@inhuman.tools/harness 0.0.0-stage → 0.1.0

package/dist/tool-catalog/recipes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipes.js","sourceRoot":"","sources":["../../src/tool-catalog/recipes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAoB,OAAO,EAAE,MAAM,8BAA8B,CAAC;AAiBhG,MAAM,UAAU,aAAa,CAAC,IAa7B;IACC,OAAO;QACL,IAAI,EAAE,IAAI,OAAO,CAAC;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,SAAS;YAC1C,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;YAClC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;YACnC,YAAY,EAAE,cAAc,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;YACrD,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;YACxC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;YAC9C,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI;YAC7C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE;YACzE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;SAC5C,CAAC;QACF,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,OAAO,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,QAAQ;QACtG,CAAC,CAAC,IAAI,CAAC,WAAW;QAClB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAiC,EAAE,IAAY;IACxE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAUC,EACD,QAAgB;IAEhB,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,KAAK,EAAE,QAAQ,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,YAAY,CAC1B,OAAiC,EACjC,WAAmB,EACnB,UAAkB;IAElB,IAAI,WAAW,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjD,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,0BAA0B,WAAW,EAAE,CAAC;IACpE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,GAAG,WAAW,kBAAkB,UAAU,EAAE,CAAC;IACpG,IAAI,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC;QAAE,OAAO,gBAAgB,WAAW,MAAM,UAAU,EAAE,CAAC;IAC7G,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,OAAiC;IAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,KAAK,GAAG,CAAC,IAAY,EAA4B,EAAE;QACvD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,KAAK,IAAI,IAAI;gBAAE,OAAO,KAAK,CAAC;QAClC,CAAC;QACD,KAAK,CAAC,GAAG,EAAE,CAAC;QACZ,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,KAAK,IAAI,IAAI;YAAE,OAAO,KAAK,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAiC,EAAE,IAAY,EAAE,EAAU;IAC1F,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,CACL,eAAe,CACb,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACrB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,OAAO;YACL,GAAG,MAAM;YACT,IAAI,EAAE,IAAI,OAAO,CAAC;gBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;gBACtB,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC9B,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;gBACxB,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC;gBAC5C,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC;SACH,CAAC;IACJ,CAAC,CAAC,CACH,IAAI,IAAI,CACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAiC;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACzC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tool-catalog/types.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Catalog row identity. wireName is a model-edge projection — never durable
+ * routing. Connection tools route by connectionKey + serverToolName.
+ */
+export type CatalogSource = {
+    readonly kind: "pack";
+    readonly pluginName: string;
+} | {
+    readonly kind: "connection";
+    /** Kernel `connections` map key (slug). Lawful cross-doc pointer to ConnectionSpec. */
+    readonly connectionKey: string;
+    readonly serverToolName: string;
+};
+export type CatalogExecute = (raw: unknown, ctx: {
+    root?: string;
+    signal?: AbortSignal;
+    sessionId?: string;
+    background?: unknown;
+    catalog?: unknown;
+    onPriorContent?: (text: string | null) => void;
+    invocation?: unknown;
+    shellTailBytes?: number;
+    onTail?: (frame: {
+        readonly text: string;
+        readonly totalBytes: number;
+    }) => void;
+}) => Promise<unknown>;
+export type PackToolMeta = {
+    readonly kind: "function";
+} | {
+    readonly kind: "bot-call";
+    readonly pluginName: string;
+    readonly target: string;
+    readonly background: boolean;
+    readonly lifetime: "turn" | "call";
+    readonly show: "result" | "omit" | "turn";
+    readonly deadlineMs?: number;
+    readonly supportsNotify: boolean;
+};
+export type CatalogEntry = {
+    readonly wireName: string;
+    readonly description: string;
+    readonly parameters: Record<string, unknown>;
+    /** Catalog class: `read` | `write` | `effect` | `meta`. Missing / unknown → `effect`. */
+    readonly class: string;
+    readonly source: CatalogSource;
+    /**
+     * Pack / host plugins carry execute (InhumanTool.execute).
+     * Connection tools are projection-only — BODY is MCP PEW on the connection.
+     */
+    readonly execute?: CatalogExecute;
+    readonly packMeta?: PackToolMeta;
+    readonly triggersReactLoop?: boolean;
+    readonly tapeHidden?: boolean;
+    /** Mustache the TUI paints while the call is open, after it seals, and as a caption. */
+    readonly question?: string;
+    readonly effect?: string;
+    readonly caption?: string;
+    /**
+     * Exam admit bag. Structural so this package does not import plugin-sdk.
+     * Plugin ExamAdmit is assignable.
+     */
+    readonly exam?: {
+        readonly program: (state: any, input: any) => string | {
+            readonly error: string;
+        };
+        readonly admit: (state: any, input: any) => any;
+        readonly settle?: (state: any, input: any, result: any) => any;
+    };
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/tool-catalog/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tool-catalog/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACtD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,uFAAuF;IACvF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,CAAC;AAEN,MAAM,MAAM,cAAc,GAAG,CAC3B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAClF,KACE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC,CAAC;AAEN,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,yFAAyF;IACzF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE;QACd,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG;YAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAClF,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC;QAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC;KAChE,CAAC;CACH,CAAC"}

