@leuduan/lagent 0.1.2 → 44.0.0

package/dist/plugins/skills/discovery.d.ts

@@ -1,3 +1,4 @@
+import type { FileScope } from '../../services/confinement/files.js';
 export type SkillDocument = {
     name: string;
     directoryName: string;
@@ -25,30 +26,58 @@ export declare function resolveSkillRoots(cwd: string, roots: {
     readonly workspace: readonly string[];
     readonly host: readonly string[];
 }): string[];
+/**
+ * A skill document that cannot be used as it is: not a regular file, too large, or its frontmatter does
+ * not parse. Never a refusal, a missing file or a stop: those are the facade's own errors.
+ */
+export declare class SkillDocumentError extends Error {
+    constructor(message: string, options?: ErrorOptions);
+}
+/**
+ * Reads the skill document at `path` through `files`, the verified handle and the policy of the
+ * operation it belongs to, which is the one way any skill file is read.
+ */
+export declare function readSkillDocument(files: FileScope, path: string, directoryName: string): Promise<SkillDocument>;
 /** A file or directory discovery skipped, and why. */
 export type SkippedSkill = {
     readonly path: string;
     readonly reason: string;
 };
 /**
- * Walks the roots for `SKILL.md` files; the first skill claiming a name or alias wins. A document
- * that cannot be read or parsed, or a directory that cannot be listed, is skipped and passed to
- * `skipped`, so one broken skill never hides the others.
+ * Walks the roots for `SKILL.md` files, through `files`; the first skill claiming a name or alias
+ * wins. A document that cannot be read or parsed, a directory that cannot be listed and a root the
+ * policy refuses are skipped and passed to `skipped`, so one broken skill never hides the others. A
+ * root that does not exist is not a problem. Nothing here touches the file system but through `files`.
+ */
+export declare function discoverSkills(files: FileScope, roots: readonly string[], skipped?: (skip: SkippedSkill) => void, signal?: AbortSignal): Promise<SkillDocument[]>;
+/**
+ * What one thread's activation found: the roots it searched from its `cwd`, and the skills in them,
+ * read under one policy (`identity`) at one state of the confinement (`epoch`). Content read under
+ * another is not delivered: see the `skill` tool and the listing.
  */
-export declare function discoverSkills(roots: readonly string[], skipped?: (skip: SkippedSkill) => void): SkillDocument[];
-/** What one thread's activation found: the roots it searched from its `cwd`, and the skills in them. */
 export type SkillCatalog = {
     readonly workspaceRoot: string;
     readonly roots: readonly string[];
     readonly skills: readonly SkillDocument[];
+    /** How the facade it was read through judged reads (`FileScope.identity`). */
+    readonly identity: string;
+    /** `ConfinementService.epoch` before it was read. */
+    readonly epoch: number;
+    /** Why there is no catalog, when the operation it needed was refused; else `null`. */
+    readonly unavailable: string | null;
 };
 /**
- * Searches the roots for a thread working in `cwd`, once: everything after reads the result. What
- * discovery skipped goes to `skipped`.
+ * Searches the roots for a thread working in `cwd`, once, through `files`: everything after reads
+ * the result. What discovery skipped goes to `skipped`.
  */
-export declare function prepareSkillCatalog(cwd: string, roots: {
+export declare function prepareSkillCatalog(files: FileScope, cwd: string, roots: {
     readonly workspace: readonly string[];
     readonly host: readonly string[];
-}, skipped?: (skip: SkippedSkill) => void): SkillCatalog;
+}, noted: {
+    readonly identity: string;
+    readonly epoch: number;
+}, skipped?: (skip: SkippedSkill) => void, signal?: AbortSignal): Promise<SkillCatalog>;
+/** The catalog of a thread whose operation was refused: no skills, and why. */
+export declare const unavailableCatalog: (cwd: string, epoch: number, reason: string) => SkillCatalog;
 /** The catalog as the model reads it: one line per skill, paths relative to the workspace where inside it. */
 export declare function formatSkillListing({ skills, workspaceRoot, roots }: SkillCatalog): string;

package/dist/plugins/skills/index.d.ts

@@ -1,7 +1,7 @@
 import { type Plugin } from '@leuduan/cordis';
 import { z } from 'zod';
 export { DEFAULT_WORKSPACE_SKILL_ROOTS, userSkillRoots } from './discovery.js';
-export { SKILL_TOOL } from './tool.js';
+export { SKILL_TOOL } from './tools.js';
 declare const SkillsConfigSchema: z.ZodObject<{
     roots: z.ZodArray<z.ZodString>;
     workspaceRoots: z.ZodDefault<z.ZodArray<z.ZodString>>;

