@fabric-harness/sdk 2.7.0 → 3.0.0

package/README.md

@@ -15,9 +15,9 @@ pnpm add @fabric-harness/sdk
 ### Minimal — bare import, headless defaults (8 lines)
 
 ```ts
-import { agent } from '@fabric-harness/sdk';
+import { defineAgent } from '@fabric-harness/sdk';
 
-export default agent<{ message: string }>({
+export default defineAgent<{ message: string }>({
   name: 'echo',
   triggers: { webhook: true },
   run: async ({ init, input }) => {
@@ -32,9 +32,9 @@ export default agent<{ message: string }>({
 ### With typed I/O + capability policy + skills (same import)
 
 ```ts
-import { agent, schema } from '@fabric-harness/sdk';
+import { defineAgent, schema } from '@fabric-harness/sdk';
 
-export default agent({
+export default defineAgent({
   name: 'triage',
   input: schema.object({ issueNumber: schema.number(), title: schema.string() }),
   output: schema.object({ severity: schema.enum(['low','medium','high']), summary: schema.string() }),
@@ -50,7 +50,7 @@ Both forms share the same `init()`, `session.prompt()` / `skill()` / `task()` /
 
 ## One SDK, one import
 
-`@fabric-harness/sdk` is the single import everyone uses. `agent({...})` from the bare import auto-injects headless defaults (`runtime: 'stateless'`, `sandbox: 'virtual'`, `loopRuntime: pi-agent-core`, `compaction: { enabled: true }`) on every `init()` call. Override any of them by passing values to `init()`. Add typed `input`/`output` schemas, `policy`, artifacts, custom stores, telemetry — they're all options on the same `agent({...})`/`init()` shape.
+`@fabric-harness/sdk` is the single import everyone uses. `defineAgent({...})` from the bare import auto-injects headless defaults (`runtime: 'stateless'`, `sandbox: 'virtual'`, `loopRuntime: pi-agent-core`, `compaction: { enabled: true }`) on every `init()` call. Override any of them by passing values to `init()`. Add typed `input`/`output` schemas, `policy`, artifacts, custom stores, telemetry — they're all options on the same `defineAgent({...})`/`init()` shape.
 
 For Temporal-backed durable agents or compliance workloads where no implicit behaviour is wanted, use `@fabric-harness/sdk/strict` — same call shape, no defaults injected.
 
@@ -64,7 +64,7 @@ Runtime (`stateless`, `inline`, or `temporal`) controls persistence and durabili
 - **`session.approval.request({ reason, risk?, timeoutMs? })`** — custom approval gate. Returns `true` on approval; throws `APPROVAL_DENIED` / `APPROVAL_REQUIRED` on denial / timeout.
 - **`ApprovalResponse.grant`** — durable approved responses carry the call/input/principal-bound
   grant; denied responses never do.
-- **`agent({...})`** — single builder. Same call shape from the bare `@fabric-harness/sdk` import and from `@fabric-harness/sdk/strict`; the import you choose controls whether headless defaults are injected at runtime.
+- **`defineAgent({...})`** — single builder. Same call shape from the bare `@fabric-harness/sdk` import and from `@fabric-harness/sdk/strict`; the import you choose controls whether headless defaults are injected at runtime.
 - **`defineCommand`** — bind a privileged CLI (`gh`, `npm`, …) with secrets at the command level, never in model context.
 - **`withFilesystemSources`** / **`session.mount()`** — two ways to mount read-only content into a sandbox; agent's built-in `grep` / `glob` / `read` tools see it as ordinary files.
 - **`runtime: 'inline' | 'stateless' | 'temporal'`** + **`sessionRuntime`** — pick by persistence needs. Pair `runtime: 'temporal'` with `temporalSessionRuntime({...})` from `@fabric-harness/temporal` to route every session call through durable workflows.

