@harperfast/harper 5.0.25 → 5.1.0-beta.1

package/dataLayer/{update.js → update.ts}

@@ -1,27 +1,23 @@
 'use strict';
 
-const search = require('./search.js');
-const globalSchema = require('../utility/globalSchema.js');
-const logger = require('../utility/logging/harper_logger.js');
-const write = require('./insert.js');
-const clone = require('clone');
-const alasql = require('alasql');
-const alasqlFunctionImporter = require('../sqlTranslator/alasqlFunctionImporter.js');
-const util = require('util');
+import * as search from './search.ts';
+import * as globalSchema from '../utility/globalSchema.ts';
+import logger from '../utility/logging/harper_logger.ts';
+import * as write from './insert.ts';
+import clone from 'clone';
+import * as alasql from 'alasql';
+import alasqlFunctionImporter from '../sqlTranslator/alasqlFunctionImporter.ts';
+import * as util from 'util';
 
 const pGetTableSchema = util.promisify(globalSchema.getTableSchema);
 const pSearch = util.promisify(search.search);
 
-const terms = require('../utility/hdbTerms.ts');
-const hdbUtils = require('../utility/common_utils.js');
+import * as terms from '../utility/hdbTerms.ts';
+import * as hdbUtils from '../utility/common_utils.ts';
 
 //here we call to define and import custom functions to alasql
 alasqlFunctionImporter(alasql);
 
-module.exports = {
-	update,
-};
-
 const SQL_UPDATE_ERROR_MSG = 'There was a problem performing this update. Please check the logs and try again.';
 
 /**
@@ -31,8 +27,8 @@ const SQL_UPDATE_ERROR_MSG = 'There was a problem performing this update. Please
  * @param hdb_user
  * @return
  */
-async function update({ statement, hdb_user }) {
-	let tableInfo = await pGetTableSchema(statement.table.databaseid, statement.table.tableid);
+async function updateData({ statement, hdb_user }: any) {
+	let tableInfo: any = await pGetTableSchema(statement.table.databaseid, statement.table.tableid);
 	let update_record = createUpdateRecord(statement.columns);
 
 	//convert this update statement to a SQL search capable statement
@@ -43,9 +39,9 @@ async function update({ statement, hdb_user }) {
 	let whereString = hdbUtils.isEmpty(where) ? '' : ` WHERE ${where.toString()}`;
 
 	let selectString = `SELECT ${tableInfo.hash_attribute} FROM ${from.toString()} ${whereString}`;
-	let searchStatement = alasql.parse(selectString).statements[0];
+	let searchStatement = (alasql as any).parse(selectString).statements[0];
 	//let result = await transaction.writeTransaction(tableInfo.schema, tableInfo.name, async () => {
-	let records = await pSearch(searchStatement);
+	let records: any = await pSearch(searchStatement);
 	let newRecords = buildUpdateRecords(update_record, records);
 	return updateRecords(tableClone, newRecords, hdb_user);
 	//});
@@ -57,7 +53,7 @@ async function update({ statement, hdb_user }) {
  * creates a json object based on the AST
  * @param columns
  */
-function createUpdateRecord(columns) {
+function createUpdateRecord(columns: any[]) {
 	try {
 		let record = {};
 
@@ -65,7 +61,7 @@ function createUpdateRecord(columns) {
 			if ('value' in column.expression) {
 				record[column.column.columnid] = column.expression.value ?? null;
 			} else {
-				record[column.column.columnid] = alasql.compile(
+				record[column.column.columnid] = (alasql as any).compile(
 					`SELECT ${column.expression.toString()} AS [${terms.FUNC_VAL}] FROM ?`
 				);
 			}
@@ -85,7 +81,7 @@ function createUpdateRecord(columns) {
  * @param {[]} records
  * @return
  */
-function buildUpdateRecords(update_record, records) {
+function buildUpdateRecords(update_record: any, records: any[]) {
 	if (hdbUtils.isEmptyOrZeroLength(records)) {
 		return [];
 	}
@@ -101,7 +97,7 @@ function buildUpdateRecords(update_record, records) {
  * @param {{}} hdb_user
  * @return
  */
-async function updateRecords(table, records, hdb_user) {
+async function updateRecords(table: any, records: any[], hdb_user: any) {
 	let updateObject = {
 		operation: 'update',
 		schema: table.databaseid_orig,
@@ -122,3 +118,4 @@ async function updateRecords(table, records, hdb_user) {
 