package/dist/plugins/skills/index.js

@@ -1 +1 @@
-import{a,b,c,d}from"../../chunks/X65X4KP5.js";import"../../chunks/NAOUTU7A.js";import"../../chunks/UKXMCHHT.js";import"../../chunks/G6RXC3AL.js";import"../../chunks/2OSESBIL.js";import"../../chunks/YLNJXQ3Z.js";import"../../chunks/DDANMY45.js";import"../../chunks/37YOGDGY.js";import"../../chunks/KESCTXGO.js";import"../../chunks/TYTQRLTX.js";import"../../chunks/D7E6EWIE.js";export{a as DEFAULT_WORKSPACE_SKILL_ROOTS,c as SKILL_TOOL,d as skills,b as userSkillRoots};
+import{a,b,c,d}from"../../chunks/2P47AHNK.js";import"../../chunks/VYMT4TXD.js";import"../../chunks/3UMZMPWW.js";import"../../chunks/34KW6VNQ.js";import"../../chunks/JFX2MXBA.js";import"../../chunks/S34ZA2R6.js";import"../../chunks/CUK7CGC7.js";import"../../chunks/BPRCULZH.js";import"../../chunks/FJLU4UH3.js";import"../../chunks/DDANMY45.js";import"../../chunks/BBCW2FZK.js";import"../../chunks/MMNNZCBO.js";import"../../chunks/G44LG6VL.js";import"../../chunks/D4PQP5MA.js";export{a as DEFAULT_WORKSPACE_SKILL_ROOTS,c as SKILL_TOOL,d as skills,b as userSkillRoots};

package/dist/plugins/subAgents/index.js

@@ -1 +1 @@
-import{a}from"../../chunks/IJ2WNMD5.js";import"../../chunks/EGZI4XQX.js";import"../../chunks/UD3VJER6.js";import"../../chunks/SGGMBSBA.js";import"../../chunks/3QCW4WDJ.js";import"../../chunks/C5LYCXJG.js";import"../../chunks/J5S4URAW.js";import"../../chunks/G74AGRAJ.js";import"../../chunks/SL2YLB2F.js";import"../../chunks/JPZFKSWT.js";import"../../chunks/RK3VP2Q4.js";import"../../chunks/74HKUGRR.js";import"../../chunks/QMMLQJBS.js";import"../../chunks/YIR5MYGU.js";import"../../chunks/L3N4FIEN.js";import"../../chunks/NAOUTU7A.js";import"../../chunks/UKXMCHHT.js";import"../../chunks/GQGNVSKB.js";import"../../chunks/DXFXAYDN.js";import"../../chunks/DRYAN665.js";import"../../chunks/2OSESBIL.js";import"../../chunks/YLNJXQ3Z.js";import"../../chunks/DDANMY45.js";import"../../chunks/37YOGDGY.js";import"../../chunks/KESCTXGO.js";import"../../chunks/TYTQRLTX.js";import"../../chunks/D7E6EWIE.js";export{a as subAgents};
+import{a}from"../../chunks/MHC6VPB4.js";import"../../chunks/CANPZYTH.js";import"../../chunks/VYMT4TXD.js";import"../../chunks/MNJ4SRF7.js";import"../../chunks/JFZZXVWD.js";import"../../chunks/N6IXG2VL.js";import"../../chunks/6DRCKZ2C.js";import"../../chunks/7LI64H5X.js";import"../../chunks/3UMZMPWW.js";import"../../chunks/34KW6VNQ.js";import"../../chunks/KUZCL2SH.js";import"../../chunks/CQEVREBT.js";import"../../chunks/HK6ZSONF.js";import"../../chunks/7VAPNE3L.js";import"../../chunks/EPYQ5M3B.js";import"../../chunks/5IRF47YB.js";import"../../chunks/OL5A6ITQ.js";import"../../chunks/JFX2MXBA.js";import"../../chunks/S34ZA2R6.js";import"../../chunks/6FRNHMCV.js";import"../../chunks/CUK7CGC7.js";import"../../chunks/BPRCULZH.js";import"../../chunks/FJLU4UH3.js";import"../../chunks/DDANMY45.js";import"../../chunks/BBCW2FZK.js";import"../../chunks/MMNNZCBO.js";import"../../chunks/G44LG6VL.js";import"../../chunks/D4PQP5MA.js";export{a as subAgents};

