@inhuman.tools/harness 0.0.0-stage → 0.2.0

package/dist/server/daemon/session/completion-flight.js

@@ -0,0 +1,74 @@
+export class CompletionFlights {
+    drive;
+    /** One provider drive per round. A second `complete` joins this promise. */
+    #flight = new WeakMap();
+    /**
+     * Set before {@link #flight} is stored. The drive writes
+     * `orchestrationResult` and flushes reactions while the flight is still unset.
+     */
+    #claimed = new WeakSet();
+    /** The drive's abort. A later `complete` adopts its signal onto this controller. */
+    #abort = new Map();
+    /** Drive aborted. The fresh-round reaction must not restamp that as a crash. */
+    #aborted = new WeakSet();
+    constructor(drive) {
+        this.drive = drive;
+    }
+    complete(req) {
+        const flight = this.#flight.get(req.round);
+        if (flight !== undefined)
+            return flight.finally(this.#adoptSignal(req.round, req.signal));
+        if (this.#claimed.has(req.round))
+            return this.#join(req);
+        this.#claimed.add(req.round);
+        const abort = new AbortController();
+        this.#abort.set(req.round, abort);
+        const release = this.#adoptSignal(req.round, req.signal);
+        const pending = this.drive({ ...req, signal: abort.signal });
+        this.#flight.set(req.round, pending);
+        return pending.finally(() => {
+            release();
+            if (abort.signal.aborted)
+                this.#aborted.add(req.round);
+            this.#abort.delete(req.round);
+        });
+    }
+    aborted(round) {
+        return this.#aborted.has(round);
+    }
+    /** `"park"` pauses the drives: the round stays open for the next wrap. No reason ends them. */
+    abortAll(reason) {
+        for (const abort of this.#abort.values())
+            abort.abort(reason);
+        this.#abort.clear();
+    }
+    /** Nested `complete` during the sync prefix, before the flight is stored. */
+    #join(req) {
+        return new Promise((resolve, reject) => {
+            queueMicrotask(() => {
+                const release = this.#adoptSignal(req.round, req.signal);
+                const pending = this.#flight.get(req.round);
+                if (pending === undefined) {
+                    release();
+                    reject(new Error("completion drive missing"));
+                    return;
+                }
+                resolve(pending.finally(release));
+            });
+        });
+    }
+    /** The caller's abort reaches the drive. The returned release ends that once the caller's flight settles. */
+    #adoptSignal(round, signal) {
+        const abort = this.#abort.get(round);
+        if (signal === undefined || abort === undefined || abort.signal.aborted)
+            return () => { };
+        if (signal.aborted) {
+            abort.abort(signal.reason);
+            return () => { };
+        }
+        const onAbort = () => abort.abort(signal.reason);
+        signal.addEventListener("abort", onAbort, { once: true });
+        return () => signal.removeEventListener("abort", onAbort);
+    }
+}
+//# sourceMappingURL=completion-flight.js.map

package/dist/server/daemon/session/completion-flight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion-flight.js","sourceRoot":"","sources":["../../../../src/server/daemon/session/completion-flight.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,iBAAiB;IAaC;IAZ7B,4EAA4E;IACnE,OAAO,GAAG,IAAI,OAAO,EAAkD,CAAC;IACjF;;;OAGG;IACM,QAAQ,GAAG,IAAI,OAAO,EAAyB,CAAC;IACzD,oFAAoF;IAC3E,MAAM,GAAG,IAAI,GAAG,EAA0C,CAAC;IACpE,gFAAgF;IACvE,QAAQ,GAAG,IAAI,OAAO,EAAyB,CAAC;IAEzD,YAA6B,KAAwD;QAAxD,UAAK,GAAL,KAAK,CAAmD;IAAG,CAAC;IAEzF,QAAQ,CAAC,GAAoB;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1F,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;YAC1B,OAAO,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,KAA4B;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,+FAA+F;IAC/F,QAAQ,CAAC,MAAgB;QACvB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,GAAoB;QACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,cAAc,CAAC,GAAG,EAAE;gBAClB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC5C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;oBAC9C,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,6GAA6G;IAC7G,YAAY,CAAC,KAA4B,EAAE,MAA+B;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QACzF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/server/daemon/session/hook-deadline.d.ts

