@friskai/frisk-js 0.2.10 → 0.3.0

package/dist/adapters/langchain/index.js

@@ -2542,7 +2542,7 @@ var require_call_credentials = __commonJS((exports) => {
         if (isCurrentOauth2Client(googleCredentials)) {
           getHeaders = googleCredentials.getRequestHeaders(options.service_url);
         } else {
-          getHeaders = new Promise((resolve2, reject) => {
+          getHeaders = new Promise((resolve, reject) => {
             googleCredentials.getRequestMetadata(options.service_url, (err, headers) => {
               if (err) {
                 reject(err);
@@ -2552,7 +2552,7 @@ var require_call_credentials = __commonJS((exports) => {
                 reject(new Error("Headers not set by metadata plugin"));
                 return;
               }
-              resolve2(headers);
+              resolve(headers);
             });
           });
         }
@@ -2607,10 +2607,10 @@ var require_call_credentials = __commonJS((exports) => {
       this.metadataGenerator = metadataGenerator;
     }
     generateMetadata(options) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         this.metadataGenerator(options, (err, metadata) => {
           if (metadata !== undefined) {
-            resolve2(metadata);
+            resolve(metadata);
           } else {
             reject(err);
           }
@@ -2932,14 +2932,14 @@ var require_channel_credentials = __commonJS((exports) => {
     }
     connect(socket) {
       const tlsConnectOptions = Object.assign({ socket }, this.connectionOptions);
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         const tlsSocket = (0, tls_1.connect)(tlsConnectOptions, () => {
           var _a2;
           if (((_a2 = this.connectionOptions.rejectUnauthorized) !== null && _a2 !== undefined ? _a2 : true) && !tlsSocket.authorized) {
             reject(tlsSocket.authorizationError);
             return;
           }
-          resolve2({
+          resolve({
             socket: tlsSocket,
             secure: true
           });
@@ -3059,8 +3059,8 @@ var require_channel_credentials = __commonJS((exports) => {
       if (this.hasReceivedUpdates()) {
         return Promise.resolve(this.getLatestSecureContext());
       } else {
-        return new Promise((resolve2) => {
-          this.secureContextWatchers.push(resolve2);
+        return new Promise((resolve) => {
+          this.secureContextWatchers.push(resolve);
         });
       }
     }
@@ -3093,7 +3093,7 @@ var require_channel_credentials = __commonJS((exports) => {
       this.callCredentials = callCredentials;
     }
     connect(socket) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         const secureContext = this.parent.getLatestSecureContext();
         if (!secureContext) {
           reject(new Error("Failed to load credentials"));
@@ -3118,7 +3118,7 @@ var require_channel_credentials = __commonJS((exports) => {
             reject(tlsSocket.authorizationError);
             return;
           }
-          resolve2({
+          resolve({
             socket: tlsSocket,
             secure: true
           });
@@ -6646,7 +6646,7 @@ var require_aspromise = __commonJS((exports, module) => {
     var params = new Array(arguments.length - 1), offset = 0, index = 2, pending = true;
     while (index < arguments.length)
       params[offset++] = arguments[index++];
-    return new Promise(function executor(resolve2, reject) {
+    return new Promise(function executor(resolve, reject) {
       params[offset] = function callback(err) {
         if (pending) {
           pending = false;
@@ -6656,7 +6656,7 @@ var require_aspromise = __commonJS((exports, module) => {
             var params2 = new Array(arguments.length - 1), offset2 = 0;
             while (offset2 < params2.length)
               params2[offset2++] = arguments[offset2];
-            resolve2.apply(null, params2);
+            resolve.apply(null, params2);
           }
         }
       };
@@ -8044,7 +8044,7 @@ var require_path = __commonJS((exports) => {
     }
     return prefix + parts.join("/");
   };
-  path.resolve = function resolve2(originPath, includePath, alreadyNormalized) {
+  path.resolve = function resolve(originPath, includePath, alreadyNormalized) {
     if (!alreadyNormalized)
       includePath = normalize(includePath);
     if (isAbsolute(includePath))
@@ -8357,7 +8357,7 @@ var require_mapfield = __commonJS((exports, module) => {
       keepComments ? this.comment : undefined
     ]);
   };
-  MapField.prototype.resolve = function resolve2() {
+  MapField.prototype.resolve = function resolve() {
     if (this.resolved)
       return this;
     if (types.mapKey[this.keyType] === undefined)
@@ -8430,7 +8430,7 @@ var require_method = __commonJS((exports, module) => {
