@inhuman.tools/harness 0.1.0 → 0.3.0

package/dist/tool-catalog/types.d.ts

@@ -1,71 +0,0 @@
-/**
- * Catalog row identity. wireName is a model-edge projection — never durable
- * routing. Connection tools route by connectionKey + serverToolName.
- */
-export type CatalogSource = {
-    readonly kind: "pack";
-    readonly pluginName: string;
-} | {
-    readonly kind: "connection";
-    /** Kernel `connections` map key (slug). Lawful cross-doc pointer to ConnectionSpec. */
-    readonly connectionKey: string;
-    readonly serverToolName: string;
-};
-export type CatalogExecute = (raw: unknown, ctx: {
-    root?: string;
-    signal?: AbortSignal;
-    sessionId?: string;
-    background?: unknown;
-    catalog?: unknown;
-    onPriorContent?: (text: string | null) => void;
-    invocation?: unknown;
-    shellTailBytes?: number;
-    onTail?: (frame: {
-        readonly text: string;
-        readonly totalBytes: number;
-    }) => void;
-}) => Promise<unknown>;
-export type PackToolMeta = {
-    readonly kind: "function";
-} | {
-    readonly kind: "bot-call";
-    readonly pluginName: string;
-    readonly target: string;
-    readonly background: boolean;
-    readonly lifetime: "turn" | "call";
-    readonly show: "result" | "omit" | "turn";
-    readonly deadlineMs?: number;
-    readonly supportsNotify: boolean;
-};
-export type CatalogEntry = {
-    readonly wireName: string;
-    readonly description: string;
-    readonly parameters: Record<string, unknown>;
-    /** Catalog class: `read` | `write` | `effect` | `meta`. Missing / unknown → `effect`. */
-    readonly class: string;
-    readonly source: CatalogSource;
-    /**
-     * Pack / host plugins carry execute (InhumanTool.execute).
-     * Connection tools are projection-only — BODY is MCP PEW on the connection.
-     */
-    readonly execute?: CatalogExecute;
-    readonly packMeta?: PackToolMeta;
-    readonly triggersReactLoop?: boolean;
-    readonly tapeHidden?: boolean;
-    /** Mustache the TUI paints while the call is open, after it seals, and as a caption. */
-    readonly question?: string;
-    readonly effect?: string;
-    readonly caption?: string;
-    /**
-     * Exam admit bag. Structural so this package does not import plugin-sdk.
-     * Plugin ExamAdmit is assignable.
-     */
-    readonly exam?: {
-        readonly program: (state: any, input: any) => string | {
-            readonly error: string;
-        };
-        readonly admit: (state: any, input: any) => any;
-        readonly settle?: (state: any, input: any, result: any) => any;
-    };
-};
-//# sourceMappingURL=types.d.ts.map

package/dist/tool-catalog/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tool-catalog/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACtD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,uFAAuF;IACvF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,CAAC;AAEN,MAAM,MAAM,cAAc,GAAG,CAC3B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAClF,KACE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC,CAAC;AAEN,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,yFAAyF;IACzF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE;QACd,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG;YAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAClF,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC;QAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC;KAChE,CAAC;CACH,CAAC"}

package/dist/tool-catalog/types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=types.js.map

package/dist/tool-catalog/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tool-catalog/types.ts"],"names":[],"mappings":""}

package/dist/tool-runtime/approval/approved.d.ts

@@ -1,21 +0,0 @@
-/**
- * Receipts on the leaf. Deny-side stamps `outcomeJson` then the orchestrator
- * writes `orchestrationResult = false` and `completed`. Deny `text` names the
- * actor (policy / classifier / user). Human `approvalComment` is a
- * `TurnApprovalNoteChunk`, not this receipt. Cancel writes `cancelled`, not `approved`.
- *
- * Payload construction lives in harness-model. This module is the squeeze-aware
- * stamp used by the approval pipeline.
- */
-import { ApprovableJob } from "@inhuman.tools/harness-model";
-export declare function stampToolOutcome(leaf: ApprovableJob, text: "denied" | "cancelled", reason?: unknown): void;
-/**
- * Deny-side receipt. Machine deny (eval) keeps `code: "policy_denied"`.
- */
-export declare function stampDenyReceipt(leaf: ApprovableJob, _unattendedText?: string): void;
-/**
- * Unstarted (or allow-side but not yet BODY) cancel. Does not write
- * `approved` or `orchestrationResult`.
- */
-export declare const cancelUnstartedTool: (leaf: ApprovableJob, reason?: unknown) => void;
-//# sourceMappingURL=approved.d.ts.map

