@geminixiang/mikan 1.0.0-beta.76 → 1.0.0-beta.78

package/dist/harness/jev.js

@@ -1,33 +1,7 @@
-/**
- * Jev (typesafe/jev) client, backed by `@geminixiang/jev`.
- *
- * Jev is a "System One" evaluation model: it scores a shared `state`
- * against typed questions (a yes/no probability, a multiple choice, or a
- * position on an ordered scale) and returns calibrated probabilities. It
- * does not generate text or tool calls, so it cannot be driven through
- * pi-ai's `Provider`/`Model`/`stream()` contract the way every model
- * `models.ts` catalogs is — that contract is chat/completion shaped
- * (system prompt + messages in, streamed text/tool-call events out), and
- * Jev's typed-decision shape does not fit it. Jev is therefore not a
- * selectable chat provider: callers import `evaluateWithJev` directly at
- * whatever call site wants a fast, cheap, type-safe decision (e.g.
- * classification, routing, guardrails), and interpret the returned
- * probabilities themselves.
- *
- * `@geminixiang/jev` owns the wire protocol, provider catalog, and auth
- * resolution for four backends (TypeSafe, OpenRouter, Vercel AI Gateway,
- * Cloudflare Workers AI); this module picks OpenRouter (the same key
- * pi-ai's `openrouter` chat provider reads) and adapts its typed
- * request/answer shapes to the caller-facing contract mikan's call sites
- * already depend on, so this file is the only one that needs to know a
- * dependency swap happened.
- */
 import { createBuiltinJevModels, JevAPIError, JevAuthError, JevConfigError, JevConnectionError, JevResponseError, JevTimeoutError, } from "@geminixiang/jev";
 import { readEnv } from "../env-manifest.js";
 import { recordJevOutcome } from "../observability/index.js";
-/** The current public Jev model id on OpenRouter. */
 export const JEV_MODEL_ID = "~typesafe/jev-latest";
-/** Thrown when no Jev backend has a usable credential. Callers fail closed on this. */
 export class JevNotConfiguredError extends Error {
     constructor() {
         super("Jev requires OPENROUTER_API_KEY (an OpenRouter API key). Set it in the environment before calling evaluateWithJev().");
@@ -41,12 +15,6 @@ export class JevRequestError extends Error {
         this.name = "JevRequestError";
     }
 }
-// ── @geminixiang/jev wiring ──────────────────────────────────────────────
-/**
- * Routes env reads through `readEnv` so `MIKAN_OPENROUTER_API_KEY` resolves
- * the same as every other mikan-aliased credential, instead of the
- * package's default `process.env`-only context.
- */
 const mikanAuthContext = {
     async env(name) {
         return readEnv(name);
@@ -63,9 +31,6 @@ function models() {
 function toGeminixiangQuestion(question) {
     const instructions = question.instructions;
     if (question.type === "boolean") {
-        // `@geminixiang/jev` leaves noul criteria optional; mikan has always sent
-        // an explicit Yes/No default so the wire payload (and anything tuned
-        // against it, e.g. the auto-reply gate) does not change under this swap.
         return {
             type: "noul",
             instructions,
@@ -108,20 +73,10 @@ function fromGeminixiangAnswer(answer) {
         confidence: answer.confidence,
     };
 }
-/**
- * Evaluate one or more typed questions against a shared `state` using Jev,
- * reached through OpenRouter's decisions API by way of `@geminixiang/jev`.
- * Every question is scored independently against the same state in a
- * single request; batching questions here is cheap (they share the input)
- * and is preferred over separate calls per question.
- */
 export async function evaluateWithJev(state, questions, options) {
     const catalogModel = models().getModel("openrouter", "jev-latest");
     if (!catalogModel)
         throw new JevNotConfiguredError();
-    // `options.model` is the wire model id callers already pass (e.g. from
-    // JEV_MODEL_ID); override the catalog slug directly rather than adding a
-    // second catalog entry per possible override.
     const model = options.model ? { ...catalogModel, slug: options.model } : catalogModel;
     const wireQuestions = {};
     for (const [id, question] of Object.entries(questions)) {

