@full-self-browsing/lattice 1.4.0 → 1.5.0

package/dist/provider-C2IfKsvz.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-C2IfKsvz.d.ts","names":[],"sources":["../src/tracing/tracing.ts","../src/outputs/contracts.ts","../src/plan/plan.ts","../src/sessions/session.ts","../src/context/context-pack.ts","../src/contract/invariants.ts","../src/contract/pii-detectors.ts","../src/contract/tripwire.ts","../src/results/errors.ts","../src/tools/tool-use.ts","../src/tools/tools.ts","../src/tools/tool-call-validation.ts","../src/providers/quirks.ts","../src/capabilities/profile.ts","../src/capabilities/sanitizer-recommendations.ts","../src/capabilities/negotiate.ts","../src/providers/provider.ts"],"mappings":";;;;UAAiB,UAAA;EAAA,SACN,IAAA;EAAA,SACA,IAAA,OACP,IAAA,UACA,EAAA,QAAU,CAAA,GAAI,OAAA,CAAQ,CAAA,GACtB,UAAA,GAAa,MAAA,sBACV,CAAA,GAAI,OAAA,CAAQ,CAAA;EAAA,SACR,KAAA,IAAS,IAAA,UAAc,UAAA,GAAa,MAAA;AAAA;AAAA,KAGnC,YAAA;AAAA,UAiCK,QAAA;EAAA,SACN,IAAA,EAAM,YAAA;EAAA,SACN,SAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;EAAA,SACA,OAAA;EAAA,SACA,UAAA;EAAA,SACA,OAAA;EAAA,SACA,UAAA;EAAA,SACA,QAAA,GAAW,MAAA;AAAA;AAAA,KAGV,YAAA,IAAgB,KAAA,EAAO,QAAA,YAAoB,OAAA;;;KCnD3C,kBAAA;AAAA,UAEK,WAAA;EAAA,SACN,UAAA;EAAA,SACA,KAAA;EAAA,SACA,IAAA;IAAA,SACE,KAAA;IAAA,SACA,GAAA;EAAA;EAAA,SAEF,QAAA,GAAW,MAAA;AAAA;AAAA,UAGL,uBAAA;EAAA,SACN,IAAA;AAAA;AAAA,UAGM,0BAAA;EAAA,SACN,IAAA;EAAA,SACA,YAAA,GAAe,YAAA;AAAA;AAAA,KAGd,oBAAA,GAAuB,gBAAA;AAAA,KAEvB,cAAA,GACR,kBAAA,GACA,oBAAA,GACA,uBAAA,GACA,0BAAA;AAAA,KAEQ,iBAAA,GAAoB,MAAA,SAAe,cAAA;AAAA,cAElC,MAAA;eACE,uBAAA;;aAKF,YAAA,GAAe,YAAA;EAAA,IACjB,0BAAA;AAAA;;;KClCC,mBAAA;AAAA,KAQA,kBAAA;AAAA,KAYA,oBAAA;AAAA,UAOK,kBAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA,EAAM,kBAAA;EAAA,SACN,MAAA,EAAQ,oBAAA;EAAA,SACR,cAAA;EAAA,SACA,eAAA;EAAA,SACA,QAAA;EAAA,SACA,QAAA,GAAW,MAAA;AAAA;AAAA,UAGL,iBAAA;EAAA,SACN,IAAA;EAAA,SACA,OAAA;AAAA;AAAA,UAGM,cAAA;EAAA,SACN,UAAA;EAAA,SACA,OAAA;EAAA,SACA,UAAA,EAAY,eAAA;EAAA,SACZ,KAAA;EAAA,SACA,QAAA;EAAA,SACA,OAAA,WAAkB,iBAAA;EAAA,SAClB,SAAA,EAAW,cAAA;AAAA;AAAA,UAGL,cAAA;EAAA,SACN,WAAA;EAAA,SACA,YAAA;EAAA,SACA,OAAA;EAAA,SACA,SAAA;AAAA;AAAA,UAGM,aAAA;EAAA,SACN,UAAA;EAAA,SACA,OAAA;EAAA,SACA,KAAA;EAAA,SACA,SAAA,EAAW,cAAA;EAAA,SACX,eAAA,WAA0B,kBAAA;EAAA,SAC1B,gBAAA,WAA2B,kBAAA;EAAA,SAC3B,aAAA,WAAwB,qBAAA;AAAA;AAAA,UAGlB,aAAA;EAAA,SACN,UAAA;EAAA,SACA,OAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;AAAA;AAAA,UAGM,aAAA;EAAA,SACN,cAAA;EAAA,SACA,QAAA,GAAW,aAAA;EAAA,SACX,UAAA,WAAqB,cAAA;EAAA,SACrB,QAAA,WAAmB,cAAA;EAAA,SACnB,aAAA,WAAwB,aAAA;EAAA,SACxB,cAAA,WAAyB,iBAAA;AAAA;AAAA,UAGnB,eAAA;EAAA,SACN,EAAA;EAAA,SACA,WAAA;EAAA,SACA,eAAA;EAAA,SACA,QAAA,WAAmB,mBAAA;EAAA,SACnB,UAAA,WAAqB,mBAAA;EAAA,SACrB,QAAA,WAAmB,mBAAA;EAAA,SACnB,OAAA,WAAkB,mBAAA;EAAA,SAClB,QAAA;AAAA;AAAA,UAGM,mBAAA;EAAA,SACN,UAAA;EAAA,SACA,aAAA;EAAA,SACA,MAAA;EAAA,SACA,eAAA;EAAA,SACA,KAAA;AAAA;AAAA,UAGM,qBAAA;EAAA,SACN,UAAA;EAAA,SACA,OAAA;EAAA,SACA,SAAA,WAAoB,4BAAA;EAAA,SACpB,QAAA;AAAA;AAAA,UAGM,4BAAA;EAAA,SACN,UAAA;EAAA,SACA,SAAA,EAAW,qBAAA;EAAA,SACX,SAAA;EAAA,SACA,gBAAA;EAAA,SACA,eAAA,GAAkB,mCAAA;EAAA,SAClB,QAAA;AAAA;AAAA,KAGC,kCAAA,GACR,qBAAA;AAAA,UAGa,mCAAA;EAAA,SACN,KAAA;EAAA,SACA,UAAA,EAAY,kCAAA;EAAA,SACZ,MAAA;EAAA,SACA,SAAA;EAAA,SACA,SAAA;EAAA,SACA,SAAA,GAAY,qCAAA;AAAA;AAAA,UAGN,qCAAA;EAAA,SACN,IAAA;EAAA,SACA,WAAA;AAAA;AAAA,UAGM,qBAAA;EAAA,SACN,UAAA;EAAA,SACA,OAAA;EAAA,SACA,MAAA;EAAA,SACA,SAAA;EAAA,SACA,WAAA;EAAA,SACA,KAAA;EAAA,SACA,KAAA,GAAQ,WAAA;EAAA,SACR,QAAA,GAAW,MAAA;AAAA;AAAA,UAGL,WAAA;EAAA,SACN,WAAA;EAAA,SACA,YAAA;EAAA,SACA,WAAA;EAAA,SACA,OAAA;EAAA,SACA,SAAA;AAAA;AAAA,UAGM,aAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA;EAAA,SACA,OAAA;EAAA,SACA,SAAA;EAAA,SACA,MAAA,EAAQ,mBAAA;EAAA,SACR,IAAA;EAAA,SACA,WAAA;EAAA,SACA,YAAA,WAAuB,WAAA;EAAA,SACvB,KAAA,EAAO,aAAA;EAAA,SACP,MAAA,WAAiB,kBAAA;EAAA,SACjB,OAAA,GAAU,eAAA;EAAA,SACV,iBAAA,GAAoB,qBAAA;EAAA,SACpB,QAAA,WAAmB,qBAAA;EAAA,SACnB,QAAA;EAAA,SACA,QAAA,GAAW,MAAA;AAAA;AAAA,UAGL,iBAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA;EAAA,SACA,SAAA;EAAA,SACA,MAAA;EAAA,SACA,MAAA;EAAA,SACA,QAAA;AAAA;AAAA,KAGC,UAAA,GAAa,aAAA,GAAgB,iBAAA;;;UC9LxB,UAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA;AAAA;AAAA,UAGM,WAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA;EAAA,SACA,YAAA,WAAuB,WAAA;EAAA,SACvB,MAAA;EAAA,SACA,kBAAA,WAA6B,WAAA;EAAA,SAC7B,SAAA;AAAA;AAAA,UAGM,cAAA;EAAA,SACN,EAAA;EAAA,SACA,WAAA,EAAa,WAAA;EAAA,SACb,aAAA;EAAA,SACA,KAAA;EAAA,SACA,SAAA;AAAA;AAAA,UAGM,aAAA,SAAsB,UAAA;EAAA,SAC5B,IAAA;EAAA,SACA,QAAA;EAAA,SACA,gBAAA;EAAA,SACA,KAAA,WAAgB,WAAA;EAAA,SAChB,SAAA,WAAoB,cAAA;EAAA,SACpB,YAAA,WAAuB,WAAA;EAAA,SACvB,OAAA;EAAA,SACA,SAAA;EAAA,SACA,SAAA;AAAA;AAAA,UAGM,oBAAA;EAAA,SACN,EAAA;EAAA,SACA,QAAA;EAAA,SACA,gBAAA;AAAA;AAAA,UAGM,sBAAA;EAAA,SACN,SAAA;EAAA,SACA,IAAA;EAAA,SACA,YAAA,WAAuB,WAAA;EAAA,SACvB,kBAAA,YAA8B,WAAA;EAAA,SAC9B,MAAA;AAAA;AAAA,UAGM,YAAA;EAAA,SACN,IAAA;EAAA,SACA,EAAA;EACT,MAAA,CAAO,OAAA,GAAU,oBAAA,GAAuB,OAAA,CAAQ,aAAA;EAChD,IAAA,CAAK,EAAA,WAAa,OAAA,CAAQ,aAAA;EAC1B,IAAA,CAAK,OAAA,EAAS,aAAA,GAAgB,OAAA,CAAQ,aAAA;EACtC,MAAA,CAAO,QAAA,UAAkB,OAAA,GAAU,IAAA,CAAK,oBAAA,gBAAoC,OAAA,CAAQ,aAAA;EACpF,UAAA,CAAW,KAAA,EAAO,sBAAA,GAAyB,OAAA,CAAQ,aAAA;AAAA;AAAA,UAGpC,yBAAA;EAAA,SACN,EAAA;AAAA;AAAA,iBAGK,wBAAA,CACd,OAAA,GAAS,yBAAA,GACR,YAAA;;;KCzDS,UAAA;AAAA,UAEK,WAAA,SAAoB,eAAA;EAAA,SAC1B,IAAA;AAAA;AAAA,UAGM,qBAAA;EAAA,SACN,IAAA;EAAA,SACA,SAAA,WAAoB,aAAA;EAAA,SACpB,KAAA,GAAQ,aAAA;EAAA,SACR,OAAA,GAAU,aAAA;EAAA,SACV,WAAA;AAAA;AAAA,UAGM,iBAAA;EACf,SAAA,CAAU,KAAA;IAAA,SACC,SAAA,WAAoB,WAAA;IAAA,SACpB,YAAA;EAAA,IACP,OAAA,UAAiB,WAAA,eAA0B,WAAA;AAAA;AAAA,iBAGjC,gBAAA,CAAiB,KAAA,EAAO,qBAAA,GAAwB,WAAA;AAAA,iBA6EhD,sBAAA,CAAuB,QAAA,EAAU,aAAA,GAAgB,WAAA;AAAA,iBAsBjD,cAAA,CAAe,KAAA;AAAA,iBAIf,qBAAA,CACd,SAAA,WAAoB,aAAA,cACV,WAAA;;;;;;AJvIZ;;;;;;;;UKciB,iBAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA;EAAA,SACA,YAAA;AAAA;AAAA,UAGM,uBAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA;EAAA,SACA,IAAA;EAAA,SACA,aAAA;AAAA;AAAA,UAGM,cAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA;EAAA,SACA,IAAA;AAAA;AAAA,UAGM,gBAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA,EAAQ,gBAAA,UAA0B,CAAA;AAAA;AAAA,KAGjC,oBAAA,GACR,iBAAA,GACA,uBAAA,GACA,cAAA,GACA,gBAAA;AAAA,UAEa,gBAAA;EAAA,SACN,EAAA;AAAA;;;;ALJX;;;;;;;;;;;;;cK8Ba,GAAA;EAAA,0CACkB,OAAA,GAAY,gBAAA,KAAmB,iBAAA;EAAA,wCAQ9C,aAAA,qBACoB,OAAA,GACtB,gBAAA,KACT,uBAAA;EAAA,+BAQe,OAAA,GAAY,gBAAA,KAAmB,cAAA;EAAA,sBAOxC,IAAA,UACK,MAAA,EACJ,gBAAA,UAA0B,CAAA,GAAE,OAAA,GAC1B,gBAAA,KACT,gBAAA,CAAiB,CAAA;ELjDE;;;;;EAAA;;;;;;;;AAvDxB;;;;;;;;;;;KMgBY,iBAAA;EAAA,SACG,OAAA;EAAA,SAAwB,SAAA;AAAA;EAAA,SACxB,OAAA;AAAA;AAAA,UAEE,WAAA;EAAA,SACN,IAAA;EACT,MAAA,CAAO,KAAA,WAAgB,iBAAA;AAAA;;;;;;;cA2FZ,mBAAA,WAA8B,WAAA;;;;;ANjH3C;;;;;;;;;;;UOwBiB,gBAAA;EAAA,SACN,WAAA;EAAA,SACA,IAAA;EAAA,SACA,IAAA;EAAA,SACA,QAAA;EAAA,SACA,OAAA;AAAA;AAAA,KAGC,cAAA;EAAA,SACG,EAAA;AAAA;EAAA,SACA,EAAA;EAAA,SAAoB,QAAA,EAAU,gBAAA;AAAA;;;;;;;;;APxB7C;;;;;AAiCA;;;iBOSsB,iBAAA,CACpB,MAAA,WACA,UAAA,WAAqB,oBAAA,IACrB,SAAA,YAAoB,WAAA,KACnB,OAAA,CAAQ,cAAA;;;UCrDM,eAAA;EAAA,SACN,OAAA;EAAA,SACA,IAAA;AAAA;AAAA,UAGM,eAAA;EAAA,SACN,IAAA;EAAA,SACA,OAAA;EAAA,SACA,MAAA;EAAA,SACA,MAAA,WAAiB,eAAA;AAAA;AAAA,UAGX,yBAAA;EAAA,SACN,IAAA;EAAA,SACA,OAAA;AAAA;AAAA,UAGM,YAAA;EAAA,SACN,IAAA;EAAA,SACA,OAAA;EAAA,SACA,OAAA;AAAA;AAAA,UAGM,sBAAA;EAAA,SACN,IAAA;EAAA,SACA,OAAA;EAAA,SACA,UAAA;EAAA,SACA,OAAA;AAAA;AAAA,UAGM,YAAA;EAAA,SACN,IAAA;EAAA,SACA,OAAA;AAAA;;;;;;ARzBX;;;;UQqCiB,oBAAA;EAAA,SACN,IAAA;EAAA,SACA,OAAA;EAAA,SACA,cAAA,WAAyB,iBAAA;AAAA;;;;;;;;;;;UAanB,sBAAA;EAAA,SACN,IAAA;EAAA,SACA,OAAA;EAAA,SACA,WAAA;EAAA,SACA,QAAA,EAAU,gBAAA;EAAA,SACV,QAAA;AAAA;AAAA,KAGC,eAAA,GACR,eAAA,GACA,yBAAA,GACA,YAAA,GACA,sBAAA,GACA,YAAA,GACA,oBAAA,GACA,sBAAA;;;;;;;;AP1EJ;;;;;AAEA;;iBOwFgB,UAAA,CAAW,KAAA,EAAO,eAAA;;;UC9FjB,cAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA;EAAA,SACA,IAAA;AAAA;AAAA,iBAGK,oBAAA,CAAqB,YAAA,WAAuB,aAAA,CAAc,cAAA;;;UCAzD,oBAAA;EAAA,SACN,MAAA,GAAS,WAAA;EAAA,SACT,IAAA,GAAO,YAAA;AAAA;AAAA,UAGD,cAAA,iBAA+B,gBAAA,GAAmB,gBAAA;EAAA,SACxD,IAAA;EAAA,SACA,IAAA;EAAA,SACA,WAAA;EAAA,SACA,WAAA,EAAa,OAAA;EAAA,SACb,OAAA,GACP,KAAA,EAAO,gBAAA,CAAiB,WAAA,CAAY,OAAA,GACpC,OAAA,EAAS,oBAAA,KACN,OAAA;AAAA;AAAA,UAGU,cAAA;EAAA,SACN,MAAA;EAAA,SACA,QAAA;EAAA,SACA,QAAA,EAAU,aAAA;AAAA;AAAA,iBAGL,UAAA,iBAA2B,gBAAA,CAAA,CACzC,UAAA,EAAY,IAAA,CAAK,cAAA,CAAe,OAAA,aAC/B,cAAA,CAAe,OAAA;AAAA,iBAOI,OAAA,iBAAwB,gBAAA,CAAA,CAC5C,IAAA,EAAM,cAAA,CAAe,OAAA,GACrB,KAAA,WACA,OAAA,GAAS,oBAAA,GACR,OAAA,CAAQ,cAAA;AAAA,UAqBM,aAAA;EAAA,SACN,SAAA,SAAkB,OAAA,UAAiB,iBAAA,eAAgC,iBAAA;EAAA,SACnE,QAAA,GAAW,KAAA;IAAA,SACT,IAAA;IAAA,SACA,SAAA;EAAA,MACL,OAAA;AAAA;AAAA,UAGS,iBAAA;EAAA,SACN,IAAA;EAAA,SACA,WAAA;EAAA,SACA,WAAA,EAAa,gBAAA;AAAA;AAAA,iBAGF,cAAA,CACpB,MAAA,EAAQ,aAAA,EACR,SAAA,uBACC,OAAA,UAAiB,cAAA;AAAA,iBAsBJ,eAAA,CAAgB,MAAA,EAAQ,cAAA,GAAiB,WAAA;;;KC9F7C,+BAAA;AAAA,UAKK,iBAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA;EAAA,SACA,IAAA;AAAA;AAAA,KAGN,sBAAA,GAAyB,IAAA,CAAK,cAAA;AAAA,UAElB,uBAAA;EAAA,SACN,KAAA,WAAgB,sBAAA;EAAA,SAChB,SAAA;EAAA,SACA,mBAAA,IAAuB,KAAA,EAAO,uBAAA,YAAmC,OAAA;EAAA,SACjE,gBAAA;AAAA;AAAA,cAGE,uBAAA,SAAgC,KAAA;EAAA,SAClC,IAAA;EAAA,SACA,MAAA,EAAQ,+BAAA;EAAA,SACR,QAAA;EAAA,SACA,aAAA;EAAA,SACA,gBAAA,WAA2B,eAAA;EAAA,SAC3B,SAAA;cAEG,KAAA;IAAA,SACD,MAAA,EAAQ,+BAAA;IAAA,SACR,QAAA;IAAA,SACA,aAAA;IAAA,SACA,gBAAA,YAA4B,eAAA;IAAA,SAC5B,SAAA;EAAA;AAAA;AAAA,iBAYS,wBAAA,CACpB,QAAA,WAAmB,cAAA,IACnB,MAAA,EAAQ,uBAAA,eACP,OAAA,UAAiB,iBAAA;;;;;;;AXvDpB;;;;;;;UYuBiB,aAAA;EAAA,SACN,kBAAA;EAAA,SACA,iBAAA;EAAA,SACA,iBAAA;EAAA,SACA,qBAAA;EAAA,SACA,iBAAA;AAAA;;;;;;;;;;;;;;;;UAkBM,eAAA,SAAwB,aAAA;EAAA,SAC9B,sBAAA;EAAA,SACA,yBAAA;EAAA,SACA,wBAAA;AAAA;;;;AZNX;;;;;;UYkBiB,YAAA,SAAqB,aAAA;EAAA,SAC3B,mBAAA;EAAA,SACA,sBAAA;AAAA;;;;;;;;AZRX;;UYoBiB,kBAAA,SAA2B,aAAA;;;;;;;;;AXvE5C;;;;;AAEA;UWuFiB,YAAA,SAAqB,aAAA;EAAA,SAC3B,uBAAA;EAAA,SACA,0BAAA;EAAA,SACA,0BAAA;AAAA;;;;;;;;AXhFX;;UW4FiB,SAAA,SAAkB,aAAA;EAAA,SACxB,uBAAA;EAAA,SACA,iBAAA;AAAA;;;;;;;;;AXrFX;;;UWmGiB,gBAAA,SAAyB,aAAA;EAAA,SAC/B,6BAAA;EAAA,SACA,iBAAA;EAAA,SACA,cAAA;AAAA;;;;;;;;;;;;;UAeM,cAAA,SAAuB,aAAA;EAAA,SAC7B,0BAAA;EAAA,SACA,cAAA;AAAA;;AX7GX;;;;;;UWuHiB,aAAA,SAAsB,aAAA;EAAA,SAC5B,wBAAA;EAAA,SACA,yBAAA;EAAA,SACA,kBAAA;AAAA;;;;;;;AZ7JX;KagBY,iBAAA;;;;;;;KA4CA,aAAA;;;;;;;;;KAeA,yBAAA;;;;;AbhCZ;;Ka6CY,gBAAA;;;;;;KAcA,gBAAA;;;;;KAWA,eAAA;AAAA,KAOA,gCAAA;AAAA,KAUA,6BAAA,GAAgC,OAAA,CAC1C,MAAA,CAAO,gCAAA;AAAA,KAGG,8BAAA;Ab/EZ;;;;;;;;;;AAAA,UaiGiB,sBAAA;;AZpJjB;;;;;WY2JW,EAAA;EZzJiB;;;;;EAAA,SY+JjB,OAAA,EAAS,iBAAA;EZ3JP;;;;;;AAMb;EANa,SYmKF,YAAA;;;;AZzJX;;WY+JW,aAAA,EAAe,aAAA;EZ7JY;;;;EAAA,SYkK3B,gBAAA,EAAkB,gBAAA;EZlKS;AAGtC;;;EAHsC,SYuK3B,eAAA,EAAiB,eAAA;EZpKuB;AAEnD;;;;;EAFmD,SY2KxC,aAAA;EAAA,SACA,OAAA,GAAU,6BAAA;EAAA,SACV,eAAA,YAA2B,8BAAA;EAAA,SAC3B,gBAAA,YAA4B,8BAAA;EAAA,SAC5B,mBAAA;EZ3KP;;;;;EAAA,SYiLO,iBAAA,WAA4B,gBAAA;EZ7KV;;;;AAE7B;EAF6B,SYmLlB,yBAAA,EAA2B,yBAAA;AAAA;;;;;;;;cAUzB,uBAAA;;;;;;cAeA,oBAAA;;;;;;Ab7Ob;;;;;;;KcmBY,YAAA;;;;;;;;;;;;;;cAkBC,yBAAA,EAA2B,MAAA,CAAO,gBAAA,EAAkB,YAAA;;;;;;;;;;;Ad3BjE;;;iBckDgB,wBAAA,CACd,KAAA,WAAgB,gBAAA,cACN,YAAA;;;;Ad9DZ;;;;;;;;;;;;;;UegCiB,sBAAA;EAAA,SACN,OAAA;EAAA,SACA,aAAA;EAAA,SACA,QAAA;IAAA,SACE,iBAAA;IAAA,SACA,iBAAA;IAAA,SACA,iBAAA;IAAA,SACA,gBAAA;IAAA,SACA,SAAA;EAAA;EAAA,SAEF,iBAAA,WAA4B,gBAAA;EAAA,SAC5B,qBAAA,WAAgC,YAAA;EAAA,SAChC,MAAA;AAAA;;;;;AflCX;;;;;AAiCA;;;;;;;;;cesBa,oBAAA,SAA6B,KAAA;EAAA,SAC/B,IAAA;EAAA,SACA,OAAA,EAAS,iBAAA;EAAA,SACT,OAAA;EAAA,SACA,UAAA;cAGP,OAAA,EAAS,iBAAA,EACT,OAAA,UACA,UAAA,aACA,OAAA;AAAA;;AfpBJ;;;;;;;;;;;;ACnDA;;;;iBckGsB,qBAAA,CACpB,OAAA,EAAS,eAAA,EACT,OAAA,WACC,OAAA,CAAQ,sBAAA;AdnGX;;;;;;;;;;;;;AAUA;;;;;AAIA;;AAdA,iBcoJgB,4CAAA,CACd,OAAA,EAAS,iBAAA,EACT,OAAA,UACA,MAAA,qCACC,sBAAA;;;KClJS,kBAAA;AAAA,KAWA,qBAAA;AAAA,KAUA,oBAAA;AAAA,UAEK,mBAAA;EhB7BN;EAAA,SgB+BA,cAAA;EhB9B0C;EAAA,SgBgC1C,eAAA;EhBtCA;EAAA,SgBwCA,gBAAA;EhBvCQ;EAAA,SgByCR,iBAAA;AAAA;;;;;;;;;;;;UAcM,KAAA;EAAA,SACN,YAAA;EAAA,SACA,gBAAA;EAAA,SACA,OAAA;AAAA;AAAA,UAGM,uBAAA;EAAA,SACN,OAAA;EAAA,SACA,eAAA;EAAA,SACA,iBAAA;EAAA,SACA,kBAAA;AAAA;AAAA,UAGM,eAAA;EAAA,SACN,UAAA;EAAA,SACA,OAAA;EAAA,SACA,eAAA,WAA0B,kBAAA;EAAA,SAC1B,gBAAA,WAA2B,kBAAA;EAAA,SAC3B,aAAA,WAAwB,qBAAA;EAAA,SACxB,aAAA;EAAA,SACA,gBAAA;EAAA,SACA,OAAA;EAAA,SACA,SAAA;EAAA,SACA,OAAA,GAAU,mBAAA;EAAA,SACV,OAAA,EAAS,oBAAA;EAAA,SACT,UAAA,EAAY,uBAAA;EAAA,SACZ,SAAA;AAAA;AAAA,UAGM,WAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA;AAAA;AAAA,KAGC,sBAAA,GAAyB,IAAA,CACnC,cAAA,CAAe,gBAAA;AAAA,KAIL,kBAAA;EAAA,SAKG,IAAA;EAAA,SACA,IAAA;AAAA;AAAA,UAGE,+BAAA;EAAA,SACN,MAAA;EAAA,SACA,MAAA,EAAQ,gBAAA;EAAA,SACR,IAAA;EAAA,SACA,MAAA;AAAA;AAAA,UAGM,kBAAA;EAAA,SACN,IAAA;EAAA,SACA,SAAA,WAAoB,aAAA;EAAA,SACpB,OAAA;EAAA,SACA,eAAA,GAAkB,iBAAA;EAAA,SAClB,MAAA;EAAA,SACA,MAAA,GAAS,WAAA;EAAA,SACT,IAAA,GAAO,aAAA;EAAA,SACP,WAAA,GAAc,WAAA;EAAA,SACd,iBAAA,GAAoB,qBAAA;EAAA,SACpB,iBAAA,YAA6B,WAAA;Ef7GlB;;;AAGtB;;;;;AAIA;;EAPsB,SewHX,iBAAA;Ef/G2B;;;;;EAAA,SeqH3B,WAAA,YAAuB,sBAAA;EAAA,SACvB,gBAAA,GAAmB,kBAAA;EAAA,SACnB,sBAAA,GAAyB,+BAAA;AAAA;AAAA,UAGnB,uBAAA;EAAA,SACN,IAAA;EAAA,SACA,cAAA;EAAA,SACA,aAAA;EAAA,SACA,cAAA;EAAA,SACA,MAAA,GAAS,MAAA;AAAA;AAAA,UAGH,sBAAA;EAAA,SACN,MAAA;EAAA,SACA,WAAA;EAAA,SACA,QAAA,GAAW,MAAA;AAAA;AAAA,UAGL,mBAAA;EAAA,SACN,UAAA,EAAY,MAAA;EAAA,SACZ,YAAA,aAAyB,aAAA,GAAgB,WAAA;EfjItB;;AAE9B;;;;EAF8B,SewInB,KAAA,GAAQ,WAAA;EfpIN;;;;;;EAAA,Se2IF,eAAA,GAAkB,KAAA;EAAA,SAClB,SAAA,YAAqB,iBAAA;EAAA,SACrB,OAAA,GAAU,uBAAA;EAAA,SACV,MAAA,GAAS,sBAAA;EAAA,SACT,WAAA;AAAA;AAAA,UAGM,4BAAA;EAAA,SACN,IAAA;EAAA,SACA,MAAA;EAAA,SACA,IAAA;AAAA;AAAA,UAGM,yBAAA;EAAA,SACN,IAAA;EAAA,SACA,MAAA;EAAA,SACA,KAAA;AAAA;AAAA,UAGM,wBAAA;EAAA,SACN,IAAA;EAAA,SACA,KAAA,GAAQ,WAAA;EAAA,SACR,eAAA,GAAkB,KAAA;AAAA;AAAA,UAGZ,0BAAA;EAAA,SACN,IAAA;EAAA,SACA,OAAA,EAAS,uBAAA;AAAA;AAAA,UAGH,2BAAA;EAAA,SACN,IAAA;EAAA,SACA,QAAA,EAAU,iBAAA;AAAA;AAAA,UAGJ,2BAAA;EAAA,SACN,IAAA;EAAA,SACA,UAAA,GAAa,MAAA;EAAA,SACb,YAAA,aAAyB,aAAA,GAAgB,WAAA;EAAA,SACzC,KAAA,GAAQ,WAAA;EAAA,SACR,eAAA,GAAkB,KAAA;EAAA,SAClB,OAAA,GAAU,uBAAA;EAAA,SACV,SAAA,YAAqB,iBAAA;EAAA,SACrB,MAAA,GAAS,sBAAA;EAAA,SACT,WAAA;AAAA;AAAA,KAGC,mBAAA,GACR,4BAAA,GACA,yBAAA,GACA,wBAAA,GACA,0BAAA,GACA,2BAAA,GACA,2BAAA;AAAA,KAEQ,cAAA,GAAiB,aAAA,CAAc,mBAAA;AAAA,UAE1B,eAAA;EAAA,SACN,EAAA;EAAA,SACA,IAAA;EAAA,SACA,YAAA,YAAwB,eAAA;EAAA,SACxB,OAAA,IAAW,OAAA,EAAS,kBAAA,KAAuB,OAAA,CAAQ,mBAAA;EAAA,SACnD,aAAA,IACP,OAAA,EAAS,kBAAA,KACN,cAAA,GAAiB,OAAA,CAAQ,cAAA;EdpMJ;AAG5B;;;;;AAKA;;;;;EAR4B,ScgNjB,MAAA,GAAS,aAAA;EdjMgB;;;;;;;;;;EAAA,Sc4MzB,qBAAA,IAAyB,OAAA,aAAoB,OAAA,CAAQ,sBAAA;AAAA;AAAA,KAGpD,qBAAA,aAAkC,WAAA,GAAc,eAAA"}

package/dist/providers.d.ts

@@ -0,0 +1,4 @@
+import { $ as XaiQuirks, B as ModelCapabilityProfilePricingKey, C as ProviderToolDefinition, D as NegotiationAuthError, E as NegotiatedCapabilities, F as CapabilityAdapter, G as AdapterQuirks, H as RecommendedPromptStrategy, I as KnownFailureMode, J as LiteLLMQuirks, K as AnthropicQuirks, L as ModelCapabilityProfile, M as getRecommendedSanitizers, N as ALL_KNOWN_FAILURE_MODES, O as negotiateCapabilities, P as ALL_TRAINING_CLASSES, Q as OpenRouterQuirks, R as ModelCapabilityProfileModality, S as ProviderToolChoice, T as Usage, U as ToolCallSurface, V as ReasoningSurface, W as TrainingClass, X as OpenAICompatQuirks, Y as LmStudioQuirks, Z as OpenAIQuirks, _ as ProviderStreamOutputChunk, a as ProviderFinishMetadata, b as ProviderStreamUsageChunk, c as ProviderPricingHint, d as ProviderRunRequest, f as ProviderRunResponse, g as ProviderStreamGatewayChunk, h as ProviderStreamCompleteChunk, ht as parseToolUseEnvelope, i as ProviderDataPolicyHints, j as SanitizerKey, k as synthesizeNegotiatedCapabilitiesFromRegistry, l as ProviderRef, m as ProviderStreamChunk, mt as ToolUseRequest, n as ModelCapability, o as ProviderGatewayMetadata, p as ProviderStream, q as GeminiQuirks, r as ProviderAdapter, s as ProviderLatencyClass, t as CapabilityModality, u as ProviderRegistryInput, v as ProviderStreamTextDeltaChunk, w as ProviderTransportMode, x as ProviderStructuredOutputRequest, y as ProviderStreamToolCallChunk, z as ModelCapabilityProfilePricing } from "./provider-C2IfKsvz.js";
+import { C as createAISdkProvider, S as SdkLikeProviderOptions, T as createOpenAIProvider, _ as FakeProviderOptions, a as CollectStreamOptions, b as createAnthropicProvider, c as createXaiProvider, d as LmStudioProviderOptions, f as createLmStudioProvider, g as createGeminiProvider, h as GeminiProviderOptions, i as getToolUseContract, l as OpenRouterProviderOptions, m as createLiteLLMProvider, n as PROMPT_STRATEGIES, o as collectStream, p as LiteLLMProviderOptions, r as getStructuredOutputContract, s as XaiProviderOptions, t as PROMPT_SCAFFOLD_VERSION, u as createOpenRouterProvider, v as createFakeProvider, w as createOpenAICompatibleProvider, x as OpenAICompatibleProviderOptions, y as AnthropicProviderOptions } from "./scaffolds-DKQrCRqh.js";
+import { n as getCapabilityProfile, r as stripOpenRouterVariant, t as findCapabilityProfile } from "./index-DpnHGHVL.js";
+export { ALL_KNOWN_FAILURE_MODES, ALL_TRAINING_CLASSES, type AdapterQuirks, type AnthropicProviderOptions, type AnthropicQuirks, type CapabilityAdapter, type CapabilityModality, type CollectStreamOptions, type FakeProviderOptions, type GeminiProviderOptions, type GeminiQuirks, type KnownFailureMode, type LiteLLMProviderOptions, type LiteLLMQuirks, type LmStudioProviderOptions, type LmStudioQuirks, type ModelCapability, type ModelCapabilityProfile, type ModelCapabilityProfileModality, type ModelCapabilityProfilePricing, type ModelCapabilityProfilePricingKey, type NegotiatedCapabilities, NegotiationAuthError, type OpenAICompatQuirks, type OpenAICompatibleProviderOptions, type OpenAIQuirks, type OpenRouterProviderOptions, type OpenRouterQuirks, PROMPT_SCAFFOLD_VERSION, PROMPT_STRATEGIES, type ProviderAdapter, type ProviderDataPolicyHints, type ProviderFinishMetadata, type ProviderGatewayMetadata, type ProviderLatencyClass, type ProviderPricingHint, type ProviderRef, type ProviderRegistryInput, type ProviderRunRequest, type ProviderRunResponse, type ProviderStream, type ProviderStreamChunk, type ProviderStreamCompleteChunk, type ProviderStreamGatewayChunk, type ProviderStreamOutputChunk, type ProviderStreamTextDeltaChunk, type ProviderStreamToolCallChunk, type ProviderStreamUsageChunk, type ProviderStructuredOutputRequest, type ProviderToolChoice, type ProviderToolDefinition, type ProviderTransportMode, type ReasoningSurface, type RecommendedPromptStrategy, type SanitizerKey, type SdkLikeProviderOptions, type ToolCallSurface, type ToolUseRequest, type TrainingClass, type Usage, type XaiProviderOptions, type XaiQuirks, collectStream, createAISdkProvider, createAnthropicProvider, createFakeProvider, createGeminiProvider, createLiteLLMProvider, createLmStudioProvider, createOpenAICompatibleProvider, createOpenAIProvider, createOpenRouterProvider, createXaiProvider, findCapabilityProfile, getCapabilityProfile, getRecommendedSanitizers, getStructuredOutputContract, getToolUseContract, negotiateCapabilities, parseToolUseEnvelope, stripOpenRouterVariant, synthesizeNegotiatedCapabilitiesFromRegistry };