 	return res;
 }
+export { updateData as update };

package/dist/agent/agent.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Built-in Harper Agent component (#626).
+ *
+ * `startOnMainThread` is invoked once on the main thread by `componentLoader`.
+ * When `agent.enabled` is `false` (default) the component registers nothing
+ * and returns immediately — opt-in keeps surprise LLM costs at bay. When
+ * enabled, the six operations land on the operations API, the session table
+ * is realized lazily on first use, and the loop runs in-process.
+ *
+ * The component intentionally avoids `handleApplication`: it has nothing
+ * worker-thread-shaped to do. Operator-only tools (FS, schedule, fetch) are
+ * inline; registry-backed tools (#615/#617/#618) will fold in via toolset.ts
+ * once those land.
+ */
+interface StartOpts {
+    server: {
+        registerOperation: (def: {
+            name: string;
+            execute: (op: any) => any | Promise<any>;
+        }) => void;
+    };
+    enabled?: boolean;
+    provider?: string;
+    model?: string;
+    maxTurns?: number;
+    maxCostUsd?: number;
+    autoApprove?: boolean;
+    allowDestructive?: boolean;
+    user?: string;
+    componentsScope?: string;
+}
+export declare function startOnMainThread(opts: StartOpts): Promise<void>;
+/** Test-only: reset module state between specs. */
+export declare function _resetForTests(): void;
+export {};

