@effect-agent/testing 0.1.0-beta.45 → 0.1.0-beta.47

package/dist/CodeExecutorSubstitute.mjs

@@ -0,0 +1,341 @@
+import { Clock, Duration, Effect, Fiber, Layer, Option, Queue, Schema } from "effect";
+import { CodeExecutionHost, CodeExecutionProtocolError, CodeExecutionResourceUse, CodeExecutionResult, CodeExecutionTimeoutError, CodeExecutor, CodeExecutorUnsupportedError, CodeHostCall, CodeHostCallLimitError, CodeHostCallResult, CodeOutputLimitError, CodeProgramFailedError, CodeSourceError } from "@effect-agent/sandbox/CodeExecutor";
+import { SandboxImplementation } from "@effect-agent/sandbox/Sandbox";
+//#region src/CodeExecutorSubstitute.ts
+/**
+* The deterministic in-process executor substitute (C1 of ADR-0017). It runs
+* the generated program on the host JavaScript engine with best-effort global
+* shadowing only, so it self-identifies as `unisolated` and is never a
+* security boundary (CAP-010, CAP-015). It exists to prove the public
+* `CodeExecutor` contract and to drive deterministic capability tests.
+*/
+const inProcessCodeExecutorImplementation = SandboxImplementation.make({
+	isolation: "unisolated",
+	identity: "in-process-javascript"
+});
+const MAX_LOG_LINES = 4096;
+const MAX_LOG_LINE_CHARACTERS = 16e3;
+const MAX_THROWN_CHARACTERS = 4e3;
+const utf8ByteLength = (value) => new TextEncoder().encode(value).byteLength;
+/**
+* Ambient globals shadowed inside the harness. Shadowing blocks the obvious
+* identifier paths only; a determined program can still escape, which is
+* exactly why this executor reports `unisolated` and the isolated network and
+* CPU enforcement conformance cases run only against isolated adapters.
+*/
+const shadowedGlobals = [
+	"fetch",
+	"process",
+	"require",
+	"module",
+	"exports",
+	"global",
+	"globalThis",
+	"XMLHttpRequest",
+	"WebSocket",
+	"Deno",
+	"Bun"
+];
+var LogLimitSignal = class {
+	observed;
+	constructor(observed) {
+		this.observed = observed;
+	}
+};
+var EvaluationThrew = class {
+	inner;
+	constructor(inner) {
+		this.inner = inner;
+	}
+};
+var NotAFunction = class {
+	actual;
+	constructor(actual) {
+		this.actual = actual;
+	}
+};
+/**
+* Total, defect-free rendering of untrusted values: a hostile Proxy can throw
+* from property access, `toString`, and `Symbol.toPrimitive`, and an expected
+* program failure must never escape the typed channel as a defect while its
+* diagnostics are being serialized.
+*/
+const formatLogValue = (value) => {
+	try {
+		if (typeof value === "string") return value;
+		return JSON.stringify(value) ?? String(value);
+	} catch {
+		try {
+			return String(value);
+		} catch {
+			return "[unprintable value]";
+		}
+	}
+};
+const makeConsole = (capture, limits) => {
+	const write = (...values) => {
+		const joined = values.map(formatLogValue).join(" ");
+		const line = joined.length > MAX_LOG_LINE_CHARACTERS ? `${joined.slice(0, 15999)}…` : joined;
+		const bytes = utf8ByteLength(line);
+		if (capture.lines.length >= MAX_LOG_LINES || capture.bytes + bytes > limits.maxLogBytes) throw new LogLimitSignal(capture.bytes + bytes);
+		capture.lines.push(line);
+		capture.bytes += bytes;
+	};
+	return {
+		debug: write,
+		error: write,
+		info: write,
+		log: write,
+		warn: write
+	};
+};
+const buildNamespaceObject = (namespace, offer) => {
+	const methods = {};
+	for (const method of namespace.methods) methods[method] = (argument) => new Promise((resolve, reject) => {
+		offer({
+			namespace: namespace.name,
+			method,
+			argument,
+			resolve,
+			reject
+		});
+	});
+	return methods;
+};
+const boundedText = (value) => {
+	try {
+		return (value instanceof Error ? `${value.name}: ${value.message}` : formatLogValue(value)).slice(0, MAX_THROWN_CHARACTERS);
+	} catch {
+		return "[unserializable thrown value]";
+	}
+};
+/** Schema decoding of hostile values may itself throw through trap getters. */
+const safeDecodeJson = (value) => {
+	try {
+		return Schema.decodeUnknownOption(Schema.Json)(value);
+	} catch {
+		return Option.none();
+	}
+};
+const boundedThrown = (value) => {
+	const decoded = safeDecodeJson(value);
+	if (Option.isSome(decoded)) try {
+		const encoded = JSON.stringify(decoded.value);
+		if (encoded !== void 0 && encoded.length <= MAX_THROWN_CHARACTERS) return decoded.value;
+	} catch {}
+	return boundedText(value);
+};
+const encodedJsonByteLength = (value) => {
+	try {
+		const encoded = JSON.stringify(value);
+		return encoded === void 0 ? void 0 : utf8ByteLength(encoded);
+	} catch {
+		return;
+	}
+};
+/** Host outcomes are protocol input; a hostile value must not defect mid-decode. */
+const decodeHostOutcome = (value) => {
+	try {
+		return Schema.decodeUnknownOption(CodeHostCallResult)(value);
+	} catch {
+		return Option.none();
+	}
+};
+const validateRequest = (request) => Effect.gen(function* () {
+	if (request.network._tag !== "NetworkDisabled") return yield* CodeExecutorUnsupportedError.make({
+		implementation: inProcessCodeExecutorImplementation,
+		feature: "network",
+		message: "The unisolated in-process executor cannot enforce an egress allowlist; only NetworkDisabled is accepted, and even that is shadowed rather than enforced"
+	});
+	if (request.limits.cpuMillis !== void 0) return yield* CodeExecutorUnsupportedError.make({
+		implementation: inProcessCodeExecutorImplementation,
+		feature: "cpu-limit",
+		message: "The unisolated in-process executor shares the host engine and cannot enforce a CPU limit"
+	});
+	const reservedNames = /* @__PURE__ */ new Set([...shadowedGlobals, "console"]);
+	const seen = /* @__PURE__ */ new Set();
+	for (const namespace of request.namespaces) {
+		if (reservedNames.has(namespace.name) || seen.has(namespace.name)) return yield* CodeExecutorUnsupportedError.make({
+			implementation: inProcessCodeExecutorImplementation,
+			feature: "namespaces",
+			message: `Namespace ${namespace.name} collides with a harness binding or another namespace`
+		});
+		seen.add(namespace.name);
+	}
+	const sourceBytes = utf8ByteLength(request.source);
+	if (sourceBytes > request.limits.maxSourceBytes) return yield* CodeSourceError.make({
+		implementation: inProcessCodeExecutorImplementation,
+		reason: "oversized",
+		message: `Source is ${sourceBytes} bytes; the request allows ${request.limits.maxSourceBytes}`
+	});
+});
+const serveHostCalls = (host, queue, limits, capture, counter) => Effect.gen(function* () {
+	while (true) {
+		const pending = yield* Queue.take(queue);
+		counter.calls += 1;