@@ -0,0 +1,25 @@
+/** Session or kernel kv, in milliseconds. */
+export declare const PLUGIN_HOOK_TIMEOUT_KV = "plugin.hook-timeout-ms";
+export declare const DEFAULT_PLUGIN_HOOK_TIMEOUT_MS = 60000;
+/** Session kv wins over kernel kv; a value that is not a positive number is ignored. */
+export declare function pluginHookTimeoutMs(...kvs: ReadonlyArray<Readonly<Record<string, string>> | undefined>): number;
+export type Bounded<T> = {
+    readonly kind: "done";
+    readonly value: T;
+} | {
+    readonly kind: "timeout";
+} | {
+    readonly kind: "stopped";
+};
+export type HookBound = {
+    readonly ms: number;
+    /** Ends the wait early: the turn's cancel request. Absent for a hook that must run on cancel. */
+    readonly stopped?: () => boolean;
+};
+/**
+ * Wait for `work`, but not past the deadline and not past a stop request.
+ * The work itself is not cancelled (a plugin promise has no abort): it is
+ * abandoned, and its late result or rejection is dropped.
+ */
+export declare function bounded<T>(work: Promise<T>, bound: HookBound): Promise<Bounded<T>>;
+//# sourceMappingURL=hook-deadline.d.ts.map

package/dist/server/daemon/session/hook-deadline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-deadline.d.ts","sourceRoot":"","sources":["../../../../src/server/daemon/session/hook-deadline.ts"],"names":[],"mappings":"AAOA,6CAA6C;AAC7C,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,8BAA8B,QAAS,CAAC;AAErD,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,GAAG,GAAG,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,MAAM,CAQ/G;AAED,MAAM,MAAM,OAAO,CAAC,CAAC,IACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAE7G,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC;CAClC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAqBlF"}

package/dist/server/daemon/session/hook-deadline.js

@@ -0,0 +1,48 @@
+/**
+ * A plugin boundary hook holds its turn open while it runs, so it gets a
+ * deadline, and a stop request outranks it. Liveness is never left to a
+ * promise the plugin controls.
+ */
+import { when } from "mobx";
+/** Session or kernel kv, in milliseconds. */
+export const PLUGIN_HOOK_TIMEOUT_KV = "plugin.hook-timeout-ms";
+export const DEFAULT_PLUGIN_HOOK_TIMEOUT_MS = 60_000;
+/** Session kv wins over kernel kv; a value that is not a positive number is ignored. */
+export function pluginHookTimeoutMs(...kvs) {
+    for (const kv of kvs) {
+        const raw = kv?.[PLUGIN_HOOK_TIMEOUT_KV]?.trim() ?? "";
+        if (raw === "")
+            continue;
+        const ms = Number(raw);
+        if (Number.isFinite(ms) && ms > 0)
+            return ms;
+    }
+    return DEFAULT_PLUGIN_HOOK_TIMEOUT_MS;
+}
+/**
+ * Wait for `work`, but not past the deadline and not past a stop request.
+ * The work itself is not cancelled (a plugin promise has no abort): it is
+ * abandoned, and its late result or rejection is dropped.
+ */
+export function bounded(work, bound) {
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        let timer;
+        let stop = () => { };
+        const finish = (run) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timer !== undefined)
+                clearTimeout(timer);
+            stop();
+            run();
+        };
+        timer = setTimeout(() => finish(() => resolve({ kind: "timeout" })), bound.ms);
+        if (bound.stopped != null) {
+            stop = when(bound.stopped, () => finish(() => resolve({ kind: "stopped" })));
+        }
+        void work.then((value) => finish(() => resolve({ kind: "done", value })), (error) => finish(() => reject(error)));
+    });
+}
+//# sourceMappingURL=hook-deadline.js.map

package/dist/server/daemon/session/hook-deadline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-deadline.js","sourceRoot":"","sources":["../../../../src/server/daemon/session/hook-deadline.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,6CAA6C;AAC7C,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAC/D,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAErD,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,GAAG,GAAgE;IACrG,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvD,IAAI,GAAG,KAAK,EAAE;YAAE,SAAS;QACzB,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,8BAA8B,CAAC;AACxC,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAI,IAAgB,EAAE,KAAgB;IAC3D,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACjD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAAgD,CAAC;QACrD,IAAI,IAAI,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,CAAC,GAAe,EAAQ,EAAE;YACvC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,EAAE,CAAC;YACP,GAAG,EAAE,CAAC;QACR,CAAC,CAAC;QACF,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;YAC1B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,IAAI,CAAC,IAAI,CACZ,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,EACzD,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAChD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/daemon/session/instructions.d.ts