package/dist/agent/agent.js

@@ -0,0 +1,175 @@
+"use strict";
+/**
+ * Built-in Harper Agent component (#626).
+ *
+ * `startOnMainThread` is invoked once on the main thread by `componentLoader`.
+ * When `agent.enabled` is `false` (default) the component registers nothing
+ * and returns immediately — opt-in keeps surprise LLM costs at bay. When
+ * enabled, the six operations land on the operations API, the session table
+ * is realized lazily on first use, and the loop runs in-process.
+ *
+ * The component intentionally avoids `handleApplication`: it has nothing
+ * worker-thread-shaped to do. Operator-only tools (FS, schedule, fetch) are
+ * inline; registry-backed tools (#615/#617/#618) will fold in via toolset.ts
+ * once those land.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startOnMainThread = startOnMainThread;
+exports._resetForTests = _resetForTests;
+const node_path_1 = require("node:path");
+const hdbTerms_ts_1 = require("../utility/hdbTerms.js");
+const harper_logger_ts_1 = __importDefault(require("../utility/logging/harper_logger.js"));
+const Models_ts_1 = require("../resources/models/Models.js");
+const toolset_ts_1 = require("./toolset.js");
+const operations_ts_1 = require("./operations.js");
+const loop_ts_1 = require("./loop.js");
+const session_ts_1 = require("./session.js");
+const log = harper_logger_ts_1.default.loggerWithTag('agent');
+const DEFAULT_CONFIG = {
+    enabled: false,
+    maxTurns: 50,
+    maxCostUsd: 5,
+    autoApprove: false,
+    allowDestructive: false,
+    user: 'hdb_agent',
+};
+async function startOnMainThread(opts) {
+    const config = mergeConfig(opts);
+    if (!config.enabled) {
+        log.info?.('Agent component disabled (agent.enabled=false); skipping registration');
+        return;
+    }
+    // Lazily required to avoid pulling configUtils at module-eval time for tests.
+    const { getConfigPath, getConfigFilePath } = require('../config/configUtils.js');
+    const scopes = resolveScopes(config, getConfigPath, getConfigFilePath);
+    const models = new Models_ts_1.Models();
+    const abortControllers = new Map();
+    let liveConfig = config;
+    let composed = (0, toolset_ts_1.composeToolset)({
+        allowDestructive: liveConfig.allowDestructive,
+        onFollowup: handleFollowup,
+    });
+    // Only warn when the operator explicitly configured `maxCostUsd`. Logging on the default
+    // every boot would flood the log without telling anyone anything actionable.
+    if (opts.maxCostUsd !== undefined) {
+        log.warn?.(`agent.maxCostUsd=${liveConfig.maxCostUsd} is advertised but not yet enforced; cost-cap wiring depends on #612 telemetry.`);
+    }
+    async function handleFollowup(sessionId, prompt) {
+        const session = await (0, session_ts_1.getSession)(sessionId);
+        if (!session) {
+            log.warn?.(`schedule_followup target session ${sessionId} not found`);
+            return;
+        }
+        await (0, session_ts_1.appendMessage)(sessionId, { role: 'user', content: prompt, createdAt: Date.now() });
+        startRun(sessionId);
+    }
+    function currentTools() {
+        return composed.tools;
+    }
+    function startRun(sessionId) {
+        // A run is already active for this session. `runAgent` coalesces concurrent starts onto the
+        // existing in-flight promise (bound to the existing controller), so creating a second
+        // controller here would orphan it — `cancelRun` would then abort a controller nothing is
+        // listening to, leaving the live run uncancellable. Any message appended before this call
+        // (e.g. by a scheduled followup) is picked up by the in-flight loop on its next turn.
+        if (abortControllers.has(sessionId))
+            return;
+        const controller = new AbortController();
+        abortControllers.set(sessionId, controller);
+        (0, loop_ts_1.runAgent)({
+            sessionId,
+            models,
+            tools: currentTools(),
+            scopes,
+            maxTurns: liveConfig.maxTurns,
+            autoApprove: liveConfig.autoApprove,
+            signal: controller.signal,
+            generateOpts: { model: liveConfig.model },
+        })
+            .catch((err) => log.error?.(`Agent run failed for ${sessionId}: ${err?.message ?? err}`))
+            .finally(() => {