package/dist/tool-catalog/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/tool-catalog/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tool-catalog/types.ts"],"names":[],"mappings":""}

package/dist/tool-runtime/approval/approved.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Receipts on the leaf. Deny-side stamps `outcomeJson` then the orchestrator
+ * writes `orchestrationResult = false` and `completed`. Deny `text` names the
+ * actor (policy / classifier / user). Human `approvalComment` is a
+ * `TurnApprovalNoteChunk`, not this receipt. Cancel writes `cancelled`, not `approved`.
+ *
+ * Payload construction lives in harness-model. This module is the squeeze-aware
+ * stamp used by the approval pipeline.
+ */
+import { ApprovableJob } from "@inhuman.tools/harness-model";
+export declare function stampToolOutcome(leaf: ApprovableJob, text: "denied" | "cancelled", reason?: unknown): void;
+/**
+ * Deny-side receipt. Machine deny (eval) keeps `code: "policy_denied"`.
+ */
+export declare function stampDenyReceipt(leaf: ApprovableJob, _unattendedText?: string): void;
+/**
+ * Unstarted (or allow-side but not yet BODY) cancel. Does not write
+ * `approved` or `orchestrationResult`.
+ */
+export declare const cancelUnstartedTool: (leaf: ApprovableJob, reason?: unknown) => void;
+//# sourceMappingURL=approved.d.ts.map

package/dist/tool-runtime/approval/approved.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approved.d.ts","sourceRoot":"","sources":["../../../src/tool-runtime/approval/approved.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAEL,aAAa,EAKd,MAAM,8BAA8B,CAAC;AAUtC,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,GAAG,WAAW,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,CAE1G;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,aAAa,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAEpF;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,SAAiB,aAAa,WAAW,OAAO,KAAG,IAIjF,CAAC"}

package/dist/tool-runtime/approval/approved.js

@@ -0,0 +1,40 @@
+/**
+ * Receipts on the leaf. Deny-side stamps `outcomeJson` then the orchestrator
+ * writes `orchestrationResult = false` and `completed`. Deny `text` names the
+ * actor (policy / classifier / user). Human `approvalComment` is a
+ * `TurnApprovalNoteChunk`, not this receipt. Cancel writes `cancelled`, not `approved`.
+ *
+ * Payload construction lives in harness-model. This module is the squeeze-aware
+ * stamp used by the approval pipeline.
+ */
+import { CallJob, applyDenyReceipt, applyToolOutcomeReceipt, cancelUnstarted, ToolCallJob, } from "@inhuman.tools/harness-model";
+import { action } from "mobx";
+import { stampSqueeze } from "../../context/index.js";
+function squeezeReceipt(leaf) {
+    if (leaf instanceof CallJob)
+        return;
+    if (leaf instanceof ToolCallJob)
+        stampSqueeze(leaf);
+}
+export function stampToolOutcome(leaf, text, reason) {
+    if (applyToolOutcomeReceipt(leaf, text, reason))
+        squeezeReceipt(leaf);
+}
+/**
+ * Deny-side receipt. Machine deny (eval) keeps `code: "policy_denied"`.
+ */
+export function stampDenyReceipt(leaf, _unattendedText) {
+    if (applyDenyReceipt(leaf))
+        squeezeReceipt(leaf);
+}
+/**
+ * Unstarted (or allow-side but not yet BODY) cancel. Does not write
+ * `approved` or `orchestrationResult`.
+ */
+export const cancelUnstartedTool = action((leaf, reason) => {
+    if (leaf.completed || leaf.cancelled)
+        return;
+    cancelUnstarted(leaf, reason);
+    squeezeReceipt(leaf);
+});
+//# sourceMappingURL=approved.js.map