package/dist/tool-runtime/approval/approved.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"approved.d.ts","sourceRoot":"","sources":["../../../src/tool-runtime/approval/approved.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAEL,aAAa,EAKd,MAAM,8BAA8B,CAAC;AAUtC,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,GAAG,WAAW,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,CAE1G;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,aAAa,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAEpF;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,SAAiB,aAAa,WAAW,OAAO,KAAG,IAIjF,CAAC"}

package/dist/tool-runtime/approval/approved.js

@@ -1,40 +0,0 @@
-/**
- * Receipts on the leaf. Deny-side stamps `outcomeJson` then the orchestrator
- * writes `orchestrationResult = false` and `completed`. Deny `text` names the
- * actor (policy / classifier / user). Human `approvalComment` is a
- * `TurnApprovalNoteChunk`, not this receipt. Cancel writes `cancelled`, not `approved`.
- *
- * Payload construction lives in harness-model. This module is the squeeze-aware
- * stamp used by the approval pipeline.
- */
-import { CallJob, applyDenyReceipt, applyToolOutcomeReceipt, cancelUnstarted, ToolCallJob, } from "@inhuman.tools/harness-model";
-import { action } from "mobx";
-import { stampSqueeze } from "../../context/index.js";
-function squeezeReceipt(leaf) {
-    if (leaf instanceof CallJob)
-        return;
-    if (leaf instanceof ToolCallJob)
-        stampSqueeze(leaf);
-}
-export function stampToolOutcome(leaf, text, reason) {
-    if (applyToolOutcomeReceipt(leaf, text, reason))
-        squeezeReceipt(leaf);
-}
-/**
- * Deny-side receipt. Machine deny (eval) keeps `code: "policy_denied"`.
- */
-export function stampDenyReceipt(leaf, _unattendedText) {
-    if (applyDenyReceipt(leaf))
-        squeezeReceipt(leaf);
-}
-/**
- * Unstarted (or allow-side but not yet BODY) cancel. Does not write
- * `approved` or `orchestrationResult`.
- */
-export const cancelUnstartedTool = action((leaf, reason) => {
-    if (leaf.completed || leaf.cancelled)
-        return;
-    cancelUnstarted(leaf, reason);
-    squeezeReceipt(leaf);
-});
-//# sourceMappingURL=approved.js.map

package/dist/tool-runtime/approval/approved.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"approved.js","sourceRoot":"","sources":["../../../src/tool-runtime/approval/approved.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,OAAO,EAEP,gBAAgB,EAChB,uBAAuB,EACvB,eAAe,EACf,WAAW,GACZ,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,SAAS,cAAc,CAAC,IAAmB;IACzC,IAAI,IAAI,YAAY,OAAO;QAAE,OAAO;IACpC,IAAI,IAAI,YAAY,WAAW;QAAE,YAAY,CAAC,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAmB,EAAE,IAA4B,EAAE,MAAgB;IAClG,IAAI,uBAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAmB,EAAE,eAAwB;IAC5E,IAAI,gBAAgB,CAAC,IAAI,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,CAAC,IAAmB,EAAE,MAAgB,EAAQ,EAAE;IACxF,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO;IAC7C,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9B,cAAc,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/tool-runtime/approval/dist.d.ts

