@fevex/core 0.1.0-alpha.11 → 0.1.0-alpha.12

package/dist/index.mjs

@@ -9,7 +9,7 @@ import { FEVEX_JSON_SCHEMA_PROFILE_VERSION, InMemoryToolEmbeddingCache, Integrat
 import { _ as serializeValue, a as assertTokenBudget, c as eventUsage, d as remainingDeadlineMs, f as remainingOutputTokens, g as serializeJsonValue, h as toErrorMessage, i as assertContinuationBudget, l as isTimeoutError, m as runSignal, n as abortable, o as cancellationReason, p as resumeDeadlineSignal, r as addUsage, s as deadlineAtFromMs, u as minDeadline, v as toJsonValue } from "./run-support-CmZ6Xo6H.mjs";
 import { t as readModelStream } from "./model-stream-JQdHDDcj.mjs";
 import "./models/index.mjs";
-import { definePolicy } from "./policies/index.mjs";
+import { definePolicy, riskGuardrail } from "./policies/index.mjs";
 import { SandboxError, createLocalSandbox, sandboxResultToJson } from "./sandbox/index.mjs";
 import { defineWorkflow } from "./workflows/index.mjs";
 //#region src/configuration-error.ts
@@ -930,21 +930,37 @@ function systemBlock(label, provider, block) {
 	};
 }
 async function readMemoryMessages(agent, context, memoryStore) {
-	if (!agent.memory || agent.memory.read === false || !memoryStore) return [];
+	if (!agent.memory || agent.memory.read === false || !memoryStore) return { messages: [] };
+	const startedAt = performance.now();
 	try {
-		return (await abortable(() => memoryStore.search({
+		const records = await abortable(() => memoryStore.search({
 			query: context.input,
 			limit: agent.memory?.limit ?? 5,
 			agentName: context.agentName,
 			sessionId: context.sessionId,
 			namespace: context.context?.namespace,
 			actor: context.context?.actor
-		}, context), context.signal)).filter((record) => record.content.trim()).map((record) => ({
-			role: "system",
-			content: `[Memory: ${record.id}]\n${record.content}`
-		}));
+		}, context), context.signal);
+		return {
+			messages: records.filter((record) => record.content.trim()).map((record) => ({
+				role: "system",
+				content: `[Memory: ${record.id}]\n${record.content}`
+			})),
+			trace: {
+				durationMs: performance.now() - startedAt,
+				recordCount: records.length
+			}
+		};
 	} catch (cause) {
-		throw new Error("Memory search failed", { cause });
+		const error = cause instanceof Error ? cause.message : String(cause);
+		return {
+			messages: [],
+			trace: {
+				durationMs: performance.now() - startedAt,
+				error
+			},
+			error: cause
+		};
 	}
 }
 const toolSourcePayload = (tool, error) => {
@@ -1384,7 +1400,6 @@ function createAgentEngine(composition, core) {
 					...knowledge.skills,
 					...sessionHistoryMessages(session),
 					...knowledge.context,
-					...knowledge.memory,
 					{
 						role: "user",
 						content: inputContent
@@ -1419,18 +1434,18 @@ function createAgentEngine(composition, core) {
 					ownerId,
 					expiresAt: new Date(Date.now() + LEASE_MS).toISOString()
 				};
-				const started = createEvent(state, "run.started", void 0);
+				const initialEvents = [createEvent(state, "run.started", void 0)];
 				if (!await runStore.createExecution({
 					run,
 					checkpoint,
 					session,
 					lease,
-					events: [started]
+					events: initialEvents
 				})) throw new FevexRunError("RUN_CONFLICT", `Run or session "${session.id}" is active or was modified`, run.id);
 				state.checkpoint = checkpoint;
 				state.lease = lease;
-				state.initialEvents = [started];
-				notifyObserver(started);
+				state.initialEvents = initialEvents;
+				for (const event of initialEvents) notifyObserver(event);
 				startLease(state, runStore);
 			} else {
 				if (newSession) await runStore.saveSession(session);
@@ -1476,6 +1491,7 @@ function createAgentEngine(composition, core) {
 			loadedTools: [...state.loadedTools ?? []],
 			messages: structuredClone(messages),
 			inputContent,
+			...state.checkpoint?.memoryLoaded === void 0 ? {} : { memoryLoaded: state.checkpoint.memoryLoaded },
 			context: state.request.context,
 			usage,
 			providerState: serializedState,
@@ -1508,25 +1524,38 @@ function createAgentEngine(composition, core) {
 		const context = knowledgeContext(state, input);
 		return {
 			skills: (await Promise.all((agent.skills ?? []).map((name) => readProvider(name, "Skill", context)))).flat(),
-			context: (await Promise.all((agent.context ?? []).map((name) => readProvider(name, "Context", context)))).flat(),
-			memory: await readMemoryMessages(agent, context, memoryStore)
+			context: (await Promise.all((agent.context ?? []).map((name) => readProvider(name, "Context", context)))).flat()
 		};
 	};
-	const writeMemory = async (state, agent, input, output) => {
+	const writeMemory = async (state, agent, input, output, emit) => {
 		if (!agent.memory?.write || !memoryStore) return;
 		const context = knowledgeContext(state, input);
+		const startedAt = performance.now();
+		let recordId;
 		try {
-			await abortable(() => memoryStore.write({
+			recordId = (await abortable(() => memoryStore.write({
 				content: `User: ${input}\nAssistant: ${serializeJsonValue(output)}`,
 				agentName: state.run.agentName,
 				sessionId: state.session.id,
 				namespace: state.request.context?.namespace,
 				actor: state.request.context?.actor,
 				metadata: { runId: state.run.id }
-			}, context), state.request.signal);
+			}, context), state.request.signal)).id;
 		} catch (cause) {
+			const error = cause instanceof Error ? cause.message : String(cause);
+			await emit("memory.completed", {
+				operation: "write",
+				durationMs: performance.now() - startedAt,
+				error
+			}).catch(() => {});
 			throw new Error("Memory write failed", { cause });
 		}
+		await emit("memory.completed", {
+			operation: "write",
+			durationMs: performance.now() - startedAt,
+			recordCount: 1,
+			...recordId === void 0 ? {} : { recordId }
+		});
 	};