package/dist/tool-runtime/approval/approved.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approved.js","sourceRoot":"","sources":["../../../src/tool-runtime/approval/approved.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,OAAO,EAEP,gBAAgB,EAChB,uBAAuB,EACvB,eAAe,EACf,WAAW,GACZ,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,SAAS,cAAc,CAAC,IAAmB;IACzC,IAAI,IAAI,YAAY,OAAO;QAAE,OAAO;IACpC,IAAI,IAAI,YAAY,WAAW;QAAE,YAAY,CAAC,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAmB,EAAE,IAA4B,EAAE,MAAgB;IAClG,IAAI,uBAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAmB,EAAE,eAAwB;IAC5E,IAAI,gBAAgB,CAAC,IAAI,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,CAAC,IAAmB,EAAE,MAAgB,EAAQ,EAAE;IACxF,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO;IAC7C,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9B,cAAc,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/tool-runtime/approval/dist.d.ts

@@ -0,0 +1,6 @@
+export declare function distPolicySource(): string;
+/**
+ * Body of the one policy program. Never throws. Missing operator → dist.
+ */
+export declare function loadPolicySource(kernelFsRoot: string): string | undefined;
+//# sourceMappingURL=dist.d.ts.map

package/dist/tool-runtime/approval/dist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dist.d.ts","sourceRoot":"","sources":["../../../src/tool-runtime/approval/dist.ts"],"names":[],"mappings":"AASA,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAYD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEzE"}

package/dist/tool-runtime/approval/dist.js

@@ -0,0 +1,28 @@
+/**
+ * Dist `policy.json` is the never-throwing program in policy-processor.
+ * `{kernelFsRoot}/policy.json` wins when present and non-empty.
+ */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { reasonableDefaultsSource } from "@inhuman.tools/policy/floor";
+export function distPolicySource() {
+    return reasonableDefaultsSource;
+}
+function readOperatorPolicySource(kernelFsRoot) {
+    try {
+        const user = readFileSync(join(kernelFsRoot, "policy.json"), "utf8");
+        if (user.trim() !== "")
+            return user;
+    }
+    catch {
+        /* missing operator policy is dist */
+    }
+    return undefined;
+}
+/**
+ * Body of the one policy program. Never throws. Missing operator → dist.
+ */
+export function loadPolicySource(kernelFsRoot) {
+    return readOperatorPolicySource(kernelFsRoot) ?? distPolicySource();
+}
+//# sourceMappingURL=dist.js.map

package/dist/tool-runtime/approval/dist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dist.js","sourceRoot":"","sources":["../../../src/tool-runtime/approval/dist.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAED,SAAS,wBAAwB,CAAC,YAAoB;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,OAAO,wBAAwB,CAAC,YAAY,CAAC,IAAI,gBAAgB,EAAE,CAAC;AACtE,CAAC"}