+            if (abortControllers.get(sessionId) === controller)
+                abortControllers.delete(sessionId);
+        });
+    }
+    function cancelRun(sessionId) {
+        // Clear any scheduled followups first. Without this, a timer set via `schedule_followup`
+        // would fire after the operator cancelled, silently re-injecting a user prompt and kicking
+        // the loop off again — surprising behavior and avoidable LLM cost.
+        for (const [id, followup] of composed.scheduled.entries()) {
+            if (followup.sessionId === sessionId) {
+                clearTimeout(followup.timer);
+                composed.scheduled.delete(id);
+            }
+        }
+        const controller = abortControllers.get(sessionId);
+        if (!controller)
+            return false;
+        controller.abort(new Error('cancelled by operator'));
+        abortControllers.delete(sessionId);
+        return true;
+    }
+    function setConfig(patch) {
+        const previousAllowDestructive = liveConfig.allowDestructive;
+        liveConfig = { ...liveConfig, ...patch };
+        if (liveConfig.allowDestructive !== previousAllowDestructive) {
+            composed = (0, toolset_ts_1.composeToolset)({
+                allowDestructive: liveConfig.allowDestructive,
+                onFollowup: handleFollowup,
+            });
+        }
+        // NOTE: an already in-flight run captured its toolset (and autoApprove) at start, so flipping
+        // allowDestructive here only affects subsequent runs — the live loop finishes on its existing
+        // toolset. Acceptable: the approval gate still applies on the next turn's run, and operators
+        // who need to halt a run immediately use cancel_agent_run. Tightening to per-turn re-evaluation
+        // would require threading a config getter into the loop; deferred until there's a need.
+        return liveConfig;
+    }
+    const operations = (0, operations_ts_1.buildOperations)({
+        getConfig: () => liveConfig,
+        setConfig,
+        startRun,
+        cancelRun,
+    });
+    for (const op of operations)
+        opts.server.registerOperation(op);
+    log.info?.(`Agent component initialized with ${composed.tools.length} tools`);
+}
+function resolveScopes(config, getConfigPath, getConfigFilePath) {
+    const componentsRoot = getConfigPath(hdbTerms_ts_1.CONFIG_PARAMS.COMPONENTSROOT) ?? process.cwd();
+    const logDir = getConfigPath(hdbTerms_ts_1.CONFIG_PARAMS.LOGGING_ROOT) ?? process.cwd();
+    const rootPath = getConfigPath(hdbTerms_ts_1.CONFIG_PARAMS.ROOTPATH) ?? componentsRoot;
+    const configFile = getConfigFilePath?.();
+    const configDir = configFile ? (0, node_path_1.dirname)(configFile) : process.cwd();
+    // A relative `componentsScope` is resolved against rootPath, as documented in the schema —
+    // NOT against componentsRoot, which would double-nest (`./components` → componentsRoot/components).
+    // With no scope set, the full componentsRoot is the FS write scope.
+    const scopedComponents = config.componentsScope
+        ? (0, node_path_1.isAbsolute)(config.componentsScope)
+            ? config.componentsScope
+            : (0, node_path_1.resolve)(rootPath, config.componentsScope)
+        : componentsRoot;
+    return { componentsRoot: scopedComponents, logDir, configDir };
+}
+function mergeConfig(opts) {
+    return {
+        ...DEFAULT_CONFIG,
+        ...(opts.enabled !== undefined && { enabled: !!opts.enabled }),
+        ...(opts.provider !== undefined && { provider: String(opts.provider) }),
+        ...(opts.model !== undefined && { model: String(opts.model) }),
+        ...(opts.maxTurns !== undefined && { maxTurns: Number(opts.maxTurns) }),
+        ...(opts.maxCostUsd !== undefined && { maxCostUsd: Number(opts.maxCostUsd) }),
+        ...(opts.autoApprove !== undefined && { autoApprove: !!opts.autoApprove }),
+        ...(opts.allowDestructive !== undefined && { allowDestructive: !!opts.allowDestructive }),
+        ...(opts.user !== undefined && { user: String(opts.user) }),
+        ...(opts.componentsScope !== undefined && { componentsScope: String(opts.componentsScope) }),
+    };
+}
+/** Test-only: reset module state between specs. */
+function _resetForTests() {
+    (0, loop_ts_1._resetInFlightForTests)();
+}
+//# sourceMappingURL=agent.js.map