@@ -0,0 +1,3 @@
+/** Base constitution plus a labeled block per discovered file. */
+export declare function withInstructions(base: string, cwd: string): string;
+//# sourceMappingURL=instructions.d.ts.map

package/dist/server/daemon/session/instructions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instructions.d.ts","sourceRoot":"","sources":["../../../../src/server/daemon/session/instructions.ts"],"names":[],"mappings":"AAMA,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAKlE"}

package/dist/server/daemon/session/instructions.js

@@ -0,0 +1,14 @@
+/**
+ * Labeled blocks appended to the standing constitution.
+ * File order is `discoverInstructions`.
+ */
+import { discoverInstructions } from "@inhuman.tools/project-instructions";
+/** Base constitution plus a labeled block per discovered file. */
+export function withInstructions(base, cwd) {
+    const sources = discoverInstructions(cwd);
+    if (sources.length === 0)
+        return base;
+    const blocks = sources.map((source) => `Instructions from ${source.path}:\n${source.text}`);
+    return `${base}\n\n${blocks.join("\n\n")}`;
+}
+//# sourceMappingURL=instructions.js.map

package/dist/server/daemon/session/instructions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instructions.js","sourceRoot":"","sources":["../../../../src/server/daemon/session/instructions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,kEAAkE;AAClE,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,GAAW;IACxD,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5F,OAAO,GAAG,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;AAC7C,CAAC"}

package/dist/server/daemon/session/plugin-abi.d.ts

@@ -0,0 +1,10 @@
+import { type PluginPackage, type BehaviorKernel } from "../../../extensions/index.js";
+import type { CatalogEntry } from "../../../tool-catalog/index.js";
+import { type PluginProblems } from "./plugin-bots.js";
+/** One loaded ABI and the catalog rows it contributes. */
+export type PluginAbi = {
+    readonly plugin: string;
+    readonly entries: readonly CatalogEntry[];
+};
+export declare function pluginAbiCatalog(packages: readonly PluginPackage[], kernel: BehaviorKernel, problems: PluginProblems): Promise<PluginAbi[]>;
+//# sourceMappingURL=plugin-abi.d.ts.map

package/dist/server/daemon/session/plugin-abi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-abi.d.ts","sourceRoot":"","sources":["../../../../src/server/daemon/session/plugin-abi.ts"],"names":[],"mappings":"AAeA,OAAO,EASL,KAAK,aAAa,EAElB,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAGnD,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAMtE,0DAA0D;AAC1D,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;CAC3C,CAAC;AAEF,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,SAAS,aAAa,EAAE,EAClC,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,EAAE,CAAC,CAOtB"}