 	async function* executeAgent(name, state) {
 		const { request } = state;
@@ -1589,7 +1618,6 @@ function createAgentEngine(composition, core) {
 					...knowledge.skills,
 					...sessionHistoryMessages(state.session),
 					...knowledge.context,
-					...knowledge.memory,
 					{
 						role: "user",
 						content: inputContent
@@ -1601,6 +1629,21 @@ function createAgentEngine(composition, core) {
 				pendingTools = [];
 				pendingIndex = 0;
 			}
+			if (!(state.checkpoint?.memoryLoaded ?? messages.some((message, index) => index > 0 && message.role === "system" && message.content.startsWith("[Memory: "))) && agent.memory && agent.memory.read !== false && memoryStore) {
+				const memory = await readMemoryMessages(agent, knowledgeContext(state, inputContent), memoryStore);
+				if (memory.trace) yield await emit("memory.completed", {
+					operation: "search",
+					durationMs: memory.trace.durationMs,
+					...memory.trace.recordCount === void 0 ? {} : { recordCount: memory.trace.recordCount },
+					...memory.trace.error === void 0 ? {} : { error: memory.trace.error }
+				});
+				if (memory.error !== void 0) throw new Error("Memory search failed", { cause: memory.error });
+				if (memory.messages.length) messages.splice(Math.max(0, messages.length - 1), 0, ...memory.messages);
+				if (state.checkpoint) {
+					state.checkpoint.memoryLoaded = true;
+					await commit(state, { checkpoint: state.checkpoint });
+				}
+			}
 			const activeOutputSchema = agent.outputSchema;
 			const outputSchema = activeOutputSchema === void 0 ? void 0 : toTransportableSchema(activeOutputSchema, "output", `Output schema for agent "${name}" is not transportable`);
 			const currentElicitationMode = state.checkpoint?.effectiveElicitationMode ?? effectiveElicitationMode(agent, request);
@@ -1818,7 +1861,7 @@ function createAgentEngine(composition, core) {
 					if (!result.toolCalls?.length) {
 						if (result.output === void 0) throw new Error(`Model for agent "${name}" returned no output`);
 						const output = toJsonValue(activeOutputSchema === void 0 ? result.output : await abortable(() => validateSchema(activeOutputSchema, result.output, `Output from agent "${name}" does not match outputSchema`), request.signal), `Output from agent "${name}" must be JSON-serializable`);
-						await writeMemory(state, agent, inputContent, output);
+						await writeMemory(state, agent, inputContent, output, emit);
 						state.session.history.push({
 							role: "user",
 							content: inputContent
@@ -1884,7 +1927,9 @@ function createAgentEngine(composition, core) {
 						yield await emit("tool.started", {
 							step,
 							toolCallId: internalCall.id,
-							toolName: internalCall.name
+							toolName: internalCall.name,
+							risk: "read",
+							declaredRisk: "read"
 						});
 						let execution;
 						try {
@@ -2022,7 +2067,7 @@ function createAgentEngine(composition, core) {
 					const durable = isDurableRunStore(runStore) ? runStore : void 0;
 					if (!durable && (tool.approval === "required" || tool.idempotency === "keyed")) throw new FevexRunError("DURABLE_STORE_REQUIRED", `Tool "${tool.name}" requires a DurableRunStore`, state.run.id);
 					let record = durable ? await durable.getToolExecution(state.run.id, pending.call.id) : void 0;
-					const policy = await authorize(state, tool, pending.input, "tool.execute");
+					const policy = await authorize(state, tool, pending.input, "tool.execute", state.request.context, pending.call.id);
 					if ((tool.approval === "required" || policy === "require_approval") && state.approvedToolCallId !== pending.call.id && record?.status !== "started" && record?.status !== "completed") {
 						if (currentApprovalMode === "deny") throw new FevexRunError("POLICY_DENIED", `Tool "${tool.name}" requires approval but approvalMode is "deny"`, state.run.id);
 						const checkpoint = await durableCheckpoint(state, model, modelName, messages, inputContent, usage, providerState, step, toolCallCount, seenToolCallIds, pendingTools, pendingIndex);
@@ -2115,7 +2160,7 @@ function createAgentEngine(composition, core) {
 					let attempt = record?.status === "started" && tool.idempotency === "keyed" ? Math.max(0, record.attempt - 1) : record?.attempt ?? 0;
 					while (attempt < maxAttempts) {
 						if (attempt > 0) {
-							if (await authorize(state, tool, pending.input, "tool.execute") === "require_approval") {
+							if (await authorize(state, tool, pending.input, "tool.execute", state.request.context, pending.call.id) === "require_approval") {
 								if (currentApprovalMode === "deny") throw new FevexRunError("POLICY_DENIED", `Tool "${tool.name}" requires approval but approvalMode is "deny"`, state.run.id);
 								const checkpoint = await durableCheckpoint(state, model, modelName, messages, inputContent, usage, providerState, step, toolCallCount, seenToolCallIds, pendingTools, pendingIndex);
 								const approval = {
@@ -2199,6 +2244,8 @@ function createAgentEngine(composition, core) {
 							step,
 							toolCallId: pending.call.id,
 							toolName: pending.call.name,
+							risk: tool.risk ?? "read",
+							...tool.risk === void 0 ? {} : { declaredRisk: tool.risk },
 							...toolSourcePayload(tool),
 							...attempt > 1 ? { attempt } : {}
 						});
@@ -2518,7 +2565,7 @@ function createAgentEngine(composition, core) {
 				if (resolution.decision === "approve") await authorize(state, tool, pending.input, "approval.resolve", {
 					...state.request.context,
 					actor: resolution.actor
-				});
+				}, pending.call.id);
 				if (resolution.decision === "reject") {
 					const approval = run.pause.approval;
 					const toolCallId = approval.toolCallId;
@@ -2857,6 +2904,19 @@ function annotation(event) {
 				delayMs: event.payload.delayMs
 			}
 		};
+		case "policy.evaluated": return {
+			name: event.type,
+			timestamp: event.timestamp,