package/dist/agent/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../agent/agent.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;AAuCH,8CA6GC;AAuCD,wCAEC;AA3LD,yCAAwE;AACxE,wDAAuD;AACvD,2FAA+D;AAC/D,6DAAuD;AACvD,6CAA8C;AAC9C,mDAAkD;AAClD,uCAA6D;AAC7D,6CAAyD;AAGzD,MAAM,GAAG,GAAG,0BAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;AAEhD,MAAM,cAAc,GAAgB;IACnC,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,KAAK;IAClB,gBAAgB,EAAE,KAAK;IACvB,IAAI,EAAE,WAAW;CACjB,CAAC;AAkBK,KAAK,UAAU,iBAAiB,CAAC,IAAe;IACtD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,EAAE,CAAC,uEAAuE,CAAC,CAAC;QACpF,OAAO;IACR,CAAC;IAED,8EAA8E;IAC9E,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,IAAI,kBAAM,EAAE,CAAC;IAC5B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC5D,IAAI,UAAU,GAAgB,MAAM,CAAC;IACrC,IAAI,QAAQ,GAAG,IAAA,2BAAc,EAAC;QAC7B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,UAAU,EAAE,cAAc;KAC1B,CAAC,CAAC;IAEH,yFAAyF;IACzF,6EAA6E;IAC7E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,EAAE,CACT,oBAAoB,UAAU,CAAC,UAAU,iFAAiF,CAC1H,CAAC;IACH,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,MAAc;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAA,uBAAU,EAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,EAAE,CAAC,oCAAoC,SAAS,YAAY,CAAC,CAAC;YACtE,OAAO;QACR,CAAC;QACD,MAAM,IAAA,0BAAa,EAAC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzF,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrB,CAAC;IAED,SAAS,YAAY;QACpB,OAAO,QAAQ,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,SAAS,QAAQ,CAAC,SAAiB;QAClC,4FAA4F;QAC5F,sFAAsF;QACtF,yFAAyF;QACzF,0FAA0F;QAC1F,sFAAsF;QACtF,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO;QAC5C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5C,IAAA,kBAAQ,EAAC;YACR,SAAS;YACT,MAAM;YACN,KAAK,EAAE,YAAY,EAAE;YACrB,MAAM;YACN,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,YAAY,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE;SACzC,CAAC;aACA,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,wBAAwB,SAAS,KAAM,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;aACnG,OAAO,CAAC,GAAG,EAAE;YACb,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,UAAU;gBAAE,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,SAAS,CAAC,SAAiB;QACnC,yFAAyF;QACzF,2FAA2F;QAC3F,mEAAmE;QACnE,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3D,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC7B,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC;QACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC9B,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACrD,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,SAAS,SAAS,CAAC,KAA2B;QAC7C,MAAM,wBAAwB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QAC7D,UAAU,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,KAAK,EAAE,CAAC;QACzC,IAAI,UAAU,CAAC,gBAAgB,KAAK,wBAAwB,EAAE,CAAC;YAC9D,QAAQ,GAAG,IAAA,2BAAc,EAAC;gBACzB,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,UAAU,EAAE,cAAc;aAC1B,CAAC,CAAC;QACJ,CAAC;QACD,8FAA8F;QAC9F,8FAA8F;QAC9F,6FAA6F;QAC7F,gGAAgG;QAChG,wFAAwF;QACxF,OAAO,UAAU,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,+BAAe,EAAC;QAClC,SAAS,EAAE,GAAG,EAAE,CAAC,UAAU;QAC3B,SAAS;QACT,QAAQ;QACR,SAAS;KACT,CAAC,CAAC;IACH,KAAK,MAAM,EAAE,IAAI,UAAU;QAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAE/D,GAAG,CAAC,IAAI,EAAE,CAAC,oCAAoC,QAAQ,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,aAAa,CACrB,MAAmB,EACnB,aAAoD,EACpD,iBAAgC;IAEhC,MAAM,cAAc,GAAG,aAAa,CAAC,2BAAa,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,aAAa,CAAC,2BAAa,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1E,MAAM,QAAQ,GAAG,aAAa,CAAC,2BAAa,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC;IACzE,MAAM,UAAU,GAAG,iBAAiB,EAAE,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,IAAA,mBAAO,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACnE,2FAA2F;IAC3F,oGAAoG;IACpG,oEAAoE;IACpE,MAAM,gBAAgB,GAAG,MAAM,CAAC,eAAe;QAC9C,CAAC,CAAC,IAAA,sBAAU,EAAC,MAAM,CAAC,eAAe,CAAC;YACnC,CAAC,CAAC,MAAM,CAAC,eAAe;YACxB,CAAC,CAAC,IAAA,mBAAW,EAAC,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC;QAChD,CAAC,CAAC,cAAc,CAAC;IAClB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,IAAe;IACnC,OAAO;QACN,GAAG,cAAc;QACjB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzF,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;KAC5F,CAAC;AACH,CAAC;AAED,mDAAmD;AACnD,SAAgB,cAAc;IAC7B,IAAA,gCAAsB,GAAE,CAAC;AAC1B,CAAC"}

