@duckcodeailabs/dql-agent 1.13.4 → 1.14.0

package/dist/agentic/tool-loop.js

@@ -19,13 +19,17 @@
  * compiler owns semantic SQL, certified execution keeps its grain gate, run_sql
  * is read-only). This module only orchestrates the conversation.
  */
+import { assertProviderPayloadAllowed, boundProviderResultRows } from '../provider-egress.js';
 /**
  * Run the agentic tool loop and return the model's final assistant text. Tool
  * observations are surfaced through `options.onToolCall` (same contract the native
  * providers already use), so callers can record evidence regardless of transport.
  */
 export async function runAgenticToolLoop(provider, messages, tools, options = {}) {
-    const usable = tools.filter((tool) => tool.name && tool.description);
+    const resultRowBudgetUsage = new Map();
+    const usable = tools
+        .filter((tool) => tool.name && tool.description)
+        .map((tool) => guardToolOutput(tool, options, resultRowBudgetUsage));
     const policyMessages = options.toolPolicy
         ? [{ role: 'system', content: options.toolPolicy }]
         : [];
@@ -38,6 +42,38 @@ export async function runAgenticToolLoop(provider, messages, tools, options = {}
     }
     return runTextProtocolToolLoop(provider, [...messages, ...policyMessages], usable, options);
 }
+function guardToolOutput(tool, options, resultRowBudgetUsage) {
+    const policy = options.providerPayloadGuard;
+    if (!policy)
+        return tool;
+    return {
+        ...tool,
+        run: async (args) => {
+            const output = await tool.run(args);
+            const maxResultRows = policy.allowedResultRowTools?.[tool.name] ?? 0;
+            const budgetGroup = policy.resultRowBudgetGroupByTool?.[tool.name] ?? tool.name;
+            const cumulativeLimit = policy.cumulativeResultRowBudgets?.[budgetGroup] ?? maxResultRows;
+            const alreadyUsed = resultRowBudgetUsage.get(budgetGroup) ?? 0;
+            const bounded = boundProviderResultRows(output, Math.max(0, cumulativeLimit - alreadyUsed));
+            const shape = assertProviderPayloadAllowed(bounded.value, {
+                allowResultRows: maxResultRows > 0,
+                maxResultRows: Math.max(0, cumulativeLimit - alreadyUsed),
+                purpose: policy.purpose,
+            });
+            const cumulativeResultRowCount = alreadyUsed + shape.resultRowCount;
+            resultRowBudgetUsage.set(budgetGroup, cumulativeResultRowCount);
+            policy.onPayload?.({
+                toolName: tool.name,
+                output: bounded.value,
+                ...shape,
+                cumulativeResultRowCount,
+                budgetGroup,
+                budgetExhausted: bounded.exhausted || cumulativeResultRowCount >= cumulativeLimit,
+            });
+            return bounded.value;
+        },
+    };
+}
 /**
  * Text-protocol ReAct loop for providers without native tool use. The model
  * chooses ONE action per turn: call a tool, or emit the final answer. We parse its
@@ -47,51 +83,83 @@ export async function runAgenticToolLoop(provider, messages, tools, options = {}
 async function runTextProtocolToolLoop(provider, baseMessages, tools, options) {
     const maxToolCalls = Math.max(0, Math.min(30, options.maxToolCalls ?? 8));
     const toolMap = new Map(tools.map((tool) => [tool.name, tool]));
-    const runOptions = { signal: options.signal, reasoningEffort: options.reasoningEffort, model: options.model };
+    // Preserve the complete transport contract across both text-protocol turns.
+    // Reconstructing a small options subset silently dropped the physical-send
+    // observer, dispatch cap, redaction guard, and egress accounting for CLI and
+    // Ollama providers.