package/dist/agent-definition.d.ts

@@ -1,10 +1,10 @@
-import type { AgentInit, FabricContext, JsonObject, PromptOptions, SessionOptions, ShellOptions, ShellResult, Skill, SkillOptions, TaskOptions } from './types.js';
-import type { FabricSession } from './session.js';
-import type { Schema } from './schema.js';
-import type { WebhookSubscriptionDefinition } from './webhook-subscription.js';
-import type { ToolDef } from './tools.js';
-import { type CreatedAgent, type PersistentAgentConfig, type PersistentAgentContext } from './persistent-agent.js';
-import { invoke as invokeJob, type JobInvocationContext } from './job-invoke.js';
+import type { AgentInit, FabricContext, JsonObject, PromptOptions, SessionOptions, ShellOptions, ShellResult, Skill, SkillOptions, TaskOptions } from "./types.js";
+import type { FabricSession } from "./session.js";
+import type { Schema } from "./schema.js";
+import type { WebhookSubscriptionDefinition } from "./webhook-subscription.js";
+import type { ToolDef } from "./tools.js";
+import type { CapabilityPolicy } from "./policy.js";
+import { invoke as invokeJob, type JobInvocationContext } from "./job-invoke.js";
 export interface AgentTriggers {
     webhook?: boolean;
     schedule?: string | string[];
@@ -18,13 +18,17 @@ export interface AgentDefinition<TInput = JsonObject, TOutput = unknown> {
     input?: Schema<TInput>;
     output?: Schema<TOutput>;
     model?: string;
-    target?: 'node' | 'temporal-worker';
+    target?: "node" | "temporal-worker";
     skills?: Skill[];
     tools?: ToolDef[];
     triggers?: AgentTriggers;
-    policy?: import('./policy.js').CapabilityPolicy;
-    costBudget?: import('./cost-budget.js').CostLimit;
-    approvals?: import('./types.js').ApprovalOptions;
+    policy?: import("./policy.js").CapabilityPolicy;
+    costBudget?: import("./cost-budget.js").CostLimit;
+    approvals?: import("./types.js").ApprovalOptions;
+    /** Options applied when the agent lazily initializes its runtime. */
+    init?: AgentInit;
+    /** Ordered wrappers for logging, tracing, authorization, and shared concerns. */
+    middleware?: readonly AgentMiddleware<TInput, TOutput>[];
     /**
      * Webhook subscription definitions. Each subscription gets its own HTTP
      * route (`/agents/<name>/subscriptions/<id>`) on the Node server and wakes the
@@ -32,12 +36,10 @@ export interface AgentDefinition<TInput = JsonObject, TOutput = unknown> {
      * land here — fabric-harness has no opinion on the upstream taxonomy.
      */
     subscriptions?: WebhookSubscriptionDefinition<unknown>[];
-    run: (context: FabricContext<TInput> & {
-        input: TInput;
-    }) => Promise<TOutput> | TOutput;
+    run: (context: AgentRunContext<TInput>) => Promise<TOutput> | TOutput;
 }
-/** Runtime-ready context for finite jobs. The default session is initialized lazily. */
-export interface JobContext<TInput = JsonObject> extends FabricContext<TInput> {
+/** Runtime-ready context for finite agents. The default session is initialized lazily. */
+export interface AgentRunContext<TInput = JsonObject> extends FabricContext<TInput> {
     input: TInput;
     /** Stable server-side run identity, available when admitted through a job runtime. */
     run?: JobInvocationContext;
@@ -49,26 +51,18 @@ export interface JobContext<TInput = JsonObject> extends FabricContext<TInput> {
     /** Admit a child finite job without an HTTP round trip. */
     invoke: typeof invokeJob;
 }
-export type JobMiddleware<TInput = JsonObject, TOutput = unknown> = (context: JobContext<TInput>, next: () => Promise<TOutput>) => Promise<TOutput> | TOutput;
-export interface JobDefinition<TInput = JsonObject, TOutput = unknown> extends Omit<AgentDefinition<TInput, TOutput>, 'run'> {
-    /** Options applied when the job lazily initializes its runtime. */
-    init?: AgentInit;
-    /** Ordered wrappers for logging, tracing, authorization, and shared job concerns. */
-    middleware?: readonly JobMiddleware<TInput, TOutput>[];
-    run: (context: JobContext<TInput>) => Promise<TOutput> | TOutput;
-}
+export type AgentMiddleware<TInput = JsonObject, TOutput = unknown> = {
+    bivarianceHack(context: AgentRunContext<TInput>, next: () => Promise<TOutput>): Promise<TOutput> | TOutput;
+}["bivarianceHack"];
 declare const definitionSymbol: unique symbol;
+type AgentDefinitionMetadata<TInput> = Omit<AgentDefinition<TInput, unknown>, "middleware" | "run"> & {
+    middleware?: readonly AgentMiddleware<TInput, unknown>[];
+    run: (context: AgentRunContext<TInput>) => unknown;
+};
 export type DefinedAgent<TInput = JsonObject, TOutput = unknown> = ((context: FabricContext<TInput>) => Promise<TOutput> | TOutput) & {
-    readonly [definitionSymbol]: AgentDefinition<TInput, TOutput>;
-    readonly __fabricAgent?: AgentDefinition<TInput, TOutput>;
+    readonly [definitionSymbol]: AgentDefinitionMetadata<TInput>;
+    readonly __fabricAgent?: AgentDefinitionMetadata<TInput>;
 };
-/**
- * No-defaults agent builder. Exported as `agent` from
- * `@fabric-harness/sdk/strict`. Every `init()` option must be declared
- * explicitly — useful for Temporal replay determinism and audit/compliance
- * workloads where implicit behaviour is unwelcome.
- */
-export declare function agent<TInput = JsonObject, TOutput = unknown>(definition: AgentDefinition<TInput, TOutput>): DefinedAgent<TInput, TOutput>;
 /**
  * No-defaults finite-agent builder with lazy default-session helpers.
  *
@@ -76,32 +70,14 @@ export declare function agent<TInput = JsonObject, TOutput = unknown>(definition
  * but authors define an agent. Use {@link createAgent} for a persistent,
  * URL-addressable agent whose sessions span multiple submissions.