package/dist/plugins/subAgents/{fork.d.ts → tools.d.ts}

@@ -1,6 +1,41 @@
 import { z } from 'zod';
 import type { Tool } from '../../loop/index.js';
-import type { EndpointDescription } from './tool.js';
+import { type DelegationTarget } from '../delegations/index.js';
+/** Parameters an agent accepts when another agent invokes it as a tool. */
+export declare const SubAgentRequestParameters: z.ZodPreprocess<z.ZodObject<{
+    task: z.ZodString;
+    background: z.ZodDefault<z.ZodBoolean>;
+    provider: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    model: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    thinking_effort: z.ZodDefault<z.ZodNullable<z.ZodEnum<{
+        low: "low";
+        high: "high";
+        none: "none";
+        medium: "medium";
+        max: "max";
+    }>>>;
+}, z.core.$strip>, unknown>;
+/** How an endpoint describes its target to callers. */
+export type EndpointDescription = {
+    readonly toolName: string;
+    readonly description: string;
+};
+/**
+ * Delegation, as a tool.
+ *
+ * One of these is registered per target, a global agent or a role endpoint, so a target is
+ * advertised to the model exactly like any other tool and reaching it is an ordinary grant. The
+ * child is a normal thread: created with this call as its `origin` and its task in the same
+ * write, and driven by `ctx.delegations` until the task settles. The tool only starts: its result
+ * names the child's `thread_id`, whether the child answered or failed, and `message_agent` is how a
+ * later call continues it.
+ *
+ * The child is born on the caller's route with the fields the call names folded over it, and keeps
+ * that route, so a child started on a cheap model stays on it when continued without naming one.
+ */
+export declare const subAgentTool: ({ toolName, description }: EndpointDescription, target: Exclude<DelegationTarget, {
+    kind: "fork";
+}>) => Tool;
 /** Validates a fork endpoint's call, and is the source of the schema advertised to the model. */
 export declare const ForkParameters: z.ZodObject<{
     task: z.ZodString;

package/dist/plugins/threadDirs.d.ts

@@ -0,0 +1,36 @@
+import { Service, type Context, type Plugin } from '@leuduan/cordis';
+declare module '@leuduan/cordis' {
+    interface Context {
+        /** Each thread's own directory under the application data directory (optional plugin). */
+        threadDirs: ThreadDirsService;
+    }
+}
+export type ThreadDirsConfig = {
+    /** Absolute application data directory; thread directories live under `<dataDir>/threads`. Required. */
+    dataDir: string;
+};
+/**
+ * Where each thread keeps files of its own: `<dataDir>/threads/<thread-id>/`, a scratch space.
+ * Harness-written files go in named subdirectories such as `tool-outputs/` and `commands/`. Mount
+ * it on the root with `root.plugin(threadDirs, { dataDir })`; a plugin that keeps files here
+ * injects `threadDirs`, so it waits, unmounted, until a host that has a file system mounts this.
+ *
+ * The path is derived from the data directory and thread id, but absolute paths are also recorded
+ * in prompts and tool results. Keep the data directory at the same location when reopening a
+ * durable journal. Plugins can use the id supplied by their activation hook to find the directory.
+ *
+ * Nothing here limits who may read or write the directories: what the model's tools and commands
+ * may reach is the confinement policy's. A host whose data directory holds what commands must not
+ * change, such as its journal, lists it in the sandbox's `filesystem.denyWrite`.
+ */
+declare class ThreadDirsService extends Service<ThreadDirsConfig> {
+    readonly dataDir: string;
+    readonly root: string;
+    constructor(ctx: Context, config: ThreadDirsConfig);
+    /** The directory of `threadId`, without touching the filesystem. */
+    dirFor(threadId: string): string;
+    /** The directory of `threadId`, created if missing. */
+    ensure(threadId: string): string;
+}
+export declare const threadDirs: Plugin.Constructor<ThreadDirsConfig>;
+export type { ThreadDirsService };

package/dist/plugins/threadDirs.js

@@ -0,0 +1 @@
+import{a}from"../chunks/W57RW55W.js";import"../chunks/VYMT4TXD.js";export{a as threadDirs};

package/dist/plugins/toolPolicy/index.d.ts

@@ -1,6 +1,6 @@
 import type { Plugin } from '@leuduan/cordis';
-import { type Modes } from '../../kit/modes.js';
-import { type AgentSelector } from '../../kit/scope.js';
+import { type Modes } from '../../services/modes.js';
+import { type AgentSelector } from '../../services/agents.js';
 /** What one mode lets through: `allow` lists the tools it lets be called, every other one denied. */
 export type ModeRules = {
     /** The only tools a call may name in this mode; without it, every tool. */

package/dist/plugins/toolPolicy/index.js

@@ -1 +1 @@
-import{a,b}from"../../chunks/BM3S37EZ.js";import"../../chunks/CDQG7RKA.js";import"../../chunks/DRYAN665.js";import"../../chunks/2OSESBIL.js";import"../../chunks/YLNJXQ3Z.js";import"../../chunks/DDANMY45.js";import"../../chunks/37YOGDGY.js";import"../../chunks/KESCTXGO.js";import"../../chunks/TYTQRLTX.js";import"../../chunks/D7E6EWIE.js";export{b as SAFE_WRITES_TOOLS,a as toolPolicy};
+import{a,b}from"../../chunks/ASSQZH3F.js";import"../../chunks/DDZ7YF26.js";import"../../chunks/6FRNHMCV.js";import"../../chunks/CUK7CGC7.js";import"../../chunks/BPRCULZH.js";import"../../chunks/DDANMY45.js";import"../../chunks/BBCW2FZK.js";import"../../chunks/MMNNZCBO.js";import"../../chunks/G44LG6VL.js";import"../../chunks/D4PQP5MA.js";export{b as SAFE_WRITES_TOOLS,a as toolPolicy};