       this.parsedOptions
     ]);
   };
-  Method.prototype.resolve = function resolve2() {
+  Method.prototype.resolve = function resolve() {
     if (this.resolved)
       return this;
     this.resolvedRequestType = this.parent.lookupType(this.requestType);
@@ -9830,7 +9830,7 @@ var require_field = __commonJS((exports, module) => {
       keepComments ? this.comment : undefined
     ]);
   };
-  Field.prototype.resolve = function resolve2() {
+  Field.prototype.resolve = function resolve() {
     if (this.resolved)
       return this;
     if ((this.typeDefault = types.defaults[this.type]) === undefined) {
@@ -10084,7 +10084,7 @@ var require_object = __commonJS((exports, module) => {
     this.parent = null;
     this.resolved = false;
   };
-  ReflectionObject.prototype.resolve = function resolve2() {
+  ReflectionObject.prototype.resolve = function resolve() {
     if (this.resolved)
       return this;
     if (this.root instanceof Root)
@@ -15635,18 +15635,18 @@ var require_compression_filter = __commonJS((exports) => {
       this.maxRecvMessageLength = maxRecvMessageLength;
     }
     compressMessage(message) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         zlib.deflate(message, (err, output) => {
           if (err) {
             reject(err);
           } else {
-            resolve2(output);
+            resolve(output);
           }
         });
       });
     }
     decompressMessage(message) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         let totalLength = 0;
         const messageParts = [];
         const decompresser = zlib.createInflate();
@@ -15662,7 +15662,7 @@ var require_compression_filter = __commonJS((exports) => {
           }
         });
         decompresser.on("end", () => {
-          resolve2(Buffer.concat(messageParts));
+          resolve(Buffer.concat(messageParts));
         });
         decompresser.write(message);
         decompresser.end();
@@ -15676,18 +15676,18 @@ var require_compression_filter = __commonJS((exports) => {
       this.maxRecvMessageLength = maxRecvMessageLength;
     }
     compressMessage(message) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         zlib.gzip(message, (err, output) => {
           if (err) {
             reject(err);
           } else {
-            resolve2(output);
+            resolve(output);
           }
         });
       });
     }
     decompressMessage(message) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         let totalLength = 0;
         const messageParts = [];
         const decompresser = zlib.createGunzip();
@@ -15703,7 +15703,7 @@ var require_compression_filter = __commonJS((exports) => {
           }
         });
         decompresser.on("end", () => {
-          resolve2(Buffer.concat(messageParts));
+          resolve(Buffer.concat(messageParts));
         });
         decompresser.write(message);
         decompresser.end();
@@ -16957,7 +16957,7 @@ var require_http_proxy = __commonJS((exports) => {
     options.headers = headers;
     const proxyAddressString = (0, subchannel_address_1.subchannelAddressToString)(address);
     trace3("Using proxy " + proxyAddressString + " to connect to " + options.path);
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve, reject) => {
       const request = http.request(options);
       request.once("connect", (res, socket, head) => {
         request.removeAllListeners();
@@ -16968,7 +16968,7 @@ var require_http_proxy = __commonJS((exports) => {
             socket.unshift(head);
           }
           trace3("Successfully established a plaintext connection to " + options.path + " through proxy " + proxyAddressString);
-          resolve2(socket);
+          resolve(socket);
         } else {
           (0, logging_1.log)(constants_1.LogVerbosity.ERROR, "Failed to connect to " + options.path + " through proxy " + proxyAddressString + " with status " + res.statusCode);
           reject();
@@ -17840,7 +17840,7 @@ var require_transport = __commonJS((exports) => {
       if (secureConnectResult.socket.closed) {
         return Promise.reject("Connection closed before starting HTTP/2 handshake");
       }
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         var _a2, _b, _c, _d, _e, _f, _g, _h;
         let remoteName = null;
         let realTarget = this.channelTarget;
@@ -17905,7 +17905,7 @@ var require_transport = __commonJS((exports) => {
           session.removeAllListeners();
           secureConnectResult.socket.removeListener("close", closeHandler);
           secureConnectResult.socket.removeListener("error", errorHandler);
-          resolve2(new Http2Transport(session, address, options, remoteName));