+		if (counter.calls > limits.maxHostCalls) return yield* CodeHostCallLimitError.make({
+			implementation: inProcessCodeExecutorImplementation,
+			limit: limits.maxHostCalls,
+			logs: [...capture.lines]
+		});
+		const argument = safeDecodeJson(pending.argument);
+		if (Option.isNone(argument)) {
+			pending.reject(/* @__PURE__ */ new TypeError("host call arguments must be JSON values"));
+			continue;
+		}
+		const argumentBytes = encodedJsonByteLength(argument.value);
+		if (argumentBytes === void 0 || argumentBytes > limits.maxHostCallArgumentBytes) return yield* CodeOutputLimitError.make({
+			implementation: inProcessCodeExecutorImplementation,
+			surface: "host-call-argument",
+			limit: limits.maxHostCallArgumentBytes,
+			observed: argumentBytes ?? 0,
+			logs: [...capture.lines]
+		});
+		const rawOutcome = yield* host.call(CodeHostCall.make({
+			namespace: pending.namespace,
+			method: pending.method,
+			argument: argument.value
+		}));
+		const outcome = decodeHostOutcome(rawOutcome);
+		if (Option.isNone(outcome)) return yield* CodeExecutionProtocolError.make({
+			implementation: inProcessCodeExecutorImplementation,
+			message: "The execution host returned a value outside the CodeHostCallResult schema"
+		});
+		if (outcome.value._tag === "CodeHostCallFailure") {
+			pending.reject(outcome.value.error);
+			continue;
+		}
+		const resultBytes = encodedJsonByteLength(outcome.value.value);
+		if (resultBytes === void 0 || resultBytes > limits.maxHostCallResultBytes) return yield* CodeOutputLimitError.make({
+			implementation: inProcessCodeExecutorImplementation,
+			surface: "host-call-result",
+			limit: limits.maxHostCallResultBytes,
+			observed: resultBytes ?? 0,
+			logs: [...capture.lines]
+		});
+		pending.resolve(outcome.value.value);
+	}
+});
+const classifyProgramFailure = (thrown, limits, capture) => {
+	const inner = thrown instanceof EvaluationThrew ? thrown.inner : thrown;
+	if (inner instanceof LogLimitSignal) return CodeOutputLimitError.make({
+		implementation: inProcessCodeExecutorImplementation,
+		surface: "logs",
+		limit: limits.maxLogBytes,
+		observed: inner.observed,
+		logs: [...capture.lines]
+	});
+	if (inner instanceof NotAFunction) return CodeSourceError.make({
+		implementation: inProcessCodeExecutorImplementation,
+		reason: "not-a-function",
+		message: `The source expression evaluated to ${inner.actual}; it must evaluate to one async function`
+	});
+	const reason = thrown instanceof EvaluationThrew || inner instanceof Error ? "threw" : "rejected";
+	return CodeProgramFailedError.make({
+		implementation: inProcessCodeExecutorImplementation,
+		reason,
+		thrown: boundedThrown(inner),
+		message: boundedText(inner),
+		logs: [...capture.lines]
+	});
+};
+const executeInProcess = Effect.fn("InProcessCodeExecutor.execute")(function* (request) {
+	yield* validateRequest(request);
+	const host = yield* CodeExecutionHost;
+	const capture = {
+		lines: [],
+		bytes: 0
+	};
+	const counter = { calls: 0 };
+	const queue = yield* Queue.unbounded();
+	const factory = yield* Effect.try({
+		try: () => new Function(...shadowedGlobals, "console", ...request.namespaces.map((namespace) => namespace.name), `"use strict";\nreturn (\n${request.source}\n);`),
+		catch: (cause) => CodeSourceError.make({
+			implementation: inProcessCodeExecutorImplementation,
+			reason: "invalid",
+			message: boundedText(cause)
+		})
+	});
+	const harnessConsole = makeConsole(capture, request.limits);
+	let issuedHostCalls = 0;
+	const namespaceObjects = request.namespaces.map((namespace) => buildNamespaceObject(namespace, (pending) => {
+		issuedHostCalls += 1;
+		if (issuedHostCalls > request.limits.maxHostCalls + 1) {
+			pending.reject(/* @__PURE__ */ new Error(`host-call limit of ${request.limits.maxHostCalls} exceeded`));
+			return;
+		}
+		Queue.offerUnsafe(queue, pending);
+	}));
+	const server = yield* serveHostCalls(host, queue, request.limits, capture, counter).pipe(Effect.forkScoped);
+	const program = Effect.tryPromise({
+		try: async () => {
+			let candidate;
+			try {
+				candidate = factory(...shadowedGlobals.map(() => void 0), harnessConsole, ...namespaceObjects);
+			} catch (cause) {
+				throw new EvaluationThrew(cause);
+			}
+			if (typeof candidate !== "function") throw new EvaluationThrew(new NotAFunction(typeof candidate));
+			let outcome;
+			try {
+				outcome = candidate();
+			} catch (cause) {
+				throw new EvaluationThrew(cause);
+			}
+			return await Promise.resolve(outcome);
+		},
+		catch: (thrown) => classifyProgramFailure(thrown, request.limits, capture)
+	});
+	const startedAt = yield* Clock.currentTimeMillis;
+	const returned = yield* Effect.raceFirst(program, Fiber.join(server)).pipe(Effect.timeoutOrElse({
+		duration: request.limits.maxWallTime,
+		orElse: () => CodeExecutionTimeoutError.make({
+			implementation: inProcessCodeExecutorImplementation,
+			kind: "wall-clock",
+			maxWallTime: request.limits.maxWallTime,
+			logs: [...capture.lines]
+		})
+	}), Effect.ensuring(Fiber.interrupt(server)));
+	const finishedAt = yield* Clock.currentTimeMillis;
+	if (issuedHostCalls > request.limits.maxHostCalls) return yield* CodeHostCallLimitError.make({
+		implementation: inProcessCodeExecutorImplementation,
+		limit: request.limits.maxHostCalls,
+		logs: [...capture.lines]
+	});
+	const value = yield* Schema.decodeUnknownEffect(Schema.Json)(returned).pipe(Effect.mapError(() => CodeProgramFailedError.make({
+		implementation: inProcessCodeExecutorImplementation,
+		reason: "non-json-result",
+		thrown: null,
+		message: "The program must return a JSON value",
+		logs: [...capture.lines]
+	})));
+	const resultBytes = encodedJsonByteLength(value);
+	if (resultBytes === void 0 || resultBytes > request.limits.maxResultBytes) return yield* CodeOutputLimitError.make({
+		implementation: inProcessCodeExecutorImplementation,
+		surface: "result",
+		limit: request.limits.maxResultBytes,
+		observed: resultBytes ?? 0,
+		logs: [...capture.lines]
+	});
+	return CodeExecutionResult.make({
+		implementation: inProcessCodeExecutorImplementation,
+		value,
+		logs: [...capture.lines],
+		resourceUse: CodeExecutionResourceUse.make({
+			wallTime: Duration.millis(Math.max(0, finishedAt - startedAt)),
+			hostCalls: counter.calls,
+			logBytes: capture.bytes,
+			resultBytes
+		})
+	});
+});
+/**
+* Layer providing the unisolated in-process `CodeExecutor` substitute. The
+* per-pass `CodeExecutionHost` stays in the caller's requirement channel, the
+* same as every real adapter.