package/dist/server/daemon/session/plugin-abi.js

@@ -0,0 +1,172 @@
+/**
+ * Always-on model tools. A plugin's `abi` program is behavior, loaded when
+ * the plugin is enabled. It does not wait for a bot pin, and it is not a
+ * state module. Handlers call that plugin's session methods.
+ *
+ * File ports are inner tool calls on the invoking job, so each meets the
+ * session's license: the ABI tool's own license judged only its arguments,
+ * and an exam lambda the model wrote must not run a shell past the floor.
+ */
+import { AsyncLocalStorage } from "node:async_hooks";
+import { randomUUID } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { documentRoot, SessionRoot, ToolCallJob } from "@inhuman.tools/harness-model";
+import { callDeclaredTool, Dict, jsonToVal, loadProgram, Proc, resolvePackageSurface, toJS, toolResultOf, } from "../../../extensions/index.js";
+import { ToolCallHandler } from "../../../tool-runtime/index.js";
+import { reportProblem } from "./plugin-bots.js";
+/** Tool ctx for exam ports. Entered around each execute so concurrent calls do not share one slot. */
+const examToolCtx = new AsyncLocalStorage();
+export async function pluginAbiCatalog(packages, kernel, problems) {
+    const out = [];
+    for (const plugin of packages) {
+        const loaded = await loadAbi(plugin, kernel, problems);
+        if (loaded != null)
+            out.push(loaded);
+    }
+    return out;
+}
+async function loadAbi(plugin, kernel, problems) {
+    let surface;
+    try {
+        surface = resolvePackageSurface(plugin.root);
+    }
+    catch (error) {
+        reportProblem(problems, plugin.name, messageOf(error));
+        return null;
+    }
+    if (surface.abi == null)
+        return null;
+    const abi = surface.abi;
+    let registry;
+    try {
+        registry = await loadProgram({
+            agentId: `${plugin.name}:abi`,
+            source: abi.source,
+            filename: abi.path,
+            revision: `${plugin.name}@abi`,
+            root: plugin.root,
+            read: (path) => readFileSync(path, "utf8"),
+            kind: "behavior",
+            environment: examEnvironment(),
+        });
+    }
+    catch (error) {
+        reportProblem(problems, plugin.name, messageOf(error));
+        return null;
+    }
+    const entries = [];
+    for (const decl of registry.tools.values()) {
+        if (decl.expose === "procedure")
+            continue;
+        if (decl.description.trim() === "" || decl.input == null) {
+            reportProblem(problems, plugin.name, `tool ${decl.name} requires a description and input`);
+            continue;
+        }
+        entries.push({
+            wireName: decl.name,
+            description: decl.description,
+            parameters: { ...decl.input.json },
+            class: decl.toolClass === "" ? "effect" : decl.toolClass,
+            source: { kind: "pack", pluginName: plugin.name },
+            triggersReactLoop: decl.triggersReactLoop,
+            isSideChannel: decl.isSideChannel,
+            representation: decl.representation,
+            question: decl.question,
+            effect: decl.effect,
+            caption: decl.caption,
+            execute: async (raw, ctx) => {
+                const sessionId = typeof ctx.sessionId === "string" ? ctx.sessionId : "";
+                const value = await examToolCtx.run(examContext(ctx, sessionId), () => callDeclaredTool(registry, decl.name, jsonToVal(raw ?? {}), (_receiver, method, kw) => kernel.callState({
+                    plugin: plugin.name,
+                    scope: "session",
+                    agentId: sessionId,
+                    projectId: "",
+                    method,
+                    args: Object.fromEntries([...kw].map(([key, item]) => [key, toJS(item)])),
+                    hostAuthority: true,
+                })));
+                return toolResultOf(value);
+            },
+        });
+    }
+    return { plugin: plugin.name, entries };
+}
+function messageOf(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+const FILE_PORTS = ["read_file", "list_dir", "grep", "glob", "fff_search", "shell"];
+const FILE_FIELD = {
+    read_file: "path",
+    list_dir: "path",
+    grep: "pattern",
+    glob: "pattern",
+    fff_search: "query",
+    shell: "command",
+};
+function examEnvironment() {
+    const environment = new Map();
+    for (const name of FILE_PORTS)
+        environment.set(name, filePort(name));
+    environment.set("tasks/write-completion-verdict", new Proc("tasks/write-completion-verdict", (values) => {
+        const comments = values[1];
+        return [values[0] === true, typeof comments === "string" ? comments : ""];
+    }));
+    return environment;
+}
+function filePort(name) {
+    const call = (values) => callCatalog(name, fileArgs(name, values));
+    return new Proc(name, call);
+}
+function examContext(ctx, sessionId) {
+    return {
+        root: typeof ctx.root === "string" ? ctx.root : "",
+        catalog: ctx.catalog,
+        ...(ctx.signal !== undefined ? { signal: ctx.signal } : {}),
+        sessionId,
+        invocation: ctx.invocation,
+    };
+}
+function fileArgs(name, values) {
+    const positionals = [];
+    const options = {};
+    for (let index = 0; index < values.length; index += 1) {
+        const value = values[index];
+        if (value instanceof Dict) {
+            for (const [key, entry] of Object.entries(value.entries))
+                options[key] = toJS(entry);
+            continue;
+        }
+        if (typeof value === "string" && value.startsWith(":") && value.length > 1 && positionals.length > 0) {
+            if (index + 1 >= values.length)
+                throw new Error(`${name}: dangling keyword ${value}`);
+            options[value.slice(1)] = toJS(values[index + 1]);
+            index += 1;
+            continue;
+        }
+        positionals.push(value);
+    }
+    const head = positionals[0];
+    if (typeof head !== "string")
+        throw new Error(`${name}: ${FILE_FIELD[name]} is required`);
+    if (positionals.length > 1)
+        throw new Error(`${name}: unexpected argument`);
+    return { [FILE_FIELD[name]]: head, ...options };
+}
+async function callCatalog(name, args) {
+    const slot = examToolCtx.getStore();
+    if (slot == null)
+        throw new Error(`${name}: kernel tool catalog is missing`);
+    const parent = slot.invocation;
+    const session = parent instanceof ToolCallJob ? documentRoot(parent) : null;
+    if (!(parent instanceof ToolCallJob) || !(session instanceof SessionRoot)) {
+        throw new TypeError(`${name}: runs only inside a session tool call`);
+    }
+    const call = { id: randomUUID(), type: "function", function: { name, arguments: JSON.stringify(args) } };
+    const inner = new ToolCallHandler({ catalog: slot.catalog }).admit(call, slot.catalog, { session, parent });
+    // Settles on the inner receipt; a failed receipt rejects with its text.
+    const value = await inner.then(undefined, (error) => {
+        throw new Error(String(error));
+    });
+    return typeof value === "string" ? value : JSON.stringify(value ?? "");
+}
+//# sourceMappingURL=plugin-abi.js.map