  */
-export declare function defineAgent<TInput = JsonObject, TOutput = unknown>(definition: JobDefinition<TInput, TOutput>): DefinedAgent<TInput, TOutput>;
-/** @deprecated Persistent definitions should call `createAgent(initializer)` directly. */
-export declare function defineAgent<TEnv = Record<string, string | undefined>>(initialize: (context: PersistentAgentContext<TEnv>) => PersistentAgentConfig | Promise<PersistentAgentConfig>): CreatedAgent<TEnv>;
-/** @deprecated Use {@link defineAgent}. */
-export declare const defineJob: <TInput = JsonObject, TOutput = unknown>(definition: JobDefinition<TInput, TOutput>) => DefinedAgent<TInput, TOutput>;
+export declare function defineAgent<TInput = JsonObject, TOutput = unknown>(definition: AgentDefinition<TInput, TOutput>): DefinedAgent<TInput, TOutput>;
 /** Defaults-injecting finite-agent builder exported from the bare SDK entry point. */
-export declare function defineAgentWithDefaults<TInput = JsonObject, TOutput = unknown>(definition: JobDefinition<TInput, TOutput>): DefinedAgent<TInput, TOutput>;
-/** @deprecated Persistent definitions should call `createAgent(initializer)` directly. */
-export declare function defineAgentWithDefaults<TEnv = Record<string, string | undefined>>(initialize: (context: PersistentAgentContext<TEnv>) => PersistentAgentConfig | Promise<PersistentAgentConfig>): CreatedAgent<TEnv>;
-/** @deprecated Use {@link defineAgentWithDefaults}. */
-export declare const defineJobWithDefaults: <TInput = JsonObject, TOutput = unknown>(definition: JobDefinition<TInput, TOutput>) => DefinedAgent<TInput, TOutput>;
-export declare function getAgentDefinition(value: unknown): AgentDefinition<unknown, unknown> | undefined;
+export declare function defineAgentWithDefaults<TInput = JsonObject, TOutput = unknown>(definition: AgentDefinition<TInput, TOutput>): DefinedAgent<TInput, TOutput>;
 /**
- * Defaults-injecting agent builder. Exported as `agent` from the bare
- * `@fabric-harness/sdk` entry point. Wraps `init()` so the headless
- * defaults are applied unless the caller overrides them:
- *
- * - `runtime: 'stateless'`
- * - `sandbox: 'virtual'`
- * - `loopRuntime: pi-agent-core`
- * - `compaction: { enabled: true }`
- *
- * If `runtime: 'temporal'` is selected from this builder, a one-time
- * `console.warn` is emitted because auto-compaction is non-deterministic
- * across Temporal replay. Use `@fabric-harness/sdk/strict` for Temporal.
+ * Treat a definition policy as a security floor. Invocation policy can add
+ * denials and approval requirements, but cannot replace definition allowlists.
  */
-export declare function agentWithDefaults<TInput = JsonObject, TOutput = unknown>(definition: AgentDefinition<TInput, TOutput>): DefinedAgent<TInput, TOutput>;
+export declare function mergeCapabilityPolicies(definition: CapabilityPolicy | undefined, invocation: CapabilityPolicy | undefined): CapabilityPolicy | undefined;
+export declare function getAgentDefinition(value: unknown): AgentDefinition<unknown, unknown> | undefined;
 export {};
 //# sourceMappingURL=agent-definition.d.ts.map

package/dist/agent-definition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-definition.d.ts","sourceRoot":"","sources":["../src/agent-definition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EACb,UAAU,EACV,aAAa,EACb,cAAc,EACd,YAAY,EACZ,WAAW,EACX,KAAK,EACL,YAAY,EACZ,WAAW,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAE/E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,MAAM,IAAI,SAAS,EACnB,KAAK,oBAAoB,EAC1B,MAAM,iBAAiB,CAAC;AA6BzB,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,GAAG,SAAS,CAAC;CACxD;AAED,MAAM,WAAW,eAAe,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC;IACpC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,aAAa,EAAE,gBAAgB,CAAC;IAChD,UAAU,CAAC,EAAE,OAAO,kBAAkB,EAAE,SAAS,CAAC;IAClD,SAAS,CAAC,EAAE,OAAO,YAAY,EAAE,eAAe,CAAC;IACjD;;;;;OAKG;IACH,aAAa,CAAC,EAAE,6BAA6B,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,GAAG,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACzF;AAED,wFAAwF;AACxF,MAAM,WAAW,UAAU,CAAC,MAAM,GAAG,UAAU,CAAE,SAAQ,aAAa,CAAC,MAAM,CAAC;IAC5E,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,GAAG,CAAC,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACvE,MAAM,CAAC,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3F,KAAK,CAAC,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzF,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,2DAA2D;IAC3D,MAAM,EAAE,OAAO,SAAS,CAAC;CAC1B;AAED,MAAM,MAAM,aAAa,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO,IAAI,CAClE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,EAC3B,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,KACzB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEhC,MAAM,WAAW,aAAa,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO,CACnE,SAAQ,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC;IACrD,mEAAmE;IACnE,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,qFAAqF;IACrF,UAAU,CAAC,EAAE,SAAS,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACvD,GAAG,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAClE;AAED,QAAA