+          resolve(new Http2Transport(session, address, options, remoteName));
           this.session = null;
         });
         session.once("close", closeHandler);
@@ -17919,7 +17919,7 @@ var require_transport = __commonJS((exports) => {
         if (proxiedSocket) {
           return proxiedSocket;
         } else {
-          return new Promise((resolve2, reject) => {
+          return new Promise((resolve, reject) => {
             const closeCallback = () => {
               reject(new Error("Socket closed"));
             };
@@ -17929,7 +17929,7 @@ var require_transport = __commonJS((exports) => {
             const socket = net.connect(address, () => {
               socket.removeListener("close", closeCallback);
               socket.removeListener("error", errorCallback);
-              resolve2(socket);
+              resolve(socket);
             });
             socket.once("close", closeCallback);
             socket.once("error", errorCallback);
@@ -21143,7 +21143,7 @@ var require_server_interceptors = __commonJS((exports) => {
         } else {
           decompresser = zlib.createGunzip();
         }
-        return new Promise((resolve2, reject) => {
+        return new Promise((resolve, reject) => {
           let totalLength = 0;
           const messageParts = [];
           decompresser.on("data", (chunk) => {
@@ -21158,7 +21158,7 @@ var require_server_interceptors = __commonJS((exports) => {
             }
           });
           decompresser.on("end", () => {
-            resolve2(Buffer.concat(messageParts));
+            resolve(Buffer.concat(messageParts));
           });
           decompresser.write(messageContents);
           decompresser.end();
@@ -21751,10 +21751,10 @@ var require_server = __commonJS((exports) => {
       bindOneAddress(address, boundPortObject) {
         this.trace("Attempting to bind " + (0, subchannel_address_1.subchannelAddressToString)(address));
         const http2Server = this.createHttp2Server(boundPortObject.credentials);
-        return new Promise((resolve2, reject) => {
+        return new Promise((resolve, reject) => {
           const onError = (err) => {
             this.trace("Failed to bind " + (0, subchannel_address_1.subchannelAddressToString)(address) + " with error " + err.message);
-            resolve2({
+            resolve({
               port: "port" in address ? address.port : 1,
               error: err.message
             });
@@ -21782,7 +21782,7 @@ var require_server = __commonJS((exports) => {
             });
             boundPortObject.listeningServers.add(http2Server);
             this.trace("Successfully bound " + (0, subchannel_address_1.subchannelAddressToString)(boundSubchannelAddress));
-            resolve2({
+            resolve({
               port: "port" in boundSubchannelAddress ? boundSubchannelAddress.port : 1
             });
             http2Server.removeListener("error", onError);
@@ -21835,7 +21835,7 @@ var require_server = __commonJS((exports) => {
         }
       }
       resolvePort(port) {
-        return new Promise((resolve2, reject) => {
+        return new Promise((resolve, reject) => {
           let seenResolution = false;
           const resolverListener = (endpointList, attributes, serviceConfig, resolutionNote) => {
             if (seenResolution) {
@@ -21851,7 +21851,7 @@ var require_server = __commonJS((exports) => {
               reject(new Error(`No addresses resolved for port ${port}`));
               return true;
             }
-            resolve2(addressList);
+            resolve(addressList);
             return true;
           };
           const resolver = (0, resolver_1.createResolver)(port, resolverListener, this.options);
@@ -27564,8 +27564,8 @@ var require_promise = __commonJS((exports) => {
     _resolve;
     _reject;
     constructor() {
-      this._promise = new Promise((resolve2, reject) => {
-        this._resolve = resolve2;
+      this._promise = new Promise((resolve, reject) => {
+        this._resolve = resolve;
         this._reject = reject;
       });
     }
@@ -27653,9 +27653,9 @@ var require_exporter = __commonJS((exports) => {
   var api_1 = require_src();
   var suppress_tracing_1 = require_suppress_tracing();
   function _export(exporter, arg) {
-    return new Promise((resolve2) => {
+    return new Promise((resolve) => {
       api_1.context.with((0, suppress_tracing_1.suppressTracing)(api_1.context.active()), () => {
-        exporter.export(arg, resolve2);
+        exporter.export(arg, resolve);
       });
     });
   }
@@ -28111,22 +28111,22 @@ var require_grpc_exporter_transport = __commonJS((exports) => {
           });
         }
       }