package/dist/plugins/truncateToolOutput.d.ts

@@ -1,26 +1,30 @@
 import type { Plugin } from '@leuduan/cordis';
 import { z } from 'zod';
-import type { ToolResult } from '../models/index.js';
+import type { ToolResult } from '../records/toolResult.js';
 /** Where full outputs go inside a thread's directory. */
 export declare const TOOL_OUTPUTS_DIR = "tool-outputs";
 /** The least limit that holds the longest gap marker and a character each of head and tail. */
 export declare const MIN_TOOL_OUTPUT_LENGTH: number;
 export declare const TruncateToolOutputConfigSchema: z.ZodObject<{
     maxToolOutputLength: z.ZodDefault<z.ZodNumber>;
+    spill: z.ZodBoolean;
 }, z.core.$strip>;
 export type TruncateToolOutputConfig = z.input<typeof TruncateToolOutputConfigSchema>;
 /**
  * Caps tool output at a character limit, keeping its head and its tail around a marker that says how
- * much of the middle was cut, and writes the full text to the thread's own directory
- * (`<thread dir>/tool-outputs/`), where file tools can read it back when available. Characters are
- * UTF-16 code units, as `string.length` counts them, and no cut splits a surrogate pair. A tool may opt
- * out by setting `no_truncation: true` in its result metadata. Because this wraps
- * `lagent/tool/execute`, the journal records exactly what the model saw. A call that waits has
- * no output to cap.
+ * much of the middle was cut. With `spill: true` it also writes the full text to the thread's own
+ * directory (`<thread dir>/tool-outputs/`), where file tools can read it back when available, and
+ * names the path; it then injects `threadDirs` and stays pending until `threadDirs` is
+ * mounted. With `spill: false` the cut text is gone and no directory is needed, as on a host with
+ * no file system. Characters are UTF-16 code units, as `string.length` counts them, and no cut
+ * splits a surrogate pair. A tool may opt out by setting `no_truncation: true` in its result
+ * metadata. Because this wraps `lagent/tool/execute`, the journal records exactly what the model
+ * saw. A call that waits has no output to cap.
  */
-export declare const truncateToolOutput: Plugin.Object<TruncateToolOutputConfig | undefined>;
+export declare const truncateToolOutput: Plugin.Object<TruncateToolOutputConfig>;
 /**
  * Truncates `result` to `limit` characters, head and tail with the gap marker between them, writing the
- * full output into `directory` when it was cut. `limit` is at least {@link MIN_TOOL_OUTPUT_LENGTH}.
+ * full output into `directory` when it was cut, unless that is `null`. `limit` is at least
+ * {@link MIN_TOOL_OUTPUT_LENGTH}.
  */
-export declare function applyTruncation(result: ToolResult, limit: number, directory: string): Promise<ToolResult>;
+export declare function applyTruncation(result: ToolResult, limit: number, directory: string | null): Promise<ToolResult>;