+*/
+const inProcessCodeExecutorLayer = Layer.succeed(CodeExecutor)(CodeExecutor.of({ execute: executeInProcess }));
+//#endregion
+export { inProcessCodeExecutorImplementation, inProcessCodeExecutorLayer };
+
+//# sourceMappingURL=CodeExecutorSubstitute.mjs.map

package/dist/CodeExecutorSubstitute.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodeExecutorSubstitute.mjs","names":[],"sources":["../src/CodeExecutorSubstitute.ts"],"sourcesContent":["import {\n  CodeExecutionHost,\n  CodeExecutionProtocolError,\n  CodeExecutionResourceUse,\n  CodeExecutionResult,\n  CodeExecutionTimeoutError,\n  CodeExecutor,\n  type CodeExecutorExecute,\n  CodeExecutorUnsupportedError,\n  CodeHostCall,\n  CodeHostCallLimitError,\n  CodeHostCallResult,\n  CodeOutputLimitError,\n  CodeProgramFailedError,\n  CodeSourceError,\n  type CodeExecutionLimits,\n  type CodeExecutionNamespace,\n  type CodeExecutionRequest,\n} from \"@effect-agent/sandbox/CodeExecutor\";\nimport { SandboxImplementation } from \"@effect-agent/sandbox/Sandbox\";\nimport { Clock, Duration, Effect, Fiber, Layer, Option, Queue, Schema } from \"effect\";\n\n/**\n * The deterministic in-process executor substitute (C1 of ADR-0017). It runs\n * the generated program on the host JavaScript engine with best-effort global\n * shadowing only, so it self-identifies as `unisolated` and is never a\n * security boundary (CAP-010, CAP-015). It exists to prove the public\n * `CodeExecutor` contract and to drive deterministic capability tests.\n */\nexport const inProcessCodeExecutorImplementation = SandboxImplementation.make({\n  isolation: \"unisolated\",\n  identity: \"in-process-javascript\",\n});\n\n// These two caps mirror the wire schema bounds (`BoundedLogs` is at most\n// 4096 lines of at most 16 KiB each): capture must stay inside what\n// `CodeExecutionResult` can carry. A line over the per-line cap is truncated\n// with an explicit `…` marker; exceeding either the byte budget or the line\n// cap fails the pass typed.\nconst MAX_LOG_LINES = 4_096;\nconst MAX_LOG_LINE_CHARACTERS = 16_000;\nconst MAX_THROWN_CHARACTERS = 4_000;\n\nconst utf8ByteLength = (value: string): number => new TextEncoder().encode(value).byteLength;\n\n/**\n * Ambient globals shadowed inside the harness. Shadowing blocks the obvious\n * identifier paths only; a determined program can still escape, which is\n * exactly why this executor reports `unisolated` and the isolated network and\n * CPU enforcement conformance cases run only against isolated adapters.\n */\nconst shadowedGlobals = [\n  \"fetch\",\n  \"process\",\n  \"require\",\n  \"module\",\n  \"exports\",\n  \"global\",\n  \"globalThis\",\n  \"XMLHttpRequest\",\n  \"WebSocket\",\n  \"Deno\",\n  \"Bun\",\n] as const;\n\nclass LogLimitSignal {\n  constructor(readonly observed: number) {}\n}\n\nclass EvaluationThrew {\n  constructor(readonly inner: unknown) {}\n}\n\nclass NotAFunction {\n  constructor(readonly actual: string) {}\n}\n\ninterface LogCapture {\n  readonly lines: Array<string>;\n  bytes: number;\n}\n\n/**\n * Total, defect-free rendering of untrusted values: a hostile Proxy can throw\n * from property access, `toString`, and `Symbol.toPrimitive`, and an expected\n * program failure must never escape the typed channel as a defect while its\n * diagnostics are being serialized.\n */\nconst formatLogValue = (value: unknown): string => {\n  try {\n    if (typeof value === \"string\") {\n      return value;\n    }\n\n    return JSON.stringify(value) ?? String(value);\n  } catch {\n    try {\n      return String(value);\n    } catch {\n      return \"[unprintable value]\";\n    }\n  }\n};\n\nconst makeConsole = (capture: LogCapture, limits: CodeExecutionLimits) => {\n  const write = (...values: ReadonlyArray<unknown>): void => {\n    const joined = values.map(formatLogValue).join(\" \");\n\n    const line =\n      joined.length > MAX_LOG_LINE_CHARACTERS\n        ? `${joined.slice(0, MAX_LOG_LINE_CHARACTERS - 1)}…`\n        : joined;\n\n    const bytes = utf8ByteLength(line);\n\n    if (capture.lines.length >= MAX_LOG_LINES || capture.bytes + bytes > limits.maxLogBytes) {\n      throw new LogLimitSignal(capture.bytes + bytes);\n    }\n    capture.lines.push(line);\n    capture.bytes += bytes;\n  };\n\n  return { debug: write, error: write, info: write, log: write, warn: write };\n};\n\ninterface PendingHostCall {\n  readonly namespace: string;\n  readonly method: string;\n  readonly argument: unknown;\n  readonly resolve: (value: unknown) => void;\n  readonly reject: (reason: unknown) => void;\n}\n\nconst buildNamespaceObject = (\n  namespace: CodeExecutionNamespace,\n  offer: (pending: PendingHostCall) => void,\n): Record<string, unknown> => {\n  const methods: Record<string, unknown> = {};\n\n  for (const method of namespace.methods) {\n    methods[method] = (argument: unknown) =>\n      new Promise((resolve, reject) => {\n        offer({ namespace: namespace.name, method, argument, resolve, reject });\n      });\n  }\n\n  return methods;\n};\n\nconst boundedText = (value: unknown): string => {\n  try {\n    const text = value instanceof Error ? `${value.name}: ${value.message}` : formatLogValue(value);\n\n    return text.slice(0, MAX_THROWN_CHARACTERS);\n  } catch {\n    return \"[unserializable thrown value]\";\n  }\n};\n\n/** Schema decoding of hostile values may itself throw through trap getters. */\nconst safeDecodeJson = (value: unknown): Option.Option<Schema.Json> => {\n  try {\n    return Schema.decodeUnknownOption(Schema.Json)(value);\n  } catch {\n    return Option.none();\n  }\n};\n\nconst boundedThrown = (value: unknown): Schema.Json => {\n  const decoded = safeDecodeJson(value);\n\n  if (Option.isSome(decoded)) {\n    try {\n      const encoded = JSON.stringify(decoded.value);\n\n      if (encoded !== undefined && encoded.length <= MAX_THROWN_CHARACTERS) {\n        return decoded.value;\n      }\n    } catch {\n      // fall through to the bounded string form\n    }\n  }\n\n  return boundedText(value);\n};\n\nconst encodedJsonByteLength = (value: Schema.Json): number | undefined => {\n  try {\n    const encoded = JSON.stringify(value);\n\n    return encoded === undefined ? undefined : utf8ByteLength(encoded);\n  } catch {\n    return undefined;\n  }\n};\n\n/** Host outcomes are protocol input; a hostile value must not defect mid-decode. */\nconst decodeHostOutcome = (value: unknown): Option.Option<CodeHostCallResult> => {\n  try {\n    return Schema.decodeUnknownOption(CodeHostCallResult)(value);\n  } catch {\n    return Option.none();\n  }\n};\n\nconst validateRequest = (\n  request: CodeExecutionRequest,\n): Effect.Effect<void, CodeExecutorUnsupportedError | CodeSourceError> =>\n  Effect.gen(function* () {\n    if (request.network._tag !