package/dist/harness/jev.js.map

@@ -1 +1 @@
-{"version":3,"file":"jev.js","sourceRoot":"","sources":["../../src/harness/jev.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,GAIhB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAkB,MAAM,2BAA2B,CAAC;AAE7E,qDAAqD;AACrD,MAAM,CAAC,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAqDnD,uFAAuF;AACvF,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C;QACE,KAAK,CACH,sHAAsH,CACvH,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YACE,OAAe,EACC,MAAc;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;sBAFC,MAAM;QAGtB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAiBD,4EAA4E;AAE5E;;;;GAIG;AACH,MAAM,gBAAgB,GAAgB;IACpC,KAAK,CAAC,GAAG,CAAC,IAAI;QACZ,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,KAAK,CAAC,UAAU;QACd,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC;AAEF,IAAI,YAAmE,CAAC;AAExE,SAAS,MAAM;IACb,YAAY,KAAK,sBAAsB,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC3E,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAqB;IAClD,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAgC,CAAC;IAC/D,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,0EAA0E;QAC1E,qEAAqE;QACrE,yEAAyE;QACzE,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,YAAY;YACZ,QAAQ,EAAE;gBACR,IAAI,EAAG,QAAQ,CAAC,QAAQ,EAAE,IAAyB,IAAI,KAAK;gBAC5D,KAAK,EAAG,QAAQ,CAAC,QAAQ,EAAE,KAA0B,IAAI,IAAI;aAC9D;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,YAAY;YACZ,QAAQ,EAAE,QAAQ,CAAC,QAA4C;SAChE,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC,QAA8B,CAAC;IACzE,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAiD;IAEjD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa,EAAE,MAAM,CAAC,aAAuC;YAC7D,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,MAAM,EAAE,MAAM,CAAC,MAA4C;QAC3D,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAe,EACf,SAAoB,EACpB,OAA+B;IAE/B,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACnE,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;IACrD,uEAAuE;IACvE,yEAAyE;IACzE,8CAA8C;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;IAEtF,MAAM,aAAa,GAAwC,EAAE,CAAC;IAC9D,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,aAAa,CAAC,EAAE,CAAC,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,QAAQ,CAC9B,KAAK,EACL,EAAE,KAAK,EAAE,KAAyB,EAAE,SAAS,EAAE,aAAa,EAAE,EAC9D;YACE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAgB,CAAC;YACf,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;YACxD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACrE,MAAM,IAAI,qBAAqB,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;QACD,IACE,KAAK,YAAY,gBAAgB;YACjC,KAAK,YAAY,kBAAkB;YACnC,KAAK,YAAY,eAAe,EAChC,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,gBAAgB,CAAC;QACf,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;QAC/B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;QACjC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK;QAChC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,EAA2D,CAAC;IAC5E,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,eAAe,CAAC,oCAAoC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACtF,OAAkD,CAAC,EAAE,CAAC,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO;QACL,OAAO;QACP,KAAK,EAAE;YACL,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;YAC/B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;YACjC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK;SAC9B;QACD,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Jev (typesafe/jev) client, backed by `@geminixiang/jev`.\n *\n * Jev is a \"System One\" evaluation model: it scores a shared `state`\n * against typed questions (a yes/no probability, a multiple choice, or a\n * position on an ordered scale) and returns calibrated probabilities. It\n * does not generate text or tool calls, so it cannot be driven through\n * pi-ai's `Provider`/`Model`/`stream()` contract the way every model\n * `models.ts` catalogs is — that contract is chat/completion shaped\n * (system prompt + messages in, streamed text/tool-call events out), and\n * Jev's typed-decision shape does not fit it. Jev is therefore not a\n * selectable chat provider: callers import `evaluateWithJev` directly at\n * whatever call site wants a fast, cheap, type-safe decision (e.g.\n * classification, routing, guardrails), and interpret the returned\n * probabilities themselves.\n *\n * `@geminixiang/jev` owns the wire protocol, provider catalog, and auth\n * resolution for four backends (TypeSafe, OpenRouter, Vercel AI Gateway,\n * Cloudflare Workers AI); this module picks OpenRouter (the same key\n * pi-ai's `openrouter` chat provider reads) and adapts its typed\n * request/answer shapes to the caller-facing contract mikan's call sites\n * already depend on, so this file is the only one that needs to know a\n * dependency swap happened.\n */\nimport {\n  createBuiltinJevModels,\n  JevAPIError,\n  JevAuthError,\n  JevConfigError,\n  JevConnectionError,\n  JevResponseError,\n  JevTimeoutError,\n  type AnswerFor as GeminixiangAnswerFor,\n  type Entry as GeminixiangEntry,\n  type Question as GeminixiangQuestion,\n} from \"@geminixiang/jev\";\nimport type { AuthContext } from \"@earendil-works/pi-ai\";\nimport { readEnv } from \"../env-manifest.js\";\nimport { recordJevOutcome, type JevCaller } from \"../observability/index.js\";\n\n/** The current public Jev model id on OpenRouter. */\nexport const JEV_MODEL_ID = \"~typesafe/jev-latest\";\n\n/**\n * Any value Jev accepts as text-bearing structure: a string, a JSON object,\n * an array, or `null`. State, instructions, and criteria descriptions all\n * take this shape; Jev is trained to read the structure, so objects with\n * labelled keys are preferred over string templates.\n */\nexport type JevEntry = string | number | boolean | null | JevEntry[] | { [key: string]: JevEntry };\n\n/** A shared caller-facing question shape; translated to `@geminixiang/jev`'s shape below. */\nexport type JevQuestion =\n  | {\n      type: \"boolean\";\n      instructions: JevEntry;\n      /** Optional descriptions of the yes / no outcomes. */\n      criteria?: { true?: JevEntry; false?: JevEntry };\n    }\n  | { type: \"choice\"; instructions: JevEntry; criteria: Record<string, JevEntry> }\n  | { type: \"score\"; instructions: JevEntry; criteria: readonly JevEntry[] };\n\nexport type JevQuestions = Record<string, JevQuestion>;\n\nexport type JevAnswer<QUESTION extends JevQuestion> = QUESTION extends { type: \"choice\" }\n  ? {\n      type: \"choice\";\n      choice: string;\n      probabilities?: Record<string, number>;\n      /** 0-1 statistic over `probabilities`; low means no option clearly fits. */\n      confidence?: number;\n    }\n  : QUESTION extends { type: \"score\" }\n    ? {\n        type: \"score\";\n        /** Expected level index; fractional between levels. */\n        score: number;\n        probabilities?: Record<string, number>;\n        /** Level index -> criterion text, as echoed by Jev. */\n        legend?: Record<string, string>;\n        confidence?: number;\n      }\n    : { type: \"boolean\"; probability: number };\n\nexport interface JevResult<QUESTIONS extends JevQuestions> {\n  readonly answers: { [ID in keyof QUESTIONS]: JevAnswer<QUESTIONS[ID]> };\n  readonly usage: {\n    inputTokens: number | undefined;\n    outputTokens: number | undefined;\n    cost: number | undefined;\n  };\n  readonly model: string;\n}\n\n/** Thrown when no Jev backend has a usable credential. Callers fail closed on this. */\nexport class JevNotConfiguredError extends Error {\n  constructor() {\n    super(\n      \"Jev requires OPENROUTER_API_KEY (an OpenRouter API key). Set it in the environment before calling evaluateWithJev().\",\n    );\n    this.name = \"JevNotConfiguredError\";\n  }\n}\n\nexport class JevRequestError extends Error {\n  constructor(\n    message: string,\n    public readonly status: number,\n  ) {\n    super(message);\n    this.name = \"JevRequestError\";\n  }\n}\n\nexport interface EvaluateWithJevOptions {\n  /** Evaluation model id; defaults to the current public Jev model. */\n  model?: string;\n  abortSignal?: AbortSignal;\n  headers?: Record<string, string>;\n  /**\n   * Which call site is asking, so Jev spend is attributable in Sentry/OTel\n   * (`agent.jev.cost`, tagged `caller`) without any judged content leaving\n   * this function. Required rather than defaulted so a new call site must\n   * consciously pick an attribution instead of spend silently landing in a\n   * generic bucket.\n   */\n  caller: JevCaller;\n}\n\n// ── @geminixiang/jev wiring ──────────────────────────────────────────────\n\n/**\n * Routes env reads through `readEnv` so `MIKAN_OPENROUTER_API_KEY` resolves\n * the same as every other mikan-aliased credential, instead of the\n * package's default `process.env`-only context.\n */\nconst mikanAuthContext: AuthContext = {\n  async env(name) {\n    return readEnv(name);\n  },\n  async fileExists() {\n    return false;\n  },\n};\n\nlet cachedModels: ReturnType<typeof createBuiltinJevModels> | undefined;\n\nfunction models() {\n  cachedModels ??= createBuiltinJevModels({ authContext: mikanAuthContext });\n  return cachedModels;\n}\n\nfunction toGeminixiangQuestion(question: JevQuestion): GeminixiangQuestion {\n  const instructions = question.instructions as GeminixiangEntry;\n  if (question.type === \"boolean\") {\n    // `@geminixiang/jev` leaves noul criteria optional; mikan has always sent\n    // an explicit Yes/No default so the wire payload (and anything tuned\n    // against it, e.g. the auto-reply gate) does not change under this swap.\n    return {\n      type: \"noul\",\n      instructions,\n      criteria: {\n        true: (question.criteria?.true as GeminixiangEntry) ?? \"Yes\",\n        false: (question.criteria?.false as GeminixiangEntry) ?? \"No\",\n      },\n    };\n  }\n  if (question.type === \"choice\") {\n    return {\n      type: \"choice\",\n      instructions,\n      criteria: question.criteria as Record<string, GeminixiangEntry>,\n    };\n  }\n  const [first, second, ...rest] = question.criteria as GeminixiangEntry[];\n  if (first === undefined || second === undefined) {\n    throw new Error(\"score questions need at least two levels\");\n  }\n  return { type: \"score\", instructions, criteria: [first, second, ...rest] };\n}\n\nfunction fromGeminixiangAnswer(\n  answer: GeminixiangAnswerFor<GeminixiangQuestion>,\n): JevAnswer<JevQuestion> {\n  if (answer.type === \"noul\") {\n    return { type: \"boolean\", probability: answer.noul };\n  }\n  if (answer.type === \"choice\") {\n    return {\n      type: \"choice\",\n      choice: answer.choice,\n      probabilities: answer.probabilities as Record<string, number>,\n      confidence: answer.confidence,\n    };\n  }\n  return {\n    type: \"score\",\n    score: answer.score,\n    probabilities: answer.probabilities,\n    legend: answer.legend as Record<string, string> | undefined,\n    confidence: answer.confidence,\n  };\n}\n\n/**\n * Evaluate one or more typed questions against a shared `state` using Jev,\n * reached through OpenRouter's decisions API by way of `@geminixiang/jev`.\n * Every question is scored independently against the same state in a\n * single request; batching questions here is cheap (they share the input)\n * and is preferred over separate calls per question.\n */\nexport async function evaluateWithJev<const QUESTIONS extends JevQuestions>(\n  state: JevEntry,\n  questions: QUESTIONS,\n  options: EvaluateWithJevOptions,\n): Promise<JevResult<QUESTIONS>> {\n  const catalogModel = models().getModel(\"openrouter\", \"jev-latest\");\n  if (!catalogModel) throw new JevNotConfiguredError();\n  // `options.model` is the wire model id callers already pass (e.g. from\n  // JEV_MODEL_ID); override the catalog slug directly rather than adding a\n  // second catalog entry per possible override.