+			attributes: {
+				policyName: event.payload.policyName,
+				toolName: event.payload.toolName,
+				...event.payload.toolCallId === void 0 ? {} : { toolCallId: event.payload.toolCallId },
+				action: event.payload.action,
+				decision: event.payload.decision,
+				risk: event.payload.risk,
+				...event.payload.declaredRisk === void 0 ? {} : { declaredRisk: event.payload.declaredRisk }
+			}
+		};
 		case "context.compacted": return {
 			name: event.type,
 			timestamp: event.timestamp,
@@ -3005,6 +3065,8 @@ function buildAgentTrace(run, events, modelRegistryName, model, options) {
 				step: event.payload.step,
 				toolCallId,
 				toolName: event.payload.toolName,
+				risk: event.payload.risk ?? "read",
+				...event.payload.declaredRisk === void 0 ? {} : { declaredRisk: event.payload.declaredRisk },
 				attempt: event.payload.attempt ?? 1
 			},
 			annotations: open.annotations,
@@ -3028,6 +3090,29 @@ function buildAgentTrace(run, events, modelRegistryName, model, options) {
 			case "model.completed":
 				closeModel(event.payload.step, event.timestamp, "completed");
 				break;
+			case "memory.completed": {
+				const endedAt = Date.parse(event.timestamp);
+				const startedAt = new Date(endedAt - Math.max(0, event.payload.durationMs)).toISOString();
+				const errorContent = event.payload.error ? content(options, "error.message", event.payload.error) : void 0;
+				spans.push({
+					id: event.id,
+					parentId: run.id,
+					kind: "memory",
+					name: event.payload.operation === "search" ? "search_memory" : "create_memory",
+					startedAt,
+					endedAt: event.timestamp,
+					durationMs: Math.max(0, event.payload.durationMs),
+					status: event.payload.error ? "failed" : "completed",
+					attributes: {
+						operation: event.payload.operation,
+						...event.payload.recordCount === void 0 ? {} : { recordCount: event.payload.recordCount },
+						...event.payload.recordId === void 0 ? {} : { recordId: event.payload.recordId }
+					},
+					annotations: [],
+					...errorContent ? { content: [errorContent] } : {}
+				});
+				break;
+			}
 			case "tool.started": {
 				const attempt = event.payload.attempt ?? 1;
 				openTools.set(`${event.payload.toolCallId}:${attempt}`, {
@@ -3060,6 +3145,8 @@ function buildAgentTrace(run, events, modelRegistryName, model, options) {
 	const finalUsage = run.usage ?? previousUsage;
 	const totalCost = costFor(options, modelRegistryName, model, finalUsage);
 	const traceContent = terminalContent(options, terminal);
+	const startedAtMs = Math.min(Date.parse(started.timestamp), ...spans.filter(({ kind }) => kind === "memory").map(({ startedAt }) => Date.parse(startedAt)));
+	const traceStartedAt = new Date(startedAtMs).toISOString();
 	return {
 		schemaVersion: "1",
 		kind: "agent",
@@ -3071,14 +3158,15 @@ function buildAgentTrace(run, events, modelRegistryName, model, options) {
 		agentName: run.agentName,
 		modelRegistryName,
 		...model ? { model: { ...model } } : {},
-		startedAt: started.timestamp,
+		startedAt: traceStartedAt,
 		endedAt: terminal.timestamp,
-		durationMs: durationMs(started.timestamp, terminal.timestamp),
+		durationMs: durationMs(traceStartedAt, terminal.timestamp),
 		status,
 		attributes: {
 			eventCount: events.length,
 			modelCallCount: spans.filter(({ kind }) => kind === "model").length,
-			toolCallCount: spans.filter(({ kind }) => kind === "tool").length
+			toolCallCount: spans.filter(({ kind }) => kind === "tool").length,
+			memoryOperationCount: spans.filter(({ kind }) => kind === "memory").length
 		},
 		annotations,
 		spans,
@@ -3376,6 +3464,7 @@ function createRunCore({ models, agents, tools, runStore, policies, onEvent, obs
 		"elicitation.resolved",
 		"approval.requested",
 		"approval.resolved",
+		"policy.evaluated",
 		"tool.execution_unknown",
 		"run.completed",
 		"run.failed",
@@ -3640,18 +3729,30 @@ function createRunCore({ models, agents, tools, runStore, policies, onEvent, obs
 		});
 		await state.commitQueue;
 	};
-	const authorize = async (state, tool, input, action, context = state.request.context) => {
+	const authorize = async (state, tool, input, action, context = state.request.context, toolCallId) => {
 		let approval = false;
 		for (const policy of policies) {
+			const risk = tool.risk ?? "read";
+			const declaredRisk = tool.risk;
 			const decision = await policy.authorize({
 				runId: state.run.id,
 				agentName: state.run.agentName,
 				toolName: tool.name,
-				risk: tool.risk ?? "read",
+				risk,
+				...declaredRisk === void 0 ? {} : { declaredRisk },
 				input,
 				action,
 				context
 			});
+			await emitEvent(state, "policy.evaluated", {
+				policyName: policy.name,
+				toolName: tool.name,
+				...toolCallId === void 0 ? {} : { toolCallId },
+				action,
+				decision,
+				risk,
+				...declaredRisk === void 0 ? {} : { declaredRisk }
+			});
 			if (decision === "deny") throw new FevexRunError("POLICY_DENIED", `Policy "${policy.name}" denied tool "${tool.name}"`, state.run.id);
 			if (decision === "require_approval") approval = true;
 		}
@@ -4797,9 +4898,37 @@ function createWorkflowEngine(composition, core, agentEngine) {
 //#region src/internal/runtime.ts
 const DEFAULT_SHUTDOWN_TIMEOUT_MS = 3e4;
 const SHUTDOWN_CLEANUP_MS = 5e3;
+const RUN_WAIT_EVENT_TYPES = /* @__PURE__ */ new Set([
+	"run.paused",
+	"run.completed",
+	"run.failed",
+	"run.cancelled",
+	"workflow.run.paused",
+	"workflow.run.completed",
+	"workflow.run.failed",
+	"workflow.run.cancelled",
+	"team.run.paused",
+	"team.run.completed",
+	"team.run.failed",
+	"team.run.cancelled"
+]);
 function createRuntime(composition) {
 	const { models, agents, workflows, teams, tools, contextProviders, memoryStore, runStore, credentialStore, sandbox, policies } = composition;
-	const core = createRunCore(composition);