package/dist/plugins/truncateToolOutput.js

@@ -1 +1,6 @@
-import{a,b,c,d,e}from"../chunks/3LQHQRIU.js";import"../chunks/YLNJXQ3Z.js";import"../chunks/DDANMY45.js";import"../chunks/37YOGDGY.js";import"../chunks/KESCTXGO.js";import"../chunks/TYTQRLTX.js";import"../chunks/D7E6EWIE.js";export{b as MIN_TOOL_OUTPUT_LENGTH,a as TOOL_OUTPUTS_DIR,c as TruncateToolOutputConfigSchema,e as applyTruncation,d as truncateToolOutput};
+import{W as d}from"../chunks/BPRCULZH.js";import"../chunks/DDANMY45.js";import"../chunks/BBCW2FZK.js";import{c}from"../chunks/MMNNZCBO.js";import"../chunks/G44LG6VL.js";import"../chunks/D4PQP5MA.js";import{randomBytes as T}from"node:crypto";import{mkdir as O,writeFile as $}from"node:fs/promises";import{join as _}from"node:path";import{z as s}from"zod";var x=/[^A-Za-z0-9_.-]+/g,w="tool-outputs",A=String(Number.MAX_SAFE_INTEGER).length,h=t=>`
+[\u2026 ${t} characters omitted \u2026]
+`,m=h("9".repeat(A)).length+2,E=s.object({maxToolOutputLength:s.number().int().min(m,{message:`maxToolOutputLength must hold the gap marker and some head and tail: at least ${m}`}).default(1e4),spill:s.boolean()}),b={name:"lagent:truncate-tool-output",apply(t,a){let{maxToolOutputLength:o,spill:n}=E.parse(a);if(!n){p(t,o,()=>null);return}t.inject(["threadDirs"],e=>p(e,o,l=>_(e.threadDirs.dirFor(l),w)))}};function p(t,a,o){t.on("lagent/tool/execute",async(n,e)=>{let l=await e();return d(l)?l:await M(l,a,o(n.threadId))})}async function M(t,a,o){let n=await S(t,a,o),e=[...t.notes??[]];return n.note!==null&&e.push(n.note),{...t,output:n.output,notes:e.length>0?e:null,metadata:{...t.metadata,truncation:n.metadata}}}async function S(t,a,o){let n=t.output;if(t.metadata.no_truncation===!0)return{output:n,note:null,metadata:{was_truncated:!1,limit:a,original_length:n.length,returned_length:n.length,no_truncation:!0}};if(n.length<=a)return{output:n,note:null,metadata:{was_truncated:!1,limit:a,original_length:n.length,returned_length:n.length}};let e=o===null?null:await F(n,t,o),l=n.split(`
+`).length,{head:u,tail:r}=I(n,a),i=n.length-u.length-r.length,g=`${u}${h(String(i))}${r}`;return{output:g,note:`Output truncated to its first ${u.length} and last ${r.length} of ${n.length} characters (${l} lines).`+(e===null?"":` The full output is written to ${e}.`),metadata:{was_truncated:!0,limit:a,original_length:n.length,returned_length:g.length,omitted_length:i,...e===null?{}:{full_output_path:e}}}}function I(t,a){let o=a-h(String(t.length)).length,n=Math.ceil(o/2),e=o-n,l=n,u=t.lastIndexOf(`
+`,l-1);u>=Math.floor(n/2)?l=u+1:l=c(t,l,"end");let r=t.length-e,i=t.indexOf(`
+`,r);return i!==-1&&i+1<=r+Math.floor(e/2)?r=i+1:r=c(t,r,"start"),{head:t.slice(0,l),tail:t.slice(r)}}async function F(t,a,o){let n=`${f(a.name||"tool")}-${f(a.call_id||"call")}-`,e=_(o,`${n}${T(6).toString("hex")}.txt`);return await O(o,{recursive:!0,mode:448}),await $(e,t,{encoding:"utf8",flag:"wx",mode:384}),e}var f=t=>t.replace(x,"-").slice(0,L).replace(/^[.-]+|[.-]+$/g,"")||"value",L=40;export{m as MIN_TOOL_OUTPUT_LENGTH,w as TOOL_OUTPUTS_DIR,E as TruncateToolOutputConfigSchema,M as applyTruncation,b as truncateToolOutput};

package/dist/plugins/usage/index.d.ts

@@ -1,4 +1,4 @@
-import { Context, Service } from '@leuduan/cordis';
+import { Context, Service, type Plugin } from '@leuduan/cordis';
 import { UsageSnapshot } from './tracker.js';
 export { UsageSnapshot } from './tracker.js';
 export type { UsageSnapshotInit } from './tracker.js';
@@ -14,7 +14,7 @@ declare module '@leuduan/cordis' {
  * is a function of its own rows, and a sum over several threads is the host's, over the threads it
  * shows, as a caller-chain rollup is, by joining threads on `origin`.
  */
-export declare class UsageService extends Service {
+declare class UsageService extends Service {
     static inject: string[];
     constructor(ctx: Context);
     /** Everything one thread has spent so far. */
@@ -22,3 +22,5 @@ export declare class UsageService extends Service {
     /** What one thread's most recent completed turn spent. */
     lastTurn(threadId: string): UsageSnapshot;
 }
+export declare const usage: Plugin.Constructor<undefined>;
+export type { UsageService };