package/dist/agent/loop.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Manual agent loop for the built-in agent (#626).
+ *
+ * Wraps `scope.models.generate({ ..., toolMode: 'return' })` and dispatches
+ * any tool calls the model returns. This is a temporary stand-in for the
+ * unified `toolMode: 'auto'` orchestrator landing in #612 — when that ships,
+ * tool-call dispatch and the per-turn loop collapse into a single
+ * `generate({ ..., toolMode: 'auto' })` call. The approval/abort gates here
+ * still live in the component (the orchestrator won't know about
+ * `destructive` or operator approval semantics).
+ *
+ * Per-session serialization (one concurrent run per session) is handled
+ * here via {@link runAgent}'s in-flight map. Multiple sessions interleave
+ * on the event loop naturally because each turn is mostly awaiting the LLM
+ * or a tool's I/O.
+ */
+import type { GenerateOpts, Models } from '../resources/models/types.ts';
+import type { AgentScopes, AgentTool } from './types.ts';
+export interface RunAgentOpts {
+    sessionId: string;
+    models: Pick<Models, 'generate'>;
+    tools: AgentTool[];
+    scopes: AgentScopes;
+    maxTurns: number;
+    /** When false, destructive tools pause the loop with a pending approval instead of executing. */
+    autoApprove?: boolean;
+    signal?: AbortSignal;
+    generateOpts?: Omit<GenerateOpts, 'toolMode' | 'signal'>;
+    /** System prompt injected as the first turn when the transcript is empty. */
+    systemPrompt?: string;
+}
+export declare function runAgent(opts: RunAgentOpts): Promise<void>;
+/** Test-only: clear the in-flight tracking map. */
+export declare function _resetInFlightForTests(): void;