package/dist/server/daemon/session/plugin-abi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-abi.js","sourceRoot":"","sources":["../../../../src/server/daemon/session/plugin-abi.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAEtF,OAAO,EACL,gBAAgB,EAChB,IAAI,EACJ,SAAS,EACT,WAAW,EACX,IAAI,EACJ,qBAAqB,EACrB,IAAI,EACJ,YAAY,GAIb,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAuB,MAAM,kBAAkB,CAAC;AAGtE,sGAAsG;AACtG,MAAM,WAAW,GAAG,IAAI,iBAAiB,EAAe,CAAC;AAQzD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAkC,EAClC,MAAsB,EACtB,QAAwB;IAExB,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,MAAM,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,MAAqB,EACrB,MAAsB,EACtB,QAAwB;IAExB,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,WAAW,CAAC;YAC3B,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,MAAM;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,IAAI;YAClB,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,MAAM;YAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;YAC1C,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,eAAe,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW;YAAE,SAAS;QAC1C,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;YACzD,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,IAAI,mCAAmC,CAAC,CAAC;YAC3F,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YAClC,KAAK,EAAE,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS;YACxD,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE;YACjD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC1B,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,CACpE,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CACpF,MAAM,CAAC,SAAS,CAAC;oBACf,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,SAAS;oBAClB,SAAS,EAAE,EAAE;oBACb,MAAM;oBACN,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACzE,aAAa,EAAE,IAAI;iBACpB,CAAC,CACH,CACF,CAAC;gBACF,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAU,CAAC;AAE7F,MAAM,UAAU,GAAgD;IAC9D,SAAS,EAAE,MAAM;IACjB,QAAQ,EAAE,MAAM;IAChB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,UAAU,EAAE,OAAO;IACnB,KAAK,EAAE,SAAS;CACjB,CAAC;AAEF,SAAS,eAAe;IACtB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAgB,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,UAAU;QAAE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,WAAW,CAAC,GAAG,CACb,gCAAgC,EAChC,IAAI,IAAI,CAAC,gCAAgC,EAAE,CAAC,MAAM,EAAE,EAAE;QACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CACH,CAAC;IACF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAiC;IACjD,MAAM,IAAI,GAAG,CAAC,MAAsB,EAAmB,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACpG,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,IAA+B,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAClB,GAAyG,EACzG,SAAiB;IAEjB,OAAO;QACL,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAClD,OAAO,EAAE,GAAG,CAAC,OAAiC;QAC9C,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,SAAS;QACT,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAiC,EAAE,MAAsB;IACzE,MAAM,WAAW,GAAU,EAAE,CAAC;IAC9B,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrG,IAAI,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sBAAsB,KAAK,EAAE,CAAC,CAAC;YACtF,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YAClD,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;IAC5E,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAA6B;IACpE,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;IACpC,IAAI,IAAI,IAAI,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,YAAY,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,CAAC,CAAC,MAAM,YAAY,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,YAAY,WAAW,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,UAAmB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAClH,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5G,wEAAwE;IACxE,MAAM,KAAK,GAAY,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,KAAc,EAAE,EAAE;QACpE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/dist/server/daemon/session/plugin-bots.d.ts

