@intx/agent 0.3.0 → 0.4.0

package/dist/agent.js

@@ -42,6 +42,7 @@
 // contract; the caller owns the lifetime of what it puts in env.
 import { createReactorAssembly, } from "@intx/inference";
 import { createDefaultDependencies } from "@intx/inference/providers";
+import { createUnconfiguredCredentialResolver } from "./credential-resolver.js";
 import { getLogger } from "@intx/log";
 import { createInboundMessage } from "@intx/mime";
 import { validateDirectorConfig } from "./director.js";
@@ -489,6 +490,7 @@ export async function createAgent(def, env) {
             source: sourceRegistry.active,
             failOverToNextSource: () => sourceRegistry.failOverToNextSource(),
             resetToPreferredSource: () => sourceRegistry.resetToPreferredSource(),
+            readMaterial: env.readCurrentMaterial ?? createUnconfiguredCredentialResolver(),
             toolRunner: resolvedTools.runner,
             contextStore,
             onEvent: handleEvent,
@@ -507,6 +509,9 @@ export async function createAgent(def, env) {
             ...(env.sizeCapMaxChars !== undefined
                 ? { sizeCapMaxChars: env.sizeCapMaxChars }
                 : {}),
+            ...(env.doomLoopThreshold !== undefined
+                ? { doomLoopThreshold: env.doomLoopThreshold }
+                : {}),
             deps,
             ...(env.compactors !== undefined ? { compactors: env.compactors } : {}),
         });

package/dist/credential-resolver.d.ts

@@ -0,0 +1,16 @@
+import type { CredentialMaterialResolver } from "@intx/types";
+/**
+ * A resolver that fails closed on every call. `createAgent` installs this when
+ * the env supplies no `readCurrentMaterial`, so an agent whose inference never
+ * resolves a credential (a mock adapter emitting no credential sentinel) needs
+ * no resolver, while one that DOES reach a credential surfaces a clear error
+ * rather than a confusing `undefined`.
+ */
+export declare function createUnconfiguredCredentialResolver(): CredentialMaterialResolver;
+/**
+ * A resolver over a fixed `credentialId -> secret` map. For callers that hold
+ * their secrets in memory rather than a live cell -- examples, tests, and any
+ * single-process agent. Fails closed when a source references a credential the
+ * map does not carry, mirroring the cell reader's revoked/absent behavior.
+ */
+export declare function createStaticCredentialResolver(materials: Record<string, string>): CredentialMaterialResolver;

package/dist/credential-resolver.js

@@ -0,0 +1,33 @@
+// Helpers for the inference credential-material resolver seam
+// (`CredentialMaterialResolver` in `@intx/types`). An inference call resolves
+// its source's secret by `credentialId` through this seam instead of reading an
+// inline `apiKey`, so the source config carries no secret. The sidecar backs it
+// with the run's live credential cell; the helpers here cover the two simpler
+// cases.
+/**
+ * A resolver that fails closed on every call. `createAgent` installs this when
+ * the env supplies no `readCurrentMaterial`, so an agent whose inference never
+ * resolves a credential (a mock adapter emitting no credential sentinel) needs
+ * no resolver, while one that DOES reach a credential surfaces a clear error
+ * rather than a confusing `undefined`.
+ */
+export function createUnconfiguredCredentialResolver() {
+    return (credentialId) => {
+        throw new Error(`no credential resolver configured for this agent, but an inference call needs the secret for credential ${credentialId}; supply env.readCurrentMaterial`);
+    };
+}
+/**
+ * A resolver over a fixed `credentialId -> secret` map. For callers that hold
+ * their secrets in memory rather than a live cell -- examples, tests, and any
+ * single-process agent. Fails closed when a source references a credential the
+ * map does not carry, mirroring the cell reader's revoked/absent behavior.
+ */
+export function createStaticCredentialResolver(materials) {
+    return (credentialId) => {
+        const secret = materials[credentialId];
+        if (secret === undefined) {
+            throw new Error(`no credential material for ${credentialId} in the static resolver`);
+        }
+        return { secret };
+    };
+}