== \"NetworkDisabled\") {\n      return yield* CodeExecutorUnsupportedError.make({\n        implementation: inProcessCodeExecutorImplementation,\n        feature: \"network\",\n        message:\n          \"The unisolated in-process executor cannot enforce an egress allowlist; only NetworkDisabled is accepted, and even that is shadowed rather than enforced\",\n      });\n    }\n    if (request.limits.cpuMillis !== undefined) {\n      return yield* CodeExecutorUnsupportedError.make({\n        implementation: inProcessCodeExecutorImplementation,\n        feature: \"cpu-limit\",\n        message:\n          \"The unisolated in-process executor shares the host engine and cannot enforce a CPU limit\",\n      });\n    }\n    const reservedNames = new Set<string>([...shadowedGlobals, \"console\"]);\n    const seen = new Set<string>();\n\n    for (const namespace of request.namespaces) {\n      if (reservedNames.has(namespace.name) || seen.has(namespace.name)) {\n        return yield* CodeExecutorUnsupportedError.make({\n          implementation: inProcessCodeExecutorImplementation,\n          feature: \"namespaces\",\n          message: `Namespace ${namespace.name} collides with a harness binding or another namespace`,\n        });\n      }\n      seen.add(namespace.name);\n    }\n    const sourceBytes = utf8ByteLength(request.source);\n\n    if (sourceBytes > request.limits.maxSourceBytes) {\n      return yield* CodeSourceError.make({\n        implementation: inProcessCodeExecutorImplementation,\n        reason: \"oversized\",\n        message: `Source is ${sourceBytes} bytes; the request allows ${request.limits.maxSourceBytes}`,\n      });\n    }\n  });\n\nconst serveHostCalls = (\n  host: CodeExecutionHost[\"Service\"],\n  queue: Queue.Queue<PendingHostCall>,\n  limits: CodeExecutionLimits,\n  capture: LogCapture,\n  counter: { calls: number },\n): Effect.Effect<\n  never,\n  CodeHostCallLimitError | CodeOutputLimitError | CodeExecutionProtocolError\n> =>\n  Effect.gen(function* () {\n    while (true) {\n      const pending = yield* Queue.take(queue);\n\n      counter.calls += 1;\n      if (counter.calls > limits.maxHostCalls) {\n        return yield* CodeHostCallLimitError.make({\n          implementation: inProcessCodeExecutorImplementation,\n          limit: limits.maxHostCalls,\n          logs: [...capture.lines],\n        });\n      }\n      const argument = safeDecodeJson(pending.argument);\n\n      if (Option.isNone(argument)) {\n        pending.reject(new TypeError(\"host call arguments must be JSON values\"));\n        continue;\n      }\n      const argumentBytes = encodedJsonByteLength(argument.value);\n\n      if (argumentBytes === undefined || argumentBytes > limits.maxHostCallArgumentBytes) {\n        return yield* CodeOutputLimitError.make({\n          implementation: inProcessCodeExecutorImplementation,\n          surface: \"host-call-argument\",\n          limit: limits.maxHostCallArgumentBytes,\n          observed: argumentBytes ?? 0,\n          logs: [...capture.lines],\n        });\n      }\n\n      const rawOutcome = yield* host.call(\n        CodeHostCall.make({\n          namespace: pending.namespace,\n          method: pending.method,\n          argument: argument.value,\n        }),\n      );\n\n      const outcome = decodeHostOutcome(rawOutcome);\n\n      if (Option.isNone(outcome)) {\n        return yield* CodeExecutionProtocolError.make({\n          implementation: inProcessCodeExecutorImplementation,\n          message: \"The execution host returned a value outside the CodeHostCallResult schema\",\n        });\n      }\n      if (outcome.value._tag === \"CodeHostCallFailure\") {\n        pending.reject(outcome.value.error);\n        continue;\n      }\n      const resultBytes = encodedJsonByteLength(outcome.value.value);\n\n      if (resultBytes === undefined || resultBytes > limits.maxHostCallResultBytes) {\n        return yield* CodeOutputLimitError.make({\n          implementation: inProcessCodeExecutorImplementation,\n          surface: \"host-call-result\",\n          limit: limits.maxHostCallResultBytes,\n          observed: resultBytes ?? 0,\n          logs: [...capture.lines],\n        });\n      }\n      pending.resolve(outcome.value.value);\n    }\n  });\n\nconst classifyProgramFailure = (\n  thrown: unknown,\n  limits: CodeExecutionLimits,\n  capture: LogCapture,\n): CodeOutputLimitError | CodeSourceError | CodeProgramFailedError => {\n  const inner = thrown instanceof EvaluationThrew ? thrown.inner : thrown;\n\n  if (inner instanceof LogLimitSignal) {\n    return CodeOutputLimitError.make({\n      implementation: inProcessCodeExecutorImplementation,\n      surface: \"logs\",\n      limit: limits.maxLogBytes,\n      observed: inner.observed,\n      logs: [...capture.lines],\n    });\n  }\n  if (inner instanceof NotAFunction) {\n    return CodeSourceError.make({\n      implementation: inProcessCodeExecutorImplementation,\n      reason: \"not-a-function\",\n      message: `The source expression evaluated to ${inner.actual}; it must evaluate to one async function`,\n    });\n  }\n  // An async function converts a body-level `throw` into a rejection, so the\n  // split is by value shape: exception-like values read as `threw`, plain\n  // rejection values (an uncaught host failure envelope) read as `rejected`.\n  const reason = thrown instanceof EvaluationThrew || inner instanceof Error ? \"threw\" : \"rejected\";\n\n  return CodeProgramFailedError.make({\n    implementation: inProcessCodeExecutorImplementation,\n    reason,\n    thrown: boundedThrown(inner),\n    message: boundedText(inner),\n    logs: [...capture.lines],\n  });\n};\n\nconst executeInProcess: CodeExecutorExecute = Effect.fn(\"InProcessCodeExecutor.execute\")(\n  function* (request) {\n    yield* validateRequest(request);\n    const host = yield* CodeExecutionHost;\n    const capture: LogCapture = { lines: [], bytes: 0 };\n    const counter = { calls: 0 };\n    const queue = yield* Queue.unbounded<PendingHostCall>();\n\n    const factory = yield* Effect.try({\n      try: () =>\n        // This substitute intentionally evaluates authored test programs in-process and reports\n        // an `unisolated` posture. Real adapters own the security boundary and never use this path.