package/dist/providers.js

@@ -0,0 +1,4 @@
+import { a as collectStream, c as createLmStudioProvider, d as createFakeProvider, f as createAnthropicProvider, h as createOpenAIProvider, i as getToolUseContract, l as createLiteLLMProvider, m as createOpenAICompatibleProvider, n as PROMPT_STRATEGIES, o as createXaiProvider, p as createAISdkProvider, r as getStructuredOutputContract, s as createOpenRouterProvider, t as PROMPT_SCAFFOLD_VERSION, u as createGeminiProvider } from "./scaffolds-ekPIlBeU.js";
+import { c as getCapabilityProfile, d as ALL_TRAINING_CLASSES, i as synthesizeNegotiatedCapabilitiesFromRegistry, l as stripOpenRouterVariant, o as getRecommendedSanitizers, r as negotiateCapabilities, s as findCapabilityProfile, t as NegotiationAuthError, u as ALL_KNOWN_FAILURE_MODES } from "./negotiate-ClD88hkc.js";
+import { o as parseToolUseEnvelope } from "./validate-c7EL5uuH.js";
+export { ALL_KNOWN_FAILURE_MODES, ALL_TRAINING_CLASSES, NegotiationAuthError, PROMPT_SCAFFOLD_VERSION, PROMPT_STRATEGIES, collectStream, createAISdkProvider, createAnthropicProvider, createFakeProvider, createGeminiProvider, createLiteLLMProvider, createLmStudioProvider, createOpenAICompatibleProvider, createOpenAIProvider, createOpenRouterProvider, createXaiProvider, findCapabilityProfile, getCapabilityProfile, getRecommendedSanitizers, getStructuredOutputContract, getToolUseContract, negotiateCapabilities, parseToolUseEnvelope, stripOpenRouterVariant, synthesizeNegotiatedCapabilitiesFromRegistry };

package/dist/rate-limit-group-nDsBJqSu.d.ts

@@ -0,0 +1,235 @@
+import { T as Usage, mn as OutputContractMap } from "./provider-C2IfKsvz.js";
+import { F as LatticeConfig, V as HookHandler, W as RegisterOptions, f as AgentIntent, h as DefaultAgentOutputs, k as ConversationTurn, p as AgentResult, x as AgentTransport } from "./run-crew-Bnve5dyI.js";
+import { t as BudgetInvariant } from "./contract-S3oJGlc9.js";
+
+//#region src/agent/runtime.d.ts
+/**
+ * Resolves the runtime's behaviour for a single `ai.runAgent(intent)` call.
+ *
+ * Phase 19 ships an in-process default scheduler (the loop runs in the
+ * calling Promise), direct transport (provider.execute()), and in-memory
+ * transcript (the `conversation` array). Phase 20 promotes scheduler /
+ * transport / storage to the pluggable `AgentHost` adapter.
+ *
+ * Phase 39: `runAgent` is a thin public wrapper over `runAgentInternal`
+ * with no internal options — the public signature and behavior are
+ * unchanged.
+ */
+declare function runAgent<TOutputs extends OutputContractMap = DefaultAgentOutputs>(intent: AgentIntent<TOutputs>, config?: LatticeConfig): Promise<AgentResult<TOutputs>>;
+//#endregion
+//#region src/agent/infra/cost-tracker.d.ts
+type CostBudgetStatus = "ok" | "warning" | "exceeded";
+interface CostTracker {
+  readonly kind: "cost-tracker";
+  /** Append a per-iteration Usage record. Mutates internal state. */
+  recordIteration(usage: Usage): void;
+  /** Returns the running sum across all recorded iterations. */
+  total(): Usage;
+  /**
+   * Reports budget status against `contract.budget`:
+   *   - "ok" — under 80% of maxCostUsd.
+   *   - "warning" — at or over 80% but under 100%.
+   *   - "exceeded" — at or over 100% of maxCostUsd.
+   * Returns "ok" when no budget is declared or when cumulative cost is null.
+   */
+  budgetStatus(budget?: BudgetInvariant): CostBudgetStatus;
+}
+declare function createCostTracker(): CostTracker;
+//#endregion
+//#region src/agent/infra/transcript-store.d.ts
+/**
+ * Token estimator used by `tailByTokens`. The default ~4 chars / token is
+ * the OpenAI rule of thumb for English text. Callers with provider-specific
+ * tokenizers can supply their own.
+ */
+type TokenEstimator = (text: string) => number;
+interface TranscriptStore {
+  readonly kind: "transcript-store";
+  append(turn: ConversationTurn): void;
+  all(): readonly ConversationTurn[];
+  /** Returns the first user turn (if any) + the most-recent `limit` turns. */
+  tail(limit: number): readonly ConversationTurn[];
+  /**
+   * Returns the first user turn (if any) + the most-recent turns whose
+   * combined token estimate fits within `maxTokens`. The default estimator
+   * is the ~4 chars / token rule; callers can override for provider-
+   * specific tokenizers.
+   */
+  tailByTokens(maxTokens: number, estimator?: TokenEstimator): readonly ConversationTurn[];
+}
+declare function createTranscriptStore(): TranscriptStore;
+//#endregion
+//#region src/agent/infra/goal-progress.d.ts
+/**
+ * GoalProgressTracker — Phase 21 (v1.2).
+ *
+ * Stuck-detection primitive. The caller declares a goal-satisfaction
+ * score per iteration (0..1); the tracker reports a coarse status the
+ * agent loop can use to back off or surface to the human.
+ */
+type ProgressStatus = "progressing" | "stalled" | "regressed";
+interface GoalProgressOptions {
+  /**
+   * Window of recent steps used for stall + regression detection.
+   * Default 3. The tracker waits until it has at least this many steps
+   * before reporting anything other than "progressing".
+   */
+  readonly windowSize?: number;
+  /** Max satisfaction delta across the window to count as "stalled". Default 0.02. */
+  readonly stallThreshold?: number;
+  /** Min drop from prior max to count as "regressed". Default 0.1. */
+  readonly regressionThreshold?: number;
+}
+interface GoalProgressStep {
+  readonly iterationIndex: number;
+  readonly goalSatisfaction: number;
+}
+interface GoalProgressTracker {
+  readonly kind: "goal-progress-tracker";
+  recordStep(step: GoalProgressStep): void;
+  status(): ProgressStatus;
+}
+declare function createGoalProgressTracker(options?: GoalProgressOptions): GoalProgressTracker;
+//#endregion
+//#region src/agent/infra/action-history.d.ts
+/**
+ * ActionHistory — Phase 21 (v1.2).
+ *
+ * Detects stuck patterns in the agent loop's tool-call sequence:
+ *   - "consecutive-identical-tool-call" — same (toolName, argsHash) N+ times in a row
+ *   - "ping-pong" — last 4 records alternate between 2 distinct (toolName, argsHash) pairs
+ *   - "no-progress" — reserved for callers wiring goal-progress feedback here
+ *
+ * Standalone (no dependency on the agent runtime); callers register the
+ * primitive externally and pump `recordAction` from their loop or hook.