package/dist/env.d.ts

@@ -1,4 +1,5 @@
 import type { AuthzCallResult, Dependencies } from "@intx/inference";
+import type { CredentialMaterialResolver } from "@intx/types";
 import type { AuditStore, Compactor, ContextStore, InferenceSource } from "@intx/types/runtime";
 import type { DirectorRegistry } from "./director-types.js";
 export type { Dependencies };
@@ -50,6 +51,12 @@ export interface BaseEnv {
      * `workdir` values pointing at the same on-disk storage directory
      * will silently corrupt each other -- the invariant is the caller's
      * to maintain.
+     *
+     * This is the lock and storage boundary, not the working tree the
+     * filesystem tools operate on. A tool that needs a working directory
+     * (e.g. `@intx/tools-posix`) reads that from its own env-DI key
+     * declared through `defineTool({ requires })`, which the caller may
+     * point at a directory distinct from `workdir`.
      */
     workdir: string;
     /** Audit sink. Required; no read-site fallback. */
@@ -90,6 +97,18 @@ export interface BaseEnv {
      * Optional; do not require this field on the production path.
      */
     deps?: Dependencies;
+    /**
+     * Resolves an inference source's credential secret by `credentialId` from the
+     * run's credential-material cell at send time -- the same cell tool
+     * credentials resolve from, so the source config carries no inline secret.
+     *
+     * Optional at this boundary only to spare callers whose inference never
+     * resolves a credential (a mock adapter that emits no credential sentinel).
+     * `createAgent` fills a fail-closed default that throws if an inference call
+     * actually needs a secret; a caller that does real credentialed inference (the
+     * sidecar step env, an example, a test with a real adapter) MUST supply one.
+     */
+    readCurrentMaterial?: CredentialMaterialResolver;
     /**
      * Optional deterministic session id. Production callers omit and let
      * the agent generate a fresh UUID; tests that assert on audit-record
@@ -101,6 +120,13 @@ export interface BaseEnv {
      * Forwarded to the reactor assembly's size-cap transform.
      */
     sizeCapMaxChars?: number;
+    /**
+     * Override for the default doom-loop detection threshold: the number of
+     * identical consecutive tool-call turns that ends the run (default 3).
+     * Forwarded to the reactor. Must be a positive integer, or `false` to
+     * disable doom-loop detection entirely.
+     */
+    doomLoopThreshold?: number | false;
     /**
      * Maximum number of pending sends (active + queued). Beyond this,
      * `send()` rejects with `SendQueueFullError`. Defaults to 16.

package/dist/index.d.ts

@@ -2,6 +2,7 @@ export { AgentContextLockError } from "./lock.js";
 export { type AgentTool, type AgentToolRunner, type AnnotatedPluginFactory, type AnnotatedPluginMeta, type AnnotatedToolFactory, type PluginFactory, type StringToolHandler, type ToolBundle, type ToolDeclaration, type ToolFactory, type ToolFactoryMeta, type ToolHandler, DuplicateToolError, PLUGIN_MARKER, TOOL_PLUGIN_KIND, type ToolPluginKind, createToolRunner, defineTool, definePlugin, fromToolRunner, isAnnotatedPluginFactory, isToolPluginInstance, stringTool, tool, toolApprovalEffect, } from "./tool.js";
 export { type AuthorizeFn, type BaseEnv, type Dependencies, AgentEnvError, } from "./env.js";
 export { type AnnotatedDirectorFactory, type DirectorAgentContext, type DirectorConfigSchema, type DirectorFactory, type DirectorFactoryMeta, type DirectorRef, type DirectorRegistry, } from "./director-types.js";
+export { createStaticCredentialResolver, createUnconfiguredCredentialResolver, } from "./credential-resolver.js";
 export { validateNamespacedId } from "./namespace.js";
 export { CanonicalizationError, canonicalizeForHash } from "./canonicalize.js";
 export { type DefinedDirector, defineDirector, isAnnotatedDirectorFactory, } from "./director.js";