@@ -0,0 +1,29 @@
+import { type PluginPackage } from "../../../extensions/index.js";
+import { type CatalogRecipe } from "../../../tool-catalog/index.js";
+/** A bot recipe and the plugin that declares it. */
+export type PluginBot = {
+    readonly plugin: string;
+    readonly recipe: CatalogRecipe;
+};
+/** Problems per plugin name. */
+export type PluginProblems = Map<string, string[]>;
+export declare function reportProblem(problems: PluginProblems, plugin: string, text: string): void;
+export declare function pluginBotRecipes(packages: readonly PluginPackage[], problems: PluginProblems): PluginBot[];
+/**
+ * The program revision each enabled plugin bot currently has, keyed by bot
+ * name. `isCallPaused` holds a call while its bot is absent here or the
+ * revision differs, so a disabled plugin — which contributes no package —
+ * pauses its calls, and re-enabling it unchanged resumes them.
+ */
+export declare function botRevisions(packages: readonly PluginPackage[]): Promise<ReadonlyMap<string, string>>;
+/**
+ * The pin a new worker of this recipe starts with, and the revision of the bot
+ * program it was pinned from. The revision is what an accepted call records, so
+ * the call pauses when the plugin is disabled or the program changes.
+ * Both are empty when the recipe has no behavior.
+ */
+export declare function recipePin(behavior: Readonly<Record<string, unknown>> | null, packages: readonly PluginPackage[]): Promise<{
+    readonly pin: string;
+    readonly revision: string;
+}>;
+//# sourceMappingURL=plugin-bots.d.ts.map

package/dist/server/daemon/session/plugin-bots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-bots.d.ts","sourceRoot":"","sources":["../../../../src/server/daemon/session/plugin-bots.ts"],"names":[],"mappings":"AAOA,OAAO,EAKL,KAAK,aAAa,EAEnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAQnE,oDAAoD;AACpD,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC,CAAC;AAEF,gCAAgC;AAChC,MAAM,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAEnD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAI1F;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,EAAE,QAAQ,EAAE,cAAc,GAAG,SAAS,EAAE,CAwC1G;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAc3G;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,EAClD,QAAQ,EAAE,SAAS,aAAa,EAAE,GACjC,OAAO,CAAC;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAoB9D"}