-      return new Promise((resolve2) => {
+      return new Promise((resolve) => {
         const deadline = Date.now() + timeoutMillis;
         if (this._metadata == null) {
-          return resolve2({
+          return resolve({
             error: new Error("metadata was null"),
             status: "failure"
           });
         }
         this._client.export(buffer, this._metadata, { deadline }, (err, response) => {
           if (err) {
-            resolve2({
+            resolve({
               status: "failure",
               error: err
             });
           } else {
-            resolve2({
+            resolve({
               data: response,
               status: "success"
             });
@@ -28469,9 +28469,9 @@ var require_http_exporter_transport = __commonJS((exports) => {
     async send(data, timeoutMillis) {
       const { agent, request } = await this._loadUtils();
       const headers = await this._parameters.headers();
-      return new Promise((resolve2) => {
+      return new Promise((resolve) => {
         (0, http_transport_utils_1.sendWithHttp)(request, this._parameters.url, headers, this._parameters.compression, this._parameters.userAgent, agent, data, (result) => {
-          resolve2(result);
+          resolve(result);
         }, timeoutMillis);
       });
     }
@@ -28520,9 +28520,9 @@ var require_retrying_transport = __commonJS((exports) => {
       this._transport = transport;
     }
     retry(data, timeoutMillis, inMillis) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         setTimeout(() => {
-          this._transport.send(data, timeoutMillis).then(resolve2, reject);
+          this._transport.send(data, timeoutMillis).then(resolve, reject);
         }, inMillis);
       });
     }
@@ -42765,14 +42765,14 @@ var require_BatchSpanProcessorBase = __commonJS((exports) => {
       this._maybeStartTimer();
     }
     _flushAll() {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         const promises = [];
         const count = Math.ceil(this._finishedSpans.length / this._maxExportBatchSize);
         for (let i = 0, j = count;i < j; i++) {
           promises.push(this._flushOneBatch());
         }
         Promise.all(promises).then(() => {
-          resolve2();
+          resolve();
         }).catch(reject);
       });
     }
@@ -42781,7 +42781,7 @@ var require_BatchSpanProcessorBase = __commonJS((exports) => {
       if (this._finishedSpans.length === 0) {
         return Promise.resolve();
       }
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         const timer = setTimeout(() => {
           reject(new Error("Timeout"));
         }, this._exportTimeoutMillis);
@@ -42796,7 +42796,7 @@ var require_BatchSpanProcessorBase = __commonJS((exports) => {
           const doExport = () => this._exporter.export(spans, (result) => {
             clearTimeout(timer);
             if (result.code === core_1.ExportResultCode.SUCCESS) {
-              resolve2();
+              resolve();
             } else {
               reject(result.error ?? new Error("BatchSpanProcessor: span export failed"));
             }
@@ -43056,12 +43056,12 @@ var require_MultiSpanProcessor = __commonJS((exports) => {
       for (const spanProcessor of this._spanProcessors) {
         promises.push(spanProcessor.forceFlush());
       }
-      return new Promise((resolve2) => {
+      return new Promise((resolve) => {
         Promise.all(promises).then(() => {
-          resolve2();
+          resolve();
         }).catch((error2) => {
           (0, core_1.globalErrorHandler)(error2 || new Error("MultiSpanProcessor: forceFlush failed"));
-          resolve2();
+          resolve();
         });
       });
     }
@@ -43087,9 +43087,9 @@ var require_MultiSpanProcessor = __commonJS((exports) => {
       for (const spanProcessor of this._spanProcessors) {
         promises.push(spanProcessor.shutdown());
       }
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         Promise.all(promises).then(() => {
-          resolve2();
+          resolve();
         }, reject);
       });
     }
@@ -43142,32 +43142,32 @@ var require_BasicTracerProvider = __commonJS((exports) => {
     forceFlush() {
       const timeout = this._config.forceFlushTimeoutMillis;
       const promises = this._activeSpanProcessor["_spanProcessors"].map((spanProcessor) => {
-        return new Promise((resolve2) => {
+        return new Promise((resolve) => {
           let state;
           const timeoutInterval = setTimeout(() => {
-            resolve2(new Error(`Span processor did not completed within timeout period of ${timeout} ms`));
+            resolve(new Error(`Span processor did not completed within timeout period of ${timeout} ms`));