package/dist/index.js

@@ -10,6 +10,7 @@ export { AgentContextLockError } from "./lock.js";
 export { DuplicateToolError, PLUGIN_MARKER, TOOL_PLUGIN_KIND, createToolRunner, defineTool, definePlugin, fromToolRunner, isAnnotatedPluginFactory, isToolPluginInstance, stringTool, tool, toolApprovalEffect, } from "./tool.js";
 export { AgentEnvError, } from "./env.js";
 export {} from "./director-types.js";
+export { createStaticCredentialResolver, createUnconfiguredCredentialResolver, } from "./credential-resolver.js";
 export { validateNamespacedId } from "./namespace.js";
 export { CanonicalizationError, canonicalizeForHash } from "./canonicalize.js";
 export { defineDirector, isAnnotatedDirectorFactory, } from "./director.js";

package/dist/internal-fixtures/mail.js

@@ -20,7 +20,7 @@ export const MAIL_SOURCE = {
     id: "anthropic:claude-opus-4-6",
     provider: "anthropic",
     baseURL: "https://api.anthropic.com",
-    apiKey: "sk-test-mail",
+    credentialId: "sk-test-mail",
     model: "claude-opus-4-6",
 };
 export const MAIL_ADDRESS = "support@fixture.local";

package/dist/internal-fixtures/planner.js

@@ -11,7 +11,7 @@ export const PLANNER_SOURCE = {
     id: "anthropic:claude-opus-4-6",
     provider: "anthropic",
     baseURL: "https://api.anthropic.com",
-    apiKey: "sk-test-planner",
+    credentialId: "sk-test-planner",
     model: "claude-opus-4-6",
 };
 /**

package/dist/testing/index.d.ts

@@ -1,2 +1,3 @@
 export { noopAuditStore } from "./audit-noop.js";
 export { permissiveAuthorize } from "./authorize-allow.js";
+export { waitForReactorDone } from "./reactor-waiters.js";

package/dist/testing/index.js

@@ -15,3 +15,4 @@
 // codebase.
 export { noopAuditStore } from "./audit-noop.js";
 export { permissiveAuthorize } from "./authorize-allow.js";
+export { waitForReactorDone } from "./reactor-waiters.js";

package/dist/testing/reactor-waiters.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Resolve once the stream emits `reactor.done`.
+ *
+ * Throws if the stream ends without it: returning would resolve as though the
+ * run had completed, and the caller would then fail on a later assertion
+ * instead of on the real cause.
+ *
+ * Typed structurally so a caller need not import the reactor's event union to
+ * await its terminal event.
+ */
+export declare function waitForReactorDone(stream: AsyncIterable<{
+    type: string;
+}>): Promise<void>;

package/dist/testing/reactor-waiters.js

@@ -0,0 +1,23 @@
+// Waiter over a reactor's emitted-event stream.
+//
+// A reactor run ends with a `reactor.done` event, including on the fatal
+// error path, so a test that needs the run finished waits for that event
+// rather than for an interval. CONVENTIONS.md names this shape as the one to
+// copy; it lives here so it is imported rather than copied again.
+/**
+ * Resolve once the stream emits `reactor.done`.
+ *
+ * Throws if the stream ends without it: returning would resolve as though the
+ * run had completed, and the caller would then fail on a later assertion
+ * instead of on the real cause.
+ *
+ * Typed structurally so a caller need not import the reactor's event union to
+ * await its terminal event.
+ */
+export async function waitForReactorDone(stream) {
+    for await (const event of stream) {
+        if (event.type === "reactor.done")
+            return;
+    }
+    throw new Error("reactor event stream ended before reactor.done");
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@intx/agent",
   "description": "In-process agent runtime: construct an agent, send it a message, get a reply",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "license": "LGPL-2.1-only",
   "type": "module",
   "exports": {
@@ -17,14 +17,14 @@
     }
   },
   "dependencies": {
-    "@intx/inference": "0.3.0",
-    "@intx/log": "0.3.0",
-    "@intx/mime": "0.3.0",
-    "@intx/types": "0.3.0",
+    "@intx/inference": "0.4.0",
+    "@intx/log": "0.4.0",
+    "@intx/mime": "0.4.0",
+    "@intx/types": "0.4.0",
     "arktype": "^2.1.29"
   },
   "devDependencies": {
-    "@intx/storage-isogit": "0.3.0"
+    "@intx/storage-isogit": "0.4.0"
   },
   "files": [
     "dist",