,MAAM,gBAAgB,eAAgD,CAAC;AAEvE,MAAM,MAAM,YAAY,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG;IACpI,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9D,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3D,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAgCzI;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO,EAChE,UAAU,EAAE,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,GACzC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACjC,0FAA0F;AAC1F,wBAAgB,WAAW,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACnE,UAAU,EAAE,CACV,OAAO,EAAE,sBAAsB,CAAC,IAAI,CAAC,KAClC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,GAC1D,YAAY,CAAC,IAAI,CAAC,CAAC;AAgBtB,2CAA2C;AAC3C,eAAO,MAAM,SAAS,EAAkB,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO,EAC7E,UAAU,EAAE,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,KACvC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEnC,sFAAsF;AACtF,wBAAgB,uBAAuB,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO,EAC5E,UAAU,EAAE,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,GACzC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACjC,0FAA0F;AAC1F,wBAAgB,uBAAuB,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC/E,UAAU,EAAE,CACV,OAAO,EAAE,sBAAsB,CAAC,IAAI,CAAC,KAClC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,GAC1D,YAAY,CAAC,IAAI,CAAC,CAAC;AAgBtB,uDAAuD;AACvD,eAAO,MAAM,qBAAqB,EAA8B,CAC9D,MAAM,GAAG,UAAU,EACnB,OAAO,GAAG,OAAO,EACjB,UAAU,EAAE,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AA0R/E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,CAIhG;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO,EACtE,UAAU,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3C,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAkB/B"}
+{"version":3,"file":"agent-definition.d.ts","sourceRoot":"","sources":["../src/agent-definition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EACb,UAAU,EACV,aAAa,EACb,cAAc,EACd,YAAY,EACZ,WAAW,EACX,KAAK,EACL,YAAY,EACZ,WAAW,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAE/E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAEL,MAAM,IAAI,SAAS,EACnB,KAAK,oBAAoB,EAC1B,MAAM,iBAAiB,CAAC;AA6BzB,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,GAAG,SAAS,CAAC;CACxD;AAED,MAAM,WAAW,eAAe,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC;IACpC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,aAAa,EAAE,gBAAgB,CAAC;IAChD,UAAU,CAAC,EAAE,OAAO,kBAAkB,EAAE,SAAS,CAAC;IAClD,SAAS,CAAC,EAAE,OAAO,YAAY,EAAE,eAAe,CAAC;IACjD,qEAAqE;IACrE,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,iFAAiF;IACjF,UAAU,CAAC,EAAE,SAAS,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACzD;;;;;OAKG;IACH,aAAa,CAAC,EAAE,6BAA6B,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,GAAG,EAAE,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACvE;AAED,0FAA0F;AAC1F,MAAM,WAAW,eAAe,CAAC,MAAM,GAAG,UAAU,CAAE,SAAQ,aAAa,CAAC,MAAM,CAAC;IACjF,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,GAAG,CAAC,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACvE,MAAM,CAAC,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3F,KAAK,CAAC,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzF,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,2DAA2D;IAC3D,MAAM,EAAE,OAAO,SAAS,CAAC;CAC1B;AAED,MAAM,MAAM,eAAe,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO,IAAI;IACpE,cAAc,CACZ,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,EAChC,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAC3B,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC/B,CAAC,gBAAgB,CAAC,CAAC;AAEpB,QAAA,MAAM,gBAAgB,eAAgD,CAAC;AAEvE,KAAK,uBAAuB,CAAC,MAAM,IAAI,IAAI,CACzC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,YAAY,GAAG,KAAK,CACrB,GAAG;IACF,UAAU,CAAC,EAAE,SAAS,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACzD,GAAG,EAAE,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,YAAY,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO,IAAI,CAAC,CAClE,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAC3B,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG;IACjC,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;CAC1D,CAAC;AA8GF;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO,EAChE,UAAU,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3C,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAE/B;AAED,sFAAsF;AACtF,wBAAgB,uBAAuB,CAAC,MAAM,GAAG,UAAU,EAAE,OAAO,GAAG,OAAO,EAC5E,UAAU,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3C,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAE/B;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,gBAAgB,GAAG,SAAS,EACxC,UAAU,EAAE,gBAAgB,GAAG,SAAS,GACvC,gBAAgB,GAAG,SAAS,CAkE9B;AAuMD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,CAShG"}

package/dist/agent-definition.js

@@ -1,6 +1,5 @@
-import { getLogger } from './logger.js';
-import { createAgent, } from './persistent-agent.js';
-import { currentJobInvocation, invoke as invokeJob, } from './job-invoke.js';
+import { getLogger } from "./logger.js";
+import { currentJobInvocation, invoke as invokeJob, } from "./job-invoke.js";
 /**
  * Lazy singleton: the bare-import default loop runtime is `pi-agent-core`.