             state = ForceFlushState.timeout;
           }, timeout);
           spanProcessor.forceFlush().then(() => {
             clearTimeout(timeoutInterval);
             if (state !== ForceFlushState.timeout) {
               state = ForceFlushState.resolved;
-              resolve2(state);
+              resolve(state);
             }
           }).catch((error2) => {
             clearTimeout(timeoutInterval);
             state = ForceFlushState.error;
-            resolve2(error2);
+            resolve(error2);
           });
         });
       });
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve, reject) => {
         Promise.all(promises).then((results) => {
           const errors3 = results.filter((result) => result !== ForceFlushState.resolved);
           if (errors3.length > 0) {
             reject(errors3);
           } else {
-            resolve2();
+            resolve();
           }
         }).catch((error2) => reject([error2]));
       });
@@ -43618,6 +43618,13 @@ class UnexpectedFriskServerResponseError extends Error {
   }
 }
 
+class MissingToolPoliciesExtensionError extends FriskError {
+  constructor(options) {
+    super("decide_tool_call requires the tool policies extension. Install and register the @friskai/frisk-js-tool-policies extension; calling frisk.connect() alone is not sufficient.", options);
+    this.name = "MissingToolPoliciesExtensionError";
+  }
+}
+
 class ToolCallSpanNotInitializedError extends Error {
   constructor(message = "Tool call span has not been initialized. Call enter() first.") {
     super(message);
@@ -48358,6 +48365,7 @@ class FriskSession {
   logger;
   _rootRunId = null;
   _isTracing = false;
+  _agentState = null;
   toolCallSequenceNumber = 0;
   toolCallSequenceGenerator = this.createToolCallSequenceGenerator();
   toolCallErrorCount = 0;
@@ -48385,13 +48393,19 @@ class FriskSession {
   }
   async createToolCallSpan({
     name,
-    args: toolArgsInput
+    args: toolArgsInput,
+    agentState
   }) {
     const toolArgs = this.validateToolArgs(toolArgsInput);
     const redactedToolArgsResult = this.frisk.adapter?.serializeToolArgs(removeLlmReasoningArg(toolArgs), { redact: this.redaction.redactToolArgs }) ?? {
       value: "{}",
       redactedPaths: []
     };
+    const agentStateToUse = agentState ?? this._agentState ?? {};
+    const redactedAgentStateResult = this.frisk.adapter?.serializeAgentState(agentStateToUse, { redact: this.redaction.redactAgentState }) ?? {
+      value: "{}",
+      redactedPaths: []
+    };
     const sessionSpan = this.rootSpan;
     const parentContext = sessionSpan ? import_api2.trace.setSpan(import_api2.context.active(), sessionSpan) : import_api2.context.active();
     const spanAttributes = {
@@ -48399,6 +48413,8 @@ class FriskSession {
       [ATTRIBUTE_NAME_TOOL_NAME]: name,
       [ATTRIBUTE_NAME_TOOL_ARGS_JSON]: redactedToolArgsResult.value,
       [ATTRIBUTE_NAME_TOOL_ARGS_REDACTED_PATHS_JSON]: JSON.stringify(redactedToolArgsResult.redactedPaths),
+      [ATTRIBUTE_NAME_AGENT_STATE_JSON]: redactedAgentStateResult.value ?? "{}",
+      [ATTRIBUTE_NAME_AGENT_STATE_REDACTED_PATHS_JSON]: JSON.stringify(redactedAgentStateResult.redactedPaths),
       [ATTRIBUTE_NAME_TOOL_CALL_SEQUENCE_NUMBER]: this.toolCallSequenceGenerator.next().value
     };
     await this.frisk.toolRegistrationComplete;
@@ -48510,13 +48526,14 @@ class FriskSession {
   getToolCallErrorCount() {
     return this.toolCallErrorCount;
   }
-  initTracing({ runId, inputs }) {
+  initTracing({ runId, agentState }) {
     this._rootRunId = runId;
     this._isTracing = true;
+    this._agentState = agentState;
     const span = this.tracer.startSpan(SPAN_NAME_FRISK_SESSION);
     span.setAttribute(ATTRIBUTE_NAME_SESSION_ID, this.id);
     span.setAttribute(ATTRIBUTE_NAME_REMOTE_SESSION_ID, runId);
-    const userPrompt = this.frisk.adapter.extractPrompt?.(inputs);
+    const userPrompt = this.frisk.adapter.extractPrompt?.(agentState);
     if (userPrompt) {
       span.setAttribute(ATTRIBUTE_NAME_SESSION_PROMPT, userPrompt);
     }
@@ -48565,7 +48582,7 @@ class FriskCallbackHandler extends BaseCallbackHandler {
     if (parentRunId === undefined) {
       this.session.initTracing({
         runId,
-        inputs
+        agentState: inputs
       });
     }
   }
@@ -48679,26 +48696,52 @@ function combineRedactOptions(...options) {
   }
   return false;
 }
-function redactDictionarySimple(data, redactOption) {
+function deleteDotPath(root, path) {
+  const parts = path.split(".").filter((p) => p.length > 0);
+  if (parts.length === 0)
+    return false;
+  let cur = root;
+  for (const key of parts.slice(0, -1)) {