package/dist/tool-runtime/approval/inbound.d.ts

@@ -0,0 +1,7 @@
+import { ApprovableJob, SessionTurn, type PermissionMode, type SessionPlexus } from "@inhuman.tools/harness-model";
+/** Sequence guard: wait, then true. Never false — that would deny BODY. */
+export declare function inboundTurnGuard(turn: SessionTurn): boolean | Promise<true>;
+export declare function publishPolicyError(session: SessionPlexus, text: string | null): void;
+/** Floor produce is policy-processor `license`. `_policy` is unused — writing it would fork the receipt. */
+export declare function stampLicenseDeny(leaf: ApprovableJob, _policy: PermissionMode): void;
+//# sourceMappingURL=inbound.d.ts.map

package/dist/tool-runtime/approval/inbound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound.d.ts","sourceRoot":"","sources":["../../../src/tool-runtime/approval/inbound.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAgBnH,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAM3E;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAQpF;AAED,4GAA4G;AAC5G,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAEnF"}

package/dist/tool-runtime/approval/inbound.js

@@ -0,0 +1,47 @@
+/**
+ * LICENSE WHEN is the Approvable guard. Sequences typically return true;
+ * inbound Turn waits predecessors without returning false (false is deny).
+ */
+import { FieldAwareness } from "@here.build/plexus";
+import { SessionTurn } from "@inhuman.tools/harness-model";
+import { when } from "mobx";
+import { stampDenyReceipt } from "./approved.js";
+function inboundPredecessorClosed(turn) {
+    if (!turn.inbound)
+        return true;
+    let prior = turn.turnTail;
+    while (prior instanceof SessionTurn) {
+        if (!prior.reducerExited)
+            return false;
+        if (!prior.inbound)
+            break;
+        prior = prior.turnTail;
+    }
+    return true;
+}
+/** Sequence guard: wait, then true. Never false — that would deny BODY. */
+export function inboundTurnGuard(turn) {
+    if (inboundPredecessorClosed(turn))
+        return true;
+    return (async () => {
+        await when(() => inboundPredecessorClosed(turn) || turn.cancelled || turn.completed);
+        return true;
+    })();
+}
+export function publishPolicyError(session, text) {
+    try {
+        const lane = new FieldAwareness(session.awareness, "policyError");
+        if (text == null || text === "")
+            lane.clear();
+        else
+            lane.set(text);
+    }
+    catch {
+        /* presence must not block the floor vote */
+    }
+}
+/** Floor produce is policy-processor `license`. `_policy` is unused — writing it would fork the receipt. */
+export function stampLicenseDeny(leaf, _policy) {
+    stampDenyReceipt(leaf);
+}
+//# sourceMappingURL=inbound.js.map

package/dist/tool-runtime/approval/inbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound.js","sourceRoot":"","sources":["../../../src/tool-runtime/approval/inbound.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAiB,WAAW,EAA2C,MAAM,8BAA8B,CAAC;AACnH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,SAAS,wBAAwB,CAAC,IAAiB;IACjD,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC1B,OAAO,KAAK,YAAY,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM;QAC1B,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,IAAiB;IAChD,IAAI,wBAAwB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;QACrF,OAAO,IAAa,CAAC;IACvB,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAsB,EAAE,IAAmB;IAC5E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAClE,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;;YACzC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;AACH,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,gBAAgB,CAAC,IAAmB,EAAE,OAAuB;IAC3E,gBAAgB,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC"}

package/dist/tool-runtime/approval/unattended.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Unattended coded receipts. Residual ask under auto is the judge, not
+ * `policy_denied`. Operator throw is awareness + dist, not `policy_error`.
+ */
+import { type EvalFailureCode, type EvalPermissionMode } from "@inhuman.tools/harness-model";
+export declare function resolveEvalPermissionMode(policy: string): EvalPermissionMode | null;
+export declare function unattendedFailureText(code: EvalFailureCode, policyId: string, reason?: string): string;
+//# sourceMappingURL=unattended.d.ts.map

package/dist/tool-runtime/approval/unattended.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unattended.d.ts","sourceRoot":"","sources":["../../../src/tool-runtime/approval/unattended.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAwB,KAAK,eAAe,EAAE,KAAK,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEnH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAEnF;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAatG"}