package/dist/plugins/usage/index.js

@@ -1 +1 @@
-import{h as _}from"../../chunks/37YOGDGY.js";import"../../chunks/KESCTXGO.js";import"../../chunks/TYTQRLTX.js";import"../../chunks/D7E6EWIE.js";import{Service as a}from"@leuduan/cordis";var n=class e{request_count;input_tokens;output_tokens;cache_read_input_tokens;cache_write_input_tokens;reasoning_output_tokens;constructor(t={}){this.request_count=t.request_count??0,this.input_tokens=t.input_tokens??0,this.output_tokens=t.output_tokens??0,this.cache_read_input_tokens=t.cache_read_input_tokens??0,this.cache_write_input_tokens=t.cache_write_input_tokens??0,this.reasoning_output_tokens=t.reasoning_output_tokens??0,Object.freeze(this)}get totalTokens(){return this.input_tokens+this.output_tokens}get cacheMissInputTokens(){return this.input_tokens-this.cache_read_input_tokens}delta(t){return new e({request_count:this.request_count-t.request_count,input_tokens:this.input_tokens-t.input_tokens,output_tokens:this.output_tokens-t.output_tokens,cache_read_input_tokens:this.cache_read_input_tokens-t.cache_read_input_tokens,cache_write_input_tokens:this.cache_write_input_tokens-t.cache_write_input_tokens,reasoning_output_tokens:this.reasoning_output_tokens-t.reasoning_output_tokens})}plus(t){return new e({request_count:this.request_count+t.request_count,input_tokens:this.input_tokens+t.input_tokens,output_tokens:this.output_tokens+t.output_tokens,cache_read_input_tokens:this.cache_read_input_tokens+t.cache_read_input_tokens,cache_write_input_tokens:this.cache_write_input_tokens+t.cache_write_input_tokens,reasoning_output_tokens:this.reasoning_output_tokens+t.reasoning_output_tokens})}toJSON(){return{request_count:this.request_count,input_tokens:this.input_tokens,output_tokens:this.output_tokens,cache_read_input_tokens:this.cache_read_input_tokens,cache_write_input_tokens:this.cache_write_input_tokens,reasoning_output_tokens:this.reasoning_output_tokens}}},s=()=>({request_count:0,input_tokens:0,output_tokens:0,cache_read_input_tokens:0,cache_write_input_tokens:0,reasoning_output_tokens:0}),u=(e,t)=>{t&&(e.input_tokens+=t.input_tokens,e.output_tokens+=t.output_tokens,e.cache_read_input_tokens+=t.cache_read_input_tokens,e.cache_write_input_tokens+=t.cache_write_input_tokens,e.reasoning_output_tokens+=t.reasoning_output_tokens)};function r(e,t){switch(t.type){case"llm/request":case"auxiliary/request":e.request_count+=1;return;case"assistant/message":u(e,t.data.response.message.usage);return;case"auxiliary/result":u(e,t.data.usage);return;default:return}}var c=()=>({totals:s(),baseline:s(),lastTurn:s()}),o=_({key:"lagent:usage:thread",onFork:"reset",init:c,apply(e,t){return r(e.totals,t),t.type==="turn/start"?e.baseline={...e.totals}:t.type==="turn/end"&&(e.lastTurn=new n(e.totals).delta(new n(e.baseline)).toJSON()),e}}),i=class extends a{static inject=["journal"];constructor(t){super(t,"usage"),t.effect(()=>t.journal.register(o))}thread(t){return new n(this.ctx.journal.state(o,t).totals)}lastTurn(t){return new n(this.ctx.journal.state(o,t).lastTurn)}};export{i as UsageService,n as UsageSnapshot};
+import{h as _}from"../../chunks/BBCW2FZK.js";import"../../chunks/MMNNZCBO.js";import"../../chunks/G44LG6VL.js";import"../../chunks/D4PQP5MA.js";import{Service as a}from"@leuduan/cordis";var n=class e{request_count;input_tokens;output_tokens;cache_read_input_tokens;cache_write_input_tokens;reasoning_output_tokens;constructor(t={}){this.request_count=t.request_count??0,this.input_tokens=t.input_tokens??0,this.output_tokens=t.output_tokens??0,this.cache_read_input_tokens=t.cache_read_input_tokens??0,this.cache_write_input_tokens=t.cache_write_input_tokens??0,this.reasoning_output_tokens=t.reasoning_output_tokens??0,Object.freeze(this)}get totalTokens(){return this.input_tokens+this.output_tokens}get cacheMissInputTokens(){return this.input_tokens-this.cache_read_input_tokens}delta(t){return new e({request_count:this.request_count-t.request_count,input_tokens:this.input_tokens-t.input_tokens,output_tokens:this.output_tokens-t.output_tokens,cache_read_input_tokens:this.cache_read_input_tokens-t.cache_read_input_tokens,cache_write_input_tokens:this.cache_write_input_tokens-t.cache_write_input_tokens,reasoning_output_tokens:this.reasoning_output_tokens-t.reasoning_output_tokens})}plus(t){return new e({request_count:this.request_count+t.request_count,input_tokens:this.input_tokens+t.input_tokens,output_tokens:this.output_tokens+t.output_tokens,cache_read_input_tokens:this.cache_read_input_tokens+t.cache_read_input_tokens,cache_write_input_tokens:this.cache_write_input_tokens+t.cache_write_input_tokens,reasoning_output_tokens:this.reasoning_output_tokens+t.reasoning_output_tokens})}toJSON(){return{request_count:this.request_count,input_tokens:this.input_tokens,output_tokens:this.output_tokens,cache_read_input_tokens:this.cache_read_input_tokens,cache_write_input_tokens:this.cache_write_input_tokens,reasoning_output_tokens:this.reasoning_output_tokens}}},s=()=>({request_count:0,input_tokens:0,output_tokens:0,cache_read_input_tokens:0,cache_write_input_tokens:0,reasoning_output_tokens:0}),r=(e,t)=>{t&&(e.input_tokens+=t.input_tokens,e.output_tokens+=t.output_tokens,e.cache_read_input_tokens+=t.cache_read_input_tokens,e.cache_write_input_tokens+=t.cache_write_input_tokens,e.reasoning_output_tokens+=t.reasoning_output_tokens)};function i(e,t){switch(t.type){case"llm/request":case"auxiliary/request":e.request_count+=1;return;case"assistant/message":r(e,t.data.response.message.usage);return;case"auxiliary/result":r(e,t.data.usage);return;default:return}}var c=()=>({totals:s(),baseline:s(),lastTurn:s()}),o=_({key:"lagent:usage:thread",onFork:"reset",init:c,apply(e,t){return i(e.totals,t),t.type==="turn/start"?e.baseline={...e.totals}:t.type==="turn/end"&&(e.lastTurn=new n(e.totals).delta(new n(e.baseline)).toJSON()),e}}),u=class extends a{static inject=["journal"];constructor(t){super(t,"usage"),t.effect(()=>t.journal.register(o))}thread(t){return new n(this.ctx.journal.state(o,t).totals)}lastTurn(t){return new n(this.ctx.journal.state(o,t).lastTurn)}},g=u;export{n as UsageSnapshot,g as usage};