+	const runWaiters = /* @__PURE__ */ new Map();
+	const wakeRunWaiters = (event) => {
+		if (!RUN_WAIT_EVENT_TYPES.has(event.type)) return;
+		const waiters = runWaiters.get(event.runId);
+		if (!waiters) return;
+		for (const wake of [...waiters]) wake();
+	};
+	const userOnEvent = composition.onEvent;
+	const core = createRunCore({
+		...composition,
+		onEvent(event) {
+			wakeRunWaiters(event);
+			return userOnEvent?.(event);
+		}
+	});
 	const { activeRuns, activeWorkflowRuns, activeSessions, isIdle, waitForIdle, closeAdmission, isClosed, traceExports, runtimeOwner, createEvent, createCoordinatorEvent, notifyObserver, commit, startLease, cancelExecution, releaseWorkflowExecution, commitWorkflow } = core;
 	const agentEngine = createAgentEngine(composition, core);
 	const { prepareExecution, executeAgent, nextEvent, drainExecution, resumeAgent, cancelStoredAgent, getCompactionStats } = agentEngine;
@@ -4817,6 +4946,57 @@ function createRuntime(composition) {
 		if (isCoordinatorRun(run)) return resumeWorkflow(runId, void 0, actor);
 		return resumeAgent(runId, void 0, false, actor);
 	};
+	const waitForRun = async (runId, options = {}) => {
+		if (options.timeoutMs !== void 0 && (!Number.isSafeInteger(options.timeoutMs) || options.timeoutMs < 0)) throw new TypeError("waitForRun timeoutMs must be a non-negative safe integer");
+		const current = await runStore.getRun(runId);
+		if (!current || current.status !== "running") return current;
+		const signal = options.signal;
+		signal?.throwIfAborted();
+		return new Promise((resolve, reject) => {
+			let settled = false;
+			let timer;
+			const wake = () => {
+				if (settled) return;
+				runStore.getRun(runId).then((run) => {
+					if (!run || run.status !== "running") settle(run);
+				}, (error) => settle(void 0, error));
+			};
+			const cleanup = () => {
+				const waiters = runWaiters.get(runId);
+				waiters?.delete(wake);
+				if (waiters && waiters.size === 0) runWaiters.delete(runId);
+				if (timer !== void 0) clearTimeout(timer);
+				signal?.removeEventListener("abort", onAbort);
+			};
+			const settle = (run, error) => {
+				if (settled) return;
+				settled = true;
+				cleanup();
+				if (error === void 0) resolve(run);
+				else reject(error);
+			};
+			const onAbort = () => {
+				settle(void 0, signal?.reason ?? new DOMException("Aborted", "AbortError"));
+			};
+			let waiters = runWaiters.get(runId);
+			if (!waiters) {
+				waiters = /* @__PURE__ */ new Set();
+				runWaiters.set(runId, waiters);
+			}
+			waiters.add(wake);
+			if (signal) {
+				if (signal.aborted) {
+					onAbort();
+					return;
+				}
+				signal.addEventListener("abort", onAbort, { once: true });
+			}
+			if (options.timeoutMs !== void 0) timer = setTimeout(() => {
+				settle(void 0, new FevexRunError("RUN_WAIT_TIMEOUT", `Run "${runId}" did not leave the running state within ${options.timeoutMs}ms`, runId));
+			}, options.timeoutMs);
+			wake();
+		});
+	};
 	const waitForIdleUntil = async (deadline) => {
 		if (isIdle()) return true;
 		const remaining = deadline - Date.now();
@@ -4955,6 +5135,9 @@ function createRuntime(composition) {
 		getRun(runId) {
 			return runStore.getRun(runId);
 		},
+		waitForRun(runId, options) {
+			return waitForRun(runId, options);
+		},
 		listEvents(runId, options) {
 			return runStore.listEvents(runId, options);
 		},
@@ -5024,4 +5207,4 @@ function createFevex(config) {
 	return createRuntime(createComposition(config));
 }
 //#endregion
-export { ArtifactError, CatalogedArtifactStore, ChannelError, FEVEX_JSON_SCHEMA_PROFILE_VERSION, FevexConfigurationError, FevexRunError, FileSystemArtifactStore, InMemoryArtifactCatalog, InMemoryArtifactStore, InMemoryMemoryStore, InMemoryRunStore, InMemoryToolEmbeddingCache, IntegrationError, PROVIDER_REASONING_UNSUPPORTED, PROVIDER_SCHEMA_UNSUPPORTED, RunPausedError, S3ArtifactStore, SCHEMA_NOT_TRANSPORTABLE, SandboxError, artifactTenantId, assertArtifactId, buildToolEmbeddingIndex, compileFevexJsonSchema, cosineSimilarity, createAgentsMdContextProvider, createDigestContextCompactor, createFevex, createLocalSandbox, createMemoryContextProvider, createModelContextCompactor, defineAgent, defineConnection, defineContextProvider, definePolicy, defineSkill, defineTeam, defineTool, defineWorkflow, deliverChannelRun, estimateContextTokens, handleChannelInput, isDurableRunStore, isProgressiveSkillProvider, isRetainableRunStore, loadSkillFile, loadSkillFiles, resolveContextBudget, sandboxResultToJson, schemaKeywords, searchToolEmbeddingIndex, toToolSpec, toolEmbeddingKey, toolEmbeddingText, validateFevexJsonSchemaProfile, validateListEventsOptions, validatePurgeRunsOptions };
+export { ArtifactError, CatalogedArtifactStore, ChannelError, FEVEX_JSON_SCHEMA_PROFILE_VERSION, FevexConfigurationError, FevexRunError, FileSystemArtifactStore, InMemoryArtifactCatalog, InMemoryArtifactStore, InMemoryMemoryStore, InMemoryRunStore, InMemoryToolEmbeddingCache, IntegrationError, PROVIDER_REASONING_UNSUPPORTED, PROVIDER_SCHEMA_UNSUPPORTED, RunPausedError, S3ArtifactStore, SCHEMA_NOT_TRANSPORTABLE, SandboxError, artifactTenantId, assertArtifactId, buildToolEmbeddingIndex, compileFevexJsonSchema, cosineSimilarity, createAgentsMdContextProvider, createDigestContextCompactor, createFevex, createLocalSandbox, createMemoryContextProvider, createModelContextCompactor, defineAgent, defineConnection, defineContextProvider, definePolicy, defineSkill, defineTeam, defineTool, defineWorkflow, deliverChannelRun, estimateContextTokens, handleChannelInput, isDurableRunStore, isProgressiveSkillProvider, isRetainableRunStore, loadSkillFile, loadSkillFiles, resolveContextBudget, riskGuardrail, sandboxResultToJson, schemaKeywords, searchToolEmbeddingIndex, toToolSpec, toolEmbeddingKey, toolEmbeddingText, validateFevexJsonSchemaProfile, validateListEventsOptions, validatePurgeRunsOptions };