  * Constructed on first defaults-injecting `init()` so users who only import
@@ -9,7 +8,7 @@ import { currentJobInvocation, invoke as invokeJob, } from './job-invoke.js';
 let _defaultLoopRuntime;
 async function getDefaultLoopRuntime() {
     if (!_defaultLoopRuntime) {
-        const { createPiAgentLoopRuntime } = await import('./pi-loop-runtime.js');
+        const { createPiAgentLoopRuntime } = await import("./pi-loop-runtime.js");
         _defaultLoopRuntime = createPiAgentLoopRuntime();
     }
     return _defaultLoopRuntime;
@@ -21,20 +20,16 @@ function warnTemporalOnBare() {
         return;
     _warnedTemporalOnBare = true;
     getLogger().warn('runtime: "temporal" was selected from the bare `@fabric-harness/sdk` import. ' +
-        'The bare import injects `compaction: { enabled: true }` by default, which is non-deterministic ' +
-        'across Temporal replay. Use `@fabric-harness/sdk/strict` (no defaults) for Temporal workflows, ' +
-        'or pass `compaction: { enabled: false }` explicitly to silence this warning.');
+        "The bare import injects `compaction: { enabled: true }` by default, which is non-deterministic " +
+        "across Temporal replay. Use `@fabric-harness/sdk/strict` (no defaults) for Temporal workflows, " +
+        "or pass `compaction: { enabled: false }` explicitly to silence this warning.");
 }
-const definitionSymbol = Symbol.for('fabric-harness.agent-definition');
-/**
- * No-defaults agent builder. Exported as `agent` from
- * `@fabric-harness/sdk/strict`. Every `init()` option must be declared
- * explicitly — useful for Temporal replay determinism and audit/compliance
- * workloads where implicit behaviour is unwelcome.
- */
-export function agent(definition) {
+const definitionSymbol = Symbol.for("fabric-harness.agent-definition");
+function createDefinedAgent(definition, injectDefaults) {
     const handler = (async (context) => {
-        const parsedInput = definition.input ? definition.input.parse(context.payload, '$') : context.payload;
+        const parsedInput = definition.input
+            ? definition.input.parse(context.payload, "$")
+            : context.payload;
         const wrappedContext = {
             ...context,
             payload: parsedInput,
@@ -43,94 +38,106 @@ export function agent(definition) {
                 const policy = mergeCapabilityPolicies(definition.policy, options.policy);
                 const costLimit = mergeCostLimits(definition.costBudget, options.costLimit);
                 const approvalTimeoutMs = minimumDefined(definition.approvals?.timeoutMs, options.approvalTimeoutMs);
-                return context.init({
+                const merged = {
                     ...(definition.model && options.model === undefined ? { model: definition.model } : {}),
                     ...options,
                     ...(definition.name && options.name === undefined ? { name: definition.name } : {}),
                     ...(definition.instructions !== undefined && options.role === undefined
-                        ? { role: { name: definition.name ?? 'instructions', content: definition.instructions } }
+                        ? {
+                            role: { name: definition.name ?? "instructions", content: definition.instructions },
+                        }
+                        : {}),
+                    ...(definition.skills || options.skills
+                        ? { skills: [...(definition.skills ?? []), ...(options.skills ?? [])] }
+                        : {}),
+                    ...(definition.tools || options.tools
+                        ? { tools: [...(definition.tools ?? []), ...(options.tools ?? [])] }
                         : {}),
-                    ...(definition.skills || options.skills ? { skills: [...(definition.skills ?? []), ...(options.skills ?? [])] } : {}),
-                    ...(definition.tools || options.tools ? { tools: [...(definition.tools ?? []), ...(options.tools ?? [])] } : {}),
                     ...(policy ? { policy } : {}),
                     ...(costLimit ? { costLimit } : {}),
                     ...(approvalTimeoutMs !== undefined ? { approvalTimeoutMs } : {}),
-                });
+                };
+                if (injectDefaults) {
+                    if (merged.runtime === "temporal" && merged.compaction === undefined)
+                        warnTemporalOnBare();
+                    return context.init({
+                        ...merged,
+                        runtime: merged.runtime ?? "stateless",
+                        sandbox: merged.sandbox ?? "virtual",
+                        loopRuntime: merged.loopRuntime ?? (await getDefaultLoopRuntime()),
+                        compaction: merged.compaction ?? { enabled: true },
+                    });
+                }
+                return context.init(merged);
             },
         };
-        const output = await definition.run(wrappedContext);
-        return definition.output ? definition.output.parse(output, '$') : output;
+        const runContext = createAgentRunContext(wrappedContext, definition.init);
+        let execute = () => Promise.resolve(definition.run(runContext));
+        for (const item of [...(definition.middleware ?? [])].reverse()) {
+            const next = execute;