package/dist/plugins/usage/tracker.d.ts

@@ -1,4 +1,4 @@
-import type { JournalEvent } from '../../models/index.js';
+import type { JournalEvent } from '../../records/journal.js';
 export type UsageSnapshotInit = Partial<{
     request_count: number;
     input_tokens: number;

package/dist/plugins/verify/index.d.ts

@@ -6,61 +6,13 @@ export declare const VerifyConfigSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type VerifyConfig = z.input<typeof VerifyConfigSchema>;
 /**
- * A gate that holds a thread's answer while it has an unverified change: an `edit_files`
- * result, a `run_command` other than the verification, or a background command's start or end,
- * with no passing verification since. The verification is a `run_command` whose command text and
- * working directory are the configured ones, run by the model like any other command, through the
- * conversation's confirmation; the gate runs nothing itself.
- *
- * A verification counts only if its allowed attempt — the `tool/authorization` row written just
- * before it starts — comes after the result row of the last other change, and its result says it
- * ran to completion with exit code 0. Commands and edits are exclusive, so within one response a
- * verification starts after the changes before it settled; the attempt still decides, as results
- * land in model order and a change from elsewhere — a background command, a tool by another plugin
- * under the same name — need not be. Until its outcome is known it is a possible change itself, since a
- * formatter in the check rewrites files: one that passes proves its own changes and everything
- * settled before it started; one that fails, is cancelled, times out, is interrupted or leaves
- * processes behind leaves verification outstanding. A background command that ends after it
- * started makes it stale; one still running at the stop is not held against the gate. A call that
- * was never allowed to run, denied or rejected, changed nothing and is not counted.
- *
- * With an unverified change it sends the model back to run the command, at most
- * {@link VERIFY_REMINDERS} times since the last change other than a verification run, or since the
- * person last wrote, and then rejects the answer, so the turn ends `rejected`. When policy denied
- * the latest verification attempt since the person last wrote, a read-only conversation say, it
- * rejects at once, wherever that attempt's result landed among the changes' results.
- *
- * The {@link verify} service is the judge: the preset puts its verification in force on the thread
- * it serves for as long as it is mounted (`ctx.verify.gate`), and tells the model of it. A
- * requirement recorded for the assignment the thread serves on the same verification is judged
- * with the gate, once: a barrier at its arming, with or without a change, counting its reminders
- * and denials from it.
- *
- * So that the model need not learn the command from an objection, the thread is also told it up
- * front, as a notice at the next model step whenever no notice it can still see says the same: on
- * its first step, and again after a replacement took it away. The notice is neither a change nor a
- * reminder.
- *
- * A pure fold over each thread's rows, not the current turn's, so a crash or an approval pause
- * cannot hide an earlier turn's unverified work, and judging an answer again after a crash repeats
- * nothing. The fold records what happened whatever the verification is, so it is one for every
- * gate, and each verification is judged from it at the stop.
- *
- * The thread's delegated work is its own: a change made by any thread its calls started, at any
- * depth, counts as the thread's, at its row, so a verification must have started after it. Every
- * command a child ran counts, a passing run of the same verification included: a check may rewrite
- * files, and a child's proof is not its caller's. Rows are numbered in one journal order across threads, so the two
- * compare directly; a child's change also starts the count of reminders over. A child that is not
- * loaded is read from the catalog, so this holds across a restart, and a child whose changes cannot
- * be read rejects the answer at once rather than pass it. A thread an owner assigned, such as a
- * workflow's isolated participant, is that owner's work, not its caller's. The preset is not handed
- * down: a child is not gated itself.
- *
- * Installed per thread, with `cwd` resolved against the thread's cwd by the host; or mounted
- * (`mountPreset`) from the setup of a preset placed on a thread, which gates that thread. Refuses
- * to mount without the {@link verify} service.
+ * A thread's configured automatic completion check. Runtime execution is the only proof;
+ * ordinary model commands remain diagnostics. Requirements and gates share the verify service,
+ * which plans execution at the pure stop boundary and core dispatches before final judgment.
+ * Relevant command and delegated work must settle first. Commands obey current grants,
+ * confirmation and sandbox policy, and must establish their intended postcondition on success.
  */
-export declare const verifyPreset: import("../../services/preset.js").Preset<z.ZodObject<{
+export declare const verifyPreset: import("../../services/presets/definition.js").Preset<z.ZodObject<{
     command: z.ZodString;
     cwd: z.ZodString;
 }, z.core.$strict>>;
@@ -71,5 +23,5 @@ export declare const verifyPreset: import("../../services/preset.js").Preset<z.Z
  * application, before anything mounts the preset.
  */
 export declare const verify: Plugin.Object<undefined>;
-export { VERIFY_PRESET, VERIFY_REMINDERS } from './facts.js';
+export { VERIFY_PRESET, VERIFY_REPAIRS } from './record.js';
 export { VERIFY_OWNER, type OwedVerification, type VerifyService } from './service.js';