package/dist/knowledge/index.d.mts

@@ -1,2 +1,2 @@
-import { _ as defineContextProvider, a as AgentsMdOptions, c as ContextProvider, d as MemoryRecord, f as MemoryStore, g as createMemoryContextProvider, h as SkillDefinition, i as InMemoryMemoryStore, l as KnowledgeContext, m as ProgressiveSkillProvider, n as loadSkillFile, o as createAgentsMdContextProvider, p as MemoryWrite, r as loadSkillFiles, s as ContextBlock, t as LoadSkillFileOptions, u as MemoryQuery, v as defineSkill, y as isProgressiveSkillProvider } from "../index-CIHWc5V1.mjs";
+import { _ as defineContextProvider, a as AgentsMdOptions, c as ContextProvider, d as MemoryRecord, f as MemoryStore, g as createMemoryContextProvider, h as SkillDefinition, i as InMemoryMemoryStore, l as KnowledgeContext, m as ProgressiveSkillProvider, n as loadSkillFile, o as createAgentsMdContextProvider, p as MemoryWrite, r as loadSkillFiles, s as ContextBlock, t as LoadSkillFileOptions, u as MemoryQuery, v as defineSkill, y as isProgressiveSkillProvider } from "../index-D1LAhzgC.mjs";
 export { AgentsMdOptions, ContextBlock, ContextProvider, InMemoryMemoryStore, KnowledgeContext, LoadSkillFileOptions, MemoryQuery, MemoryRecord, MemoryStore, MemoryWrite, ProgressiveSkillProvider, SkillDefinition, createAgentsMdContextProvider, createMemoryContextProvider, defineContextProvider, defineSkill, isProgressiveSkillProvider, loadSkillFile, loadSkillFiles };

package/dist/models/index.d.mts

@@ -1,2 +1,2 @@
-import { a as ModelResult, c as ReasoningEffort, i as ModelRef, l as ToolChoice, n as ModelInput, o as ModelStreamEvent, r as ModelMetadata, s as ModelUsage, t as ModelGateway, u as EmbeddingModel } from "../index-D7r0puBi.mjs";
+import { a as ModelResult, c as ReasoningEffort, i as ModelRef, l as ToolChoice, n as ModelInput, o as ModelStreamEvent, r as ModelMetadata, s as ModelUsage, t as ModelGateway, u as EmbeddingModel } from "../index-Cbe1ZiyN.mjs";
 export { EmbeddingModel, ModelGateway, ModelInput, ModelMetadata, ModelRef, ModelResult, ModelStreamEvent, ModelUsage, ReasoningEffort, ToolChoice };

package/dist/observability/index.d.mts

@@ -1,2 +1,2 @@
-import { _ as TraceSpanKind, a as RunTrace, c as TraceContentKind, d as TraceExportQueueOptions, f as TraceExporter, g as TraceSpan, h as TraceRunKind, i as ObservabilityStats, l as TraceContentPolicy, m as TraceRedactorInput, n as CostCalculatorInput, o as TraceAnnotation, p as TraceRedactor, r as ObservabilityOptions, s as TraceContent, t as CostCalculator, u as TraceCost, v as TraceStatus } from "../index-BEqYWean.mjs";
+import { _ as TraceSpanKind, a as RunTrace, c as TraceContentKind, d as TraceExportQueueOptions, f as TraceExporter, g as TraceSpan, h as TraceRunKind, i as ObservabilityStats, l as TraceContentPolicy, m as TraceRedactorInput, n as CostCalculatorInput, o as TraceAnnotation, p as TraceRedactor, r as ObservabilityOptions, s as TraceContent, t as CostCalculator, u as TraceCost, v as TraceStatus } from "../index-B7fxPgn_.mjs";
 export { CostCalculator, CostCalculatorInput, ObservabilityOptions, ObservabilityStats, RunTrace, TraceAnnotation, TraceContent, TraceContentKind, TraceContentPolicy, TraceCost, TraceExportQueueOptions, TraceExporter, TraceRedactor, TraceRedactorInput, TraceRunKind, TraceSpan, TraceSpanKind, TraceStatus };

package/dist/policies/index.d.mts

@@ -1,2 +1,2 @@
-import { i as definePolicy, n as PolicyDecision, r as PolicyDefinition, t as PolicyAuthorization } from "../index-CFzrvDQ0.mjs";
-export { PolicyAuthorization, PolicyDecision, PolicyDefinition, definePolicy };
+import { a as definePolicy, i as RiskGuardrailOptions, n as PolicyDecision, o as riskGuardrail, r as PolicyDefinition, t as PolicyAuthorization } from "../index-KKq-_SiK.mjs";
+export { PolicyAuthorization, PolicyDecision, PolicyDefinition, RiskGuardrailOptions, definePolicy, riskGuardrail };