+    if (cur === null || typeof cur !== "object" || Array.isArray(cur))
+      return false;
+    if (!(key in cur))
+      return false;
+    cur = cur[key];
+  }
+  if (cur === null || typeof cur !== "object" || Array.isArray(cur))
+    return false;
+  const last = parts[parts.length - 1];
+  if (!(last in cur))
+    return false;
+  delete cur[last];
+  return true;
+}
+function deepClone(obj) {
+  return JSON.parse(JSON.stringify(obj));
+}
+function redactObject(data, redactOption) {
   if (redactOption === undefined || redactOption === false) {
     return { value: data, redactedPaths: [] };
   }
-  const redactedPaths = [];
-  const result = { ...data };
   if (redactOption === true) {
-    for (const key of Object.keys(result)) {
-      delete result[key];
-      redactedPaths.push(key);
-    }
-  } else if (Array.isArray(redactOption)) {
-    for (const path of redactOption) {
-      if (path in result) {
-        delete result[path];
-        redactedPaths.push(path);
-      }
+    return { value: {}, redactedPaths: ["*"] };
+  }
+  if (!Array.isArray(redactOption) || redactOption.length === 0) {
+    return { value: data, redactedPaths: [] };
+  }
+  const out = deepClone(data);
+  const hits = [];
+  const seen = new Set;
+  for (const rawPath of redactOption) {
+    const path = rawPath.trim();
+    if (path.length === 0)
+      continue;
+    if (deleteDotPath(out, path) && !seen.has(path)) {
+      seen.add(path);
+      hits.push(path);
     }
   }
-  return { value: result, redactedPaths };
+  return { value: out, redactedPaths: hits };
 }
 // src/framework-adapter/base-framework-adapter.ts
 class BaseFrameworkAdapter {
@@ -48725,10 +48768,10 @@ class BaseFrameworkAdapter {
     };
   }
   toolArgsToDict(toolArgs, options) {
-    return redactDictionarySimple(toolArgs, options?.redact);
+    return redactObject(toolArgs, options?.redact);
   }
   agentStateToDict(agentState, options) {
-    return redactDictionarySimple(agentState, options?.redact);
+    return redactObject(agentState, options?.redact);
   }
   normalizeToolCall(toolCall) {
     return {
@@ -48749,22 +48792,6 @@ class BaseFrameworkAdapter {
 var DefaultWrapToolOptions = {
   captureReasoning: true
 };
-
-// src/native-bindings/index.ts
-import { createRequire as createRequire2 } from "module";
-import { dirname, resolve } from "path";
-var require2 = createRequire2(import.meta.url);
-function resolveNativePath() {
-  const injected = process.env.FRISk_NATIVE_BINDINGS_PATH;
-  if (injected)
-    return injected;
-  const pkgJsonPath = require2.resolve("@friskai/frisk-js/package.json");
-  const pkgRoot = dirname(pkgJsonPath);
-  return resolve(pkgRoot, "native/index.cjs");
-}
-var nativeBindings = require2(resolveNativePath());
-var FriskHandle = nativeBindings.FriskHandle;
-var redactDictionary = nativeBindings.redactDictionary;
 // src/telemetry/tracing-manager.ts
 var import_grpc_js = __toESM(require_src4(), 1);
 var import_exporter_trace_otlp_grpc = __toESM(require_src12(), 1);
@@ -49075,12 +49102,12 @@ function detectRuntime() {
 
 // src/core/sdk-attributes/read-sdk-meta.ts
 import { existsSync, readFileSync } from "node:fs";
-import { dirname as dirname2, join } from "node:path";
+import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // src/generated/sdk-meta.ts
 var SDK_NAME = "@friskai/frisk-js";
-var SDK_VERSION = "0.2.10";
+var SDK_VERSION = "0.3.0";
 
 // src/core/sdk-attributes/read-sdk-meta.ts
 function getSdkMeta() {
@@ -49114,7 +49141,7 @@ function findNearestPackageJson(startDir) {
     if (existsSync(candidate)) {
       return candidate;
     }
-    const parent = dirname2(dir);
+    const parent = dirname(dir);
     if (parent === dir) {
       return null;
     }
@@ -49123,7 +49150,7 @@ function findNearestPackageJson(startDir) {
 }
 function tryReadPackageJson() {
   try {
-    const here = dirname2(fileURLToPath(import.meta.url));
+    const here = dirname(fileURLToPath(import.meta.url));
     const pkgPath = findNearestPackageJson(here);
     if (!pkgPath)
       return null;
@@ -49491,6 +49518,9 @@ class ToolRegistry {
 
 // src/core/frisk.ts
 class Frisk {
+  get toolPoliciesAvailable() {
+    return this.toolPolicies?.available ?? false;
+  }
   get redaction() {
     return this._redaction;
   }
@@ -49498,24 +49528,34 @@ class Frisk {
   apiBaseUrl;
   otlpEndpoint;
   accessTokenProvider;
+  get adapter() {
+    return this._adapter;
+  }
+  get logLevel() {
+    return this._logLevel;
+  }
+  get tracingManager() {
+    if (!this._tracingManager) {
+      throw new FriskNotInitializedError;
+    }
+    return this._tracingManager;
+  }
   initialized = false;
   rootLogger;
   logger;
   _logLevel;
   _adapter;