+            execute = () => {
+                let called = false;
+                return Promise.resolve(item(runContext, () => {
+                    if (called)
+                        throw new Error("[fabric-harness] Agent middleware next() may only be called once.");
+                    called = true;
+                    return next();
+                }));
+            };
+        }
+        const output = await execute();
+        return definition.output ? definition.output.parse(output, "$") : output;
     });
     Object.defineProperty(handler, definitionSymbol, { value: definition, enumerable: false });
-    Object.defineProperty(handler, '__fabricAgent', { value: definition, enumerable: false });
+    Object.defineProperty(handler, "__fabricAgent", { value: definition, enumerable: false });
     return handler;
 }
+function createAgentRunContext(context, initOptions) {
+    let agentPromise;
+    let defaultSessionPromise;
+    const getAgent = () => {
+        agentPromise ??= context.init(initOptions);
+        return agentPromise;
+    };
+    const session = (id, options) => {
+        if (id === undefined && options === undefined) {
+            defaultSessionPromise ??= getAgent().then((fabric) => fabric.session());
+            return defaultSessionPromise;
+        }
+        return getAgent().then((fabric) => fabric.session(id, options));
+    };
+    const invocation = currentJobInvocation();
+    return {
+        ...context,
+        input: context.input,
+        ...(invocation ? { run: invocation } : {}),
+        session,
+        prompt: async (text, options) => (await session()).prompt(text, options),
+        skill: async (name, options) => (await session()).skill(name, options),
+        task: async (text, options) => (await session()).task(text, options),
+        shell: async (command, options) => (await session()).shell(command, options),
+        invoke: invokeJob,
+    };
+}
+/**
+ * No-defaults finite-agent builder with lazy default-session helpers.
+ *
+ * The runtime admits these finite definitions through its job/run protocol,
+ * but authors define an agent. Use {@link createAgent} for a persistent,
+ * URL-addressable agent whose sessions span multiple submissions.
+ */
 export function defineAgent(definition) {
-    if (typeof definition === 'function')
-        return createAgent(definition);
-    return agent(toAgentDefinition(definition));
+    return createDefinedAgent(definition, false);
 }
-/** @deprecated Use {@link defineAgent}. */
-export const defineJob = defineAgent;
+/** Defaults-injecting finite-agent builder exported from the bare SDK entry point. */
 export function defineAgentWithDefaults(definition) {
-    if (typeof definition === 'function')
-        return createAgent(definition);
-    return agentWithDefaults(toAgentDefinition(definition));
-}
-/** @deprecated Use {@link defineAgentWithDefaults}. */
-export const defineJobWithDefaults = defineAgentWithDefaults;
-function toAgentDefinition(definition) {
-    const { run, init: initOptions, middleware = [], ...metadata } = definition;
-    return {
-        ...metadata,
-        async run(context) {
-            let agentPromise;
-            let defaultSessionPromise;
-            const getAgent = () => {
-                agentPromise ??= context.init(initOptions);
-                return agentPromise;
-            };
-            const session = (id, options) => {
-                if (id === undefined && options === undefined) {
-                    defaultSessionPromise ??= getAgent().then((fabric) => fabric.session());
-                    return defaultSessionPromise;
-                }
-                return getAgent().then((fabric) => fabric.session(id, options));
-            };
-            const invocation = currentJobInvocation();
-            const jobContext = {
-                ...context,
-                input: context.input,
-                ...(invocation ? { run: invocation } : {}),
-                session,
-                prompt: async (text, options) => (await session()).prompt(text, options),
-                skill: async (name, options) => (await session()).skill(name, options),
-                task: async (text, options) => (await session()).task(text, options),
-                shell: async (command, options) => (await session()).shell(command, options),
-                invoke: invokeJob,
-            };
-            let execute = () => Promise.resolve(run(jobContext));
-            for (const item of [...middleware].reverse()) {
-                const next = execute;
-                execute = () => {
-                    let called = false;
-                    return Promise.resolve(item(jobContext, () => {
-                        if (called)
-                            throw new Error('[fabric-harness] Job middleware next() may only be called once.');
-                        called = true;
-                        return next();
-                    }));
-                };
-            }
-            return execute();
-        },
-    };
+    return createDefinedAgent(definition, true);
 }
 /**
  * Treat a definition policy as a security floor. Invocation policy can add
  * denials and approval requirements, but cannot replace definition allowlists.