@@ -1,6 +0,0 @@
-export declare function distPolicySource(): string;
-/**
- * Body of the one policy program. Never throws. Missing operator → dist.
- */
-export declare function loadPolicySource(kernelFsRoot: string): string | undefined;
-//# sourceMappingURL=dist.d.ts.map

package/dist/tool-runtime/approval/dist.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dist.d.ts","sourceRoot":"","sources":["../../../src/tool-runtime/approval/dist.ts"],"names":[],"mappings":"AASA,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAYD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEzE"}

package/dist/tool-runtime/approval/dist.js

@@ -1,28 +0,0 @@
-/**
- * Dist `policy.json` is the never-throwing program in policy-processor.
- * `{kernelFsRoot}/policy.json` wins when present and non-empty.
- */
-import { readFileSync } from "node:fs";
-import { join } from "node:path";
-import { reasonableDefaultsSource } from "@inhuman.tools/policy/floor";
-export function distPolicySource() {
-    return reasonableDefaultsSource;
-}
-function readOperatorPolicySource(kernelFsRoot) {
-    try {
-        const user = readFileSync(join(kernelFsRoot, "policy.json"), "utf8");
-        if (user.trim() !== "")
-            return user;
-    }
-    catch {
-        /* missing operator policy is dist */
-    }
-    return undefined;
-}
-/**
- * Body of the one policy program. Never throws. Missing operator → dist.
- */
-export function loadPolicySource(kernelFsRoot) {
-    return readOperatorPolicySource(kernelFsRoot) ?? distPolicySource();
-}
-//# sourceMappingURL=dist.js.map

package/dist/tool-runtime/approval/dist.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dist.js","sourceRoot":"","sources":["../../../src/tool-runtime/approval/dist.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAED,SAAS,wBAAwB,CAAC,YAAoB;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,OAAO,wBAAwB,CAAC,YAAY,CAAC,IAAI,gBAAgB,EAAE,CAAC;AACtE,CAAC"}

package/dist/tool-runtime/approval/inbound.d.ts

@@ -1,7 +0,0 @@
-import { ApprovableJob, SessionTurn, type PermissionMode, type SessionPlexus } from "@inhuman.tools/harness-model";
-/** Sequence guard: wait, then true. Never false — that would deny BODY. */
-export declare function inboundTurnGuard(turn: SessionTurn): boolean | Promise<true>;
-export declare function publishPolicyError(session: SessionPlexus, text: string | null): void;
-/** Floor produce is policy-processor `license`. `_policy` is unused — writing it would fork the receipt. */
-export declare function stampLicenseDeny(leaf: ApprovableJob, _policy: PermissionMode): void;
-//# sourceMappingURL=inbound.d.ts.map

package/dist/tool-runtime/approval/inbound.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"inbound.d.ts","sourceRoot":"","sources":["../../../src/tool-runtime/approval/inbound.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAgBnH,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAM3E;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAQpF;AAED,4GAA4G;AAC5G,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAEnF"}

package/dist/tool-runtime/approval/inbound.js

@@ -1,47 +0,0 @@
-/**
- * LICENSE WHEN is the Approvable guard. Sequences typically return true;
- * inbound Turn waits predecessors without returning false (false is deny).
- */
-import { FieldAwareness } from "@here.build/plexus";
-import { SessionTurn } from "@inhuman.tools/harness-model";
-import { when } from "mobx";
-import { stampDenyReceipt } from "./approved.js";
-function inboundPredecessorClosed(turn) {
-    if (!turn.inbound)
-        return true;
-    let prior = turn.turnTail;
-    while (prior instanceof SessionTurn) {
-        if (!prior.reducerExited)
-            return false;
-        if (!prior.inbound)
-            break;
-        prior = prior.turnTail;
-    }
-    return true;
-}
-/** Sequence guard: wait, then true. Never false — that would deny BODY. */
-export function inboundTurnGuard(turn) {
-    if (inboundPredecessorClosed(turn))
-        return true;
-    return (async () => {
-        await when(() => inboundPredecessorClosed(turn) || turn.cancelled || turn.completed);
-        return true;
-    })();
-}
-export function publishPolicyError(session, text) {
-    try {
-        const lane = new FieldAwareness(session.awareness, "policyError");
-        if (text == null || text === "")
-            lane.clear();
-        else
-            lane.set(text);
-    }
-    catch {
-        /* presence must not block the floor vote */
-    }
-}
-/** Floor produce is policy-processor `license`. `_policy` is unused — writing it would fork the receipt. */
-export function stampLicenseDeny(leaf, _policy) {
-    stampDenyReceipt(leaf);
-}
-//# sourceMappingURL=inbound.js.map