\n  const model = options.model ? { ...catalogModel, slug: options.model } : catalogModel;\n\n  const wireQuestions: Record<string, GeminixiangQuestion> = {};\n  for (const [id, question] of Object.entries(questions)) {\n    wireQuestions[id] = toGeminixiangQuestion(question);\n  }\n\n  const startedAt = Date.now();\n  let result;\n  try {\n    result = await models().evaluate(\n      model,\n      { state: state as GeminixiangEntry, questions: wireQuestions },\n      {\n        ...(options.headers ? { headers: options.headers } : {}),\n        ...(options.abortSignal ? { signal: options.abortSignal } : {}),\n      },\n    );\n  } catch (error) {\n    recordJevOutcome({\n      caller: options.caller,\n      status: \"error\",\n      errorType: error instanceof Error ? error.name : \"Error\",\n      durationMs: Date.now() - startedAt,\n    });\n    if (error instanceof JevAuthError || error instanceof JevConfigError) {\n      throw new JevNotConfiguredError();\n    }\n    if (error instanceof JevAPIError) {\n      throw new JevRequestError(error.message, error.status);\n    }\n    if (\n      error instanceof JevResponseError ||\n      error instanceof JevConnectionError ||\n      error instanceof JevTimeoutError\n    ) {\n      throw new JevRequestError(error.message, 502);\n    }\n    throw error;\n  }\n  recordJevOutcome({\n    caller: options.caller,\n    status: \"ok\",\n    inputTokens: result.usage.input,\n    outputTokens: result.usage.output,\n    costUsd: result.usage.cost.total,\n    durationMs: Date.now() - startedAt,\n  });\n\n  const answers = {} as { [ID in keyof QUESTIONS]: JevAnswer<QUESTIONS[ID]> };\n  for (const id of Object.keys(questions)) {\n    const answer = result.answers[id];\n    if (!answer) throw new JevRequestError(`Jev response missing answer for \"${id}\"`, 502);\n    (answers as Record<string, JevAnswer<JevQuestion>>)[id] = fromGeminixiangAnswer(answer);\n  }\n\n  return {\n    answers,\n    usage: {\n      inputTokens: result.usage.input,\n      outputTokens: result.usage.output,\n      cost: result.usage.cost.total,\n    },\n    model: result.model,\n  };\n}\n"]}
+{"version":3,"file":"jev.js","sourceRoot":"","sources":["../../src/harness/jev.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,GAIhB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAkB,MAAM,2BAA2B,CAAC;AAE7E,MAAM,CAAC,MAAM,YAAY,GAAG,sBAAsB,CAAC;AA0CnD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C;QACE,KAAK,CACH,sHAAsH,CACvH,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YACE,OAAe,EACC,MAAc;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;sBAFC,MAAM;QAGtB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AASD,MAAM,gBAAgB,GAAgB;IACpC,KAAK,CAAC,GAAG,CAAC,IAAI;QACZ,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,KAAK,CAAC,UAAU;QACd,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC;AAEF,IAAI,YAAmE,CAAC;AAExE,SAAS,MAAM;IACb,YAAY,KAAK,sBAAsB,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC3E,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAqB;IAClD,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAgC,CAAC;IAC/D,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,YAAY;YACZ,QAAQ,EAAE;gBACR,IAAI,EAAG,QAAQ,CAAC,QAAQ,EAAE,IAAyB,IAAI,KAAK;gBAC5D,KAAK,EAAG,QAAQ,CAAC,QAAQ,EAAE,KAA0B,IAAI,IAAI;aAC9D;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,YAAY;YACZ,QAAQ,EAAE,QAAQ,CAAC,QAA4C;SAChE,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC,QAA8B,CAAC;IACzE,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAiD;IAEjD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa,EAAE,MAAM,CAAC,aAAuC;YAC7D,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,MAAM,EAAE,MAAM,CAAC,MAA4C;QAC3D,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAe,EACf,SAAoB,EACpB,OAA+B;IAE/B,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACnE,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;IAEtF,MAAM,aAAa,GAAwC,EAAE,CAAC;IAC9D,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,aAAa,CAAC,EAAE,CAAC,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,QAAQ,CAC9B,KAAK,EACL,EAAE,KAAK,EAAE,KAAyB,EAAE,SAAS,EAAE,aAAa,EAAE,EAC9D;YACE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAgB,CAAC;YACf,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;YACxD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACrE,MAAM,IAAI,qBAAqB,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;QACD,IACE,KAAK,YAAY,gBAAgB;YACjC,KAAK,YAAY,kBAAkB;YACnC,KAAK,YAAY,eAAe,EAChC,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,gBAAgB,CAAC;QACf,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;QAC/B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;QACjC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK;QAChC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,EAA2D,CAAC;IAC5E,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,eAAe,CAAC,oCAAoC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACtF,OAAkD,CAAC,EAAE,CAAC,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO;QACL,OAAO;QACP,KAAK,EAAE;YACL,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;YAC/B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;YACjC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK;SAC9B;QACD,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC","sourcesContent":["import {\n  createBuiltinJevModels,\n  JevAPIError,\n  JevAuthError,\n  JevConfigError,\n  JevConnectionError,\n  JevResponseError,\n  JevTimeoutError,\n  type AnswerFor as GeminixiangAnswerFor,\n  type Entry as GeminixiangEntry,\n  type Question as GeminixiangQuestion,\n} from \"@geminixiang/jev\";\nimport type { AuthContext } from \"@earendil-works/pi-ai\";\nimport { readEnv } from \"../env-manifest.js\";\nimport { recordJevOutcome, type JevCaller } from \"../observability/index.js\";\n\nexport const JEV_MODEL_ID = \"~typesafe/jev-latest\";\n\nexport type JevEntry = string | number | boolean | null | JevEntry[] | { [key: string]: JevEntry };\n\nexport type JevQuestion =\n  | {\n      type: \"boolean\";\n      instructions: JevEntry;\n      criteria?: { true?: JevEntry; false?: JevEntry };\n    }\n  | { type: \"choice\"; instructions: JevEntry; criteria: Record<string, JevEntry> }\n  | { type: \"score\"; instructions: JevEntry; criteria: readonly JevEntry[] };\n\nexport type JevQuestions = Record<string, JevQuestion>;\n\nexport type JevAnswer<QUESTION extends JevQuestion> = QUESTION extends { type: \"choice\" }\n  ? {\n      type: \"choice\";\n      choice: string;\n      probabilities?: Record<string, number>;\n      confidence?: number;\n    }\n  : QUESTION extends { type: \"score\" }\n    ? {\n        type: \"score\";\n        score: number;\n        probabilities?: Record<string, number>;\n        legend?: Record<string, string>;\n        confidence?: number;\n      }\n    : { type: \"boolean\"; probability: number };\n\nexport interface JevResult<QUESTIONS extends JevQuestions> {\n  readonly answers: { [ID in keyof QUESTIONS]: JevAnswer<QUESTIONS[ID]> };\n  readonly usage: {\n    inputTokens: number | undefined;\n    outputTokens: number | undefined;\n    cost: number | undefined;\n  };\n  readonly model: string;\n}\n\nexport class JevNotConfiguredError extends Error {\n  constructor() {\n    super(\n      \"Jev requires OPENROUTER_API_KEY (an OpenRouter API key). Set it in the environment before calling evaluateWithJev().\",\n    );\n    this.name = \"JevNotConfiguredError\";\n  }\n}\n\nexport class JevRequestError extends Error {\n  constructor(\n    message: string,\n    public readonly status: number,\n  ) {\n    super(message);\n    this.name = \"JevRequestError\";\n  }\n}\n\nexport interface EvaluateWithJevOptions {\n  model?: string;\n  abortSignal?: AbortSignal;\n  headers?: Record<string, string>;\n  caller: JevCaller;\n}\n\nconst mikanAuthContext: AuthContext = {\n  async env(name) {\n    return readEnv(name);\n  },\n  async fileExists() {\n    return false;\n  },\n};\n\nlet cachedModels: ReturnType<typeof createBuiltinJevModels> | undefined;\n\nfunction models() {\n  cachedModels ??= createBuiltinJevModels({ authContext: mikanAuthContext });\n  return cachedModels;\n}\n\nfunction toGeminixiangQuestion(question: JevQuestion): GeminixiangQuestion {\n  const instructions = question.instructions as GeminixiangEntry;\n  if (question.type === \"boolean\") {\n    return {\n      type: \"noul\",\n      instructions,\n      criteria: {\n        true: (question.criteria?.true as GeminixiangEntry) ?? \"Yes\",\n        false: (question.criteria?.false as GeminixiangEntry) ?? \"No\",\n      },\n    };\n  }\n  if (question.type === \"choice\") {\n    return {\n      type: \"choice\",\n      instructions,\n      criteria: question.criteria as Record<string, GeminixiangEntry>,\n    };\n  }\n  const [first, second, ...rest] = question.criteria as GeminixiangEntry[];\n  if (first === undefined || second === undefined) {\n    throw new Error(\"score questions need at least two levels\");\n  }\n  return { type: \"score\", instructions, criteria: [first, second, ...rest] };\n}\n\nfunction fromGeminixiangAnswer(\n  answer: GeminixiangAnswerFor<GeminixiangQuestion>,\n): JevAnswer<JevQuestion> {\n  if (answer.type === \"noul\") {\n    return { type: \"boolean\", probability: answer.noul };\n  }\n  if (answer.type === \"choice\") {\n    return {\n      type: \"choice\",\n      choice: answer.choice,\n      probabilities: answer.probabilities as Record<string, number>,\n      confidence: answer.confidence,\n    };\n  }\n  return {\n    type: \"score\",\n    score: answer.score,\n    probabilities: answer.probabilities,\n    legend: answer.legend as Record<string, string> | undefined,\n    confidence: answer.confidence,\n  };\n}\n\nexport async function evaluateWithJev<const QUESTIONS extends JevQuestions>(\n  state: JevEntry,\n  questions: QUESTIONS,\n  options: EvaluateWithJevOptions,\n): Promise<JevResult<QUESTIONS>> {\n  const catalogModel = models().getModel(\"openrouter\", \"jev-latest\");\n  if (!catalogModel) throw new JevNotConfiguredError();\n  const model = options.model ? { ...catalogModel, slug: options.model } : catalogModel;\n\n  const wireQuestions: Record<string, GeminixiangQuestion> = {};\n  for (const [id, question] of Object.entries(questions)) {\n    wireQuestions[id] = toGeminixiangQuestion(question);\n  }\n\n  const startedAt = Date.now();\n  let result;\n  try {\n    result = await models().evaluate(\n      model,\n      { state: state as GeminixiangEntry, questions: wireQuestions },\n      {\n        ...(options.headers ? { headers: options.headers } : {}),\n        ...(options.abortSignal ? { signal: options.abortSignal } : {}),\n      },\n    );\n  } catch (error) {\n    recordJevOutcome({\n      caller: options.caller,\n      status: \"error\",\n      errorType: error instanceof Error ? error.name : \"Error\",\n      durationMs: Date.now() - startedAt,\n    });\n    if (error instanceof JevAuthError || error instanceof JevConfigError) {\n      throw new JevNotConfiguredError();\n    }\n    if (error instanceof JevAPIError) {\n      throw new JevRequestError(error.message, error.status);\n    }\n    if (\n      error instanceof JevResponseError ||\n      error instanceof JevConnectionError ||\n      error instanceof JevTimeoutError\n    ) {\n      throw new JevRequestError(error.message, 502);\n    }\n    throw error;\n  }\n  recordJevOutcome({\n    caller: options.caller,\n    status: \"ok\",\n    inputTokens: result.usage.input,\n    outputTokens: result.usage.output,\n    costUsd: result.usage.cost.total,\n    durationMs: Date.now() - startedAt,\n  });\n\n  const answers = {} as { [ID in keyof QUESTIONS]: JevAnswer<QUESTIONS[ID]> };\n  for (const id of Object.keys(questions)) {\n    const answer = result.answers[id];\n    if (!answer) throw new JevRequestError(`Jev response missing answer for \"${id}\"`, 502);\n    (answers as Record<string, JevAnswer<JevQuestion>>)[id] = fromGeminixiangAnswer(answer);\n  }\n\n  return {\n    answers,\n    usage: {\n      inputTokens: result.usage.input,\n      outputTokens: result.usage.output,\n      cost: result.usage.cost.total,\n    },\n    model: result.model,\n  };\n}\n"]}