package/dist/policies/index.mjs

@@ -2,5 +2,43 @@
 function definePolicy(policy) {
 	return policy;
 }
+const TOOL_RISKS = [
+	"read",
+	"write",
+	"sensitive",
+	"destructive"
+];
+function riskSet(values, fallback, name) {
+	const selected = values ?? fallback;
+	for (const risk of selected) if (!TOOL_RISKS.includes(risk)) throw new TypeError(`${name} contains an invalid tool risk: ${risk}`);
+	return new Set(selected);
+}
+/**
+* Denies destructive tools and requires approval for sensitive tools by
+* default. Pass explicit lists to change the thresholds.
+*/
+function riskGuardrail(options = {}) {
+	if (options.name !== void 0 && !options.name.trim()) throw new TypeError("Risk guardrail name must be non-empty");
+	const undeclaredRisk = options.undeclaredRisk ?? "allow";
+	if (![
+		"allow",
+		"require_approval",
+		"deny"
+	].includes(undeclaredRisk)) throw new TypeError("Risk guardrail undeclaredRisk must be allow, require_approval or deny");
+	const deny = riskSet(options.deny, ["destructive"], "deny");
+	const requireApproval = riskSet(options.requireApproval, ["sensitive"], "requireApproval");
+	return definePolicy({
+		name: options.name ?? "risk",
+		authorize({ risk, declaredRisk }) {
+			if (declaredRisk === void 0) {
+				if (undeclaredRisk === "deny") return "deny";
+				if (undeclaredRisk === "require_approval") return "require_approval";
+			}
+			if (deny.has(risk)) return "deny";
+			if (requireApproval.has(risk)) return "require_approval";
+			return "allow";
+		}
+	});
+}
 //#endregion
-export { definePolicy };
+export { definePolicy, riskGuardrail };

package/dist/runtime/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as SessionCompaction, A as ElicitationMode, B as ResumeRunResolution, C as ApprovalMode, D as CoordinatorRun, E as CoordinatorCheckpoint, F as ExecutionCreate, G as RunLease, H as RetainableRunStore, I as ListEventsOptions, J as RunRequest, K as RunPause, L as PendingToolExecution, M as ElicitationResolution, N as EventResolution, O as CredentialStore, P as ExecutionCommit, Q as Session, R as PurgeRunsOptions, S as AgentRunPause, T as ApprovalResolution, U as RunCheckpoint, V as RetainableRunStatus, W as RunCorrelation, X as RunStatus, Y as RunResult, Z as RunStore, _ as createDigestContextCompactor, _t as validatePurgeRunsOptions, at as ToolExecutionRecord, b as resolveContextBudget, c as InMemoryRunStore, ct as WorkflowBudgetUsage, d as ContextCompactionStats, dt as WorkflowRun, et as SessionId, f as ContextCompactor, ft as WorkflowStepRecord, g as ResolvedContextBudget, gt as validateListEventsOptions, h as ModelContextCompactorOptions, ht as isRetainableRunStore, it as TimerResolution, j as ElicitationRequest, k as DurableRunStore, l as ContextCompactionInput, lt as WorkflowCheckpoint, m as DigestContextCompactorOptions, mt as isDurableRunStore, nt as TeamCheckpoint, ot as ToolExecutionResolution, p as ContextTokenEstimator, pt as WorkflowWaitRecord, q as RunRecord, rt as TeamRun, st as ToolExecutionStatus, tt as StoredRunCheckpoint, u as ContextCompactionOptions, ut as WorkflowCompensationRecord, v as createModelContextCompactor, w as ApprovalRequest, x as AgentRun, y as estimateContextTokens, z as PurgeRunsResult } from "../index-lCCFokc6.mjs";
+import { $ as SessionCompaction, A as ElicitationMode, B as ResumeRunResolution, C as ApprovalMode, D as CoordinatorRun, E as CoordinatorCheckpoint, F as ExecutionCreate, G as RunLease, H as RetainableRunStore, I as ListEventsOptions, J as RunRequest, K as RunPause, L as PendingToolExecution, M as ElicitationResolution, N as EventResolution, O as CredentialStore, P as ExecutionCommit, Q as Session, R as PurgeRunsOptions, S as AgentRunPause, T as ApprovalResolution, U as RunCheckpoint, V as RetainableRunStatus, W as RunCorrelation, X as RunStatus, Y as RunResult, Z as RunStore, _ as createDigestContextCompactor, _t as validatePurgeRunsOptions, at as ToolExecutionRecord, b as resolveContextBudget, c as InMemoryRunStore, ct as WorkflowBudgetUsage, d as ContextCompactionStats, dt as WorkflowRun, et as SessionId, f as ContextCompactor, ft as WorkflowStepRecord, g as ResolvedContextBudget, gt as validateListEventsOptions, h as ModelContextCompactorOptions, ht as isRetainableRunStore, it as TimerResolution, j as ElicitationRequest, k as DurableRunStore, l as ContextCompactionInput, lt as WorkflowCheckpoint, m as DigestContextCompactorOptions, mt as isDurableRunStore, nt as TeamCheckpoint, ot as ToolExecutionResolution, p as ContextTokenEstimator, pt as WorkflowWaitRecord, q as RunRecord, rt as TeamRun, st as ToolExecutionStatus, tt as StoredRunCheckpoint, u as ContextCompactionOptions, ut as WorkflowCompensationRecord, v as createModelContextCompactor, w as ApprovalRequest, x as AgentRun, y as estimateContextTokens, z as PurgeRunsResult } from "../index-giFR5t0x.mjs";
 export { AgentRun, AgentRunPause, ApprovalMode, ApprovalRequest, ApprovalResolution, ContextCompactionInput, ContextCompactionOptions, ContextCompactionStats, ContextCompactor, ContextTokenEstimator, CoordinatorCheckpoint, CoordinatorRun, CredentialStore, DigestContextCompactorOptions, DurableRunStore, ElicitationMode, ElicitationRequest, ElicitationResolution, EventResolution, ExecutionCommit, ExecutionCreate, InMemoryRunStore, ListEventsOptions, ModelContextCompactorOptions, PendingToolExecution, PurgeRunsOptions, PurgeRunsResult, ResolvedContextBudget, ResumeRunResolution, RetainableRunStatus, RetainableRunStore, RunCheckpoint, RunCorrelation, RunLease, RunPause, RunRecord, RunRequest, RunResult, RunStatus, RunStore, Session, SessionCompaction, SessionId, StoredRunCheckpoint, TeamCheckpoint, TeamRun, TimerResolution, ToolExecutionRecord, ToolExecutionResolution, ToolExecutionStatus, WorkflowBudgetUsage, WorkflowCheckpoint, WorkflowCompensationRecord, WorkflowRun, WorkflowStepRecord, WorkflowWaitRecord, createDigestContextCompactor, createModelContextCompactor, estimateContextTokens, isDurableRunStore, isRetainableRunStore, resolveContextBudget, validateListEventsOptions, validatePurgeRunsOptions };