+ */
+declare const STUCK_REASONS: readonly ["consecutive-identical-tool-call", "no-progress", "ping-pong"];
+type StuckReason = typeof STUCK_REASONS[number];
+interface ActionRecord {
+  readonly iterationIndex: number;
+  readonly toolName: string;
+  readonly argsHash: string;
+}
+interface ActionHistoryOptions {
+  /** Number of consecutive identical records that triggers the consecutive detector. Default 3. */
+  readonly consecutiveLimit?: number;
+}
+interface ActionHistory {
+  readonly kind: "action-history";
+  /**
+   * Append a record. Returns the latest StuckReason triggered by this
+   * record, or null when no detector fires. The most recent reason wins
+   * when multiple apply.
+   */
+  recordAction(action: ActionRecord): StuckReason | null;
+  history(): readonly ActionRecord[];
+}
+declare function createActionHistory(options?: ActionHistoryOptions): ActionHistory;
+//#endregion
+//#region src/agent/infra/permission-context.d.ts
+interface PermissionRule {
+  /** Match on tool name. String = exact match; RegExp = test. Both undefined = match-any. */
+  readonly toolName?: string | RegExp;
+  /**
+   * Optional resource matcher. The caller passes `resource` on each
+   * decide() invocation; this rule fires only when the rule's resource
+   * matches.
+   */
+  readonly resource?: string | RegExp;
+  readonly verdict: "allow" | "deny";
+  readonly reason?: string;
+}
+interface PermissionDecisionInput {
+  readonly toolName: string;
+  readonly iterationIndex: number;
+  readonly resource?: string;
+  readonly args?: unknown;
+}
+type PermissionVerdict = {
+  readonly allow: true;
+} | {
+  readonly allow: false;
+  readonly reason: string;
+};
+interface PermissionContext {
+  readonly kind: "permission-context";
+  decide(input: PermissionDecisionInput): PermissionVerdict;
+}
+declare function createPermissionContext(rules: readonly PermissionRule[]): PermissionContext;
+/**
+ * Hook handler shape suitable for registering on `BEFORE_TOOL` at
+ * BAND.SAFETY. Reads `toolName` and `iterationIndex` from the agent
+ * runtime's BEFORE_TOOL context shape (`{ iterationIndex, toolName,
+ * args }`) and translates a deny verdict into `controls.deny(reason)`.
+ */
+interface PermissionHookContext {
+  readonly iterationIndex: number;
+  readonly toolName: string;
+  readonly resource?: string;
+  readonly args?: unknown;
+}
+declare function createPermissionGuardHook(context: PermissionContext): HookHandler<PermissionHookContext>;
+/**
+ * Convenience: returns RegisterOptions for the SAFETY-band registration.
+ * Callers do `pipeline.register("BEFORE_TOOL", hook, permissionGuardRegisterOptions())`.
+ */
+declare function permissionGuardRegisterOptions(): RegisterOptions;
+//#endregion
+//#region src/agent/infra/rate-limit-group.d.ts
+interface RateLimitGroupOptions {
+  /** Requests per minute. Defaults to 50 (Anthropic Tier 1). */
+  readonly requestsPerMinute?: number;
+  /** Input tokens per minute. Defaults to 30_000 (Anthropic Tier 1). */
+  readonly tokensPerMinute?: number;
+  /** Injectable clock for tests (defaults to `Date.now`). */
+  readonly now?: () => number;
+}
+interface RateLimitLease {
+  /**
+   * Reconcile the reservation against actual usage. Refunds
+   * `estimate - actual.promptTokens` to the token bucket when positive,
+   * debits the difference when negative. Idempotent — only the first call
+   * has an effect. Requests are never refunded.
+   */
+  release(actual: {
+    promptTokens: number;
+  }): void;
+}
+interface RateLimitGroup {
+  readonly kind: "rate-limit-group";
+  /**
+   * Reserve 1 request + `estimate.inputTokens` tokens. Resolves immediately
+   * when both dimensions have capacity; otherwise the caller waits (FIFO)
+   * until continuous drain refills the deficit.
+   */
+  acquire(estimate: {
+    inputTokens: number;
+  }): Promise<RateLimitLease>;
+}
+declare function createRateLimitGroup(options?: RateLimitGroupOptions): RateLimitGroup;
+/**
+ * Wrap an `AgentTransport` so every provider call is gated through `group`.
+ *
+ * Every transport wrapped with the SAME group instance shares one bucket —
+ * `runAgentCrew` (39-06) wraps parent + child hosts with one shared group per
+ * adapter instance, structurally guaranteeing crew-wide coordination (D-13).
+ * `ProviderAdapter` is never modified (INV-03 parity invariant intact).
+ *
+ * - `inner` provided → dispatch nests through `inner.call(provider, request)`,
+ *   composing with consumer transports (e.g. cross-process bridges).
+ * - `inner` undefined → falls through to `provider.execute(request)`, guarded
+ *   the same way as `createNoopAgentHost` (error names the provider id only).
+ *
+ * Release policy:
+ * - Success → release with `normalizedUsage.promptTokens`; when usage is
+ *   missing or non-finite, fall back to the estimate (no NaN arithmetic —
+ *   the `costUsd: null` "unmeasured" discipline analog).
+ * - Throw → release with the ORIGINAL estimate (burn — no refund; the
+ *   provider may have consumed quota despite the error) and rethrow the
+ *   same error unchanged. Request objects and headers are never serialized
+ *   into error paths.
+ */
+declare function withRateLimit(group: RateLimitGroup, inner?: AgentTransport): AgentTransport;
+//#endregion
+export { createCostTracker as A, ProgressStatus as C, createTranscriptStore as D, TranscriptStore as E, CostBudgetStatus as O, GoalProgressTracker as S, TokenEstimator as T, STUCK_REASONS as _, withRateLimit as a, GoalProgressOptions as b, PermissionHookContext as c, createPermissionContext as d, createPermissionGuardHook as f, ActionRecord as g, ActionHistoryOptions as h, createRateLimitGroup as i, runAgent as j, CostTracker as k, PermissionRule as l, ActionHistory as m, RateLimitGroupOptions as n, PermissionContext as o, permissionGuardRegisterOptions as p, RateLimitLease as r, PermissionDecisionInput as s, RateLimitGroup as t, PermissionVerdict as u, StuckReason as v, createGoalProgressTracker as w, GoalProgressStep as x, createActionHistory as y };
+//# sourceMappingURL=rate-limit-group-nDsBJqSu.d.ts.map

package/dist/rate-limit-group-nDsBJqSu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-group-nDsBJqSu.d.ts","names":[],"sources":["../src/agent/runtime.ts","../src/agent/infra/cost-tracker.ts","../src/agent/infra/transcript-store.ts","../src/agent/infra/goal-progress.ts","../src/agent/infra/action-history.ts","../src/agent/infra/permission-context.ts","../src/agent/infra/rate-limit-group.ts"],"mappings":";;;;;AEeA;;;;;AAIA;;;;;;;AAJA,iBF8FsB,QAAA,kBAA0B,iBAAA,GAAoB,mBAAA,CAAA,CAClE,MAAA,EAAQ,WAAA,CAAY,QAAA,GACpB,MAAA,GAAQ,aAAA,GACP,OAAA,CAAQ,WAAA,CAAY,QAAA;;;KCrGX,gBAAA;AAAA,UAEK,WAAA;EAAA,SACN,IAAA;EDiGD;EC/FR,eAAA,CAAgB,KAAA,EAAO,KAAA;EDgGd;EC9FT,KAAA,IAAS,KAAA;ED8FD;;;;;;;ECtFR,YAAA,CAAa,MAAA,GAAS,eAAA,GAAkB,gBAAA;AAAA;AAAA,iBAK1B,iBAAA,CAAA,GAAqB,WAAA;;;;;;;;KChBzB,cAAA,IAAkB,IAAA;AAAA,UAIb,eAAA;EAAA,SACN,IAAA;EACT,MAAA,CAAO,IAAA,EAAM,gBAAA;EACb,GAAA,aAAgB,gBAAA;EFuFa;EErF7B,IAAA,CAAK,KAAA,oBAAyB,gBAAA;EFqFoC;;;;;;EE9ElE,YAAA,CAAa,SAAA,UAAmB,SAAA,GAAY,cAAA,YAA0B,gBAAA;AAAA;AAAA,iBAGxD,qBAAA,CAAA,GAAyB,eAAA;;;;;;;;AF2EzC;;KGrGY,cAAA;AAAA,UAEK,mBAAA;EHmGmD;;;;;EAAA,SG7FzD,UAAA;EHgGR;EAAA,SG9FQ,cAAA;EH8FD;EAAA,SG5FC,mBAAA;AAAA;AAAA,UAGM,gBAAA;EAAA,SACN,cAAA;EAAA,SACA,gBAAA;AAAA;AAAA,UAGM,mBAAA;EAAA,SACN,IAAA;EACT,UAAA,CAAW,IAAA,EAAM,gBAAA;EACjB,MAAA,IAAU,cAAA;AAAA;AAAA,iBAGI,yBAAA,CACd,OAAA,GAAS,mBAAA,GACR,mBAAA;;;;;;;;AHyEH;;;;;;cIjGa,aAAA;AAAA,KAMD,WAAA,UAAqB,aAAA;AAAA,UAEhB,YAAA;EAAA,SACN,cAAA;EAAA,SACA,QAAA;EAAA,SACA,QAAA;AAAA;AAAA,UAGM,oBAAA;EJmF+B;EAAA,SIjFrC,gBAAA;AAAA;AAAA,UAGM,aAAA;EAAA,SACN,IAAA;EJ+ED;;;;;EIzER,YAAA,CAAa,MAAA,EAAQ,YAAA,GAAe,WAAA;EACpC,OAAA,aAAoB,YAAA;AAAA;AAAA,iBAON,mBAAA,CAAoB,OAAA,GAAS,oBAAA,GAA4B,aAAA;;;UCpCxD,cAAA;ELmGmD;EAAA,SKjGzD,QAAA,YAAoB,MAAA;ELkGrB;;;;;EAAA,SK5FC,QAAA,YAAoB,MAAA;EAAA,SACpB,OAAA;EAAA,SACA,MAAA;AAAA;AAAA,UAGM,uBAAA;EAAA,SACN,QAAA;EAAA,SACA,cAAA;EAAA,SACA,QAAA;EAAA,SACA,IAAA;AAAA;AAAA,KAGC,iBAAA;EAAA,SACG,KAAA;AAAA;EAAA,SACA,KAAA;EAAA,SAAuB,MAAA;AAAA;AAAA,UAErB,iBAAA;EAAA,SACN,IAAA;EACT,MAAA,CAAO,KAAA,EAAO,uBAAA,GAA0B,iBAAA;AAAA;AAAA,iBAU1B,uBAAA,CACd,KAAA,WAAgB,cAAA,KACf,iBAAA;;;AJnCH;;;;UIyDiB,qBAAA;EAAA,SACN,cAAA;EAAA,SACA,QAAA;EAAA,SACA,QAAA;EAAA,SACA,IAAA;AAAA;AAAA,iBAGK,yBAAA,CACd,OAAA,EAAS,iBAAA,GACR,WAAA,CAAY,qBAAA;;;;;iBAkBC,8BAAA,CAAA,GAAkC,eAAA;;;UC3CjC,qBAAA;;WAEN,iBAAA;EL7CiB;EAAA,SK+CjB,eAAA;EL/CiB;EAAA,SKiDjB,GAAA;AAAA;AAAA,UAGM,cAAA;;;;;;;EAOf,OAAA,CAAQ,MAAA;IAAU,YAAA;EAAA;AAAA;AAAA,UAGH,cAAA;EAAA,SACN,IAAA;ELxDA;;;;;EK8DT,OAAA,CAAQ,QAAA;IAAY,WAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;AAAA;AAAA,iBA2BtC,oBAAA,CACd,OAAA,GAAS,qBAAA,GACR,cAAA;;;;;;AJ9FH;;;;;AAIA;;;;;;;;;;;;iBI2PgB,aAAA,CACd,KAAA,EAAO,cAAA,EACP,KAAA,GAAQ,cAAA,GACP,cAAA"}

package/dist/receipt-FYouoPHv.js

@@ -0,0 +1,205 @@
+import canonicalize from "canonicalize";
+//#region src/receipts/canonical.ts
+const encoder = new TextEncoder();
+/**
+* Convert costUsd (number | null) to its canonical string form.