package/dist/harness/mcp-result.d.ts

@@ -0,0 +1,20 @@
+import type { ImageContent, TextContent } from "@earendil-works/pi-ai";
+import { type AgentToolResult, type Context, type ExecutionEnv } from "@earendil-works/pi-agent-core";
+export interface McpTextLimits {
+    maxBytes: number;
+    maxLines: number;
+}
+export interface BoundedMcpText {
+    text: string;
+    truncated: boolean;
+    digest?: true;
+}
+export interface McpCallResult {
+    content?: unknown;
+    structuredContent?: unknown;
+    isError?: boolean;
+}
+export declare function mcpResultContent(result: McpCallResult): (TextContent | ImageContent)[];
+export declare function boundMcpText(text: string, limits: McpTextLimits): BoundedMcpText;
+export declare function guardMcpToolResult(result: McpCallResult, env: ExecutionEnv, context: Context): Promise<AgentToolResult<undefined>>;
+//# sourceMappingURL=mcp-result.d.ts.map

package/dist/harness/mcp-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-result.d.ts","sourceRoot":"","sources":["../../src/harness/mcp-result.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,OAAO,EACZ,KAAK,YAAY,EAClB,MAAM,+BAA+B,CAAC;AAGvC,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,IAAI,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAiED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,WAAW,GAAG,YAAY,CAAC,EAAE,CAStF;AAsDD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,cAAc,CAehF;AAoCD,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,aAAa,EACrB,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAkBrC"}