\n        // oxlint-disable-next-line typescript/no-implied-eval\n        new Function(\n          ...shadowedGlobals,\n          \"console\",\n          ...request.namespaces.map((namespace) => namespace.name),\n          `\"use strict\";\\nreturn (\\n${request.source}\\n);`,\n        ),\n      catch: (cause) =>\n        CodeSourceError.make({\n          implementation: inProcessCodeExecutorImplementation,\n          reason: \"invalid\",\n          message: boundedText(cause),\n        }),\n    });\n\n    const harnessConsole = makeConsole(capture, request.limits);\n    // Admission is enforced at call creation, not only at the single-consumer\n    // dequeue: a burst of unawaited calls can enqueue at most one entry past\n    // the cap (the entry the server fails the pass on); everything beyond is\n    // rejected synchronously, so the queue stays bounded against hostile\n    // programs.\n    let issuedHostCalls = 0;\n\n    const namespaceObjects = request.namespaces.map((namespace) =>\n      buildNamespaceObject(namespace, (pending) => {\n        issuedHostCalls += 1;\n        if (issuedHostCalls > request.limits.maxHostCalls + 1) {\n          pending.reject(new Error(`host-call limit of ${request.limits.maxHostCalls} exceeded`));\n\n          return;\n        }\n        Queue.offerUnsafe(queue, pending);\n      }),\n    );\n\n    const server = yield* serveHostCalls(host, queue, request.limits, capture, counter).pipe(\n      Effect.forkScoped,\n    );\n\n    const program = Effect.tryPromise({\n      try: async () => {\n        let candidate: unknown;\n\n        try {\n          candidate = factory(\n            ...shadowedGlobals.map(() => undefined),\n            harnessConsole,\n            ...namespaceObjects,\n          );\n        } catch (cause) {\n          throw new EvaluationThrew(cause);\n        }\n        if (typeof candidate !== \"function\") {\n          throw new EvaluationThrew(new NotAFunction(typeof candidate));\n        }\n        let outcome: unknown;\n\n        try {\n          outcome = candidate();\n        } catch (cause) {\n          throw new EvaluationThrew(cause);\n        }\n\n        return await Promise.resolve(outcome);\n      },\n      catch: (thrown) => classifyProgramFailure(thrown, request.limits, capture),\n    });\n\n    const startedAt = yield* Clock.currentTimeMillis;\n\n    // The wall-clock deadline interrupts only at asynchronous suspension\n    // points: a synchronous runaway shares the host thread and cannot be\n    // stopped in-process — exactly why the platform CPU enforcement cases\n    // belong to isolated adapters only (testing spec §8.1). The server fiber\n    // is interrupted when the pass settles so no host call outlives the\n    // program that issued it.\n    const returned = yield* Effect.raceFirst(program, Fiber.join(server)).pipe(\n      Effect.timeoutOrElse({\n        duration: request.limits.maxWallTime,\n        orElse: () =>\n          CodeExecutionTimeoutError.make({\n            implementation: inProcessCodeExecutorImplementation,\n            kind: \"wall-clock\",\n            maxWallTime: request.limits.maxWallTime,\n            logs: [...capture.lines],\n          }),\n      }),\n      Effect.ensuring(Fiber.interrupt(server)),\n    );\n\n    const finishedAt = yield* Clock.currentTimeMillis;\n\n    // An unawaited burst can outrun the server: the program may return before\n    // the over-limit entry is dequeued, so the admission counter is the\n    // authority — a pass that ISSUED more calls than the cap fails even when\n    // its promise settled first.\n    if (issuedHostCalls > request.limits.maxHostCalls) {\n      return yield* CodeHostCallLimitError.make({\n        implementation: inProcessCodeExecutorImplementation,\n        limit: request.limits.maxHostCalls,\n        logs: [...capture.lines],\n      });\n    }\n\n    const value = yield* Schema.decodeUnknownEffect(Schema.Json)(returned).pipe(\n      Effect.mapError(() =>\n        CodeProgramFailedError.make({\n          implementation: inProcessCodeExecutorImplementation,\n          reason: \"non-json-result\",\n          thrown: null,\n          message: \"The program must return a JSON value\",\n          logs: [...capture.lines],\n        }),\n      ),\n    );\n\n    const resultBytes = encodedJsonByteLength(value);\n\n    if (resultBytes === undefined || resultBytes > request.limits.maxResultBytes) {\n      return yield* CodeOutputLimitError.make({\n        implementation: inProcessCodeExecutorImplementation,\n        surface: \"result\",\n        limit: request.limits.maxResultBytes,\n        observed: resultBytes ?? 0,\n        logs: [...capture.lines],\n      });\n    }\n\n    return CodeExecutionResult.make({\n      implementation: inProcessCodeExecutorImplementation,\n      value,\n      logs: [...capture.lines],\n      resourceUse: CodeExecutionResourceUse.make({\n        wallTime: Duration.millis(Math.max(0, finishedAt - startedAt)),\n        hostCalls: counter.calls,\n        logBytes: capture.bytes,\n        resultBytes,\n      }),\n    });\n  },\n);\n\n/**\n * Layer providing the unisolated in-process `CodeExecutor` substitute. The\n * per-pass `CodeExecutionHost` stays in the caller's requirement channel, the\n * same as every real adapter.\n */\nexport const inProcessCodeExecutorLayer: Layer.Layer<CodeExecutor> = Layer.succeed(CodeExecutor)(\n  CodeExecutor.of({ execute: executeInProcess }),\n);\n"],"mappings":";;;;;;;;;;;AA6BA,MAAa,sCAAsC,sBAAsB,KAAK;CAC5E,WAAW;CACX,UAAU;AACZ,CAAC;AAOD,MAAM,gBAAgB;AACtB,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAE9B,MAAM,kBAAkB,UAA0B,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC;;;;;;;AAQlF,MAAM,kBAAkB;CACtB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,IAAM,iBAAN,MAAqB;CACE;CAArB,YAAY,UAA2B;EAAlB,KAAA,WAAA;CAAmB;AAC1C;AAEA,IAAM,kBAAN,MAAsB;CACC;CAArB,YAAY,OAAyB;EAAhB,KAAA,QAAA;CAAiB;AACxC;AAEA,IAAM,eAAN,MAAmB;CACI;CAArB,YAAY,QAAyB;EAAhB,KAAA,SAAA;CAAiB;AACxC;;;;;;;AAaA,MAAM,kBAAkB,UAA2B;CACjD,IAAI;EACF,IAAI,OAAO,UAAU,UACnB,OAAO;EAGT,OAAO,KAAK,UAAU,KAAK,KAAK,OAAO,KAAK;CAC9C,QAAQ;EACN,IAAI;GACF,OAAO,OAAO,KAAK;EACrB,QAAQ;GACN,OAAO;EACT;CACF;AACF;AAEA,MAAM,eAAe,SAAqB,WAAgC;CACxE,MAAM,SAAS,GAAG,WAAyC;EACzD,MAAM,SAAS,OAAO,IAAI,cAAc,CAAC,CAAC,KAAK,GAAG;EAElD,MAAM,OACJ,OAAO,SAAS,0BACZ,GAAG,OAAO,MAAM,GAAG,KAA2B,EAAE,KAChD;EAEN,MAAM,QAAQ,eAAe,IAAI;EAEjC,IAAI,QAAQ,MAAM,UAAU,iBAAiB,QAAQ,QAAQ,QAAQ,OAAO,aAC1E,MAAM,IAAI,eAAe,QAAQ,QAAQ,KAAK;EAEhD,QAAQ,MAAM,KAAK,IAAI;EACvB,QAAQ,SAAS;CACnB;CAEA,OAAO;EAAE,OAAO;EAAO,OAAO;EAAO,MAAM;EAAO,KAAK;EAAO,MAAM;CAAM;AAC5E;AAUA,MAAM,wBACJ,WACA,UAC4B;CAC5B,MAAM,UAAmC,CAAC;CAE1C,KAAK,MAAM,UAAU,UAAU,SAC7B,QAAQ,WAAW,aACjB,IAAI,SAAS,SAAS,WAAW;EAC/B,MAAM;GAAE,WAAW,UAAU;GAAM;GAAQ;GAAU;GAAS;EAAO,CAAC;CACxE,CAAC;CAGL,OAAO;AACT;AAEA,MAAM,eAAe,UAA2B;CAC9C,IAAI;EAGF,QAFa,iBAAiB,QAAQ,GAAG,MAAM,KAAK,IAAI,MAAM,YAAY,eAAe,KAAK,EAAA,CAElF,MAAM,GAAG,qBAAqB;CAC5C,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,MAAM,kBAAkB,UAA+C;CACrE,IAAI;EACF,OAAO,OAAO,oBAAoB,OAAO,IAAI,CAAC,CAAC,KAAK;CACtD,QAAQ;EACN,OAAO,OAAO,KAAK;CACrB;AACF;AAEA,MAAM,iBAAiB,UAAgC;CACrD,MAAM,UAAU,eAAe,KAAK;CAEpC,IAAI,OAAO,OAAO,OAAO,GACvB,IAAI;EACF,MAAM,UAAU,KAAK,UAAU,QAAQ,KAAK;EAE5C,IAAI,YAAY,KAAA,KAAa,QAAQ,UAAU,uBAC7C,OAAO,QAAQ;CAEnB,QAAQ,CAER;CAGF,OAAO,YAAY,KAAK;AAC1B;AAEA,MAAM,yBAAyB,UAA2C;CACxE,IAAI;EACF,MAAM,UAAU,KAAK,UAAU,KAAK;EAEpC,OAAO,YAAY,KAAA,IAAY,KAAA,IAAY,eAAe,OAAO;CACnE,QAAQ;EACN;CACF;AACF;;AAGA,MAAM,qBAAqB,UAAsD;CAC/E,IAAI;EACF,OAAO,OAAO,oBAAoB,kBAAkB,CAAC,CAAC,KAAK;CAC7D,QAAQ;EACN,OAAO,OAAO,KAAK;CACrB;AACF;AAEA,MAAM,mBACJ,YAEA,OAAO,IAAI,aAAa;CACtB,IAAI,QAAQ,QAAQ,SAAS,mBAC3B,OAAO,OAAO,6BAA6B,KAAK;EAC9C,gBAAgB;EAChB,SAAS;EACT,SACE;CACJ,CAAC;CAEH,IAAI,QAAQ,OAAO,cAAc,KAAA,GAC/B,OAAO,OAAO,6BAA6B,KAAK;EAC9C,gBAAgB;EAChB,SAAS;EACT,SACE;CACJ,CAAC;CAEH,MAAM,gCAAgB,IAAI,IAAY,CAAC,GAAG,iBAAiB,SAAS,CAAC;CACrE,MAAM,uBAAO,IAAI,IAAY;CAE7B,KAAK,MAAM,aAAa,QAAQ,YAAY;EAC1C,IAAI,cAAc,IAAI,UAAU,IAAI,KAAK,KAAK,IAAI,UAAU,IAAI,GAC9D,OAAO,OAAO,6BAA6B,KAAK;GAC9C,gBAAgB;GAChB,SAAS;GACT,SAAS,aAAa,UAAU,KAAK;EACvC,CAAC;EAEH,KAAK,IAAI,UAAU,IAAI;CACzB;CACA,MAAM,cAAc,eAAe,QAAQ,MAAM;CAEjD,IAAI,cAAc,QAAQ,OAAO,gBAC/B,OAAO,OAAO,gBAAgB,KAAK;EACjC,gBAAgB;EAChB,QAAQ;EACR,SAAS,aAAa,YAAY,6BAA6B,QAAQ,OAAO;CAChF,CAAC;AAEL,CAAC;AAEH,MAAM,kBACJ,MACA,OACA,QACA,SACA,YAKA,OAAO,IAAI,aAAa;CACtB,OAAO,MAAM;EACX,MAAM,UAAU,OAAO,MAAM,KAAK,KAAK;EAEvC,QAAQ,SAAS;EACjB,IAAI,QAAQ,QAAQ,OAAO,cACzB,OAAO,OAAO,uBAAuB,KAAK;GACxC,gBAAgB;GAChB,OAAO,OAAO;GACd,MAAM,CAAC,GAAG,QAAQ,KAAK;EACzB,CAAC;EAEH,MAAM,WAAW,eAAe,QAAQ,QAAQ;EAEhD,IAAI,OAAO,OAAO,QAAQ,GAAG;GAC3B,QAAQ,uBAAO,IAAI,UAAU,yCAAyC,CAAC;GACvE;EACF;EACA,MAAM,gBAAgB,sBAAsB,SAAS,KAAK;EAE1D,IAAI,kBAAkB,KAAA,KAAa,gBAAgB,OAAO,0BACxD,OAAO,OAAO,qBAAqB,KAAK;GACtC,gBAAgB;GAChB,SAAS;GACT,OAAO,OAAO;GACd,UAAU,iBAAiB;GAC3B,MAAM,CAAC,GAAG,QAAQ,KAAK;EACzB,CAAC;EAGH,MAAM,aAAa,OAAO,KAAK,KAC7B,aAAa,KAAK;GAChB,WAAW,QAAQ;GACnB,QAAQ,QAAQ;GAChB,UAAU,SAAS;EACrB,CAAC,CACH;EAEA,MAAM,UAAU,kBAAkB,UAAU;EAE5C,IAAI,OAAO,OAAO,OAAO,GACvB,OAAO,OAAO,2BAA2B,KAAK;GAC5C,gBAAgB;GAChB,SAAS;EACX,CAAC;EAEH,IAAI,QAAQ,MAAM,SAAS,uBAAuB;GAChD,QAAQ,OAAO,QAAQ,MAAM,KAAK;GAClC;EACF;EACA,MAAM,cAAc,sBAAsB,QAAQ,MAAM,KAAK;EAE7D,IAAI,gBAAgB,KAAA,KAAa,cAAc,OAAO,wBACpD,OAAO,OAAO,qBAAqB,KAAK;GACtC,gBAAgB;GAChB,SAAS;GACT,OAAO,OAAO;GACd,UAAU,eAAe;GACzB,MAAM,CAAC,GAAG,QAAQ,KAAK;EACzB,CAAC;EAEH,QAAQ,QAAQ,QAAQ,MAAM,KAAK;CACrC;AACF,CAAC;AAEH,MAAM,0BACJ,QACA,QACA,YACoE;CACpE,MAAM,QAAQ,kBAAkB,kBAAkB,OAAO,QAAQ;CAEjE,IAAI,iBAAiB,gBACnB,OAAO,qBAAqB,KAAK;EAC/B,gBAAgB;EAChB,SAAS;EACT,OAAO,OAAO;EACd,UAAU,MAAM;EAChB,MAAM,CAAC,GAAG,QAAQ,KAAK;CACzB,CAAC;CAEH,IAAI,iBAAiB,cACnB,OAAO,gBAAgB,KAAK;EAC1B,gBAAgB;EAChB,QAAQ;EACR,SAAS,sCAAsC,MAAM,OAAO;CAC9D,CAAC;CAKH,MAAM,SAAS,kBAAkB,mBAAmB,iBAAiB,QAAQ,UAAU;CAEvF,OAAO,uBAAuB,KAAK;EACjC,gBAAgB;EAChB;EACA,QAAQ,cAAc,KAAK;EAC3B,SAAS,YAAY,KAAK;EAC1B,MAAM,CAAC,GAAG,QAAQ,KAAK;CACzB,CAAC;AACH;AAEA,MAAM,mBAAwC,OAAO,GAAG,+BAA+B,CAAC,CACtF,WAAW,SAAS;CAClB,OAAO,gBAAgB,OAAO;CAC9B,MAAM,OAAO,OAAO;CACpB,MAAM,UAAsB;EAAE,OAAO,CAAC;EAAG,OAAO;CAAE;CAClD,MAAM,UAAU,EAAE,OAAO,EAAE;CAC3B,MAAM,QAAQ,OAAO,MAAM,UAA2B;CAEtD,MAAM,UAAU,OAAO,OAAO,IAAI;EAChC,WAIE,IAAI,SACF,GAAG,iBACH,WACA,GAAG,QAAQ,WAAW,KAAK,cAAc,UAAU,IAAI,GACvD,4BAA4B,QAAQ,OAAO,KAC7C;EACF,QAAQ,UACN,gBAAgB,KAAK;GACnB,gBAAgB;GAChB,QAAQ;GACR,SAAS,YAAY,KAAK;EAC5B,CAAC;CACL,CAAC;CAED,MAAM,iBAAiB,YAAY,SAAS,QAAQ,MAAM;CAM1D,IAAI,kBAAkB;CAEtB,MAAM,mBAAmB,QAAQ,WAAW,KAAK,cAC/C,qBAAqB,YAAY,YAAY;EAC3C,mBAAmB;EACnB,IAAI,kBAAkB,QAAQ,OAAO,eAAe,GAAG;GACrD,QAAQ,uBAAO,IAAI,MAAM,sBAAsB,QAAQ,OAAO,aAAa,UAAU,CAAC;GAEtF;EACF;EACA,MAAM,YAAY,OAAO,OAAO;CAClC,CAAC,CACH;CAEA,MAAM,SAAS,OAAO,eAAe,MAAM,OAAO,QAAQ,QAAQ,SAAS,OAAO,CAAC,CAAC,KAClF,OAAO,UACT;CAEA,MAAM,UAAU,OAAO,WAAW;EAChC,KAAK,YAAY;GACf,IAAI;GAEJ,IAAI;IACF,YAAY,QACV,GAAG,gBAAgB,UAAU,KAAA,CAAS,GACtC,gBACA,GAAG,gBACL;GACF,SAAS,OAAO;IACd,MAAM,IAAI,gBAAgB,KAAK;GACjC;GACA,IAAI,OAAO,cAAc,YACvB,MAAM,IAAI,gBAAgB,IAAI,aAAa,OAAO,SAAS,CAAC;GAE9D,IAAI;GAEJ,IAAI;IACF,UAAU,UAAU;GACtB,SAAS,OAAO;IACd,MAAM,IAAI,gBAAgB,KAAK;GACjC;GAEA,OAAO,MAAM,QAAQ,QAAQ,OAAO;EACtC;EACA,QAAQ,WAAW,uBAAuB,QAAQ,QAAQ,QAAQ,OAAO;CAC3E,CAAC;CAED,MAAM,YAAY,OAAO,MAAM;CAQ/B,MAAM,WAAW,OAAO,OAAO,UAAU,SAAS,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KACpE,OAAO,cAAc;EACnB,UAAU,QAAQ,OAAO;EACzB,cACE,0BAA0B,KAAK;GAC7B,gBAAgB;GAChB,MAAM;GACN,aAAa,QAAQ,OAAO;GAC5B,MAAM,CAAC,GAAG,QAAQ,KAAK;EACzB,CAAC;CACL,CAAC,GACD,OAAO,SAAS,MAAM,UAAU,MAAM,CAAC,CACzC;CAEA,MAAM,aAAa,OAAO,MAAM;CAMhC,IAAI,kBAAkB,QAAQ,OAAO,cACnC,OAAO,OAAO,uBAAuB,KAAK;EACxC,gBAAgB;EAChB,OAAO,QAAQ,OAAO;EACtB,MAAM,CAAC,GAAG,QAAQ,KAAK;CACzB,CAAC;CAGH,MAAM,QAAQ,OAAO,OAAO,oBAAoB,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,KACrE,OAAO,eACL,uBAAuB,KAAK;EAC1B,gBAAgB;EAChB,QAAQ;EACR,QAAQ;EACR,SAAS;EACT,MAAM,CAAC,GAAG,QAAQ,KAAK;CACzB,CAAC,CACH,CACF;CAEA,MAAM,cAAc,sBAAsB,KAAK;CAE/C,IAAI,gBAAgB,KAAA,KAAa,cAAc,QAAQ,OAAO,gBAC5D,OAAO,OAAO,qBAAqB,KAAK;EACtC,gBAAgB;EAChB,SAAS;EACT,OAAO,QAAQ,OAAO;EACtB,UAAU,eAAe;EACzB,MAAM,CAAC,GAAG,QAAQ,KAAK;CACzB,CAAC;CAGH,OAAO,oBAAoB,KAAK;EAC9B,gBAAgB;EAChB;EACA,MAAM,CAAC,GAAG,QAAQ,KAAK;EACvB,aAAa,yBAAyB,KAAK;GACzC,UAAU,SAAS,OAAO,KAAK,IAAI,GAAG,aAAa,SAAS,CAAC;GAC7D,WAAW,QAAQ;GACnB,UAAU,QAAQ;GAClB;EACF,CAAC;CACH,CAAC;AACH,CACF;;;;;;AAOA,MAAa,6BAAwD,MAAM,QAAQ,YAAY,CAAC,CAC9F,aAAa,GAAG,EAAE,SAAS,iBAAiB,CAAC,CAC/C"}

package/dist/{docs-researcher.d.mts → DocsResearcher.d.mts}

@@ -1,9 +1,16 @@
 import { Context, Crypto, Effect, Layer, Schema } from "effect";
 import { Tool, Toolkit } from "effect/unstable/ai";
-import { McpConnection, McpConnectionRequest, McpConnector, McpDiscovery, McpServerIdentity, McpToolkitMismatch, RedactionError, Redactor, SubagentPolicy } from "@effect-agent/capabilities";
-import { ThreadId } from "@effect-agent/core";
-import { RuntimeBinding } from "@effect-agent/engine";
-import { DefinitionDigests, DurableSubmitOptions, IdempotencyKey, ResolvedBinding } from "@effect-agent/thread";
+import * as Subagent from "@effect-agent/capabilities/Subagent";
+import { SubagentPolicy } from "@effect-agent/capabilities/Subagent";
+import * as Agent from "@effect-agent/core/Agent";
+import { ThreadId } from "@effect-agent/core/Identifiers";
+import { ResolvedBinding } from "@effect-agent/thread/AgentRegistration";
+import { DurableSubmitOptions } from "@effect-agent/thread/DurableAgentRuntime";
+import { DefinitionDigests } from "@effect-agent/thread/Records";
+import { IdempotencyKey } from "@effect-agent/thread/SubmissionLedger";
+import { RuntimeBinding } from "@effect-agent/engine/AgentRuntime";
+import { McpConnection, McpConnectionRequest, McpConnector, McpDiscovery, McpServerIdentity, McpToolkitMismatch } from "@effect-agent/capabilities/Mcp";
+import { RedactionError, Redactor } from "@effect-agent/capabilities/Redaction";
 //#region src/fixtures/docs-researcher/definition.d.ts
 declare const ResearchDocumentId: Schema.brand<Schema.NonEmptyString, "@effect-agent/testing/docs-researcher/ResearchDocumentId">;