+* RFC 8785 requires deterministic float-to-string; using JS Number→string
+* directly is unsafe across V8 versions (Grisu3 vs Dragonbox). We pin the
+* format by routing through Number.prototype.toString() for FINITE numbers
+* only, and treat NaN/Infinity as null. This matches "I-JSON only" from
+* 09-CONTEXT.md — receipts NEVER carry non-finite floats.
+*/
+function stringifyCostUsd(costUsd) {
+	if (costUsd === null) return null;
+	if (!Number.isFinite(costUsd)) return null;
+	return costUsd.toString();
+}
+/**
+* Convert a runtime Usage (number costUsd) to its canonical receipt form
+* (string costUsd). This is the single conversion site — canonical bytes
+* NEVER see a raw float in the cost field.
+*/
+function usageToCanonical(usage) {
+	return {
+		promptTokens: usage.promptTokens,
+		completionTokens: usage.completionTokens,
+		costUsd: stringifyCostUsd(usage.costUsd)
+	};
+}
+/**
+* Canonicalize a receipt body to JCS bytes (RFC 8785).
+*
+* INVARIANT: callers MUST pass an already-redacted body. The redactor in
+* redact.ts produces the input to this function — never the cleartext.
+* See 09-CONTEXT.md "Redact-Then-Sign Ordering (UNRETROFITTABLE)".
+*
+* Throws if canonicalize returns undefined (impossible for valid bodies
+* — surfaces a programmer error rather than silently producing zero
+* bytes that would later fail signature verification).
+*/
+function canonicalizeReceiptBody(body) {
+	const json = canonicalize(body);
+	if (json === void 0) throw new Error("canonicalizeReceiptBody: canonicalize returned undefined; receipt body contained a non-canonicalizable value (function/symbol/undefined).");
+	return encoder.encode(json);
+}
+//#endregion
+//#region src/receipts/envelope.ts
+const PAYLOAD_TYPE = "application/vnd.lattice.receipt+json";
+const textEncoder = new TextEncoder();
+function base64Encode(bytes) {
+	return Buffer.from(bytes).toString("base64");
+}
+function base64Decode(value) {
+	return new Uint8Array(Buffer.from(value, "base64"));
+}
+/**
+* DSSE v1.0 Pre-Authentication Encoding.
+*
+* Reference: https://github.com/secure-systems-lab/dsse/blob/v1.0.0/protocol.md
+*
+* PAE = UTF-8("DSSEv1 " + len(payloadType) + " " + payloadType
+*           + " " + len(payload) + " " + payload)
+*
+* `payload` here is the BASE64-encoded string per DSSE v1.0 spec (NOT raw
+* canonical bytes). Both signing and verification MUST construct PAE the
+* same way; this module is the single source of truth.
+*
+* ASCII length is decimal (no zero-padding). e.g. length 1000 → "1000".
+*/
+function buildPae(payloadType, payloadBase64) {
+	const ascii = "DSSEv1 " + payloadType.length.toString() + " " + payloadType + " " + payloadBase64.length.toString() + " " + payloadBase64;
+	return textEncoder.encode(ascii);
+}
+function encodeEnvelope(input) {
+	return {
+		payloadType: PAYLOAD_TYPE,
+		payload: base64Encode(input.payloadBytes),
+		signatures: input.signatures.map((entry) => ({
+			keyid: entry.keyid,
+			sig: base64Encode(entry.sig)
+		}))
+	};
+}
+function decodeEnvelope(envelope) {
+	if (envelope.payloadType !== "application/vnd.lattice.receipt+json") throw new Error(`envelope payloadType mismatch: expected "${PAYLOAD_TYPE}" got "${envelope.payloadType}"`);
+	return {
+		payloadType: envelope.payloadType,
+		payloadBytes: base64Decode(envelope.payload),
+		signatures: envelope.signatures.map((entry) => ({
+			keyid: entry.keyid,
+			sig: base64Decode(entry.sig)
+		}))
+	};
+}
+//#endregion
+//#region src/receipts/redact.ts
+/**
+* Default redaction policy id for v1.1. Free-form string per
+* 09-CONTEXT.md — registry enforcement deferred to v1.2.
+*/
+const DEFAULT_REDACTION_POLICY_ID = "lattice.default.v1";
+/**
+* Redact a receipt body BEFORE canonicalization (and BEFORE signing).
+*
+* The signed digest commits to canonicalize(redact(body)). NEVER the
+* other way around. See 09-CONTEXT.md "Redact-Then-Sign Ordering
+* (UNRETROFITTABLE)" and PITFALLS.md Pitfall #1.
+*
+* For v1.1 the default policy is minimal — the heavy lifting already
+* happened upstream:
+*   - Tripwire evaluator emits {detector, substring} for no-pii (T-08-01).
+*   - Provider responses are hashed into inputHashes/outputHash, never
+*     embedded raw.
+*   - Router reject messages do not contain PII by construction.
+*
+* This function therefore primarily:
+*   1. Materializes the redactions[] manifest declaring what WAS elided
+*      upstream (so receipts are self-describing).
+*   2. Provides the extension point future policies will use.
+*
+* Returns a NEW body — never mutates the input.
+*/
+function redactReceiptBody(body, policyId = DEFAULT_REDACTION_POLICY_ID) {
+	const redactions = [];
+	if (body.tripwireEvidence !== void 0 && body.tripwireEvidence.kind === "no-pii") redactions.push({
+		path: "tripwireEvidence.observed",
+		reason: "no-pii-detector-substring-only"
+	});
+	const sorted = [...redactions].sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+	return {
+		body: {
+			...body,
+			redactionPolicyId: policyId,
+			redactions: sorted
+		},
+		redactions: sorted
+	};
+}
+//#endregion
+//#region src/receipts/receipt.ts
+/**
+* Build, redact, canonicalize, sign, and envelope a CapabilityReceipt.
+*
+* Ordering INVARIANT (09-CONTEXT.md, PITFALLS.md Pitfall #1):
+*   redact -> canonicalize -> PAE -> sign -> encode
+*
+* The signed digest commits to canonicalize(redact(body)). The function
+* structure makes any other ordering impossible to write by accident —
+* canonicalizeReceiptBody is ONLY called on the output of redactReceiptBody.
+*
+* Defense in depth:
+*   - body.kid is assigned from signer.kid, never from input (input has no
+*     kid field). The signed body and the envelope keyid CANNOT disagree by
+*     construction.
+*   - signer.kid is also written to envelope.signatures[0].keyid, so the
+*     verifier can cross-check (Step 7 of verifyReceipt).
+*
+* I-JSON guarantees: usage.costUsd is converted to string (or null) via
+* usageToCanonical. Receipts NEVER carry raw floats in the canonical form.
+*/
+async function createReceipt(input, signer) {
+	const policyId = input.redactionPolicyId ?? "lattice.default.v1";
+	const receiptId = input.receiptId ?? crypto.randomUUID();
+	const issuedAt = input.issuedAt ?? (/* @__PURE__ */ new Date()).toISOString();
+	const { body } = redactReceiptBody({
+		version: "lattice-receipt/v1.3",
+		receiptId,
+		runId: input.runId,
+		issuedAt,
+		kid: signer.kid,
+		model: input.model,
+		route: input.route,
+		...input.modelClass !== void 0 ? { modelClass: input.modelClass } : {},
+		...input.parentReceiptCid !== void 0 ? { parentReceiptCid: input.parentReceiptCid } : {},
+		...input.lineageMerkleRoot !== void 0 ? { lineageMerkleRoot: input.lineageMerkleRoot } : {},
+		usage: usageToCanonical(input.usage),
+		contractVerdict: input.contractVerdict,
+		contractHash: input.contractHash,
+		inputHashes: input.inputHashes,
+		outputHash: input.outputHash,
+		redactionPolicyId: policyId,
+		redactions: [],
+		...input.noRouteReasons !== void 0 ? { noRouteReasons: input.noRouteReasons } : {},
+		...input.tripwireEvidence !== void 0 ? { tripwireEvidence: input.tripwireEvidence } : {},
+		...input.stepName !== void 0 ? { stepName: input.stepName } : {},
+		...input.stepIndex !== void 0 ? { stepIndex: input.stepIndex } : {},
+		...input.parentStepName !== void 0 ? { parentStepName: input.parentStepName } : {},
+		...input.previousStepName !== void 0 ? { previousStepName: input.previousStepName } : {},
+		...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {},
+		...input.timestamp !== void 0 ? { timestamp: input.timestamp } : {}
+	}, policyId);
+	const payloadBytes = canonicalizeReceiptBody(body);
+	const pae = buildPae(PAYLOAD_TYPE, base64Encode(payloadBytes));
+	const sig = await signer.sign(pae);
+	return encodeEnvelope({
+		payloadBytes,
+		signatures: [{
+			keyid: signer.kid,
+			sig
+		}]
+	});
+}
+//#endregion
+export { decodeEnvelope as a, buildPae as i, PAYLOAD_TYPE as n, canonicalizeReceiptBody as o, base64Encode as r, createReceipt as t };
+
+//# sourceMappingURL=receipt-FYouoPHv.js.map