package/dist/harness/mcp-result.js

@@ -0,0 +1,171 @@
+import { randomBytes } from "node:crypto";
+import { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, formatSize, truncateHead, } from "@earendil-works/pi-agent-core";
+import { redactSecrets } from "./tools/secret-redaction.js";
+const SPILL_DIR = [".mikan", "mcp-output"];
+const NOTICE_RESERVE_BYTES = 640;
+const NOTICE_RESERVE_LINES = 4;
+const RESULT_LIMITS = {
+    maxBytes: DEFAULT_MAX_BYTES - NOTICE_RESERVE_BYTES,
+    maxLines: DEFAULT_MAX_LINES - NOTICE_RESERVE_LINES,
+};
+const DIGEST_LEVELS = [
+    { stringChars: 200, arrayItems: 3, depth: 6 },
+    { stringChars: 80, arrayItems: 2, depth: 4 },
+    { stringChars: 40, arrayItems: 1, depth: 3 },
+    { stringChars: 16, arrayItems: 1, depth: 2 },
+];
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function stringField(block, key) {
+    const value = block[key];
+    return typeof value === "string" ? value : undefined;
+}
+function describeResource(resource) {
+    const uri = stringField(resource, "uri") ?? "(no URI)";
+    const text = stringField(resource, "text");
+    if (text !== undefined)
+        return `[Resource: ${uri}]\n${text}`;
+    const blob = stringField(resource, "blob");
+    const mimeType = stringField(resource, "mimeType") ?? "unknown type";
+    const size = blob === undefined ? "no content" : `${Buffer.byteLength(blob, "base64")} bytes`;
+    return `[Resource: ${uri} (${mimeType}, ${size}, binary content omitted)]`;
+}
+function blockContent(block) {
+    const text = stringField(block, "text");
+    if (block.type === "text" && text !== undefined)
+        return { type: "text", text };
+    const data = stringField(block, "data");
+    const mimeType = stringField(block, "mimeType");
+    if (block.type === "image" && data !== undefined && mimeType !== undefined) {
+        return { type: "image", data, mimeType };
+    }
+    if (block.type === "resource" && isRecord(block.resource)) {
+        return { type: "text", text: describeResource(block.resource) };
+    }
+    if (block.type === "resource_link") {
+        const uri = stringField(block, "uri") ?? "(no URI)";
+        return { type: "text", text: `[Resource link: ${stringField(block, "name") ?? uri}] ${uri}` };
+    }
+    if (block.type === "audio") {
+        return { type: "text", text: `[Audio content omitted: ${mimeType ?? "audio/*"}]` };
+    }
+    return { type: "text", text: JSON.stringify(block) };
+}
+export function mcpResultContent(result) {
+    const blocks = (Array.isArray(result.content) ? result.content : [])
+        .filter(isRecord)
+        .map(blockContent);
+    if (blocks.length > 0)
+        return blocks;
+    if (result.structuredContent !== undefined && result.structuredContent !== null) {
+        return [{ type: "text", text: JSON.stringify(result.structuredContent) }];
+    }
+    return [{ type: "text", text: "(empty result)" }];
+}
+function parseJson(text) {
+    const trimmed = text.trimStart();
+    if (!trimmed.startsWith("{") && !trimmed.startsWith("["))
+        return undefined;
+    try {
+        return { value: JSON.parse(text) };
+    }
+    catch {
+        return undefined;
+    }
+}
+function digest(value, level, depth = 0) {
+    if (typeof value === "string") {
+        return value.length <= level.stringChars
+            ? value
+            : `${value.slice(0, level.stringChars)}…[+${value.length - level.stringChars} chars]`;
+    }
+    if (Array.isArray(value)) {
+        if (depth >= level.depth)
+            return `[…${value.length} items]`;
+        const kept = value.slice(0, level.arrayItems).map((item) => digest(item, level, depth + 1));
+        const hidden = value.length - kept.length;
+        return hidden > 0 ? [...kept, `…[+${hidden} more items]`] : kept;
+    }
+    if (isRecord(value)) {
+        if (depth >= level.depth)
+            return `{…${Object.keys(value).length} keys}`;
+        return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, digest(item, level, depth + 1)]));
+    }
+    return value;
+}
+function fits(text, limits) {
+    return (Buffer.byteLength(text, "utf8") <= limits.maxBytes && text.split("\n").length <= limits.maxLines);
+}
+function sliceToBytes(text, maxBytes) {
+    const buffer = Buffer.from(text, "utf8");
+    if (buffer.length <= maxBytes)
+        return text;
+    let end = Math.max(0, maxBytes);
+    while (end > 0 && (buffer[end] & 0xc0) === 0x80)
+        end--;
+    return buffer.subarray(0, end).toString("utf8");
+}
+function headTruncate(text, limits) {
+    const truncation = truncateHead(text, limits);
+    return truncation.firstLineExceedsLimit
+        ? sliceToBytes(text, limits.maxBytes)
+        : truncation.content;
+}
+export function boundMcpText(text, limits) {
+    const parsed = parseJson(text);
+    if (!parsed) {
+        return fits(text, limits)
+            ? { text, truncated: false }
+            : { text: headTruncate(text, limits), truncated: true };
+    }
+    const compact = JSON.stringify(parsed.value);
+    if (fits(compact, limits))
+        return { text: compact, truncated: false };
+    for (const level of DIGEST_LEVELS) {
+        const digested = JSON.stringify(digest(parsed.value, level));
+        if (fits(digested, limits))
+            return { text: digested, truncated: true, digest: true };
+    }
+    const smallest = JSON.stringify(digest(parsed.value, DIGEST_LEVELS.at(-1)));
+    return { text: sliceToBytes(smallest, limits.maxBytes), truncated: true, digest: true };
+}
+function compactMcpText(text) {
+    const parsed = parseJson(text);
+    return parsed ? JSON.stringify(parsed.value) : text;
+}
+async function spillFullResult(env, text, extension, context) {
+    const path = await env.joinPath([env.cwd, ...SPILL_DIR, `${randomBytes(8).toString("hex")}.${extension}`], context);
+    if (!path.ok)
+        return undefined;
+    const written = await env.writeFile(path.value, redactSecrets(text), context);
+    return written.ok ? path.value : undefined;
+}
+function truncationNotice(bounded, totalBytes, spillPath) {
+    const view = bounded.digest
+        ? `an abbreviated view of ${formatSize(totalBytes)}: long strings, arrays, and deep nesting are shortened; keys, counts, and pagination fields are kept`
+        : `the beginning of ${formatSize(totalBytes)}`;
+    const full = spillPath
+        ? `Full result: ${spillPath} — use read with offset/limit or grep to inspect it`
+        : "The full result could not be saved";
+    return `[MCP result truncated: showing ${view}. ${full}, or re-query with filters or smaller pages.]`;
+}
+export async function guardMcpToolResult(result, env, context) {
+    const blocks = mcpResultContent(result).map((block) => block.type === "text" ? Object.assign(block, { text: compactMcpText(block.text) }) : block);
+    const texts = blocks.filter((block) => block.type === "text");
+    const images = blocks.filter((block) => block.type === "image");
+    const combined = texts.map((block) => block.text).join("\n");
+    if (result.isError) {
+        throw new Error(boundMcpText(combined, RESULT_LIMITS).text || "MCP tool call failed");
+    }
+    if (fits(combined, RESULT_LIMITS))
+        return { content: blocks, details: undefined };
+    const bounded = boundMcpText(combined, RESULT_LIMITS);
+    const spillPath = await spillFullResult(env, combined, bounded.digest ? "json" : "txt", context);
+    const notice = truncationNotice(bounded, Buffer.byteLength(combined, "utf8"), spillPath);
+    return {
+        content: [{ type: "text", text: `${bounded.text}\n\n${notice}` }, ...images],
+        details: undefined,
+    };
+}
+//# sourceMappingURL=mcp-result.js.map