package/dist/tool-runtime/approval/unattended.js

@@ -0,0 +1,23 @@
+/**
+ * Unattended coded receipts. Residual ask under auto is the judge, not
+ * `policy_denied`. Operator throw is awareness + dist, not `policy_error`.
+ */
+import { isEvalPermissionMode } from "@inhuman.tools/harness-model";
+export function resolveEvalPermissionMode(policy) {
+    return isEvalPermissionMode(policy) ? policy : null;
+}
+export function unattendedFailureText(code, policyId, reason) {
+    switch (code) {
+        case "interaction_required":
+            return `Operation requires human authorization under policy ${policyId}`;
+        case "policy_denied":
+            return `Operation denied under policy ${policyId}`;
+        case "policy_error":
+            return reason != null && reason !== ""
+                ? `Policy evaluation failed under policy ${policyId}: ${reason}`
+                : `Policy evaluation failed under policy ${policyId}`;
+        case "policy_unavailable":
+            return `Policy ${policyId} is not available`;
+    }
+}
+//# sourceMappingURL=unattended.js.map

package/dist/tool-runtime/approval/unattended.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unattended.js","sourceRoot":"","sources":["../../../src/tool-runtime/approval/unattended.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,oBAAoB,EAAiD,MAAM,8BAA8B,CAAC;AAEnH,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAqB,EAAE,QAAgB,EAAE,MAAe;IAC5F,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,sBAAsB;YACzB,OAAO,uDAAuD,QAAQ,EAAE,CAAC;QAC3E,KAAK,eAAe;YAClB,OAAO,iCAAiC,QAAQ,EAAE,CAAC;QACrD,KAAK,cAAc;YACjB,OAAO,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,EAAE;gBACpC,CAAC,CAAC,yCAAyC,QAAQ,KAAK,MAAM,EAAE;gBAChE,CAAC,CAAC,yCAAyC,QAAQ,EAAE,CAAC;QAC1D,KAAK,oBAAoB;YACvB,OAAO,UAAU,QAAQ,mBAAmB,CAAC;IACjD,CAAC;AACH,CAAC"}

package/dist/tool-runtime/extra-root.d.ts

@@ -0,0 +1,3 @@
+export declare function runWithExtraRoot<T>(allow: boolean, fn: () => T): T;
+export declare function extraRootAllowed(): boolean;
+//# sourceMappingURL=extra-root.d.ts.map

package/dist/tool-runtime/extra-root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extra-root.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/extra-root.ts"],"names":[],"mappings":"AASA,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAElE;AAED,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C"}

package/dist/tool-runtime/extra-root.js

@@ -0,0 +1,14 @@
+/**
+ * Dispatch-time extra-root flag. Human allow / remainder grant / yolo
+ * shell is this spawn, not a file-read grant. Effect bodies read it;
+ * they do not set it.
+ */
+import { AsyncLocalStorage } from "node:async_hooks";
+const extraRootAls = new AsyncLocalStorage();
+export function runWithExtraRoot(allow, fn) {
+    return extraRootAls.run(allow, fn);
+}
+export function extraRootAllowed() {
+    return extraRootAls.getStore() === true;
+}
+//# sourceMappingURL=extra-root.js.map

package/dist/tool-runtime/extra-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extra-root.js","sourceRoot":"","sources":["../../src/tool-runtime/extra-root.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,YAAY,GAAG,IAAI,iBAAiB,EAAW,CAAC;AAEtD,MAAM,UAAU,gBAAgB,CAAI,KAAc,EAAE,EAAW;IAC7D,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,YAAY,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC;AAC1C,CAAC"}