package/dist/agent/loop.js

@@ -0,0 +1,176 @@
+"use strict";
+/**
+ * Manual agent loop for the built-in agent (#626).
+ *
+ * Wraps `scope.models.generate({ ..., toolMode: 'return' })` and dispatches
+ * any tool calls the model returns. This is a temporary stand-in for the
+ * unified `toolMode: 'auto'` orchestrator landing in #612 — when that ships,
+ * tool-call dispatch and the per-turn loop collapse into a single
+ * `generate({ ..., toolMode: 'auto' })` call. The approval/abort gates here
+ * still live in the component (the orchestrator won't know about
+ * `destructive` or operator approval semantics).
+ *
+ * Per-session serialization (one concurrent run per session) is handled
+ * here via {@link runAgent}'s in-flight map. Multiple sessions interleave
+ * on the event loop naturally because each turn is mostly awaiting the LLM
+ * or a tool's I/O.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runAgent = runAgent;
+exports._resetInFlightForTests = _resetInFlightForTests;
+const session_ts_1 = require("./session.js");
+const toolset_ts_1 = require("./toolset.js");
+const inFlight = new Map();
+function runAgent(opts) {
+    const existing = inFlight.get(opts.sessionId);
+    if (existing)
+        return existing;
+    const run = doRun(opts).finally(() => {
+        if (inFlight.get(opts.sessionId) === run)
+            inFlight.delete(opts.sessionId);
+    });
+    inFlight.set(opts.sessionId, run);
+    return run;
+}
+async function doRun(opts) {
+    const toolMap = (0, toolset_ts_1.toolMapByName)(opts.tools);
+    const toolDefs = opts.tools.map((t) => t.def);
+    await (0, session_ts_1.setStatus)(opts.sessionId, 'running');
+    const ctx = { sessionId: opts.sessionId, signal: opts.signal, scopes: opts.scopes };
+    try {
+        // First, drain any resolved-but-unconsumed approvals from a prior pause. Either execute
+        // or refuse each saved call, recording an observation, so the next model turn sees the
+        // result of the operator decision.
+        await consumeResolvedApprovals(opts.sessionId, toolMap, ctx);
+        // If a turn produced multiple gated tool calls and the operator has only resolved some of
+        // them, the remaining approvals are still pending — meaning the assistant's tool_calls do
+        // not yet all have tool responses. Re-entering the generate loop now would send an
+        // incomplete tool-response set and the provider would 400. Stay paused until every gated
+        // call for this turn is resolved (each `approve_agent_action` re-runs this path).
+        const afterConsume = await (0, session_ts_1.getSession)(opts.sessionId);
+        if (afterConsume?.pendingApprovals.some((a) => !a.resolved)) {
+            await (0, session_ts_1.setStatus)(opts.sessionId, 'awaiting_approval');
+            return;
+        }
+        for (let turn = 0; turn < opts.maxTurns; turn++) {
+            if (opts.signal?.aborted)
+                return; // status was already set to `aborted` by cancelRun
+            const session = await (0, session_ts_1.getSession)(opts.sessionId);
+            if (!session)
+                throw new Error(`Session ${opts.sessionId} vanished mid-run`);
+            const messages = toModelMessages(session.messages, opts.systemPrompt);
+            const result = await opts.models.generate({ messages, tools: toolDefs, system: opts.systemPrompt }, { ...opts.generateOpts, toolMode: 'return', signal: opts.signal });
+            await (0, session_ts_1.appendMessage)(opts.sessionId, {
+                role: 'assistant',
+                content: result.content ?? '',
+                toolCalls: result.toolCalls,
+                createdAt: Date.now(),
+            });
+            if (!result.toolCalls || result.toolCalls.length === 0) {
+                await (0, session_ts_1.setStatus)(opts.sessionId, 'completed');
+                return;
+            }
+            const paused = await dispatchToolCalls(result.toolCalls, toolMap, ctx, opts);
+            if (paused || opts.signal?.aborted)
+                return;
+        }
+        await (0, session_ts_1.setStatus)(opts.sessionId, 'completed', `Reached maxTurns=${opts.maxTurns} without a final answer.`);
+    }
+    catch (err) {
+        // If the abort signal fired, the cancel path already set the session to `aborted` —
+        // don't clobber that with `error`. The rejection here is just the awaited generate/tool
+        // honoring the signal, not a real failure.
+        if (opts.signal?.aborted)
+            return;
+        await (0, session_ts_1.setStatus)(opts.sessionId, 'error', err instanceof Error ? err.message : String(err));
+        throw err;
+    }
+}
+/**
+ * Returns `true` when the loop should pause (any destructive tool call required approval).
+ * Non-destructive calls execute inline and their observations are appended. Destructive calls
+ * register pending approvals but do NOT append a tool message — `consumeResolvedApprovals`
+ * writes the single tool response on the next run. This keeps the 1:1 mapping between
+ * assistant tool_calls and tool responses that LLM APIs enforce, including when the assistant
+ * message mixes destructive and non-destructive calls in the same turn.
+ */
+async function dispatchToolCalls(calls, toolMap, ctx, opts) {
+    let needsApproval = false;
+    for (const call of calls) {
+        if (opts.signal?.aborted)
+            return true;
+        const tool = toolMap.get(call.name);
+        const destructiveAndGated = tool?.destructive && !opts.autoApprove;
+        if (destructiveAndGated) {
+            await (0, session_ts_1.addPendingApproval)(opts.sessionId, {
+                toolName: call.name,
+                arguments: call.arguments ?? {},
+                toolCallId: call.id,
+                reason: 'destructive',
+            });
+            needsApproval = true;
+            // Don't break — keep processing remaining calls so non-destructive ones in the same
+            // turn still execute and write their tool responses. Their results may be useful
+            // context for the operator deciding whether to approve.
+            continue;
+        }
+        const observation = await invokeTool(call, toolMap, ctx);
+        await (0, session_ts_1.appendMessage)(opts.sessionId, {
+            role: 'tool',
+            content: observation,
+            toolCallId: call.id,
+            createdAt: Date.now(),
+        });
+    }
+    return needsApproval;
+}
+async function consumeResolvedApprovals(sessionId, toolMap, ctx) {
+    const session = await (0, session_ts_1.getSession)(sessionId);
+    if (!session)
+        return;
+    const toConsume = session.pendingApprovals.filter((a) => a.resolved && !a.consumed);
+    for (const approval of toConsume) {
+        const observation = approval.approved
+            ? await invokeTool({ id: approval.toolCallId, name: approval.toolName, arguments: approval.arguments }, toolMap, ctx)
+            : JSON.stringify({ ok: false, error: 'denied_by_operator', tool: approval.toolName });
+        await (0, session_ts_1.appendMessage)(sessionId, {
+            role: 'tool',
+            content: observation,
+            toolCallId: approval.toolCallId,
+            createdAt: Date.now(),
+        });
+        await (0, session_ts_1.markApprovalConsumed)(sessionId, approval.id);
+    }
+}
+async function invokeTool(call, toolMap, ctx) {
+    const tool = toolMap.get(call.name);
+    if (!tool)
+        return JSON.stringify({ error: 'unknown_tool', name: call.name });
+    try {
+        const result = await tool.handler(call.arguments ?? {}, ctx);
+        return JSON.stringify({ ok: true, result });
+    }
+    catch (err) {
+        return JSON.stringify({ ok: false, error: err instanceof Error ? err.message : String(err) });
+    }
+}
+function toModelMessages(items, systemPrompt) {
+    const out = [];
+    if (systemPrompt && !items.some((m) => m.role === 'system')) {
+        out.push({ role: 'system', content: systemPrompt });
+    }
+    for (const item of items) {
+        const message = { role: item.role, content: item.content };
+        if (item.toolCalls)
+            message.toolCalls = item.toolCalls;
+        if (item.toolCallId)
+            message.toolCallId = item.toolCallId;
+        out.push(message);
+    }
+    return out;
+}
+/** Test-only: clear the in-flight tracking map. */
+function _resetInFlightForTests() {
+    inFlight.clear();
+}
+//# sourceMappingURL=loop.js.map