package/dist/harness/mcp-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-result.js","sourceRoot":"","sources":["../../src/harness/mcp-result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,YAAY,GAIb,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAmB5D,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AAC3C,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,aAAa,GAAkB;IACnC,QAAQ,EAAE,iBAAiB,GAAG,oBAAoB;IAClD,QAAQ,EAAE,iBAAiB,GAAG,oBAAoB;CACnD,CAAC;AAQF,MAAM,aAAa,GAA2B;IAC5C,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IAC7C,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IAC5C,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IAC5C,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;CAC7C,CAAC;AAIF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAe,EAAE,GAAW;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC;IACvD,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,cAAc,GAAG,MAAM,IAAI,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,cAAc,CAAC;IACrE,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC9F,OAAO,cAAc,GAAG,KAAK,QAAQ,KAAK,IAAI,4BAA4B,CAAC;AAC7E,CAAC;AAED,SAAS,YAAY,CAAC,KAAe;IACnC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC/E,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,KAAK,GAAG,EAAE,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,QAAQ,IAAI,SAAS,GAAG,EAAE,CAAC;IACrF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,MAAM,CAAC,QAAQ,CAAC;SAChB,GAAG,CAAC,YAAY,CAAC,CAAC;IACrB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,IAAI,MAAM,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QAChF,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3E,IAAI,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAkB,EAAE,KAAK,GAAG,CAAC;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,WAAW;YACtC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,WAAW,SAAS,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,KAAK,KAAK,CAAC,MAAM,SAAS,CAAC;QAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1C,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC;QACxE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,MAAqB;IAC/C,OAAO,CACL,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CACjG,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,QAAgB;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,GAAG,EAAE,CAAC;IACxD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAqB;IACvD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,UAAU,CAAC,qBAAqB;QACrC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC;QACrC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAqB;IAC9D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;YACvB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE;YAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtE,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAiB,EACjB,IAAY,EACZ,SAAyB,EACzB,OAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,CAC7B,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC,EACzE,OAAO,CACR,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9E,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAuB,EACvB,UAAkB,EAClB,SAA6B;IAE7B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM;QACzB,CAAC,CAAC,0BAA0B,UAAU,CAAC,UAAU,CAAC,sGAAsG;QACxJ,CAAC,CAAC,oBAAoB,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,SAAS;QACpB,CAAC,CAAC,gBAAgB,SAAS,qDAAqD;QAChF,CAAC,CAAC,oCAAoC,CAAC;IACzC,OAAO,kCAAkC,IAAI,KAAK,IAAI,+CAA+C,CAAC;AACxG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAqB,EACrB,GAAiB,EACjB,OAAgB;IAEhB,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACpD,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAC3F,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAwB,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAyB,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,IAAI,IAAI,sBAAsB,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAClF,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACzF,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,OAAO,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC;QAC5E,OAAO,EAAE,SAAS;KACnB,CAAC;AACJ,CAAC","sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport type { ImageContent, TextContent } from \"@earendil-works/pi-ai\";\nimport {\n  DEFAULT_MAX_BYTES,\n  DEFAULT_MAX_LINES,\n  formatSize,\n  truncateHead,\n  type AgentToolResult,\n  type Context,\n  type ExecutionEnv,\n} from \"@earendil-works/pi-agent-core\";\nimport { redactSecrets } from \"./tools/secret-redaction.js\";\n\nexport interface McpTextLimits {\n  maxBytes: number;\n  maxLines: number;\n}\n\nexport interface BoundedMcpText {\n  text: string;\n  truncated: boolean;\n  digest?: true;\n}\n\nexport interface McpCallResult {\n  content?: unknown;\n  structuredContent?: unknown;\n  isError?: boolean;\n}\n\nconst SPILL_DIR = [\".mikan\", \"mcp-output\"];\nconst NOTICE_RESERVE_BYTES = 640;\nconst NOTICE_RESERVE_LINES = 4;\nconst RESULT_LIMITS: McpTextLimits = {\n  maxBytes: DEFAULT_MAX_BYTES - NOTICE_RESERVE_BYTES,\n  maxLines: DEFAULT_MAX_LINES - NOTICE_RESERVE_LINES,\n};\n\ninterface DigestLevel {\n  stringChars: number;\n  arrayItems: number;\n  depth: number;\n}\n\nconst DIGEST_LEVELS: readonly DigestLevel[] = [\n  { stringChars: 200, arrayItems: 3, depth: 6 },\n  { stringChars: 80, arrayItems: 2, depth: 4 },\n  { stringChars: 40, arrayItems: 1, depth: 3 },\n  { stringChars: 16, arrayItems: 1, depth: 2 },\n];\n\ntype RawBlock = Record<string, unknown>;\n\nfunction isRecord(value: unknown): value is RawBlock {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction stringField(block: RawBlock, key: string): string | undefined {\n  const value = block[key];\n  return typeof value === \"string\" ? value : undefined;\n}\n\nfunction describeResource(resource: RawBlock): string {\n  const uri = stringField(resource, \"uri\") ?? \"(no URI)\";\n  const text = stringField(resource, \"text\");\n  if (text !== undefined) return `[Resource: ${uri}]\\n${text}`;\n  const blob = stringField(resource, \"blob\");\n  const mimeType = stringField(resource, \"mimeType\") ?? \"unknown type\";\n  const size = blob === undefined ? \"no content\" : `${Buffer.byteLength(blob, \"base64\")} bytes`;\n  return `[Resource: ${uri} (${mimeType}, ${size}, binary content omitted)]`;\n}\n\nfunction blockContent(block: RawBlock): TextContent | ImageContent {\n  const text = stringField(block, \"text\");\n  if (block.type === \"text\" && text !== undefined) return { type: \"text\", text };\n  const data = stringField(block, \"data\");\n  const mimeType = stringField(block, \"mimeType\");\n  if (block.type === \"image\" && data !== undefined && mimeType !== undefined) {\n    return { type: \"image\", data, mimeType };\n  }\n  if (block.type === \"resource\" && isRecord(block.resource)) {\n    return { type: \"text\", text: describeResource(block.resource) };\n  }\n  if (block.type === \"resource_link\") {\n    const uri = stringField(block, \"uri\") ?? \"(no URI)\";\n    return { type: \"text\", text: `[Resource link: ${stringField(block, \"name\") ?? uri}] ${uri}` };\n  }\n  if (block.type === \"audio\") {\n    return { type: \"text\", text: `[Audio content omitted: ${mimeType ?? \"audio/*\"}]` };\n  }\n  return { type: \"text\", text: JSON.stringify(block) };\n}\n\nexport function mcpResultContent(result: McpCallResult): (TextContent | ImageContent)[] {\n  const blocks = (Array.isArray(result.content) ? result.content : [])\n    .filter(isRecord)\n    .map(blockContent);\n  if (blocks.length > 0) return blocks;\n  if (result.structuredContent !== undefined && result.structuredContent !== null) {\n    return [{ type: \"text\", text: JSON.stringify(result.structuredContent) }];\n  }\n  return [{ type: \"text\", text: \"(empty result)\" }];\n}\n\nfunction parseJson(text: string): { value: unknown } | undefined {\n  const trimmed = text.trimStart();\n  if (!trimmed.startsWith(\"{\") && !trimmed.startsWith(\"[\")) return undefined;\n  try {\n    return { value: JSON.parse(text) };\n  } catch {\n    return undefined;\n  }\n}\n\nfunction digest(value: unknown, level: DigestLevel, depth = 0): unknown {\n  if (typeof value === \"string\") {\n    return value.length <= level.stringChars\n      ? value\n      : `${value.slice(0, level.stringChars)}…[+${value.length - level.stringChars} chars]`;\n  }\n  if (Array.isArray(value)) {\n    if (depth >= level.depth) return `[…${value.length} items]`;\n    const kept = value.slice(0, level.arrayItems).map((item) => digest(item, level, depth + 1));\n    const hidden = value.length - kept.length;\n    return hidden > 0 ? [...kept, `…[+${hidden} more items]`] : kept;\n  }\n  if (isRecord(value)) {\n    if (depth >= level.depth) return `{…${Object.keys(value).length} keys}`;\n    return Object.fromEntries(\n      Object.entries(value).map(([key, item]) => [key, digest(item, level, depth + 1)]),\n    );\n  }\n  return value;\n}\n\nfunction fits(text: string, limits: McpTextLimits): boolean {\n  return (\n    Buffer.byteLength(text, \"utf8\") <= limits.maxBytes && text.split(\"\\n\").length <= limits.maxLines\n  );\n}\n\nfunction sliceToBytes(text: string, maxBytes: number): string {\n  const buffer = Buffer.from(text, \"utf8\");\n  if (buffer.length <= maxBytes) return text;\n  let end = Math.max(0, maxBytes);\n  while (end > 0 && (buffer[end]! & 0xc0) === 0x80) end--;\n  return buffer.subarray(0, end).toString(\"utf8\");\n}\n\nfunction headTruncate(text: string, limits: McpTextLimits): string {\n  const truncation = truncateHead(text, limits);\n  return truncation.firstLineExceedsLimit\n    ? sliceToBytes(text, limits.maxBytes)\n    : truncation.content;\n}\n\nexport function boundMcpText(text: string, limits: McpTextLimits): BoundedMcpText {\n  const parsed = parseJson(text);\n  if (!parsed) {\n    return fits(text, limits)\n      ? { text, truncated: false }\n      : { text: headTruncate(text, limits), truncated: true };\n  }\n  const compact = JSON.stringify(parsed.value);\n  if (fits(compact, limits)) return { text: compact, truncated: false };\n  for (const level of DIGEST_LEVELS) {\n    const digested = JSON.stringify(digest(parsed.value, level));\n    if (fits(digested, limits)) return { text: digested, truncated: true, digest: true };\n  }\n  const smallest = JSON.stringify(digest(parsed.value, DIGEST_LEVELS.at(-1)!));\n  return { text: sliceToBytes(smallest, limits.maxBytes), truncated: true, digest: true };\n}\n\nfunction compactMcpText(text: string): string {\n  const parsed = parseJson(text);\n  return parsed ? JSON.stringify(parsed.value) : text;\n}\n\nasync function spillFullResult(\n  env: ExecutionEnv,\n  text: string,\n  extension: \"json\" | \"txt\",\n  context: Context,\n): Promise<string | undefined> {\n  const path = await env.joinPath(\n    [env.cwd, ...SPILL_DIR, `${randomBytes(8).toString(\"hex\")}.${extension}`],\n    context,\n  );\n  if (!path.ok) return undefined;\n  const written = await env.writeFile(path.value, redactSecrets(text), context);\n  return written.ok ? path.value : undefined;\n}\n\nfunction truncationNotice(\n  bounded: BoundedMcpText,\n  totalBytes: number,\n  spillPath: string | undefined,\n): string {\n  const view = bounded.digest\n    ? `an abbreviated view of ${formatSize(totalBytes)}: long strings, arrays, and deep nesting are shortened; keys, counts, and pagination fields are kept`\n    : `the beginning of ${formatSize(totalBytes)}`;\n  const full = spillPath\n    ? `Full result: ${spillPath} — use read with offset/limit or grep to inspect it`\n    : \"The full result could not be saved\";\n  return `[MCP result truncated: showing ${view}. ${full}, or re-query with filters or smaller pages.]`;\n}\n\nexport async function guardMcpToolResult(\n  result: McpCallResult,\n  env: ExecutionEnv,\n  context: Context,\n): Promise<AgentToolResult<undefined>> {\n  const blocks = mcpResultContent(result).map((block) =>\n    block.type === \"text\" ? Object.assign(block, { text: compactMcpText(block.text) }) : block,\n  );\n  const texts = blocks.filter((block): block is TextContent => block.type === \"text\");\n  const images = blocks.filter((block): block is ImageContent => block.type === \"image\");\n  const combined = texts.map((block) => block.text).join(\"\\n\");\n  if (result.isError) {\n    throw new Error(boundMcpText(combined, RESULT_LIMITS).text || \"MCP tool call failed\");\n  }\n  if (fits(combined, RESULT_LIMITS)) return { content: blocks, details: undefined };\n  const bounded = boundMcpText(combined, RESULT_LIMITS);\n  const spillPath = await spillFullResult(env, combined, bounded.digest ? \"json\" : \"txt\", context);\n  const notice = truncationNotice(bounded, Buffer.byteLength(combined, \"utf8\"), spillPath);\n  return {\n    content: [{ type: \"text\", text: `${bounded.text}\\n\\n${notice}` }, ...images],\n    details: undefined,\n  };\n}\n"]}