package/dist/tool-runtime/guard-tool.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Shared origin-aware guard/approval path. Plugin guards may refuse,
+ * answer without running, or narrow arguments; narrowed values are written
+ * back before license judges them. Denied/ask never start the effect.
+ */
+import { AgentCallJob, ToolCallJob } from "@inhuman.tools/harness-model";
+import { type AgentBehavior, type Opened, type ToolOutcome } from "../extensions/index.js";
+import { type GuardedCall } from "./tool-behavior.js";
+/**
+ * Behavior-declared tools are licensed by their behavior, not by policy. That holds only while the
+ * behavior's entry is the one that runs: execution resolves the catalog first, so a pack or host
+ * tool that took the same wire name afterwards would otherwise inherit the skip.
+ */
+export declare function behaviorEntriesThatRun<T extends {
+    readonly wireName: string;
+}>(entries: readonly T[], catalogEntry: (wireName: string) => unknown): readonly T[];
+type GuardHostTool = {
+    readonly job: ToolCallJob;
+    /** Scheme/RPC callers should pass their origin through this door, not a second path. */
+    readonly origin: "model" | "scheme" | "extension" | "rpc";
+    readonly agent: AgentBehavior | null | undefined;
+    readonly behaviorEntries: readonly {
+        readonly wireName: string;
+    }[];
+    readonly guardedCall: (job: ToolCallJob) => GuardedCall | null;
+    readonly license: (job: ToolCallJob) => Promise<boolean>;
+    readonly turnId: string;
+    readonly narrowAgent?: (job: AgentCallJob, tools: readonly string[]) => void;
+    readonly onUnentered: (job: ToolCallJob, outcome: {
+        readonly ok: boolean;
+        readonly text?: string;
+        readonly value?: unknown;
+    }) => void;
+    readonly onProblem?: (what: string, error: unknown) => void;
+    readonly onReport?: (job: ToolCallJob, outcome: ToolOutcome) => void;
+};
+type GuardDecision = {
+    readonly allowed: boolean;
+    readonly opened?: Opened<ToolOutcome>;
+};
+/** The receipt of a call a guard kept from running; an agent call reports it as its outcome. */
+export declare function stampUnentered(job: ToolCallJob, outcome: {
+    readonly ok: boolean;
+    readonly text?: string;
+    readonly value?: unknown;
+}): void;
+/**
+ * Guard phase of a host tool. Origins keep their policy rules; RPC skips
+ * plugin guards (floor only). Declared extension tools have no host effect
+ * to license.
+ */
+export declare function guardHostTool(opts: GuardHostTool): Promise<GuardDecision>;
+export {};
+//# sourceMappingURL=guard-tool.d.ts.map

package/dist/tool-runtime/guard-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-tool.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/guard-tool.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,YAAY,EAMZ,WAAW,EACZ,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,MAAM,EAAW,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAE1F,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAExE;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAC5E,OAAO,EAAE,SAAS,CAAC,EAAE,EACrB,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,GAC1C,SAAS,CAAC,EAAE,CAKd;AAKD,KAAK,aAAa,GAAG;IACnB,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;IAC1B,wFAAwF;IACxF,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,KAAK,CAAC;IAC1D,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnE,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,WAAW,GAAG,IAAI,CAAC;IAC/D,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,CAAC;IAC7E,QAAQ,CAAC,WAAW,EAAE,CACpB,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE;QACP,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;KAC1B,KACE,IAAI,CAAC;IACV,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;CACtE,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;CACvC,CAAC;AAMF,gGAAgG;AAChG,wBAAgB,cAAc,CAC5B,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE;IACP,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,GACA,IAAI,CAWN;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CA+C/E"}