package/dist/agent/loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop.js","sourceRoot":"","sources":["../../agent/loop.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;AAuBH,4BAQC;AA4JD,wDAEC;AA1LD,6CAA8G;AAE9G,6CAA6C;AAgB7C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;AAElD,SAAgB,QAAQ,CAAC,IAAkB;IAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACpC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,GAAG;YAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,IAAkB;IACtC,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAc,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,IAAA,sBAAS,EAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAqB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAEtG,IAAI,CAAC;QACJ,wFAAwF;QACxF,uFAAuF;QACvF,mCAAmC;QACnC,MAAM,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAE7D,0FAA0F;QAC1F,0FAA0F;QAC1F,mFAAmF;QACnF,yFAAyF;QACzF,kFAAkF;QAClF,MAAM,YAAY,GAAG,MAAM,IAAA,uBAAU,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAA,sBAAS,EAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YACrD,OAAO;QACR,CAAC;QAED,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO,CAAC,mDAAmD;YACrF,MAAM,OAAO,GAAG,MAAM,IAAA,uBAAU,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACjD,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,SAAS,mBAAmB,CAAC,CAAC;YAC5E,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACtE,MAAM,MAAM,GAAmB,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CACxD,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,EACxD,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CACjE,CAAC;YAEF,MAAM,IAAA,0BAAa,EAAC,IAAI,CAAC,SAAS,EAAE;gBACnC,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;gBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACrB,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAA,sBAAS,EAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC7C,OAAO;YACR,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7E,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO;QAC5C,CAAC;QACD,MAAM,IAAA,sBAAS,EAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,oBAAoB,IAAI,CAAC,QAAQ,0BAA0B,CAAC,CAAC;IAC3G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,oFAAoF;QACpF,wFAAwF;QACxF,2CAA2C;QAC3C,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO;QACjC,MAAM,IAAA,sBAAS,EAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3F,MAAM,GAAG,CAAC;IACX,CAAC;AACF,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,iBAAiB,CAC/B,KAAiB,EACjB,OAA+B,EAC/B,GAAqB,EACrB,IAAkB;IAElB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,mBAAmB,GAAG,IAAI,EAAE,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;QACnE,IAAI,mBAAmB,EAAE,CAAC;YACzB,MAAM,IAAA,+BAAkB,EAAC,IAAI,CAAC,SAAS,EAAE;gBACxC,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;gBAC/B,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,MAAM,EAAE,aAAa;aACrB,CAAC,CAAC;YACH,aAAa,GAAG,IAAI,CAAC;YACrB,oFAAoF;YACpF,iFAAiF;YACjF,wDAAwD;YACxD,SAAS;QACV,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,IAAA,0BAAa,EAAC,IAAI,CAAC,SAAS,EAAE;YACnC,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACtC,SAAiB,EACjB,OAA+B,EAC/B,GAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,IAAA,uBAAU,EAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ;YACpC,CAAC,CAAC,MAAM,UAAU,CAChB,EAAE,EAAE,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,EACnF,OAAO,EACP,GAAG,CACH;YACF,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvF,MAAM,IAAA,0BAAa,EAAC,SAAS,EAAE;YAC9B,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC,CAAC;QACH,MAAM,IAAA,iCAAoB,EAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;AACF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAc,EAAE,OAA+B,EAAE,GAAqB;IAC/F,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,KAAqB,EAAE,YAAgC;IAC/E,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,IAAI,YAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAY,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACpE,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACvD,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,mDAAmD;AACnD,SAAgB,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC"}

package/dist/agent/operations.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Operations API surface for the built-in agent (#626).
+ *
+ * Six handlers, all super_user-only — the auth check is inline because none
+ * of these ops are registered in `utility/operation_authorization.ts`'s
+ * `requiredPermissions` map. Without the inline gate, a non-SU request would
+ * fall through the standard flow and be allowed.
+ */
+import type { OperationDefinition } from '../server/serverHelpers/serverUtilities.ts';
+import type { AgentConfig } from './types.ts';
+export interface OperationDeps {
+    getConfig: () => AgentConfig;
+    setConfig: (patch: Partial<AgentConfig>) => AgentConfig;
+    startRun: (sessionId: string) => void;
+    cancelRun: (sessionId: string) => boolean;
+}
+export declare function buildOperations(deps: OperationDeps): OperationDefinition[];