package/dist/harness/mcp.d.ts

@@ -7,19 +7,7 @@ export type StandardMcpParseResult = {
     servers?: undefined;
     error: string;
 };
-/**
- * Accept the `mcpServers` JSON every MCP server's setup page hands out
- * (`{ "mcpServers": { name: entry } }`, or the bare `{ name: entry }` map).
- * Entries are stored as pasted — `command`/`args`/`env` or `url`/`headers`,
- * values untouched — and the official SDK client does the rest at connect
- * time. mikan only keeps the config and its enabled state per scope.
- */
 export declare function parseStandardMcpServers(text: string): StandardMcpParseResult;
-/**
- * Hide query-string values: `?token=…` is a legitimate MCP auth channel
- * (browserless, Claude.ai connectors), so a URL is a credential carrier and
- * must never be echoed to a browser or a log line verbatim.
- */
 export declare function redactMcpUrl(url: string): string;
 export declare function listMcpPresets(): readonly McpPreset[];
 export declare function findMcpPreset(id: string): McpPreset | undefined;
@@ -27,12 +15,5 @@ export declare function materializeMcpPreset(preset: McpPreset, values: Record<s
 export type { McpServerConfig } from "./types.js";
 export type { McpToolsResult } from "./types.js";
 export declare function formatMcpServerInstructions(instructions: McpServerInstruction[]): string;
-/**
- * Connect to every enabled MCP server and wrap their tools as mikan
- * {@link AgentTool}s. Failures are per-server: one unreachable server
- * reports an error and the rest still load. Callers own the returned
- * `dispose` and must call it when the runner is disposed, or stdio child
- * processes leak.
- */
 export declare function loadMcpTools(servers: Record<string, McpServerConfig>, signal?: AbortSignal): Promise<McpToolsResult>;
 //# sourceMappingURL=mcp.d.ts.map