package/dist/tool-runtime/guard-tool.js

@@ -0,0 +1,97 @@
+/**
+ * Shared origin-aware guard/approval path. Plugin guards may refuse,
+ * answer without running, or narrow arguments; narrowed values are written
+ * back before license judges them. Denied/ask never start the effect.
+ */
+import { AgentCallJob, CallJob, FailureOutcome, stringifyOutcomeValue, SuccessfulOutcome, SystemToolJob, } from "@inhuman.tools/harness-model";
+import { runInAction } from "mobx";
+import { Refusal } from "../extensions/index.js";
+import { unenteredOutcome } from "./tool-behavior.js";
+/**
+ * Behavior-declared tools are licensed by their behavior, not by policy. That holds only while the
+ * behavior's entry is the one that runs: execution resolves the catalog first, so a pack or host
+ * tool that took the same wire name afterwards would otherwise inherit the skip.
+ */
+export function behaviorEntriesThatRun(entries, catalogEntry) {
+    return entries.filter((entry) => {
+        const resolved = catalogEntry(entry.wireName);
+        return resolved === undefined || resolved === entry;
+    });
+}
+/** The license already stamped its own receipt; a guard only sees that it refused. */
+const LICENSE_REFUSED = "the host did not license this call";
+function messageOf(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/** The receipt of a call a guard kept from running; an agent call reports it as its outcome. */
+export function stampUnentered(job, outcome) {
+    if (!(job instanceof CallJob)) {
+        job.outcomeSnap ??= outcome;
+        return;
+    }
+    if (job.outcome != null)
+        return;
+    job.outcome = outcome.ok
+        ? new SuccessfulOutcome({
+            valueJson: stringifyOutcomeValue(outcome.value ?? outcome.text ?? null),
+        })
+        : new FailureOutcome({ code: "denied", message: outcome.text ?? "" });
+}
+/**
+ * Guard phase of a host tool. Origins keep their policy rules; RPC skips
+ * plugin guards (floor only). Declared extension tools have no host effect
+ * to license.
+ */
+export async function guardHostTool(opts) {
+    const { job } = opts;
+    if (job instanceof SystemToolJob && opts.behaviorEntries.some((row) => row.wireName === job.name)) {
+        return { allowed: true };
+    }
+    const agent = opts.agent;
+    const skipPlugin = opts.origin === "rpc" || agent == null || agent.empty;
+    const call = skipPlugin ? null : opts.guardedCall(job);
+    if (skipPlugin || call == null || !agent.selects(call.point, call.paths)) {
+        return { allowed: await opts.license(job) };
+    }
+    const opened = agent.openTool({
+        point: call.point,
+        paths: call.paths,
+        raw: call.raw,
+        turnId: opts.turnId,
+        floor: async (value) => {
+            const next = call.argsFor(value);
+            if ("error" in next)
+                return new Refusal(next.error);
+            if (next.args !== job.args || next.tools != null || next.speech !== undefined) {
+                if (job.policyResult != null || job.humanApprove != null) {
+                    return new Refusal("a plugin guard changed the arguments after they were judged");
+                }
+                runInAction(() => {
+                    if (next.speech !== undefined && job instanceof AgentCallJob)
+                        job.replaceSpeech(next.speech);
+                    if (next.args !== job.args)
+                        job.args = next.args;
+                    if (next.tools != null && job instanceof AgentCallJob)
+                        opts.narrowAgent?.(job, next.tools);
+                });
+            }
+            return (await opts.license(job)) ? value : new Refusal(LICENSE_REFUSED);
+        },
+    });
+    try {
+        const started = await opened.started;
+        if (started.entered)
+            return { allowed: true, opened };
+        opts.onReport?.(job, started.outcome);
+        runInAction(() => opts.onUnentered(job, unenteredOutcome(started.outcome)));
+    }
+    catch (error) {
+        opts.onProblem?.(`plugin ${job.name} guard`, error);
+        runInAction(() => opts.onUnentered(job, {
+            ok: false,
+            text: `plugin guard failed: ${messageOf(error)}`,
+        }));
+    }
+    return { allowed: false };
+}
+//# sourceMappingURL=guard-tool.js.map