package/dist/server/daemon/session/plugin-bots.js

@@ -0,0 +1,117 @@
+/**
+ * Plugin `.prompt` bots as named agents. Every bot not attached to the
+ * foreground becomes a recipe; its behavior is a `{plugin, bot}` reference that a new
+ * worker pins from the installed sources when it is created.
+ */
+import { z } from "zod";
+import { botChoices, ENVIRONMENT_UNSUPPORTED, pinChoice, pinJson, resolvePackageSurface, } from "../../../extensions/index.js";
+import { catalogRecipe } from "../../../tool-catalog/index.js";
+const botReferenceSchema = z.object({ plugin: z.string().min(1), bot: z.string().min(1) }).strict();
+function messageOf(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+export function reportProblem(problems, plugin, text) {
+    const list = problems.get(plugin);
+    if (list == null)
+        problems.set(plugin, [text]);
+    else
+        list.push(text);
+}
+export function pluginBotRecipes(packages, problems) {
+    const out = [];
+    const owners = new Map();
+    for (const plugin of packages) {
+        let bots;
+        try {
+            bots = resolvePackageSurface(plugin.root).bots;
+        }
+        catch (error) {
+            reportProblem(problems, plugin.name, messageOf(error));
+            continue;
+        }
+        for (const bot of bots) {
+            if (bot.foreground)
+                continue;
+            if (bot.name.trim() === "" || bot.name.includes("__")) {
+                reportProblem(problems, plugin.name, `bot name "${bot.name}" is not a recipe name`);
+                continue;
+            }
+            if (bot.behavior != null && bot.behavior.environmentPath !== "") {
+                reportProblem(problems, plugin.name, `bot ${bot.name}: ${ENVIRONMENT_UNSUPPORTED}`);
+                continue;
+            }
+            const owner = owners.get(bot.name);
+            if (owner != null) {
+                reportProblem(problems, plugin.name, `bot ${bot.name} is already declared by ${owner}`);
+                continue;
+            }
+            owners.set(bot.name, plugin.name);
+            const recipe = catalogRecipe({
+                name: bot.name,
+                category: "plugin",
+                recipeScope: bot.recipeScope,
+                description: bot.description,
+                instructions: bot.instructions,
+                tools: bot.tools ?? [],
+            });
+            recipe.spec.behavior = bot.behavior == null ? null : { plugin: plugin.name, bot: bot.name };
+            out.push({ plugin: plugin.name, recipe });
+        }
+    }
+    return out;
+}
+/**
+ * The program revision each enabled plugin bot currently has, keyed by bot
+ * name. `isCallPaused` holds a call while its bot is absent here or the
+ * revision differs, so a disabled plugin — which contributes no package —
+ * pauses its calls, and re-enabling it unchanged resumes them.
+ */
+export async function botRevisions(packages) {
+    const problems = new Map();
+    const revisions = new Map();
+    for (const row of pluginBotRecipes(packages, problems)) {
+        const behavior = row.recipe.spec.behavior;
+        if (behavior == null)
+            continue;
+        try {
+            const pinned = await recipePin(behavior, packages);
+            if (pinned.revision !== "")
+                revisions.set(row.recipe.spec.name, pinned.revision);
+        }
+        catch {
+            /* a bot that cannot pin has no revision, so its calls stay paused */
+        }
+    }
+    return revisions;
+}
+/**
+ * The pin a new worker of this recipe starts with, and the revision of the bot
+ * program it was pinned from. The revision is what an accepted call records, so
+ * the call pauses when the plugin is disabled or the program changes.
+ * Both are empty when the recipe has no behavior.
+ */
+export async function recipePin(behavior, packages) {
+    if (behavior == null)
+        return { pin: "", revision: "" };
+    let reference;
+    try {
+        reference = botReferenceSchema.parse(behavior);
+    }
+    catch {
+        throw new Error("bot behavior must come from an installed plugin's .prompt bot");
+    }
+    const plugin = packages.find((row) => row.name === reference.plugin);
+    if (plugin == null)
+        throw new Error(`plugin ${reference.plugin} is not installed and enabled`);
+    const errors = [];
+    const choice = botChoices([plugin], (bot) => bot.name === reference.bot, errors).at(0);
+    if (choice == null) {
+        throw new Error(errors.at(0) ?? `${reference.plugin} has no bot ${reference.bot} with a behavior`);
+    }
+    const pinned = await pinChoice(choice);
+    return {
+        pin: pinJson({ version: 1, behaviors: [pinned] }),
+        revision: pinned.revision,
+    };
+}
+//# sourceMappingURL=plugin-bots.js.map

package/dist/server/daemon/session/plugin-bots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-bots.js","sourceRoot":"","sources":["../../../../src/server/daemon/session/plugin-bots.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,UAAU,EACV,uBAAuB,EACvB,SAAS,EACT,OAAO,EAEP,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAsB,MAAM,gBAAgB,CAAC;AAEnE,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEpG,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAWD,MAAM,UAAU,aAAa,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAY;IAClF,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,IAAI,IAAI,IAAI;QAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;;QAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAkC,EAAE,QAAwB;IAC3F,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,UAAU;gBAAE,SAAS;YAC7B,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtD,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,CAAC,IAAI,wBAAwB,CAAC,CAAC;gBACpF,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;gBAChE,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC,CAAC;gBACpF,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,2BAA2B,KAAK,EAAE,CAAC,CAAC;gBACxF,SAAS;YACX,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,aAAa,CAAC;gBAC3B,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;aACvB,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5F,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAkC;IACnE,MAAM,QAAQ,GAAmB,IAAI,GAAG,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC1C,IAAI,QAAQ,IAAI,IAAI;YAAE,SAAS;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACnD,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE;gBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAkD,EAClD,QAAkC;IAElC,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACvD,IAAI,SAA6C,CAAC;IAClD,IAAI,CAAC;QACH,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC;IACrE,IAAI,MAAM,IAAI,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,CAAC,MAAM,+BAA+B,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,SAAS,CAAC,MAAM,eAAe,SAAS,CAAC,GAAG,kBAAkB,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC"}