-  _friskHandle = null;
   _tracingManager = null;
-  _toolRegistry;
+  toolRegistry;
   sdkAttributes;
+  extensions = [];
+  toolPolicies = null;
   wrapToolsCalled = false;
   get toolRegistrationComplete() {
     if (!this.wrapToolsCalled) {
       return Promise.resolve(true);
     }
-    return this._toolRegistry.initialized;
-  }
-  get logLevel() {
-    return this._logLevel;
+    return this.toolRegistry.initialized;
   }
   static async connect(options) {
     const instance = new this(options);
@@ -49529,7 +49569,7 @@ class Frisk {
     this._logLevel = options?.logging?.logLevel;
     this.logger = deriveSdkLogger({
       logger: this.rootLogger,
-      logLevel: this._logLevel
+      logLevel: this.logLevel
     }, {
       component: "FriskCore"
     });
@@ -49549,10 +49589,10 @@ class Frisk {
       baseUrl,
       logging: {
         logger: this.rootLogger,
-        logLevel: this._logLevel
+        logLevel: this.logLevel
       }
     });
-    this._toolRegistry = new ToolRegistry({
+    this.toolRegistry = new ToolRegistry({
       apiBaseUrl: baseUrl,
       getAccessToken: async () => this.accessTokenProvider.getAccessToken(),
       logger: this.logger
@@ -49563,21 +49603,20 @@ class Frisk {
     }
     this.otlpEndpoint = otlpEndpoint;
     this._redaction = resolveRedactionOptions(options?.redact);
+    this.extensions = options?.extensions ?? [];
+    this.mountExtensions();
   }
-  get friskHandle() {
-    if (!this._friskHandle) {
-      throw new FriskNotInitializedError;
+  mountExtensions() {
+    for (const ext of this.extensions) {
+      if ("available" in ext && "decideToolCall" in ext) {
+        this.toolPolicies = ext;
+      }
     }
-    return this._friskHandle;
-  }
-  get adapter() {
-    return this._adapter;
   }
-  get tracingManager() {
-    if (!this._tracingManager) {
-      throw new FriskNotInitializedError;
+  async initializeExtensions() {
+    for (const ext of this.extensions) {
+      await ext.initialize(this);
     }
-    return this._tracingManager;
   }
   async connect() {
     if (!this.initialized) {
@@ -49591,20 +49630,20 @@ class Frisk {
         tracerName: TRACER_NAME,
         tracerVersion: TRACER_VERSION
       });
-      this._friskHandle = new FriskHandle(currentToken, this.apiBaseUrl, this.otlpEndpoint);
       this.accessTokenProvider.addCallback((newToken) => this.updateAccessToken(newToken));
       this.accessTokenProvider.startBackgroundRefresh();
       this.initialized = true;
+      await this.initializeExtensions();
     }
   }
   session(metadata) {
     const session = new FriskSession({
       frisk: this,
-      redact: this._redaction,
+      redact: this.redaction,
       tracer: this.tracingManager.getTracer(),
       logging: {
         logger: this.rootLogger,
-        logLevel: this._logLevel
+        logLevel: this.logLevel
       }
     });
     const registry2 = SessionRegistry.getInstance();
@@ -49612,20 +49651,20 @@ class Frisk {
     return session;
   }
   normalizeToolCall(toolCall) {
-    return this._adapter.normalizeToolCall(toolCall);
+    return this.adapter.normalizeToolCall(toolCall);
   }
   wrapTools(tools, options = DefaultWrapToolOptions) {
     this.wrapToolsCalled = true;
     const toolList = [...tools];
-    const registerToolProperties = toolList.map((tool) => this._adapter.extractRegisterToolProperties?.(tool)).filter((properties) => properties !== null && properties !== undefined);
+    const registerToolProperties = toolList.map((tool) => this.adapter.extractRegisterToolProperties?.(tool)).filter((properties) => properties !== null && properties !== undefined);
     if (registerToolProperties.length > 0) {
-      this._toolRegistry.registerTools({
+      this.toolRegistry.registerTools({
         tools: registerToolProperties,
         sdkAttributes: this.sdkAttributes
       });
     }
-    if (this._adapter.wrapTools) {
-      return this._adapter.wrapTools(toolList, options);
+    if (this.adapter.wrapTools) {
+      return this.adapter.wrapTools(toolList, options);
     }
     return toolList;
   }
@@ -49637,8 +49676,8 @@ class Frisk {
     };
   }
   wrapTool(tool, options = DefaultWrapToolOptions) {
-    if (this._adapter.wrapTool) {
-      return this._adapter.wrapTool(tool, options);
+    if (this.adapter.wrapTool) {
+      return this.adapter.wrapTool(tool, options);
     }
     return tool;
   }
@@ -49647,30 +49686,38 @@ class Frisk {
     return registry2.get(sessionId);
   }
   updateAccessToken(authToken) {
-    this.friskHandle.updateAuthToken(authToken);
+    this.toolPolicies?.updateAccessToken(authToken);
     this.tracingManager.updateAuthToken(authToken);
   }
   getRegisteredTool(toolName) {