package/dist/sandbox/index.d.mts

@@ -1,2 +1,2 @@
-import { a as SandboxError, c as sandboxResultToJson, i as SandboxCapabilities, n as createLocalSandbox, o as SandboxRunRequest, r as Sandbox, s as SandboxRunResult, t as LocalSandboxOptions } from "../index-DUhNa7IR.mjs";
+import { a as SandboxError, c as sandboxResultToJson, i as SandboxCapabilities, n as createLocalSandbox, o as SandboxRunRequest, r as Sandbox, s as SandboxRunResult, t as LocalSandboxOptions } from "../index-k-gBmfJP.mjs";
 export { LocalSandboxOptions, Sandbox, SandboxCapabilities, SandboxError, SandboxRunRequest, SandboxRunResult, createLocalSandbox, sandboxResultToJson };

package/dist/teams/index.d.mts

@@ -1,2 +1,2 @@
-import { a as TeamMember, c as defineTeam, i as TeamLimits, n as TeamDelegation, o as TeamStep, r as TeamHandoff, s as TeamTaskResult, t as TeamDefinition } from "../index-26ilbzAs.mjs";
+import { a as TeamMember, c as defineTeam, i as TeamLimits, n as TeamDelegation, o as TeamStep, r as TeamHandoff, s as TeamTaskResult, t as TeamDefinition } from "../index-DMmrhb8l.mjs";
 export { type TeamDefinition, type TeamDelegation, type TeamHandoff, type TeamLimits, type TeamMember, type TeamStep, type TeamTaskResult, defineTeam };

package/dist/testing/index.d.mts

@@ -1,9 +1,9 @@
-import { E as ToolProvider } from "../index-DHcfIfh-.mjs";
-import { a as ModelResult, n as ModelInput, t as ModelGateway } from "../index-D7r0puBi.mjs";
-import { m as ToolCall } from "../types-CckDlhYo.mjs";
-import { j as ElicitationRequest, k as DurableRunStore } from "../index-lCCFokc6.mjs";
-import { f as MemoryStore } from "../index-CIHWc5V1.mjs";
-import { d as ChannelMessage, f as ChannelOutput, o as ChannelElicitationContext, r as ChannelAdapter } from "../index-B8EcvWeN.mjs";
+import { E as ToolProvider } from "../index-AOouohIx.mjs";
+import { a as ModelResult, n as ModelInput, t as ModelGateway } from "../index-Cbe1ZiyN.mjs";
+import { m as ToolCall } from "../types-B6hD1o2I.mjs";
+import { j as ElicitationRequest, k as DurableRunStore } from "../index-giFR5t0x.mjs";
+import { f as MemoryStore } from "../index-D1LAhzgC.mjs";
+import { d as ChannelMessage, f as ChannelOutput, o as ChannelElicitationContext, r as ChannelAdapter } from "../index-AVlWktA8.mjs";
 //#region src/testing/contracts.d.ts
 interface ModelGatewayContract {
   output?: unknown;

package/dist/tools/index.d.mts

@@ -1,3 +1,3 @@
-import { A as ToolApproval, C as ConnectionToolPolicy, D as ToolProviderContext, E as ToolProvider, F as ToolRetryPolicy, I as ToolRisk, L as defineTool, M as ToolExecutionContext, N as ToolIdempotency, O as ToolProviderTool, P as ToolResult, R as toToolSpec, S as ConnectionDefinition, T as IntegrationErrorCategory, _ as FevexJsonSchemaProfileLimits, a as InMemoryToolEmbeddingCacheOptions, b as compileFevexJsonSchema, c as ToolEmbeddingIndexEntry, d as cosineSimilarity, f as schemaKeywords, g as FEVEX_JSON_SCHEMA_PROFILE_VERSION, h as toolEmbeddingText, i as InMemoryToolEmbeddingCache, j as ToolDefinition, k as defineConnection, l as ToolEmbeddingMatch, m as toolEmbeddingKey, n as ToolSearchCandidate, o as ToolEmbeddingCache, p as searchToolEmbeddingIndex, r as BuildToolEmbeddingIndexOptions, s as ToolEmbeddingIndex, t as ToolReranker, u as buildToolEmbeddingIndex, v as FevexJsonSchemaProfileOptions, w as IntegrationError, x as validateFevexJsonSchemaProfile, y as FevexJsonSchemaValidator } from "../index-DHcfIfh-.mjs";
-import { g as ToolSpec, m as ToolCall } from "../types-CckDlhYo.mjs";
+import { A as ToolApproval, C as ConnectionToolPolicy, D as ToolProviderContext, E as ToolProvider, F as ToolRetryPolicy, I as ToolRisk, L as defineTool, M as ToolExecutionContext, N as ToolIdempotency, O as ToolProviderTool, P as ToolResult, R as toToolSpec, S as ConnectionDefinition, T as IntegrationErrorCategory, _ as FevexJsonSchemaProfileLimits, a as InMemoryToolEmbeddingCacheOptions, b as compileFevexJsonSchema, c as ToolEmbeddingIndexEntry, d as cosineSimilarity, f as schemaKeywords, g as FEVEX_JSON_SCHEMA_PROFILE_VERSION, h as toolEmbeddingText, i as InMemoryToolEmbeddingCache, j as ToolDefinition, k as defineConnection, l as ToolEmbeddingMatch, m as toolEmbeddingKey, n as ToolSearchCandidate, o as ToolEmbeddingCache, p as searchToolEmbeddingIndex, r as BuildToolEmbeddingIndexOptions, s as ToolEmbeddingIndex, t as ToolReranker, u as buildToolEmbeddingIndex, v as FevexJsonSchemaProfileOptions, w as IntegrationError, x as validateFevexJsonSchemaProfile, y as FevexJsonSchemaValidator } from "../index-AOouohIx.mjs";
+import { g as ToolSpec, m as ToolCall } from "../types-B6hD1o2I.mjs";
 export { BuildToolEmbeddingIndexOptions, ConnectionDefinition, ConnectionToolPolicy, FEVEX_JSON_SCHEMA_PROFILE_VERSION, FevexJsonSchemaProfileLimits, FevexJsonSchemaProfileOptions, FevexJsonSchemaValidator, InMemoryToolEmbeddingCache, InMemoryToolEmbeddingCacheOptions, IntegrationError, IntegrationErrorCategory, ToolApproval, type ToolCall, ToolDefinition, ToolEmbeddingCache, ToolEmbeddingIndex, ToolEmbeddingIndexEntry, ToolEmbeddingMatch, ToolExecutionContext, ToolIdempotency, ToolProvider, ToolProviderContext, ToolProviderTool, ToolReranker, ToolResult, ToolRetryPolicy, ToolRisk, ToolSearchCandidate, type ToolSpec, buildToolEmbeddingIndex, compileFevexJsonSchema, cosineSimilarity, defineConnection, defineTool, schemaKeywords, searchToolEmbeddingIndex, toToolSpec, toolEmbeddingKey, toolEmbeddingText, validateFevexJsonSchemaProfile };