package/dist/receipt-FYouoPHv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-FYouoPHv.js","names":[],"sources":["../src/receipts/canonical.ts","../src/receipts/envelope.ts","../src/receipts/redact.ts","../src/receipts/receipt.ts"],"sourcesContent":["import canonicalize from \"canonicalize\";\n\nimport type { Usage } from \"../providers/provider.js\";\nimport type {\n  CapabilityReceiptBody,\n  ReceiptUsageCanonical,\n} from \"./types.js\";\n\nconst encoder = new TextEncoder();\n\n/**\n * Convert costUsd (number | null) to its canonical string form.\n * RFC 8785 requires deterministic float-to-string; using JS Number→string\n * directly is unsafe across V8 versions (Grisu3 vs Dragonbox). We pin the\n * format by routing through Number.prototype.toString() for FINITE numbers\n * only, and treat NaN/Infinity as null. This matches \"I-JSON only\" from\n * 09-CONTEXT.md — receipts NEVER carry non-finite floats.\n */\nexport function stringifyCostUsd(costUsd: number | null): string | null {\n  if (costUsd === null) return null;\n  if (!Number.isFinite(costUsd)) return null;\n  return costUsd.toString();\n}\n\n/**\n * Convert a runtime Usage (number costUsd) to its canonical receipt form\n * (string costUsd). This is the single conversion site — canonical bytes\n * NEVER see a raw float in the cost field.\n */\nexport function usageToCanonical(usage: Usage): ReceiptUsageCanonical {\n  return {\n    promptTokens: usage.promptTokens,\n    completionTokens: usage.completionTokens,\n    costUsd: stringifyCostUsd(usage.costUsd),\n  };\n}\n\n/**\n * Canonicalize a receipt body to JCS bytes (RFC 8785).\n *\n * INVARIANT: callers MUST pass an already-redacted body. The redactor in\n * redact.ts produces the input to this function — never the cleartext.\n * See 09-CONTEXT.md \"Redact-Then-Sign Ordering (UNRETROFITTABLE)\".\n *\n * Throws if canonicalize returns undefined (impossible for valid bodies\n * — surfaces a programmer error rather than silently producing zero\n * bytes that would later fail signature verification).\n */\nexport function canonicalizeReceiptBody(\n  body: CapabilityReceiptBody,\n): Uint8Array {\n  const json = canonicalize(body);\n  if (json === undefined) {\n    throw new Error(\n      \"canonicalizeReceiptBody: canonicalize returned undefined; receipt body contained a non-canonicalizable value (function/symbol/undefined).\",\n    );\n  }\n  return encoder.encode(json);\n}\n","/**\n * DSSE-shaped envelope encoder/decoder + Pre-Authentication Encoding (PAE).\n *\n * This module is the single source of truth for:\n *   - PAYLOAD_TYPE constant (the receipt media type)\n *   - base64 (standard, NOT base64url) encoding helpers\n *   - DSSE v1.0 PAE construction: signatures MUST be computed over the bytes\n *     returned by buildPae(...), never over raw canonical JSON bytes.\n *\n * Reference: https://github.com/secure-systems-lab/dsse/blob/v1.0.0/protocol.md\n *\n * Reconciled in plan 09-03 to import canonical types from ./types.js (plan\n * 09-01 lands the spine). `_Local` aliases are retained as deprecated type\n * exports for backward compatibility with the Wave 1 sibling imports.\n */\n\nimport type { ReceiptEnvelope, ReceiptSignature } from \"./types.js\";\n\n/**\n * @deprecated Use ReceiptSignature from \"./types.js\". Retained as an alias\n * during the Wave 1 -> Wave 2 reconciliation.\n */\nexport type ReceiptSignature_Local = ReceiptSignature;\n\n/**\n * @deprecated Use ReceiptEnvelope from \"./types.js\". Retained as an alias\n * during the Wave 1 -> Wave 2 reconciliation.\n */\nexport type ReceiptEnvelope_Local = ReceiptEnvelope;\n\nexport const PAYLOAD_TYPE = \"application/vnd.lattice.receipt+json\" as const;\n\nconst textEncoder = new TextEncoder();\n\nexport function base64Encode(bytes: Uint8Array): string {\n  return Buffer.from(bytes).toString(\"base64\");\n}\n\nexport function base64Decode(value: string): Uint8Array {\n  return new Uint8Array(Buffer.from(value, \"base64\"));\n}\n\n/**\n * DSSE v1.0 Pre-Authentication Encoding.\n *\n * Reference: https://github.com/secure-systems-lab/dsse/blob/v1.0.0/protocol.md\n *\n * PAE = UTF-8(\"DSSEv1 \" + len(payloadType) + \" \" + payloadType\n *           + \" \" + len(payload) + \" \" + payload)\n *\n * `payload` here is the BASE64-encoded string per DSSE v1.0 spec (NOT raw\n * canonical bytes). Both signing and verification MUST construct PAE the\n * same way; this module is the single source of truth.\n *\n * ASCII length is decimal (no zero-padding). e.g. length 1000 → \"1000\".\n */\nexport function buildPae(\n  payloadType: string,\n  payloadBase64: string,\n): Uint8Array {\n  const ascii =\n    \"DSSEv1 \" +\n    payloadType.length.toString() +\n    \" \" +\n    payloadType +\n    \" \" +\n    payloadBase64.length.toString() +\n    \" \" +\n    payloadBase64;\n  return textEncoder.encode(ascii);\n}\n\nexport interface EncodeEnvelopeInput {\n  readonly payloadBytes: Uint8Array;\n  readonly signatures: readonly {\n    readonly keyid: string;\n    readonly sig: Uint8Array;\n  }[];\n}\n\nexport function encodeEnvelope(\n  input: EncodeEnvelopeInput,\n): ReceiptEnvelope {\n  const payload = base64Encode(input.payloadBytes);\n  const signatures: ReceiptSignature[] = input.signatures.map((entry) => ({\n    keyid: entry.keyid,\n    sig: base64Encode(entry.sig),\n  }));\n  return {\n    payloadType: PAYLOAD_TYPE,\n    payload,\n    signatures,\n  };\n}\n\nexport interface DecodedEnvelope {\n  readonly payloadType: string;\n  readonly payloadBytes: Uint8Array;\n  readonly signatures: readonly {\n    readonly keyid: string;\n    readonly sig: Uint8Array;\n  }[];\n}\n\nexport function decodeEnvelope(\n  envelope: ReceiptEnvelope,\n): DecodedEnvelope {\n  if (envelope.payloadType !== PAYLOAD_TYPE) {\n    throw new Error(\n      `envelope payloadType mismatch: expected \"${PAYLOAD_TYPE}\" got \"${envelope.payloadType}\"`,\n    );\n  }\n  return {\n    payloadType: envelope.payloadType,\n    payloadBytes: base64Decode(envelope.payload),\n    signatures: envelope.signatures.map((entry) => ({\n      keyid: entry.keyid,\n      sig: base64Decode(entry.sig),\n    })),\n  };\n}\n","import type {\n  CapabilityReceiptBody,\n  ReceiptRedaction,\n} from \"./types.js\";\n\n/**\n * Default redaction policy id for v1.1. Free-form string per\n * 09-CONTEXT.md — registry enforcement deferred to v1.2.\n */\nexport const DEFAULT_REDACTION_POLICY_ID = \"lattice.default.v1\";\n\nexport interface RedactionResult {\n  readonly body: CapabilityReceiptBody;\n  readonly redactions: readonly ReceiptRedaction[];\n}\n\n/**\n * Redact a receipt body BEFORE canonicalization (and BEFORE signing).\n *\n * The signed digest commits to canonicalize(redact(body)). NEVER the\n * other way around. See 09-CONTEXT.md \"Redact-Then-Sign Ordering\n * (UNRETROFITTABLE)\" and PITFALLS.md Pitfall #1.\n *\n * For v1.1 the default policy is minimal — the heavy lifting already\n * happened upstream:\n *   - Tripwire evaluator emits {detector, substring} for no-pii (T-08-01).\n *   - Provider responses are hashed into inputHashes/outputHash, never\n *     embedded raw.\n *   - Router reject messages do not contain PII by construction.\n *\n * This function therefore primarily:\n *   1. Materializes the redactions[] manifest declaring what WAS elided\n *      upstream (so receipts are self-describing).\n *   2. Provides the extension point future policies will use.\n *\n * Returns a NEW body — never mutates the input.\n */\nexport function redactReceiptBody(\n  body: CapabilityReceiptBody,\n  policyId: string = DEFAULT_REDACTION_POLICY_ID,\n): RedactionResult {\n  const redactions: ReceiptRedaction[] = [];\n\n  // Record the no-pii redaction as a declared manifest entry.\n  // The tripwire kernel ALREADY redacted to {detector, substring};\n  // this only declares that the redaction happened so verifiers can\n  // see it in the signed body.\n  if (\n    body.tripwireEvidence !== undefined &&\n    body.tripwireEvidence.kind === \"no-pii\"\n  ) {\n    redactions.push({\n      path: \"tripwireEvidence.observed\",\n      reason: \"no-pii-detector-substring-only\",\n    });\n  }\n\n  // Sort redactions by path for canonical-form stability (sorted arrays\n  // canonicalize identically regardless of insertion order).\n  const sorted = [...redactions].sort((a, b) =>\n    a.path < b.path ? -1 : a.path > b.path ? 1 : 0,\n  );\n\n  return {\n    body: {\n      ...body,\n      redactionPolicyId: policyId,\n      redactions: sorted,\n    },\n    redactions: sorted,\n  };\n}\n","import type { TrainingClass } from \"../capabilities/profile.js\";\nimport type { TripwireEvidence } from \"../contract/tripwire.js\";\nimport type { RouteRejectReason } from \"../plan/plan.js\";\nimport type { Usage } from \"../providers/provider.js\";\n\nimport { canonicalizeReceiptBody, usageToCanonical } from \"./canonical.js\";\nimport {\n  PAYLOAD_TYPE,\n  base64Encode,\n  buildPae,\n  encodeEnvelope,\n} from \"./envelope.js\";\nimport { DEFAULT_REDACTION_POLICY_ID, redactReceiptBody } from \"./redact.js\";\nimport type {\n  CapabilityReceiptBody,\n  ContractVerdict,\n  ReceiptEnvelope,\n  ReceiptModel,\n  ReceiptRoute,\n  ReceiptSigner,\n} from \"./types.js\";\n\n/**\n * Public input to createReceipt. Mirrors CapabilityReceiptBody minus:\n *   - `version` (forced to \"lattice-receipt/v1.3\" per Phase 46)\n *   - `kid` (forced from signer.kid — caller cannot mismatch)\n *   - `redactions[]` (populated by redactReceiptBody)\n *   - `usage.costUsd` (converted to canonical string by usageToCanonical)\n *\n * receiptId and issuedAt default to runtime-generated values when omitted.