-    return this._toolRegistry.getRegisteredTool(toolName);
+    return this.toolRegistry.getRegisteredTool(toolName);
   }
   decideToolCall({
     toolCall,
     agentState,
     traceContextCarrier
   }) {
-    const id = toolCall.id ?? v4();
-    const argsJson = toolCall.args ? JSON.stringify(removeLlmReasoningArg(toolCall.args)) : null;
-    const stateJson = agentState ? JSON.stringify(agentState) : null;
-    const registeredTool = this.getRegisteredTool(toolCall.name);
-    const coreResult = this.friskHandle.process(toolCall.name, registeredTool?.id ?? null, registeredTool?.versionId ?? null, argsJson, stateJson, id, this._redaction, traceContextCarrier);
-    const outcome = coreResult.decision === "allow" ? "allow" /* ALLOW */ : coreResult.decision === "deny" ? "deny" /* DENY */ : coreResult.decision === "escalate" ? "escalate" /* ESCALATE */ : "error" /* ERROR */;
-    return {
-      outcome,
-      rulesMatchedCount: coreResult.rulesMatchedCount,
-      reason: coreResult.reason,
-      policyId: coreResult.policyId,
-      policyVersionId: coreResult.policyVersionId
-    };
+    if (!this.toolPolicies) {
+      throw new MissingToolPoliciesExtensionError;
+    }
+    const toolArgsJson = toolCall.args ? JSON.stringify(toolCall.args) : null;
+    const agentStateJson = agentState ? JSON.stringify(agentState) : null;
+    const redactedArgs = toolCall.args ? redactObject(toolCall.args, this.redaction.redactToolArgs) : { value: {}, redactedPaths: [] };
+    const toolArgsRedactedJson = toolCall.args ? JSON.stringify(redactedArgs.value) : null;
+    const toolArgsRedactedPathsJson = JSON.stringify(redactedArgs.redactedPaths);
+    const redactedState = agentState ? redactObject(agentState, this.redaction.redactAgentState) : { value: {}, redactedPaths: [] };
+    const agentStateRedactedJson = agentState ? JSON.stringify(redactedState.value) : null;
+    const agentStateRedactedPathsJson = JSON.stringify(redactedState.redactedPaths);
+    return this.toolPolicies.decideToolCall({
+      toolCall,
+      toolArgsJson,
+      toolArgsRedactedJson,
+      toolArgsRedactedPathsJson,
+      agentStateJson,
+      agentStateRedactedJson,
+      agentStateRedactedPathsJson,
+      traceContextCarrier
+    });
   }
   async getOrCreateToolApprovalRequest({
     toolCallId,
@@ -49718,7 +49765,9 @@ class Frisk {
     if (this.tracingManager) {
       await this.tracingManager.shutdown();
     }
-    this.friskHandle.shutdown();
+    for (const ext of this.extensions) {
+      ext.shutdown();
+    }
   }
 }
 
@@ -49778,7 +49827,10 @@ class FriskToolMiddleware {
     this.logger = deriveSdkLogger(options?.logging, {
       component: "FriskToolMiddleware"
     });
-    this.toolPoliciesEnabled = options?.controls?.toolPolicies !== false;
+    this.toolPoliciesEnabled = options?.controls?.toolPolicies === true;
+    if (this.toolPoliciesEnabled && !frisk.toolPoliciesAvailable) {
+      throw new MissingToolPoliciesExtensionError;
+    }
   }
   get frisk() {
     return this._frisk;
@@ -50039,14 +50091,14 @@ function createFriskToolCallId() {
 }
 
 // src/adapters/langchain/langchain-framework-adapter/get-langchain-version.ts
-import { createRequire as createRequire3 } from "module";
+import { createRequire as createRequire2 } from "module";
 var langchainVersionSet = false;
 var langchainVersion = null;
 function tryGetLangchainVersion() {
   if (!langchainVersionSet) {
     try {
-      const require3 = createRequire3(import.meta.url);
-      const pkg = require3("langchain/package.json");
+      const require2 = createRequire2(import.meta.url);
+      const pkg = require2("langchain/package.json");
       langchainVersion = pkg.version ?? null;
     } catch {
       langchainVersion = null;
@@ -50147,11 +50199,11 @@ class LangchainFrameworkAdapter {
     };
   }
   toolArgsToDict(toolArgs, options) {
-    return redactDictionarySimple(toolArgs, options?.redact);
+    return redactObject(toolArgs, options?.redact);
   }
   agentStateToDict(agentState, options) {
     const combinedRedact = combineRedactOptions(EXCLUDED_STATE_KEYS, options?.redact);
-    return redactDictionarySimple(agentState, combinedRedact);
+    return redactObject(agentState, combinedRedact);
   }
   normalizeToolCall(toolCall) {
     return {
@@ -50218,7 +50270,7 @@ var FRISK_CONTEXT_SCHEMA = object({
   [FRISK_SESSION_ID_KEY]: string2().optional()
 });
 var DefaultFriskGuardControls = {
-  toolPolicies: true
+  toolPolicies: false
 };
 
 class FriskLangchain extends Frisk {
@@ -50279,5 +50331,5 @@ export {
   FRISK_SESSION_ID_KEY
 };
 
-//# debugId=A5DABECDF865C55064756E2164756E21
+//# debugId=46F5000910B6966364756E2164756E21
 //# sourceMappingURL=index.js.map