package/dist/{types-CckDlhYo.d.mts → types-B6hD1o2I.d.mts}

@@ -258,7 +258,7 @@ interface ToolEventSource {
   connectionName: string;
   remoteToolName: string;
 }
-type AgentEventType = 'run.started' | 'run.recovered' | 'run.paused' | 'run.resumed' | 'model.started' | 'model.output.delta' | 'model.completed' | 'context.compacted' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.retrying' | 'tool.execution_unknown' | 'artifact.created' | 'elicitation.requested' | 'elicitation.resolved' | 'approval.requested' | 'approval.resolved' | 'run.completed' | 'run.failed' | 'run.cancelled' | 'workflow.run.started' | 'workflow.run.recovered' | 'workflow.step.started' | 'workflow.step.completed' | 'workflow.step.failed' | 'workflow.compensation.started' | 'workflow.compensation.completed' | 'workflow.compensation.failed' | 'workflow.wait.started' | 'workflow.wait.completed' | 'workflow.run.paused' | 'workflow.run.resumed' | 'workflow.run.completed' | 'workflow.run.failed' | 'workflow.run.cancelled' | 'team.run.started' | 'team.run.recovered' | 'team.agent.assigned' | 'team.handoff.created' | 'team.task.completed' | 'team.task.failed' | 'team.merge.started' | 'team.merge.completed' | 'team.merge.failed' | 'team.run.paused' | 'team.run.resumed' | 'team.run.completed' | 'team.run.failed' | 'team.run.cancelled';
+type AgentEventType = 'run.started' | 'run.recovered' | 'run.paused' | 'run.resumed' | 'model.started' | 'model.output.delta' | 'model.completed' | 'context.compacted' | 'memory.completed' | 'tool.started' | 'tool.completed' | 'tool.failed' | 'tool.retrying' | 'tool.execution_unknown' | 'artifact.created' | 'elicitation.requested' | 'elicitation.resolved' | 'approval.requested' | 'approval.resolved' | 'policy.evaluated' | 'run.completed' | 'run.failed' | 'run.cancelled' | 'workflow.run.started' | 'workflow.run.recovered' | 'workflow.step.started' | 'workflow.step.completed' | 'workflow.step.failed' | 'workflow.compensation.started' | 'workflow.compensation.completed' | 'workflow.compensation.failed' | 'workflow.wait.started' | 'workflow.wait.completed' | 'workflow.run.paused' | 'workflow.run.resumed' | 'workflow.run.completed' | 'workflow.run.failed' | 'workflow.run.cancelled' | 'team.run.started' | 'team.run.recovered' | 'team.agent.assigned' | 'team.handoff.created' | 'team.task.completed' | 'team.task.failed' | 'team.merge.started' | 'team.merge.completed' | 'team.merge.failed' | 'team.run.paused' | 'team.run.resumed' | 'team.run.completed' | 'team.run.failed' | 'team.run.cancelled';
 interface AgentEventPayloads {
   'run.started': undefined;
   'run.recovered': {
@@ -306,10 +306,19 @@ interface AgentEventPayloads {
     teamDelegationId?: string;
     teamAgentName?: string;
   };
+  'memory.completed': {
+    operation: 'search' | 'write';
+    durationMs: number;
+    recordCount?: number;
+    recordId?: string;
+    error?: string;
+  };
   'tool.started': {
     step: number;
     toolCallId: string;
     toolName: string;
+    risk?: 'read' | 'write' | 'sensitive' | 'destructive';
+    declaredRisk?: 'read' | 'write' | 'sensitive' | 'destructive';
     attempt?: number;
     source?: ToolEventSource;
     workflowStepId?: string;
@@ -422,6 +431,15 @@ interface AgentEventPayloads {
     teamDelegationId?: string;
     teamAgentName?: string;
   };
+  'policy.evaluated': {
+    policyName: string;
+    toolName: string;
+    toolCallId?: string;
+    action: 'tool.execute' | 'approval.resolve';
+    decision: 'allow' | 'deny' | 'require_approval';
+    risk: 'read' | 'write' | 'sensitive' | 'destructive';
+    declaredRisk?: 'read' | 'write' | 'sensitive' | 'destructive';
+  };
   'run.completed': {
     output: JsonValue;
     usage?: JsonObject;

package/dist/workflows/index.d.mts

@@ -1,2 +1,2 @@
-import { a as WorkflowStep, c as defineWorkflow, i as WorkflowEventResult, n as WorkflowDefinition, o as WorkflowStepContext, r as WorkflowEventDefinition, s as WorkflowStepOptions, t as WorkflowAgentResult } from "../index-Btth7rdL.mjs";
+import { a as WorkflowStep, c as defineWorkflow, i as WorkflowEventResult, n as WorkflowDefinition, o as WorkflowStepContext, r as WorkflowEventDefinition, s as WorkflowStepOptions, t as WorkflowAgentResult } from "../index-CAVMQT9j.mjs";
 export { WorkflowAgentResult, WorkflowDefinition, WorkflowEventDefinition, WorkflowEventResult, WorkflowStep, WorkflowStepContext, WorkflowStepOptions, defineWorkflow };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fevex/core",
-  "version": "0.1.0-alpha.11",
+  "version": "0.1.0-alpha.12",
   "description": "Agent Engineering Framework for code-first, provider-neutral AI agents.",
   "type": "module",
   "license": "Apache-2.0",