package/dist/harness/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/harness/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,eAAe,EAEf,oBAAoB,EACpB,cAAc,EACf,MAAM,YAAY,CAAC;AAiBpB,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,GAC/D;IAAE,OAAO,CAAC,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAM3C;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CA2C5E;AAMD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOhD;AAmCD,wBAAgB,cAAc,IAAI,SAAS,SAAS,EAAE,CAErD;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE/D;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,eAAe,CA2BjB;AACD,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA+GjD,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,oBAAoB,EAAE,GAAG,MAAM,CAOxF;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EACxC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CA2CzB"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/harness/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,eAAe,EAEf,oBAAoB,EACpB,cAAc,EACf,MAAM,YAAY,CAAC;AAgBpB,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,GAC/D;IAAE,OAAO,CAAC,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAM3C,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CAwC5E;AAMD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOhD;AAmCD,wBAAgB,cAAc,IAAI,SAAS,SAAS,EAAE,CAErD;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE/D;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,eAAe,CA2BjB;AACD,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAuEjD,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,oBAAoB,EAAE,GAAG,MAAM,CAOxF;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EACxC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CA2CzB"}

package/dist/harness/mcp.js

@@ -1,10 +1,9 @@
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StdioClientTransport, getDefaultEnvironment, } from "@modelcontextprotocol/sdk/client/stdio.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { guardMcpToolResult } from "./mcp-result.js";
+import { tagHarnessTool } from "./tools/pi-tools.js";
 import * as log from "../log.js";
-/** Server names become tool-name segments (`mcp__<server>__<tool>`); keep them
- *  to a safe charset so a settings typo cannot produce an unparseable or
- *  provider-rejected tool name. Shared by the loader and the portal. */
 const SERVER_NAME_RE = /^[a-zA-Z][a-zA-Z0-9_-]{0,63}$/;
 export function isValidMcpServerName(name) {
     return SERVER_NAME_RE.test(name);
@@ -12,13 +11,6 @@ export function isValidMcpServerName(name) {
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-/**
- * Accept the `mcpServers` JSON every MCP server's setup page hands out
- * (`{ "mcpServers": { name: entry } }`, or the bare `{ name: entry }` map).
- * Entries are stored as pasted — `command`/`args`/`env` or `url`/`headers`,
- * values untouched — and the official SDK client does the rest at connect
- * time. mikan only keeps the config and its enabled state per scope.
- */
 export function parseStandardMcpServers(text) {
     let parsed;
     try {
@@ -45,12 +37,9 @@ export function parseStandardMcpServers(text) {
             return { error: `"${name}" must be an object` };
         const hasCommand = typeof entry.command === "string" && entry.command.trim() !== "";
         const hasUrl = typeof entry.url === "string";
-        // A broken url is named before the transport count, so a paste carrying
-        // both keys and a bad URL reports the URL rather than the ambiguity.
         if (hasUrl && !URL.canParse(entry.url)) {
             return { error: `"${name}": url is not a valid URL` };
         }
-        // Exactly one transport: equal flags mean both were set, or neither was.
         if (hasCommand === hasUrl) {
             const detail = hasCommand
                 ? "set only one of command / url"
@@ -71,11 +60,6 @@ export function parseStandardMcpServers(text) {
 function stringValues(map) {
     return Object.fromEntries(Object.entries(map).map(([k, v]) => [k, String(v)]));
 }
-/**
- * Hide query-string values: `?token=…` is a legitimate MCP auth channel
- * (browserless, Claude.ai connectors), so a URL is a credential carrier and
- * must never be echoed to a browser or a log line verbatim.
- */
 export function redactMcpUrl(url) {
     if (!URL.canParse(url))
         return url.replace(/([?&][^=&]+=)[^&]*/g, "$1<redacted>");
@@ -164,9 +148,6 @@ function buildTransport(name, config) {
         return new StdioClientTransport({
             command: config.command,
             args: config.args ?? [],
-            // The SDK's default env is a minimal safe allowlist (PATH, HOME…);
-            // entries from settings are merged over it. Credentials for the MCP
-            // server belong here — on the host, out of the model's reach.
             env: { ...getDefaultEnvironment(), ...config.env },
             stderr: "ignore",
         });
@@ -178,36 +159,6 @@ function buildTransport(name, config) {
     }
     throw new Error(`server "${name}" sets neither command nor url`);
 }
-function toAgentToolResult(result) {
-    const parts = Array.isArray(result.content) ? result.content : [];
-    const content = [];
-    for (const part of parts) {
-        if (part && typeof part === "object" && "type" in part) {
-            if (part.type === "text" && typeof part.text === "string") {
-                content.push({ type: "text", text: part.text });
-                continue;
-            }
-            if (part.type === "image" &&
-                typeof part.data === "string" &&
-                typeof part.mimeType === "string") {
-                const image = part;
-                content.push({ type: "image", data: image.data, mimeType: image.mimeType });
-                continue;
-            }
-            // resource/audio/other parts: surface as JSON text rather than dropping.
-            content.push({ type: "text", text: JSON.stringify(part) });
-        }
-    }
-    if (content.length === 0) {
-        content.push({ type: "text", text: "(empty result)" });
-    }
-    const text = content.map((c) => (c.type === "text" ? c.text : "")).join("\n");
-    if (result.isError) {
-        // AgentTool contract: throw on failure instead of encoding errors in content.
-        throw new Error(text || "MCP tool call failed");
-    }
-    return { content, details: undefined };
-}
 async function connectServer(name, config, signal) {
     const client = new Client({ name: "mikan", version: "1.0.0" });
     const transport = buildTransport(name, config);
@@ -220,18 +171,15 @@ async function connectServer(name, config, signal) {
             timeout: CONNECT_TIMEOUT_MS,
             ...(signal ? { signal } : {}),
         });
-        const tools = listed.tools.map((mcpTool) => ({
-            // Server prefix keeps names collision-free and visibly foreign next to
-            // mikan's own tools: `mcp__github__create_issue`.
+        const tools = listed.tools.map((mcpTool) => tagHarnessTool({
             name: `mcp__${name}__${mcpTool.name}`,
             label: `${name}: ${mcpTool.name}`,
             description: mcpTool.description ?? `${mcpTool.name} (MCP server "${name}")`,
-            // MCP inputSchema is JSON Schema with `"type": "object"` at the root —
-            // structurally a valid TSchema; the provider sees the same JSON either way.
             parameters: mcpTool.inputSchema,
-            execute: async (_toolCallId, params, runSignal) => {
-                const result = await client.callTool({ name: mcpTool.name, arguments: params }, undefined, { timeout: CALL_TIMEOUT_MS, ...(runSignal ? { signal: runSignal } : {}) });
-                return toAgentToolResult(result);
+            execute: async (...args) => {
+                const [, params, , toolContext, , context] = args;
+                const result = await client.callTool({ name: mcpTool.name, arguments: params }, undefined, { timeout: CALL_TIMEOUT_MS, signal: context.abortSignal });
+                return guardMcpToolResult(result, toolContext.env, context);
             },
         }));
         const instructions = client.getInstructions()?.trim();
@@ -256,13 +204,6 @@ The following admin-approved host-side servers supplied operating guidance. Appl
 
 ${sections.join("\n\n")}`;
 }
-/**
- * Connect to every enabled MCP server and wrap their tools as mikan
- * {@link AgentTool}s. Failures are per-server: one unreachable server
- * reports an error and the rest still load. Callers own the returned
- * `dispose` and must call it when the runner is disposed, or stdio child
- * processes leak.
- */
 export async function loadMcpTools(servers, signal) {
     const clients = [];
     const tools = [];