 type ResearchDocumentId = typeof ResearchDocumentId.Type;
@@ -74,7 +81,7 @@ declare class DocumentSummary extends DocumentSummary_base {}
 /** The summary the scripted child writes after fetching the document. */
 declare const documentSummaryFor: (documentId: string) => DocumentSummary;
 declare const encodedDocumentSummary: (documentId: string) => string;
-declare const DocSummarizer: import("@effect-agent/core").Definition<typeof SummaryBrief, typeof DocumentSummary, "Fetch the briefed document with fetch_document exactly once, then return only a JSON document summary. Never copy raw notes or secrets into the summary.", Toolkit.Toolkit<{
+declare const DocSummarizer: Agent.Definition<typeof SummaryBrief, typeof DocumentSummary, "Fetch the briefed document with fetch_document exactly once, then return only a JSON document summary. Never copy raw notes or secrets into the summary.", Toolkit.Toolkit<{
   readonly fetch_document: Tool.Tool<"fetch_document", {
     readonly parameters: typeof DocumentQuery;
     readonly success: typeof ResearchDocument;
@@ -97,7 +104,7 @@ declare const DocumentSummaryFailed_base: Schema.Class<DocumentSummaryFailed, Sc
 declare class DocumentSummaryFailed extends DocumentSummaryFailed_base {}
 /** Finite per-invocation bounds (SUB-009): one fetch per child, two children per Run. */
 declare const documentSummaryPolicy: SubagentPolicy;
-declare const delegateDocumentSummary: import("@effect-agent/capabilities").SubagentDelegation<"delegate_document_summary", typeof SummaryBrief, typeof DocumentSummary, "Fetch the briefed document with fetch_document exactly once, then return only a JSON document summary. Never copy raw notes or secrets into the summary.", {
+declare const delegateDocumentSummary: Subagent.SubagentDelegation<"delegate_document_summary", typeof SummaryBrief, typeof DocumentSummary, "Fetch the briefed document with fetch_document exactly once, then return only a JSON document summary. Never copy raw notes or secrets into the summary.", {
   readonly fetch_document: Tool.Tool<"fetch_document", {
     readonly parameters: typeof DocumentQuery;
     readonly success: typeof ResearchDocument;
@@ -105,7 +112,7 @@ declare const delegateDocumentSummary: import("@effect-agent/capabilities").Suba
     readonly failureMode: "error";
   }, DocumentLibrary>;
 }, typeof SummaryRequest, typeof SummaryFinding, typeof DocumentSummaryFailed, never, never, "error"> & {
-  readonly target: import("@effect-agent/core").Definition<typeof SummaryBrief, typeof DocumentSummary, "Fetch the briefed document with fetch_document exactly once, then return only a JSON document summary. Never copy raw notes or secrets into the summary.", Toolkit.Toolkit<{
+  readonly target: Agent.Definition<typeof SummaryBrief, typeof DocumentSummary, "Fetch the briefed document with fetch_document exactly once, then return only a JSON document summary. Never copy raw notes or secrets into the summary.", Toolkit.Toolkit<{
     readonly fetch_document: Tool.Tool<"fetch_document", {
       readonly parameters: typeof DocumentQuery;
       readonly success: typeof ResearchDocument;
@@ -125,7 +132,7 @@ declare const docsSummarizerDigestStrings: {
   readonly tools: string;
 };
 /** Runtime wiring: the immutable delegation plus one explicit child Binding (S2 declaration). */
-declare const docsSummaryHandlersLayer: <Provider, ModelProvides, ModelRequires>(childBinding: RuntimeBinding<typeof SummaryBrief, typeof DocumentSummary, string, Toolkit.Tools<typeof DocContentToolkit>, Provider, ModelProvides, ModelRequires>) => import("effect/Layer").Layer<Tool.Handler<"delegate_document_summary">, never, import("@effect-agent/capabilities").SubagentLayerRequirements<typeof SummaryBrief, typeof DocumentSummary, string, {
+declare const docsSummaryHandlersLayer: <Provider, ModelProvides, ModelRequires>(childBinding: RuntimeBinding<typeof SummaryBrief, typeof DocumentSummary, string, Toolkit.Tools<typeof DocContentToolkit>, Provider, ModelProvides, ModelRequires>) => import("effect/Layer").Layer<Tool.Handler<"delegate_document_summary">, never, Subagent.SubagentLayerRequirements<typeof SummaryBrief, typeof DocumentSummary, string, {
   readonly fetch_document: Tool.Tool<"fetch_document", {
     readonly parameters: typeof DocumentQuery;
     readonly success: typeof ResearchDocument;
@@ -152,17 +159,17 @@ declare const DocsResearcherToolkit: Toolkit.Toolkit<{
   readonly delegate_document_summary: Tool.Tool<"delegate_document_summary", {
     readonly parameters: typeof SummaryRequest;
     readonly success: typeof SummaryFinding;
-    readonly failure: import("@effect-agent/capabilities").SubagentToolFailure<typeof DocumentSummaryFailed>;
+    readonly failure: Subagent.SubagentToolFailure<typeof DocumentSummaryFailed>;
     readonly failureMode: "error";
-  }, import("@effect-agent/engine").AgentSpawner | import("@effect-agent/core").IdGenerator | import("@effect-agent/engine").RunEventSink | import("@effect-agent/engine").SubagentDurability>;
+  }, import("@effect-agent/engine/AgentRuntime").AgentSpawner | import("@effect-agent/core/IdGenerator").IdGenerator | import("@effect-agent/engine/RunEventSink").RunEventSink | import("@effect-agent/engine/AgentRuntime").SubagentDurability>;
 }>;
-declare const DocsResearcher: import("@effect-agent/core").Definition<typeof ResearchRequest, typeof ResearchDigest, string, Toolkit.Toolkit<{
+declare const DocsResearcher: Agent.Definition<typeof ResearchRequest, typeof ResearchDigest, string, Toolkit.Toolkit<{
   readonly delegate_document_summary: Tool.Tool<"delegate_document_summary", {
     readonly parameters: typeof SummaryRequest;
     readonly success: typeof SummaryFinding;
-    readonly failure: import("@effect-agent/capabilities").SubagentToolFailure<typeof DocumentSummaryFailed>;
+    readonly failure: Subagent.SubagentToolFailure<typeof DocumentSummaryFailed>;
     readonly failureMode: "error";
-  }, import("@effect-agent/engine").AgentSpawner | import("@effect-agent/core").IdGenerator | import("@effect-agent/engine").RunEventSink | import("@effect-agent/engine").SubagentDurability>;
+  }, import("@effect-agent/engine/AgentRuntime").AgentSpawner | import("@effect-agent/core/IdGenerator").IdGenerator | import("@effect-agent/engine/RunEventSink").RunEventSink | import("@effect-agent/engine/AgentRuntime").SubagentDurability>;
 }>, undefined, undefined>;
 /** The default two-document research mission. */
 declare const researchMissionRequest: ResearchRequest;
@@ -221,7 +228,7 @@ interface DocsResearcherHarness {
  * at assembly, not assumed. Content-tool execution then flows through the
  * counting `DocumentLibrary` — the scripted MCP server's content store.