package/dist/server/daemon/session/project-authorization.d.ts

@@ -0,0 +1,5 @@
+/** How often a running session looks at the project file again. */
+export declare const PROJECT_LAYER_POLL_MS = 2000;
+/** Raw text of the file, or "" when there is none. A read error other than "missing" is a tightening. */
+export declare function readProjectAuthorization(projectPath: string): string;
+//# sourceMappingURL=project-authorization.d.ts.map

package/dist/server/daemon/session/project-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-authorization.d.ts","sourceRoot":"","sources":["../../../../src/server/daemon/session/project-authorization.ts"],"names":[],"mappings":"AAUA,mEAAmE;AACnE,eAAO,MAAM,qBAAqB,OAAQ,CAAC;AAE3C,yGAAyG;AACzG,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAUpE"}

package/dist/server/daemon/session/project-authorization.js

@@ -0,0 +1,26 @@
+/**
+ * The project layer of the authorization table: `<repo>/.inhuman/authorization.json`. Anyone with
+ * repo access can write it, so it can only tighten (the resolution table enforces that), and it is
+ * loaded without a trust check. A file that does not parse is a tightening to "a person decides"
+ * (the model layer reads the raw text and marks it invalid), never "ignored". The agent cannot write
+ * the file: `.inhuman/authorization.json` is on the dist `write_block` list.
+ */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+/** How often a running session looks at the project file again. */
+export const PROJECT_LAYER_POLL_MS = 2_000;
+/** Raw text of the file, or "" when there is none. A read error other than "missing" is a tightening. */
+export function readProjectAuthorization(projectPath) {
+    try {
+        const text = readFileSync(join(projectPath, ".inhuman", "authorization.json"), "utf8");
+        return text.trim() === "" ? "" : text;
+    }
+    catch (error) {
+        const code = typeof error === "object" && error !== null && "code" in error ? error.code : undefined;
+        if (code === "ENOENT" || code === "ENOTDIR")
+            return "";
+        // Unreadable (permissions, a directory): same as unparseable.
+        return "\0unreadable";
+    }
+}
+//# sourceMappingURL=project-authorization.js.map

package/dist/server/daemon/session/project-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-authorization.js","sourceRoot":"","sources":["../../../../src/server/daemon/session/project-authorization.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAE3C,yGAAyG;AACzG,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACrG,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACvD,8DAA8D;QAC9D,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/server/daemon/session/prompt-message-of.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The authored message of an isolated completion. A body within the inline limit stays on the message. A larger
+ * one (the summarizer's whole transcript prefix runs 0.8 to 1 MB) goes to the kernel's blob bucket, and the
+ * message keeps its head in `content` and the reference in `contentBlobJson`: the document never holds the text.
+ * The projection reads the whole body back through the blob reader when the round is sent.
+ */
+import { PromptMessage, type PromptMessageRole } from "@inhuman.tools/harness-model";
+/** With no bucket seated, or a bucket that refuses the put, the message keeps its text inline as it always did. */
+export declare function promptMessageOf(role: PromptMessageRole, text: string): PromptMessage;
+//# sourceMappingURL=prompt-message-of.d.ts.map

package/dist/server/daemon/session/prompt-message-of.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-message-of.d.ts","sourceRoot":"","sources":["../../../../src/server/daemon/session/prompt-message-of.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,KAAK,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAGrF,mHAAmH;AACnH,wBAAgB,eAAe,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CAKpF"}

package/dist/server/daemon/session/prompt-message-of.js

@@ -0,0 +1,16 @@
+/**
+ * The authored message of an isolated completion. A body within the inline limit stays on the message. A larger
+ * one (the summarizer's whole transcript prefix runs 0.8 to 1 MB) goes to the kernel's blob bucket, and the
+ * message keeps its head in `content` and the reference in `contentBlobJson`: the document never holds the text.
+ * The projection reads the whole body back through the blob reader when the round is sent.
+ */
+import { PromptMessage } from "@inhuman.tools/harness-model";
+import { externalizeText } from "@inhuman.tools/turn/tool-runtime";
+/** With no bucket seated, or a bucket that refuses the put, the message keeps its text inline as it always did. */
+export function promptMessageOf(role, text) {
+    const stamp = externalizeText(text);
+    return stamp.kind === "inline"
+        ? new PromptMessage({ role, content: stamp.text })
+        : new PromptMessage({ role, content: stamp.head, contentBlobJson: stamp.blobJson });
+}
+//# sourceMappingURL=prompt-message-of.js.map