+    const dispatchLimit = Math.max(1, Math.min(30, options.maxProviderDispatches ?? 2));
+    let physicalDispatches = 0;
+    const outerObserver = options.onProviderDispatch;
+    const runOptions = {
+        ...options,
+        onProviderDispatch: (event) => {
+            physicalDispatches += 1;
+            if (physicalDispatches > dispatchLimit) {
+                throw Object.assign(new Error(`Provider dispatch budget exhausted after ${dispatchLimit} physical attempt${dispatchLimit === 1 ? '' : 's'}.`), { code: 'PROVIDER_DISPATCH_BUDGET_EXHAUSTED' });
+            }
+            return outerObserver?.(event) ?? event.envelope;
+        },
+    };
     const messages = [
         ...baseMessages,
         { role: 'system', content: buildTextToolContract(tools, maxToolCalls) },
     ];
-    let toolCallsUsed = 0;
     let lastText = '';
-    while (toolCallsUsed < maxToolCalls) {
-        const text = await provider.generate(messages, runOptions);
-        if (text.trim())
-            lastText = text;
-        const call = parseTextToolCall(text);
-        if (!call)
-            return text || lastText; // final answer (or unparseable → treat as final)
-        const tool = toolMap.get(call.name);
-        toolCallsUsed += 1;
-        let output;
-        let isError = false;
-        const startedAt = Date.now();
-        if (!tool) {
-            output = { error: `Unknown tool: ${call.name}. Available: ${tools.map((t) => t.name).join(', ')}` };
-            isError = true;
+    const text = await provider.generate(messages, runOptions);
+    if (text.trim())
+        lastText = text;
+    const call = maxToolCalls > 0 ? parseTextToolCall(text) : undefined;
+    if (!call)
+        return text || lastText;
+    const tool = toolMap.get(call.name);
+    let output;
+    let isError = false;
+    const startedAt = Date.now();
+    if (!tool) {
+        output = { error: `Unknown tool: ${call.name}. Available: ${tools.map((t) => t.name).join(', ')}` };
+        isError = true;
+    }
+    else {
+        try {
+            assertMayStartToolCall(options);
+            output = await tool.run(call.input ?? {});
         }
-        else {
-            try {
-                output = await tool.run(call.input ?? {});
-            }
-            catch (err) {
-                output = { error: err instanceof Error ? err.message : String(err) };
-                isError = true;
-            }
+        catch (err) {
+            output = { error: err instanceof Error ? err.message : String(err) };
+            isError = true;
         }
-        options.onToolCall?.({ name: call.name, input: call.input, output, isError, durationMs: Date.now() - startedAt });
-        messages.push({ role: 'assistant', content: text });
-        messages.push({ role: 'user', content: renderObservation(call.name, output) });
     }
-    // Budget spent: force a final answer with the tool contract omitted so the model
-    // cannot request another tool and the loop is guaranteed to terminate.
+    options.onToolCall?.({ name: call.name, input: call.input, output, isError, durationMs: Date.now() - startedAt });
+    messages.push({ role: 'assistant', content: text });
+    messages.push({ role: 'user', content: renderObservation(call.name, output) });
+    // One provider proposal plus one final generation is the complete ordinary
+    // tool round. The final instruction prohibits a second tool proposal.
     messages.push({
         role: 'user',
         content: 'Tool budget reached — do not call any more tools. Answer now using only the tool results above, as a single ```json fenced object with summary, sql, viz, outputs.',
     });
-    const finalText = await provider.generate(messages, runOptions).catch(() => '');
+    const finalText = await provider.generate(messages, runOptions).catch((error) => {
+        const code = error && typeof error === 'object' && 'code' in error
+            ? error.code
+            : undefined;
+        // Running out of wall clock is not a reason to discard a usable draft: the
+        // model already produced text and a tool observation. Fall back to that
+        // instead of failing the whole run with nothing.
+        if (code === 'RUN_DEADLINE_INSUFFICIENT' && lastText.trim())
+            return '';
+        if (code === 'PROVIDER_DISPATCH_BUDGET_EXHAUSTED')
+            throw error;
+        return '';
+    });
     return finalText.trim() ? finalText : lastText;
 }
+function assertMayStartToolCall(options) {
+    if (options.mayStartToolCall?.() === false) {
+        throw Object.assign(new Error('The run soft target elapsed before this tool branch could start.'), {
+            code: 'RUN_SOFT_TARGET_EXCEEDED',
+        });
+    }
+}
 /**
  * Parse a text-protocol tool call. A tool call is a JSON object with a `tool`
  * (string) field, optionally in a ```json fence. Anything else — prose, or a JSON