  */
-declare const makeDocsResearcherHarness: (options?: DocsResearcherHarnessOptions) => Effect.Effect<DocsResearcherHarness, import("@effect-agent/capabilities").McpConnectionError | import("@effect-agent/capabilities").McpDiscoveryLimitExceeded | import("@effect-agent/capabilities").McpToolkitMismatch, Crypto.Crypto>;
+declare const makeDocsResearcherHarness: (options?: DocsResearcherHarnessOptions) => Effect.Effect<DocsResearcherHarness, import("@effect-agent/capabilities/Mcp").McpConnectionError | import("@effect-agent/capabilities/Mcp").McpDiscoveryLimitExceeded | import("@effect-agent/capabilities/Mcp").McpToolkitMismatch, Crypto.Crypto>;
 /**
  * The audit-surface preview of one fetched document: the raw document —
  * secret marker and all — passes through the configured structural `Redactor`
@@ -259,5 +266,5 @@ declare const DocsMcpDiscoveryEvidence: Schema.Struct<{
   readonly toolkitSchemaDigest: Schema.String;
 }>;
 //#endregion
-export { BoundedSummary, DocContentToolkit, DocSummarizer, DocsMcpDiscoveryEvidence, DocsResearcher, DocsResearcherHarness, DocsResearcherHarnessOptions, DocsResearcherHarnessRequirements, DocsResearcherToolkit, DocumentLibrary, DocumentQuery, DocumentSummary, DocumentSummaryFailed, DocumentUnavailable, FetchDocument, ResearchDigest, ResearchDocument, ResearchDocumentId, ResearchRequest, SummaryBrief, SummaryFinding, SummaryRequest, assertDiscoveryMatchesAuthoredToolkit, delegateDocumentSummary, docContentToolkitLayer, docsCoordinatorConfidentialMarker, docsCoordinatorDigests, docsDocumentBodySecret, docsMcpConnectorLayer, docsMcpIdentity, docsMcpMismatchedConnectorLayer, docsMcpOversizedConnectorLayer, docsMcpRequest, docsMissionConfidentialMarker, docsResearcherDeploymentId, docsResearcherPrincipal, docsResearcherProducerId, docsResearcherSubmitAgent, docsResearcherSubmitOptions, docsSummarizerDigestStrings, docsSummarizerDigests, docsSummaryHandlersLayer, documentBodyPhrase, documentSummaryFor, documentSummaryPolicy, encodedDocumentSummary, expectedResearchDigest, fetchCallId, makeDocsResearcherHarness, mapSummaryChildFailure, redactedDocumentPreview, researchCorpusDocumentIds, researchDocumentFor, researchDocumentLookup, researchMissionRequest, summarizeCallId };
-//# sourceMappingURL=docs-researcher.d.mts.map
+export { BoundedSummary, DocContentToolkit, DocSummarizer, DocsMcpDiscoveryEvidence, DocsResearcher, type DocsResearcherHarness, type DocsResearcherHarnessOptions, type DocsResearcherHarnessRequirements, DocsResearcherToolkit, DocumentLibrary, DocumentQuery, DocumentSummary, DocumentSummaryFailed, DocumentUnavailable, FetchDocument, ResearchDigest, ResearchDocument, ResearchDocumentId, ResearchRequest, SummaryBrief, SummaryFinding, SummaryRequest, assertDiscoveryMatchesAuthoredToolkit, delegateDocumentSummary, docContentToolkitLayer, docsCoordinatorConfidentialMarker, docsCoordinatorDigests, docsDocumentBodySecret, docsMcpConnectorLayer, docsMcpIdentity, docsMcpMismatchedConnectorLayer, docsMcpOversizedConnectorLayer, docsMcpRequest, docsMissionConfidentialMarker, docsResearcherDeploymentId, docsResearcherPrincipal, docsResearcherProducerId, docsResearcherSubmitAgent, docsResearcherSubmitOptions, docsSummarizerDigestStrings, docsSummarizerDigests, docsSummaryHandlersLayer, documentBodyPhrase, documentSummaryFor, documentSummaryPolicy, encodedDocumentSummary, expectedResearchDigest, fetchCallId, makeDocsResearcherHarness, mapSummaryChildFailure, redactedDocumentPreview, researchCorpusDocumentIds, researchDocumentFor, researchDocumentLookup, researchMissionRequest, summarizeCallId };
+//# sourceMappingURL=DocsResearcher.d.mts.map

package/dist/{docs-researcher.mjs → DocsResearcher.mjs}

@@ -1,9 +1,19 @@
-import { a as DeterministicIdGeneratorLayer } from "./deterministic-layers-CKyYxBhN.mjs";
+import { a as DeterministicIdGeneratorLayer } from "./deterministic-layers-Eka0fMZq.mjs";
 import { Context, Effect, JsonPointer, Layer, Ref, Schema, Stream } from "effect";
 import { LanguageModel, Model, Tool, Toolkit } from "effect/unstable/ai";
-import { McpConnectionRequest, McpConnector, McpServerIdentity, McpToolkitMismatch, Redactor, Subagent, SubagentPolicy, SubagentReservationsMemoryLive, SubagentRuntime, connectMcp } from "@effect-agent/capabilities";
-import { Agent, AgentPolicy } from "@effect-agent/core";
-import { DefinitionDigests, DeploymentId, Digest, DurableWorkerBinding, Principal, ProducerId } from "@effect-agent/thread";
+import * as Subagent from "@effect-agent/capabilities/Subagent";
+import { SubagentPolicy, SubagentRuntime } from "@effect-agent/capabilities/Subagent";
+import { SubagentReservationsMemoryLive } from "@effect-agent/capabilities/SubagentReservations";
+import * as Agent from "@effect-agent/core/Agent";
+import { AgentPolicy } from "@effect-agent/core/AgentPolicy";
+import "@effect-agent/core/Identifiers";
+import { DurableWorkerBinding } from "@effect-agent/thread/AgentRegistration";
+import "@effect-agent/thread/DurableAgentRuntime";
+import { DefinitionDigests, DeploymentId, Digest, ProducerId } from "@effect-agent/thread/Records";
+import { Principal } from "@effect-agent/thread/SubmissionLedger";
+import "@effect-agent/engine/AgentRuntime";
+import { McpConnectionRequest, McpConnector, McpServerIdentity, McpToolkitMismatch, connectMcp } from "@effect-agent/capabilities/Mcp";
+import { Redactor } from "@effect-agent/capabilities/Redaction";
 import * as McpSchema from "effect/unstable/ai/McpSchema";
 //#region src/fixtures/docs-researcher/definition.ts
 const ResearchDocumentId = Schema.NonEmptyString.check(Schema.isMaxLength(64)).pipe(Schema.brand("@effect-agent/testing/docs-researcher/ResearchDocumentId"));
@@ -477,4 +487,4 @@ const redactedDocumentPreview = Effect.fn("DocsResearcher.redactedDocumentPrevie
 //#endregion
 export { BoundedSummary, DocContentToolkit, DocSummarizer, DocsMcpDiscoveryEvidence, DocsResearcher, DocsResearcherToolkit, DocumentLibrary, DocumentQuery, DocumentSummary, DocumentSummaryFailed, DocumentUnavailable, FetchDocument, ResearchDigest, ResearchDocument, ResearchDocumentId, ResearchRequest, SummaryBrief, SummaryFinding, SummaryRequest, assertDiscoveryMatchesAuthoredToolkit, delegateDocumentSummary, docContentToolkitLayer, docsCoordinatorConfidentialMarker, docsCoordinatorDigests, docsDocumentBodySecret, docsMcpConnectorLayer, docsMcpIdentity, docsMcpMismatchedConnectorLayer, docsMcpOversizedConnectorLayer, docsMcpRequest, docsMissionConfidentialMarker, docsResearcherDeploymentId, docsResearcherPrincipal, docsResearcherProducerId, docsResearcherSubmitAgent, docsResearcherSubmitOptions, docsSummarizerDigestStrings, docsSummarizerDigests, docsSummaryHandlersLayer, documentBodyPhrase, documentSummaryFor, documentSummaryPolicy, encodedDocumentSummary, expectedResearchDigest, fetchCallId, makeDocsResearcherHarness, mapSummaryChildFailure, redactedDocumentPreview, researchCorpusDocumentIds, researchDocumentFor, researchDocumentLookup, researchMissionRequest, summarizeCallId };
 
-//# sourceMappingURL=docs-researcher.mjs.map
+//# sourceMappingURL=DocsResearcher.mjs.map