  */
-function mergeCapabilityPolicies(definition, invocation) {
+export function mergeCapabilityPolicies(definition, invocation) {
     if (!definition)
         return invocation;
     if (!invocation)
@@ -138,7 +145,7 @@ function mergeCapabilityPolicies(definition, invocation) {
     const commandAllow = intersectAllowPatterns(definition.commands, invocation.commands, true);
     let commandPolicy = mergeNamedPolicy(definition.commandPolicy, invocation.commandPolicy);
     if (commandAllow) {
-        commandPolicy = mergeNamedPolicy(commandPolicy, commandAllow.length > 0 ? { allow: commandAllow } : { deny: ['*'] });
+        commandPolicy = mergeNamedPolicy(commandPolicy, commandAllow.length > 0 ? { allow: commandAllow } : { deny: ["*"] });
     }
     const toolPolicy = mergeNamedPolicy(definition.toolPolicy, invocation.toolPolicy);
     const read = intersectAllowPatterns(definition.filesystem?.read, invocation.filesystem?.read);
@@ -147,8 +154,8 @@ function mergeCapabilityPolicies(definition, invocation) {
         ? {
             read: read?.length ? read : undefined,
             write: write?.length ? write : undefined,
-            readDeny: union(union(definition.filesystem?.readDeny, invocation.filesystem?.readDeny), read && read.length === 0 ? ['**'] : undefined),
-            writeDeny: union(union(definition.filesystem?.writeDeny, invocation.filesystem?.writeDeny), write && write.length === 0 ? ['**'] : undefined),
+            readDeny: union(union(definition.filesystem?.readDeny, invocation.filesystem?.readDeny), read && read.length === 0 ? ["**"] : undefined),
+            writeDeny: union(union(definition.filesystem?.writeDeny, invocation.filesystem?.writeDeny), write && write.length === 0 ? ["**"] : undefined),
             readRequireApproval: union(definition.filesystem?.readRequireApproval, invocation.filesystem?.readRequireApproval),
             writeRequireApproval: union(definition.filesystem?.writeRequireApproval, invocation.filesystem?.writeRequireApproval),
         }
@@ -181,7 +188,7 @@ function mergeNamedPolicy(definition, invocation) {
     const allow = intersectAllowPatterns(definition.allow, invocation.allow, true);
     return compactObject({
         allow: allow?.length ? allow : undefined,
-        deny: union(union(definition.deny, invocation.deny), allow && allow.length === 0 ? ['*'] : undefined),
+        deny: union(union(definition.deny, invocation.deny), allow && allow.length === 0 ? ["*"] : undefined),
         requireApproval: union(definition.requireApproval, invocation.requireApproval),
         approvalRules: [...(definition.approvalRules ?? []), ...(invocation.approvalRules ?? [])],
     });
@@ -194,24 +201,31 @@ function mergeNetworkPolicy(definition, invocation) {
     const definitionMode = effectiveNetworkMode(definition);
     const invocationMode = effectiveNetworkMode(invocation);
     const controls = {
-        ...((definition.resolveDns || invocation.resolveDns) ? { resolveDns: true } : {}),
-        ...((definition.allowPrivateNetwork === true && invocation.allowPrivateNetwork === true) ? { allowPrivateNetwork: true } : {}),
+        ...(definition.resolveDns || invocation.resolveDns ? { resolveDns: true } : {}),
+        ...(definition.allowPrivateNetwork === true && invocation.allowPrivateNetwork === true
+            ? { allowPrivateNetwork: true }
+            : {}),
     };
-    if (definitionMode === 'none' || invocationMode === 'none')
-        return { mode: 'none', ...controls };
+    if (definitionMode === "none" || invocationMode === "none")
+        return { mode: "none", ...controls };
     const protocols = intersect(definition.protocols, invocation.protocols);
-    if (definitionMode === 'allowlist' || invocationMode === 'allowlist') {
-        const definitionAllows = definitionMode === 'allowlist' ? (definition.hosts ?? []) : undefined;
-        const invocationAllows = invocationMode === 'allowlist' ? (invocation.hosts ?? []) : undefined;
+    if (definitionMode === "allowlist" || invocationMode === "allowlist") {
+        const definitionAllows = definitionMode === "allowlist" ? (definition.hosts ?? []) : undefined;
+        const invocationAllows = invocationMode === "allowlist" ? (invocation.hosts ?? []) : undefined;
         let hosts = intersectAllowPatterns(definitionAllows, invocationAllows, true) ?? [];
-        const denied = union(definitionMode === 'denylist' ? definition.hosts : undefined, invocationMode === 'denylist' ? invocation.hosts : undefined);
+        const denied = union(definitionMode === "denylist" ? definition.hosts : undefined, invocationMode === "denylist" ? invocation.hosts : undefined);
         if (denied?.length)
             hosts = subtractDeniedPatterns(hosts, denied);
-        return compactObject({ mode: 'allowlist', hosts, protocols, ...controls });
+        return compactObject({
+            mode: "allowlist",
+            hosts,
+            protocols,
+            ...controls,
+        });
     }
-    if (definitionMode === 'denylist' || invocationMode === 'denylist') {
+    if (definitionMode === "denylist" || invocationMode === "denylist") {
         return compactObject({
-            mode: 'denylist',
+            mode: "denylist",
             hosts: union(definition.hosts, invocation.hosts),
             protocols,
             ...controls,
@@ -223,7 +237,7 @@ function mergeNetworkPolicy(definition, invocation) {
     });
 }
 function effectiveNetworkMode(policy) {
-    return policy.mode ?? (policy.hosts && policy.hosts.length > 0 ? 'allowlist' : undefined);
+    return policy.mode ?? (policy.hosts && policy.hosts.length > 0 ? "allowlist" : undefined);
 }
 function subtractDeniedPatterns(allowed, denied) {
     return allowed.filter((allowPattern) => !denied.some((denyPattern) => patternsMayOverlap(allowPattern, denyPattern, true)));
@@ -240,7 +254,9 @@ function mergeCostLimits(definition, invocation) {
         perScope: definitionOwnsScope ? definition.perScope : invocation.perScope,
         scopeKey: definitionOwnsScope ? definition.scopeKey : invocation.scopeKey,
         store: definitionOwnsScope ? definition.store : invocation.store,
-        onExceed: definition.onExceed === 'throw' || invocation.onExceed === 'throw' ? 'throw' : (definition.onExceed ?? invocation.onExceed),
+        onExceed: definition.onExceed === "throw" || invocation.onExceed === "throw"
+            ? "throw"
+            : (definition.onExceed ?? invocation.onExceed),
         scopeSource: definitionOwnsScope ? definition.scopeSource : invocation.scopeSource,
         actualSource: definitionOwnsScope ? definition.actualSource : invocation.actualSource,
         actualsCacheTtlMs: minimumDefined(definition.actualsCacheTtlMs, invocation.actualsCacheTtlMs),
@@ -285,36 +301,36 @@ function patternsMayOverlap(left, right, loose) {
         return true;
     // Exact glob intersection is not representable in CapabilityPolicy. When
     // both sides are patterns and neither is provably disjoint, deny safely.