package/dist/agentic/tool-loop.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-loop.js","sourceRoot":"","sources":["../../src/agentic/tool-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAiBH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAuB,EACvB,QAAwB,EACxB,KAA4B,EAC5B,UAAkC,EAAE;IAEpC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,cAAc,GAAmB,OAAO,CAAC,UAAU;QACvD,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QACnD,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,sEAAsE;IACtE,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC,iBAAiB,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,uBAAuB,CAAC,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,uBAAuB,CACpC,QAAuB,EACvB,YAA4B,EAC5B,KAA4B,EAC5B,OAA+B;IAE/B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAE9G,MAAM,QAAQ,GAAmB;QAC/B,GAAG,YAAY;QACf,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE;KACxE,CAAC;IAEF,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,OAAO,aAAa,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,QAAQ,GAAG,IAAI,CAAC;QACjC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,IAAI,QAAQ,CAAC,CAAC,iDAAiD;QAErF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,aAAa,IAAI,CAAC,CAAC;QACnB,IAAI,MAAe,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,GAAG,EAAE,KAAK,EAAE,iBAAiB,IAAI,CAAC,IAAI,gBAAgB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACpG,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrE,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QAElH,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,iFAAiF;IACjF,uEAAuE;IACvE,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,oKAAoK;KAC9K,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACjD,CAAC;AAOD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7E,MAAM,MAAM,GAAG,MAAiC,CAAC;QACjD,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;YACxD,CAAC,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;gBACzD,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;oBACnH,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC;QACtF,MAAM,KAAK,GAAG,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAChF,CAAC,CAAE,QAAoC;YACvC,CAAC,CAAC,SAAS,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6FAA6F;AAC7F,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,gCAAgC,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,sDAAsD;IACtD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,MAAe;IACtD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IACD,8EAA8E;IAC9E,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;QAAE,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC;IACrE,OAAO,oBAAoB,IAAI,kBAAkB,IAAI,UAAU,CAAC;AAClE,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA4B,EAAE,YAAoB;IAC/E,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACnC,MAAM,KAAK,GAAI,IAAI,CAAC,WAAoE,EAAE,UAAU,CAAC;QACrG,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO,KAAK,IAAI,CAAC,IAAI,IAAI,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,OAAO;QACL,2GAA2G;QAC3G,EAAE;QACF,uFAAuF;QACvF,2HAA2H;QAC3H,EAAE;QACF,QAAQ;QACR,0BAA0B,YAAY,0DAA0D;QAChG,mJAAmJ;QACnJ,6FAA6F;QAC7F,kEAAkE;QAClE,EAAE;QACF,kBAAkB;QAClB,GAAG,SAAS;KACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"tool-loop.js","sourceRoot":"","sources":["../../src/agentic/tool-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAQH,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAU9F;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAuB,EACvB,QAAwB,EACxB,KAA4B,EAC5B,UAAkC,EAAE;IAEpC,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvD,MAAM,MAAM,GAAG,KAAK;SACjB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC;SAC/C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACvE,MAAM,cAAc,GAAmB,OAAO,CAAC,UAAU;QACvD,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QACnD,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,sEAAsE;IACtE,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC,iBAAiB,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,uBAAuB,CAAC,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,eAAe,CACtB,IAAyB,EACzB,OAA+B,EAC/B,oBAAyC;IAEzC,MAAM,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAC5C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO;QACL,GAAG,IAAI;QACP,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,aAAa,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrE,MAAM,WAAW,GAAG,MAAM,CAAC,0BAA0B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC;YAChF,MAAM,eAAe,GAAG,MAAM,CAAC,0BAA0B,EAAE,CAAC,WAAW,CAAC,IAAI,aAAa,CAAC;YAC1F,MAAM,WAAW,GAAG,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,GAAG,WAAW,CAAC,CAAC,CAAC;YAC5F,MAAM,KAAK,GAAG,4BAA4B,CAAC,OAAO,CAAC,KAAK,EAAE;gBACxD,eAAe,EAAE,aAAa,GAAG,CAAC;gBAClC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,GAAG,WAAW,CAAC;gBACzD,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,MAAM,wBAAwB,GAAG,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC;YACpE,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;YAChE,MAAM,CAAC,SAAS,EAAE,CAAC;gBACjB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,OAAO,CAAC,KAAK;gBACrB,GAAG,KAAK;gBACR,wBAAwB;gBACxB,WAAW;gBACX,eAAe,EAAE,OAAO,CAAC,SAAS,IAAI,wBAAwB,IAAI,eAAe;aAClF,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,KAAK,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,uBAAuB,CACpC,QAAuB,EACvB,YAA4B,EAC5B,KAA4B,EAC5B,OAA+B;IAE/B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,oBAAoB;IACpB,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,qBAAqB,IAAI,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,MAAM,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACjD,MAAM,UAAU,GAA4B;QAC1C,GAAG,OAAO;QACV,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,kBAAkB,IAAI,CAAC,CAAC;YACxB,IAAI,kBAAkB,GAAG,aAAa,EAAE,CAAC;gBACvC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAC3B,4CAA4C,aAAa,oBAAoB,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC/G,EAAE,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,aAAa,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC;QAClD,CAAC;KACF,CAAC;IAEF,MAAM,QAAQ,GAAmB;QAC/B,GAAG,YAAY;QACf,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE;KACxE,CAAC;IAEF,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,EAAE;QAAE,QAAQ,GAAG,