package/dist/tool-runtime/approval/inbound.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"inbound.js","sourceRoot":"","sources":["../../../src/tool-runtime/approval/inbound.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAiB,WAAW,EAA2C,MAAM,8BAA8B,CAAC;AACnH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,SAAS,wBAAwB,CAAC,IAAiB;IACjD,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC1B,OAAO,KAAK,YAAY,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM;QAC1B,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,IAAiB;IAChD,IAAI,wBAAwB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;QACrF,OAAO,IAAa,CAAC;IACvB,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAsB,EAAE,IAAmB;IAC5E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAClE,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;;YACzC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;AACH,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,gBAAgB,CAAC,IAAmB,EAAE,OAAuB;IAC3E,gBAAgB,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC"}

package/dist/tool-runtime/approval/unattended.d.ts

@@ -1,8 +0,0 @@
-/**
- * Unattended coded receipts. Residual ask under auto is the judge, not
- * `policy_denied`. Operator throw is awareness + dist, not `policy_error`.
- */
-import { type EvalFailureCode, type EvalPermissionMode } from "@inhuman.tools/harness-model";
-export declare function resolveEvalPermissionMode(policy: string): EvalPermissionMode | null;
-export declare function unattendedFailureText(code: EvalFailureCode, policyId: string, reason?: string): string;
-//# sourceMappingURL=unattended.d.ts.map

package/dist/tool-runtime/approval/unattended.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"unattended.d.ts","sourceRoot":"","sources":["../../../src/tool-runtime/approval/unattended.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAwB,KAAK,eAAe,EAAE,KAAK,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEnH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAEnF;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAatG"}

package/dist/tool-runtime/approval/unattended.js

@@ -1,23 +0,0 @@
-/**
- * Unattended coded receipts. Residual ask under auto is the judge, not
- * `policy_denied`. Operator throw is awareness + dist, not `policy_error`.
- */
-import { isEvalPermissionMode } from "@inhuman.tools/harness-model";
-export function resolveEvalPermissionMode(policy) {
-    return isEvalPermissionMode(policy) ? policy : null;
-}
-export function unattendedFailureText(code, policyId, reason) {
-    switch (code) {
-        case "interaction_required":
-            return `Operation requires human authorization under policy ${policyId}`;
-        case "policy_denied":
-            return `Operation denied under policy ${policyId}`;
-        case "policy_error":
-            return reason != null && reason !== ""
-                ? `Policy evaluation failed under policy ${policyId}: ${reason}`
-                : `Policy evaluation failed under policy ${policyId}`;
-        case "policy_unavailable":
-            return `Policy ${policyId} is not available`;
-    }
-}
-//# sourceMappingURL=unattended.js.map

package/dist/tool-runtime/approval/unattended.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"unattended.js","sourceRoot":"","sources":["../../../src/tool-runtime/approval/unattended.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,oBAAoB,EAAiD,MAAM,8BAA8B,CAAC;AAEnH,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAqB,EAAE,QAAgB,EAAE,MAAe;IAC5F,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,sBAAsB;YACzB,OAAO,uDAAuD,QAAQ,EAAE,CAAC;QAC3E,KAAK,eAAe;YAClB,OAAO,iCAAiC,QAAQ,EAAE,CAAC;QACrD,KAAK,cAAc;YACjB,OAAO,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,EAAE;gBACpC,CAAC,CAAC,yCAAyC,QAAQ,KAAK,MAAM,EAAE;gBAChE,CAAC,CAAC,yCAAyC,QAAQ,EAAE,CAAC;QAC1D,KAAK,oBAAoB;YACvB,OAAO,UAAU,QAAQ,mBAAmB,CAAC;IACjD,CAAC;AACH,CAAC"}