-    return left.includes('*') && right.includes('*');
+    return left.includes("*") && right.includes("*");
 }
 function patternCovers(broader, narrower, loose) {
-    if (broader === narrower || broader === '*' || broader === '**')
+    if (broader === narrower || broader === "*" || broader === "**")
         return true;
-    if (!narrower.includes('*'))
+    if (!narrower.includes("*"))
         return matchesPolicyPattern(narrower, broader, loose);
-    const firstWildcard = broader.indexOf('*');
+    const firstWildcard = broader.indexOf("*");
     if (firstWildcard < 0)
         return false;
     const suffix = broader.slice(firstWildcard);
-    if (suffix !== '*' && suffix !== '**')
+    if (suffix !== "*" && suffix !== "**")
         return false;
     return narrower.startsWith(broader.slice(0, firstWildcard));
 }
 function matchesPolicyPattern(value, pattern, loose) {
-    if (pattern === value || pattern === '*')
+    if (pattern === value || pattern === "*")
         return true;
-    let source = '';
+    let source = "";
     for (let index = 0; index < pattern.length; index += 1) {
         const char = pattern[index];
-        if (char === '*' && pattern[index + 1] === '*') {
-            source += '.*';
+        if (char === "*" && pattern[index + 1] === "*") {
+            source += ".*";
             index += 1;
         }
-        else if (char === '*') {
-            source += loose ? '.*' : '[^/]*';
+        else if (char === "*") {
+            source += loose ? ".*" : "[^/]*";
         }
         else {
-            source += (char ?? '').replace(/[|\\{}()[\]^$+?.]/g, '\\$&');
+            source += (char ?? "").replace(/[|\\{}()[\]^$+?.]/g, "\\$&");
         }
     }
     return new RegExp(`^${source}$`).test(value);
@@ -342,43 +358,9 @@ function maximumRisk(left, right) {
     return rank[left] >= rank[right] ? left : right;
 }
 export function getAgentDefinition(value) {
-    if (typeof value !== 'function')
+    if (typeof value !== "function")
         return undefined;
     const candidate = value;
-    return candidate[definitionSymbol] ?? candidate.__fabricAgent;
-}
-/**
- * Defaults-injecting agent builder. Exported as `agent` from the bare
- * `@fabric-harness/sdk` entry point. Wraps `init()` so the headless
- * defaults are applied unless the caller overrides them:
- *
- * - `runtime: 'stateless'`
- * - `sandbox: 'virtual'`
- * - `loopRuntime: pi-agent-core`
- * - `compaction: { enabled: true }`
- *
- * If `runtime: 'temporal'` is selected from this builder, a one-time
- * `console.warn` is emitted because auto-compaction is non-deterministic
- * across Temporal replay. Use `@fabric-harness/sdk/strict` for Temporal.
- */
-export function agentWithDefaults(definition) {
-    const wrappedRun = async (context) => {
-        const wrappedContext = {
-            ...context,
-            init: async (init = {}) => {
-                if (init.runtime === 'temporal' && init.compaction === undefined)
-                    warnTemporalOnBare();
-                return context.init({
-                    ...init,
-                    runtime: init.runtime ?? 'stateless',
-                    sandbox: init.sandbox ?? 'virtual',
-                    loopRuntime: init.loopRuntime ?? (await getDefaultLoopRuntime()),
-                    compaction: init.compaction ?? { enabled: true },
-                });
-            },
-        };
-        return definition.run(wrappedContext);
-    };
-    return agent({ ...definition, run: wrappedRun });
+    return (candidate[definitionSymbol] ?? candidate.__fabricAgent);
 }
 //# sourceMappingURL=agent-definition.js.map