type OtelPlugin, type OtelPluginConfig, type OtelSpan, OtelStatusCode, type OtelTracer, OutputGuardrailData, type PIIDetectionResult, type PIIDetector, type PIIType, ParallelPattern, type ParsedResponse, PatternCheckpointConfig, PatternCheckpointState, type PredicateFromIntentDiagnostics, PredicateFromIntentError, type PredicateFromIntentOptions, type PredicateFromIntentProvenance, type PredicateFromIntentWithProvenanceResult, type PredicateToolSpec, type PredicateToolSpecAnthropic, type PredicateToolSpecOpenAI, type PredicateToolSpecOptions, type PromptInjectionGuardrailOptions, type ProviderStats, type QueryMessage, type RAGChunk, type RAGEnrichOptions, type RAGEnricher, type RAGEnricherConfig, type RAGStorage, RacePattern, type RateLimitGuardrail, type RedactionStyle, ReflectIterationRecord, ReflectPattern, ReflectionEvaluation, RelaxationTier, type RequestMessage, type ResponseMessage, type RetryConfig, RetryExhaustedError, type RoutingConstraint, type RoutingFacts, type RoutingProvider, RunAgentRequirement, RunOptions, RunResult, type RunnerMiddleware, type SSEEvent, type SSETransport, type SSETransportConfig, STRICT_INJECTION_PATTERNS, SchemaValidator, Semaphore, SequentialPattern, type SerializedDagNode, type SerializedGoalNode, type SerializedPattern, type SpanData, type SpawnOnConditionOptions, type SpawnPoolConfig, type StreamChannel, type StreamChannelConfig, type StreamChannelState, type Subscription, SupervisorPattern, type TokenPricing, ToolCallGuardrailData, type TypedAgentMessage, type UpdateMessage, type VPTreeIndexConfig, type WsTransportConfig, aggregateTokens, allReadyStrategy, byAgentName, byInputLength, byPattern, capabilityRoute, collectOutputs, composePatterns, concatResults, connectDevTools, convertToolsForLLM, costEfficientStrategy, createAgentAuditHandlers, createAgentNetwork, createAuditTrail, createBatchQueue, createBidirectionalStream, createBruteForceIndex, createCompliance, createConstraintRouter, createContentFilterGuardrail, createDelegator, createDevToolsServer, createEnhancedPIIGuardrail, createEvalSuite, createInMemoryComplianceStorage, createJSONFileStore, createLengthGuardrail, createMCPAdapter, createMessageBus, createModerationGuardrail, createMultiAgentOrchestrator, createOtelPlugin, createOutputPIIGuardrail, createOutputSchemaGuardrail, createOutputTypeGuardrail, createPIIGuardrail, createPromptInjectionGuardrail, createPubSub, createRAGEnricher, createRateLimitGuardrail, createResponder, createRunner, createSSETransport, createStreamChannel, createToolGuardrail, createUntrustedContentGuardrail, createVPTreeIndex, createWsTransport, dag, debate, derivedConstraint, detectAndRedactPII, detectPII, detectPromptInjection, diffCheckpoints, estimateCost, evalAssert, evalCoherence, evalCost, evalFaithfulness, evalJudge, evalLatency, evalMatch, evalOutputLength, evalRelevance, evalSafety, evalStructure, explainGoal, findAgentsByCapability, forkFromCheckpoint, formatSystemMeta, getCheckpointProgress, getDependencyGraph, getPatternStep, goal, hasPendingApprovals, highestImpactStrategy, isAgentRunning, markUntrustedContent, mcpCallTool, mcpGetPrompt, mcpReadResource, mcpSyncResources, mergeStreams, parallel, parseHttpStatus, parseRetryAfter, patternFromJSON, patternToJSON, patternToMermaid, pickBestResult, pipe, pipeThrough, planGoal, predicateFromIntent, predicateFromIntentRaw, predicateFromIntentWithProvenance, predicateToolSpec, predicateToolSpecAnthropic, predicateToolSpecOpenAI, race, redactPII, reflect, runAgentRequirement, runDebate, sanitizeInjection, selectAgent, sequential, spawnOnCondition, spawnPool, supervisor, toAIContext, validateBaseURL, validateGoal, withBudget, withFallback, withModelSelection, withRetry };