package/dist/tool-runtime/extra-root.d.ts

@@ -1,3 +0,0 @@
-export declare function runWithExtraRoot<T>(allow: boolean, fn: () => T): T;
-export declare function extraRootAllowed(): boolean;
-//# sourceMappingURL=extra-root.d.ts.map

package/dist/tool-runtime/extra-root.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"extra-root.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/extra-root.ts"],"names":[],"mappings":"AASA,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAElE;AAED,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C"}

package/dist/tool-runtime/extra-root.js

@@ -1,14 +0,0 @@
-/**
- * Dispatch-time extra-root flag. Human allow / remainder grant / yolo
- * shell is this spawn, not a file-read grant. Effect bodies read it;
- * they do not set it.
- */
-import { AsyncLocalStorage } from "node:async_hooks";
-const extraRootAls = new AsyncLocalStorage();
-export function runWithExtraRoot(allow, fn) {
-    return extraRootAls.run(allow, fn);
-}
-export function extraRootAllowed() {
-    return extraRootAls.getStore() === true;
-}
-//# sourceMappingURL=extra-root.js.map

package/dist/tool-runtime/extra-root.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"extra-root.js","sourceRoot":"","sources":["../../src/tool-runtime/extra-root.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,YAAY,GAAG,IAAI,iBAAiB,EAAW,CAAC;AAEtD,MAAM,UAAU,gBAAgB,CAAI,KAAc,EAAE,EAAW;IAC7D,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,YAAY,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC;AAC1C,CAAC"}

package/dist/tool-runtime/handler.d.ts

@@ -1,28 +0,0 @@
-import { AgentCallJob, BotCallJob, CallJob, ProgrammaticJob, SessionRoot, SessionTurn, SystemToolJob, ToolCallJob } from "@inhuman.tools/harness-model";
-import type { ToolCall } from "@inhuman.tools/tool-call-normalize";
-import { type KernelToolCatalog } from "@tool-catalog";
-/** Catalog face the handler proxies to. A kernel host satisfies this. */
-export type ToolCallKernel = {
-    readonly catalog: KernelToolCatalog;
-};
-export type AdmitContext = {
-    readonly session?: SessionRoot;
-    readonly originTurn?: SessionTurn;
-    readonly loadAgentCall?: (uuid: string) => CallJob | undefined;
-    /**
-     * Receives the job before admit returns. A reachable child can start, so pass
-     * this only for a call that may start.
-     */
-    readonly parent?: {
-        registerJob(child: AdmittedCall): void;
-    };
-};
-export type AdmittedCall = ToolCallJob | ProgrammaticJob;
-/** Standing bot or owned child from an `agent__ask` / `agent__send` wire. Unknown recipes seal the ceiling. */
-export declare function agentCallFromWire(call: ToolCall, catalog: KernelToolCatalog, ctx?: AdmitContext): BotCallJob | AgentCallJob | SystemToolJob;
-export declare class ToolCallHandler {
-    readonly kernel: ToolCallKernel;
-    constructor(kernel: ToolCallKernel);
-    admit(call: ToolCall, catalog?: KernelToolCatalog, ctx?: AdmitContext): AdmittedCall;
-}
-//# sourceMappingURL=handler.d.ts.map

package/dist/tool-runtime/handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/handler.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,YAAY,EACZ,UAAU,EACV,OAAO,EAoBP,eAAe,EAGf,WAAW,EACX,WAAW,EAGX,aAAa,EACb,WAAW,EAQZ,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAInE,OAAO,EAA8C,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAMnG,yEAAyE;AACzE,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAAG,SAAS,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAA;KAAE,CAAC;CAC9D,CAAC;AAyHF,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,eAAe,CAAC;AAqBzD,+GAA+G;AAC/G,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,iBAAiB,EAC1B,GAAG,GAAE,YAAiB,GACrB,UAAU,GAAG,YAAY,GAAG,aAAa,CA2C3C;AAED,qBAAa,eAAe;IACd,QAAQ,CAAC,MAAM,EAAE,cAAc;gBAAtB,MAAM,EAAE,cAAc;IAE3C,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,GAAE,iBAAuC,EAAE,GAAG,GAAE,YAAiB,GAAG,YAAY;CA6R9G"}