\n * redactionPolicyId defaults to DEFAULT_REDACTION_POLICY_ID.\n */\nexport interface CreateReceiptInput {\n  readonly runId: string;\n  readonly issuedAt?: string;\n  readonly receiptId?: string;\n  readonly model: ReceiptModel;\n  readonly route: ReceiptRoute;\n  readonly modelClass?: TrainingClass;\n  // Phase 39 (DELEG-06): chain-link to the parent receipt's CID\n  // (`sha256:<hex>` of the parent envelope's canonical payload bytes,\n  // derived via receipts/cid.ts receiptCid). Omit for root/non-crew receipts.\n  readonly parentReceiptCid?: string;\n  readonly lineageMerkleRoot?: string;\n  readonly usage: Usage;\n  readonly contractVerdict: ContractVerdict;\n  readonly contractHash: string | null;\n  readonly inputHashes: readonly string[];\n  readonly outputHash: string | null;\n  readonly redactionPolicyId?: string;\n  readonly noRouteReasons?: readonly RouteRejectReason[];\n  readonly tripwireEvidence?: TripwireEvidence;\n  // Phase 2 v1.1 step-marker fields. All optional; populated when a step\n  // transition emits a receipt. Phase 26 (CRYPTO-01) collapsed the v1/v1.1\n  // version-bump heuristic to ALWAYS emit \"lattice-receipt/v1.1\" since v1\n  // receipts can no longer pass verifyReceipt (receipt-downgrade defense).\n  readonly stepName?: string;\n  readonly stepIndex?: number;\n  readonly parentStepName?: string;\n  readonly previousStepName?: string;\n  readonly sessionId?: string;\n  readonly timestamp?: string;\n}\n\n/**\n * Build, redact, canonicalize, sign, and envelope a CapabilityReceipt.\n *\n * Ordering INVARIANT (09-CONTEXT.md, PITFALLS.md Pitfall #1):\n *   redact -> canonicalize -> PAE -> sign -> encode\n *\n * The signed digest commits to canonicalize(redact(body)). The function\n * structure makes any other ordering impossible to write by accident —\n * canonicalizeReceiptBody is ONLY called on the output of redactReceiptBody.\n *\n * Defense in depth:\n *   - body.kid is assigned from signer.kid, never from input (input has no\n *     kid field). The signed body and the envelope keyid CANNOT disagree by\n *     construction.\n *   - signer.kid is also written to envelope.signatures[0].keyid, so the\n *     verifier can cross-check (Step 7 of verifyReceipt).\n *\n * I-JSON guarantees: usage.costUsd is converted to string (or null) via\n * usageToCanonical. Receipts NEVER carry raw floats in the canonical form.\n */\nexport async function createReceipt(\n  input: CreateReceiptInput,\n  signer: ReceiptSigner,\n): Promise<ReceiptEnvelope> {\n  const policyId = input.redactionPolicyId ?? DEFAULT_REDACTION_POLICY_ID;\n  const receiptId = input.receiptId ?? crypto.randomUUID();\n  const issuedAt = input.issuedAt ?? new Date().toISOString();\n\n  // Phase 46: always emit v1.3. v1.1/v1.2 remain verifier-compatible, but\n  // new receipts can carry the optional lineageMerkleRoot provenance field.\n  const version: CapabilityReceiptBody[\"version\"] = \"lattice-receipt/v1.3\";\n\n  // Step 1: assemble the raw body. `kid` comes from the signer — caller\n  // cannot mismatch it. `usage.costUsd` is converted to string (I-JSON).\n  const body0: CapabilityReceiptBody = {\n    version,\n    receiptId,\n    runId: input.runId,\n    issuedAt,\n    kid: signer.kid,\n    model: input.model,\n    route: input.route,\n    ...(input.modelClass !== undefined ? { modelClass: input.modelClass } : {}),\n    ...(input.parentReceiptCid !== undefined ? { parentReceiptCid: input.parentReceiptCid } : {}),\n    ...(input.lineageMerkleRoot !== undefined ? { lineageMerkleRoot: input.lineageMerkleRoot } : {}),\n    usage: usageToCanonical(input.usage),\n    contractVerdict: input.contractVerdict,\n    contractHash: input.contractHash,\n    inputHashes: input.inputHashes,\n    outputHash: input.outputHash,\n    redactionPolicyId: policyId,\n    redactions: [],\n    ...(input.noRouteReasons !== undefined\n      ? { noRouteReasons: input.noRouteReasons }\n      : {}),\n    ...(input.tripwireEvidence !== undefined\n      ? { tripwireEvidence: input.tripwireEvidence }\n      : {}),\n    // v1.1 step-marker fields (conditional-spread to honor exactOptionalPropertyTypes)\n    ...(input.stepName !== undefined ? { stepName: input.stepName } : {}),\n    ...(input.stepIndex !== undefined ? { stepIndex: input.stepIndex } : {}),\n    ...(input.parentStepName !== undefined ? { parentStepName: input.parentStepName } : {}),\n    ...(input.previousStepName !== undefined ? { previousStepName: input.previousStepName } : {}),\n    ...(input.sessionId !== undefined ? { sessionId: input.sessionId } : {}),\n    ...(input.timestamp !== undefined ? { timestamp: input.timestamp } : {}),\n  };\n\n  // Step 2: redact BEFORE canonicalize. body now carries the redactions[]\n  // manifest declaring what was elided.\n  const { body } = redactReceiptBody(body0, policyId);\n\n  // Step 3: canonicalize the redacted body (RFC 8785 JCS).\n  const payloadBytes = canonicalizeReceiptBody(body);\n\n  // Step 4: base64-encode for the envelope (DSSE wire format).\n  const payload = base64Encode(payloadBytes);\n\n  // Step 5: build PAE — Pre-Authentication Encoding per DSSE v1.0.\n  const pae = buildPae(PAYLOAD_TYPE, payload);\n\n  // Step 6: sign the PAE bytes.\n  const sig = await signer.sign(pae);\n\n  // Step 7: assemble the envelope. signer.kid duplicated in signatures[]\n  // even though it is ALSO inside the signed body (defense in depth).\n  return encodeEnvelope({\n    payloadBytes,\n    signatures: [{ keyid: signer.kid, sig }],\n  });\n}\n"],"mappings":";;AAQA,MAAM,UAAU,IAAI,aAAa;;;;;;;;;AAUjC,SAAgB,iBAAiB,SAAuC;AACtE,KAAI,YAAY,KAAM,QAAO;AAC7B,KAAI,CAAC,OAAO,SAAS,QAAQ,CAAE,QAAO;AACtC,QAAO,QAAQ,UAAU;;;;;;;AAQ3B,SAAgB,iBAAiB,OAAqC;AACpE,QAAO;EACL,cAAc,MAAM;EACpB,kBAAkB,MAAM;EACxB,SAAS,iBAAiB,MAAM,QAAQ;EACzC;;;;;;;;;;;;;AAcH,SAAgB,wBACd,MACY;CACZ,MAAM,OAAO,aAAa,KAAK;AAC/B,KAAI,SAAS,KAAA,EACX,OAAM,IAAI,MACR,4IACD;AAEH,QAAO,QAAQ,OAAO,KAAK;;;;AC3B7B,MAAa,eAAe;AAE5B,MAAM,cAAc,IAAI,aAAa;AAErC,SAAgB,aAAa,OAA2B;AACtD,QAAO,OAAO,KAAK,MAAM,CAAC,SAAS,SAAS;;AAG9C,SAAgB,aAAa,OAA2B;AACtD,QAAO,IAAI,WAAW,OAAO,KAAK,OAAO,SAAS,CAAC;;;;;;;;;;;;;;;;AAiBrD,SAAgB,SACd,aACA,eACY;CACZ,MAAM,QACJ,YACA,YAAY,OAAO,UAAU,GAC7B,MACA,cACA,MACA,cAAc,OAAO,UAAU,GAC/B,MACA;AACF,QAAO,YAAY,OAAO,MAAM;;AAWlC,SAAgB,eACd,OACiB;AAMjB,QAAO;EACL,aAAa;EACb,SAPc,aAAa,MAAM,aAAa;EAQ9C,YAPqC,MAAM,WAAW,KAAK,WAAW;GACtE,OAAO,MAAM;GACb,KAAK,aAAa,MAAM,IAAI;GAC7B,EAAE;EAKF;;AAYH,SAAgB,eACd,UACiB;AACjB,KAAI,SAAS,gBAAA,uCACX,OAAM,IAAI,MACR,4CAA4C,aAAa,SAAS,SAAS,YAAY,GACxF;AAEH,QAAO;EACL,aAAa,SAAS;EACtB,cAAc,aAAa,SAAS,QAAQ;EAC5C,YAAY,SAAS,WAAW,KAAK,WAAW;GAC9C,OAAO,MAAM;GACb,KAAK,aAAa,MAAM,IAAI;GAC7B,EAAE;EACJ;;;;;;;;AC9GH,MAAa,8BAA8B;;;;;;;;;;;;;;;;;;;;;;AA4B3C,SAAgB,kBACd,MACA,WAAmB,6BACF;CACjB,MAAM,aAAiC,EAAE;AAMzC,KACE,KAAK,qBAAqB,KAAA,KAC1B,KAAK,iBAAiB,SAAS,SAE/B,YAAW,KAAK;EACd,MAAM;EACN,QAAQ;EACT,CAAC;CAKJ,MAAM,SAAS,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,MACtC,EAAE,OAAO,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,EAC9C;AAED,QAAO;EACL,MAAM;GACJ,GAAG;GACH,mBAAmB;GACnB,YAAY;GACb;EACD,YAAY;EACb;;;;;;;;;;;;;;;;;;;;;;;;ACcH,eAAsB,cACpB,OACA,QAC0B;CAC1B,MAAM,WAAW,MAAM,qBAAA;CACvB,MAAM,YAAY,MAAM,aAAa,OAAO,YAAY;CACxD,MAAM,WAAW,MAAM,6BAAY,IAAI,MAAM,EAAC,aAAa;CA2C3D,MAAM,EAAE,SAAS,kBAnCoB;EACnC,SALgD;EAMhD;EACA,OAAO,MAAM;EACb;EACA,KAAK,OAAO;EACZ,OAAO,MAAM;EACb,OAAO,MAAM;EACb,GAAI,MAAM,eAAe,KAAA,IAAY,EAAE,YAAY,MAAM,YAAY,GAAG,EAAE;EAC1E,GAAI,MAAM,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,MAAM,kBAAkB,GAAG,EAAE;EAC5F,GAAI,MAAM,sBAAsB,KAAA,IAAY,EAAE,mBAAmB,MAAM,mBAAmB,GAAG,EAAE;EAC/F,OAAO,iBAAiB,MAAM,MAAM;EACpC,iBAAiB,MAAM;EACvB,cAAc,MAAM;EACpB,aAAa,MAAM;EACnB,YAAY,MAAM;EAClB,mBAAmB;EACnB,YAAY,EAAE;EACd,GAAI,MAAM,mBAAmB,KAAA,IACzB,EAAE,gBAAgB,MAAM,gBAAgB,GACxC,EAAE;EACN,GAAI,MAAM,qBAAqB,KAAA,IAC3B,EAAE,kBAAkB,MAAM,kBAAkB,GAC5C,EAAE;EAEN,GAAI,MAAM,aAAa,KAAA,IAAY,EAAE,UAAU,MAAM,UAAU,GAAG,EAAE;EACpE,GAAI,MAAM,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,WAAW,GAAG,EAAE;EACvE,GAAI,MAAM,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,MAAM,gBAAgB,GAAG,EAAE;EACtF,GAAI,MAAM,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,MAAM,kBAAkB,GAAG,EAAE;EAC5F,GAAI,MAAM,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,WAAW,GAAG,EAAE;EACvE,GAAI,MAAM,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,WAAW,GAAG,EAAE;EACxE,EAIyC,SAAS;CAGnD,MAAM,eAAe,wBAAwB,KAAK;CAMlD,MAAM,MAAM,SAAS,cAHL,aAAa,aAAa,CAGC;CAG3C,MAAM,MAAM,MAAM,OAAO,KAAK,IAAI;AAIlC,QAAO,eAAe;EACpB;EACA,YAAY,CAAC;GAAE,OAAO,OAAO;GAAK;GAAK,CAAC;EACzC,CAAC"}