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,IAAI,QAAQ,CAAC;IAEnC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAe,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,GAAG,EAAE,KAAK,EAAE,iBAAiB,IAAI,CAAC,IAAI,gBAAgB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACpG,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACrE,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;IAElH,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAE/E,2EAA2E;IAC3E,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,oKAAoK;KAC9K,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACvF,MAAM,IAAI,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK;YAChE,CAAC,CAAE,KAA4B,CAAC,IAAI;YACpC,CAAC,CAAC,SAAS,CAAC;QACd,2EAA2E;QAC3E,wEAAwE;QACxE,iDAAiD;QACjD,IAAI,IAAI,KAAK,2BAA2B,IAAI,QAAQ,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;QACvE,IAAI,IAAI,KAAK,oCAAoC;YAAE,MAAM,KAAK,CAAC;QAC/D,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACjD,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgC;IAC9D,IAAI,OAAO,CAAC,gBAAgB,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;QAC3C,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kEAAkE,CAAC,EAAE;YACjG,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAOD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7E,MAAM,MAAM,GAAG,MAAiC,CAAC;QACjD,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;YACxD,CAAC,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;gBACzD,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;oBACnH,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC;QACtF,MAAM,KAAK,GAAG,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAChF,CAAC,CAAE,QAAoC;YACvC,CAAC,CAAC,SAAS,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6FAA6F;AAC7F,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,gCAAgC,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,sDAAsD;IACtD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,MAAe;IACtD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IACD,8EAA8E;IAC9E,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;QAAE,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC;IACrE,OAAO,oBAAoB,IAAI,kBAAkB,IAAI,UAAU,CAAC;AAClE,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA4B,EAAE,YAAoB;IAC/E,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACnC,MAAM,KAAK,GAAI,IAAI,CAAC,WAAoE,EAAE,UAAU,CAAC;QACrG,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO,KAAK,IAAI,CAAC,IAAI,IAAI,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,OAAO;QACL,2GAA2G;QAC3G,EAAE;QACF,uFAAuF;QACvF,2HAA2H;QAC3H,EAAE;QACF,QAAQ;QACR,0BAA0B,YAAY,0DAA0D;QAChG,mJAAmJ;QACnJ,6FAA6F;QAC7F,kEAAkE;QAClE,EAAE;QACF,kBAAkB;QAClB,GAAG,SAAS;KACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/aggregation-safety-proof.d.ts

@@ -0,0 +1,41 @@
+import { type AggregationSafetyProofV1, type MetricCapabilityContract, type ResolvedRelationshipProofV1 } from '@duckcodeailabs/dql-core';
+import type { LocalContextPack } from './metadata/catalog.js';
+import type { SemanticProofAuthorityV1 } from './semantic-proof-authority.js';
+/**
+ * Builds aggregation authority exclusively from parser and governed metadata
+ * facts. It intentionally has no warehouse-result input.
+ */
+export declare function buildAggregationSafetyProof(sql: string, contextPack: LocalContextPack | undefined, dialect?: string, planFingerprint?: string): AggregationSafetyProofV1;
+/**
+ * Proves an exact semantic-adapter compilation without pretending that a
+ * derived metric is a stored additive column. A ratio may pass only when the
+ * pinned compiler calculates it from multiple aggregates; SUM(ratio_output)
+ * remains a blocked non-additive rollup.
+ */
+export declare function buildSemanticCompilationAggregationSafetyProof(input: {
+    sql: string;
+    capability: MetricCapabilityContract;
+    /**
+     * Compiler-owned metric expression rendered from the immutable semantic
+     * snapshot before target SQL execution. The proof compares parser-owned
+     * expression trees; prose, warehouse success, or a matching alias is never
+     * accepted as authority.
+     */
+    compilerMetricExpressionSql?: string;
+    compilerMetricId?: string;
+    compilerMeasureIds?: string[];
+    compilerRelation?: string;
+    compilerRelationAliases?: string[];
+    compilerAuthorityIssueCodes?: string[];
+    relationshipProofs?: ResolvedRelationshipProofV1[];
+    executionId?: string;
+    snapshotId?: string;
+    capabilityFingerprint?: string;
+    route?: 'semantic';
+    adapterId?: string;
+    semanticAuthority?: SemanticProofAuthorityV1;
+    contextPack?: LocalContextPack;
+    dialect?: string;
+    planFingerprint: string;
+}): AggregationSafetyProofV1;
+//# sourceMappingURL=aggregation-safety-proof.d.ts.map

package/dist/aggregation-safety-proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregation-safety-proof.d.ts","sourceRoot":"","sources":["../src/aggregation-safety-proof.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,gBAAgB,EAAkB,MAAM,uBAAuB,CAAC;AAG9E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAE9E;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,gBAAgB,GAAG,SAAS,EACzC,OAAO,SAAW,EAClB,eAAe,CAAC,EAAE,MAAM,GACvB,wBAAwB,CAmG1B;AAED;;;;;GAKG;AACH,wBAAgB,8CAA8C,CAAC,KAAK,EAAE;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,wBAAwB,CAAC;IACrC;;;;;OAKG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAC;IACvC,kBAAkB,CAAC,EAAE,2BAA2B,EAAE,CAAC;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IAC7C,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,wBAAwB,CAmH3B"}