package/dist/tool-runtime/guard-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-tool.js","sourceRoot":"","sources":["../../src/tool-runtime/guard-tool.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,YAAY,EACZ,OAAO,EACP,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,GAEd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAEnC,OAAO,EAAmC,OAAO,EAAoB,MAAM,cAAc,CAAC;AAE1F,OAAO,EAAE,gBAAgB,EAAoB,MAAM,oBAAoB,CAAC;AAExE;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAqB,EACrB,YAA2C;IAE3C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sFAAsF;AACtF,MAAM,eAAe,GAAG,oCAAoC,CAAC;AA6B7D,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,cAAc,CAC5B,GAAgB,EAChB,OAIC;IAED,IAAI,CAAC,CAAC,GAAG,YAAY,OAAO,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,WAAW,KAAK,OAAO,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI;QAAE,OAAO;IAChC,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,EAAE;QACtB,CAAC,CAAC,IAAI,iBAAiB,CAAC;YACpB,SAAS,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;SACxE,CAAC;QACJ,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAmB;IACrD,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,IAAI,GAAG,YAAY,aAAa,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAClG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC;IACzE,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,UAAU,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,KAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,MAAM,GAAG,KAAM,CAAC,QAAQ,CAAC;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,OAAO,IAAI,IAAI;gBAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9E,IAAI,GAAG,CAAC,YAAY,IAAI,IAAI,IAAI,GAAG,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;oBACzD,OAAO,IAAI,OAAO,CAAC,6DAA6D,CAAC,CAAC;gBACpF,CAAC;gBACD,WAAW,CAAC,GAAG,EAAE;oBACf,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,YAAY,YAAY;wBAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC7F,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI;wBAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;oBACjD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,GAAG,YAAY,YAAY;wBAAE,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC7F,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1E,CAAC;KACF,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACrC,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,GAAG,CAAC,IAAI,QAAQ,EAAE,KAAK,CAAC,CAAC;QACpD,WAAW,CAAC,GAAG,EAAE,CACf,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACpB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,wBAAwB,SAAS,CAAC,KAAK,CAAC,EAAE;SACjD,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC"}

package/dist/tool-runtime/handler.d.ts

@@ -0,0 +1,28 @@
+import { AgentCallJob, BotCallJob, CallJob, ProgrammaticJob, SessionRoot, SessionTurn, SystemToolJob, ToolCallJob } from "@inhuman.tools/harness-model";
+import type { ToolCall } from "@inhuman.tools/tool-call-normalize";
+import { type KernelToolCatalog } from "@tool-catalog";
+/** Catalog face the handler proxies to. A kernel host satisfies this. */
+export type ToolCallKernel = {
+    readonly catalog: KernelToolCatalog;
+};
+export type AdmitContext = {
+    readonly session?: SessionRoot;
+    readonly originTurn?: SessionTurn;
+    readonly loadAgentCall?: (uuid: string) => CallJob | undefined;
+    /**
+     * Receives the job before admit returns. A reachable child can start, so pass
+     * this only for a call that may start.
+     */
+    readonly parent?: {
+        registerJob(child: AdmittedCall): void;
+    };
+};
+export type AdmittedCall = ToolCallJob | ProgrammaticJob;
+/** Standing bot or owned child from an `agent__ask` / `agent__send` wire. Unknown recipes seal the ceiling. */
+export declare function agentCallFromWire(call: ToolCall, catalog: KernelToolCatalog, ctx?: AdmitContext): BotCallJob | AgentCallJob | SystemToolJob;
+export declare class ToolCallHandler {
+    readonly kernel: ToolCallKernel;
+    constructor(kernel: ToolCallKernel);
+    admit(call: ToolCall, catalog?: KernelToolCatalog, ctx?: AdmitContext): AdmittedCall;
+}
+//# sourceMappingURL=handler.d.ts.map

package/dist/tool-runtime/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/handler.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,YAAY,EACZ,UAAU,EACV,OAAO,EAoBP,eAAe,EAGf,WAAW,EACX,WAAW,EAGX,aAAa,EACb,WAAW,EAQZ,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAInE,OAAO,EAA8C,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAMnG,yEAAyE;AACzE,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAAG,SAAS,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAA;KAAE,CAAC;CAC9D,CAAC;AAyHF,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,eAAe,CAAC;AAqBzD,+GAA+G;AAC/G,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,iBAAiB,EAC1B,GAAG,GAAE,YAAiB,GACrB,UAAU,GAAG,YAAY,GAAG,aAAa,CA2C3C;AAED,qBAAa,eAAe;IACd,QAAQ,CAAC,MAAM,EAAE,cAAc;gBAAtB,MAAM,EAAE,cAAc;IAE3C,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,GAAE,iBAAuC,EAAE,GAAG,GAAE,YAAiB,GAAG,YAAY;CA6R9G"}