package/dist/plugins/verify/index.js

@@ -1 +1,6 @@
-import{o as T}from"../../chunks/EGZI4XQX.js";import"../../chunks/UD3VJER6.js";import"../../chunks/SGGMBSBA.js";import"../../chunks/3QCW4WDJ.js";import"../../chunks/C5LYCXJG.js";import"../../chunks/J5S4URAW.js";import{a as N}from"../../chunks/G74AGRAJ.js";import{a as C}from"../../chunks/SL2YLB2F.js";import"../../chunks/JPZFKSWT.js";import"../../chunks/RK3VP2Q4.js";import"../../chunks/74HKUGRR.js";import{a as V}from"../../chunks/QMMLQJBS.js";import"../../chunks/YIR5MYGU.js";import{a as F}from"../../chunks/L3N4FIEN.js";import"../../chunks/NAOUTU7A.js";import"../../chunks/UKXMCHHT.js";import"../../chunks/GQGNVSKB.js";import"../../chunks/DXFXAYDN.js";import{b as g,e as M}from"../../chunks/DRYAN665.js";import{d as O}from"../../chunks/2OSESBIL.js";import{o as w}from"../../chunks/YLNJXQ3Z.js";import"../../chunks/DDANMY45.js";import{h as S}from"../../chunks/37YOGDGY.js";import{a as R}from"../../chunks/KESCTXGO.js";import"../../chunks/TYTQRLTX.js";import"../../chunks/D7E6EWIE.js";import{isAbsolute as se,resolve as oe}from"node:path";import{z as E}from"zod";import{isAbsolute as H,resolve as y}from"node:path";import{z as d}from"zod";var p="verify",Y=2,Q="edit_files",X="run_command",q=d.strictObject({command:d.string(),cwd:d.string()}),z=g({plugin:"lagent:verify",kind:"notice",version:1,schema:q}),J=g({plugin:"lagent:verify",kind:"reminder",version:1,schema:q}),k=g({plugin:"lagent:verify",kind:"rejected",version:1,schema:d.strictObject({...q.shape,cause:d.enum(["denied","unverified"])})}),m=(n,e)=>JSON.stringify([n,e]);function Z(n,e){let{metadata:t}=n;return!n.is_error&&t.exit_code===0&&t.timed_out===!1&&t.aborted===!1&&t.stop_failed===!1&&typeof t.cwd=="string"&&y(t.cwd)===e}var P=(n,e)=>{let t=n.commands.get(e);return t===void 0&&(t={resultAt:null,failedAt:null,provenAt:null,decision:null},n.commands.set(e,t)),t},A=(n,e)=>{for(let t of[...n.reminders.keys()])t!==e&&n.reminders.delete(t)},h=S({key:"lagent:verify:facts",init:()=>({threadCwd:null,calls:new Map,changedAt:null,commands:new Map,personAt:null,reminders:new Map}),apply(n,e){switch(e.type){case"thread/spawned":n.threadCwd=y(e.data.environment.cwd);break;case"assistant/message":for(let t of e.data.response.message.tool_calls)t.arguments===null?n.calls.delete(t.call_id):t.name===Q?n.calls.set(t.call_id,{run:null,allowedAt:null}):t.name===X?n.calls.set(t.call_id,{run:ee(n,t.arguments),allowedAt:null}):n.calls.delete(t.call_id);break;case"tool/authorization":{let t=n.calls.get(e.data.call_id);if(t===void 0)break;e.data.decision==="allow"&&(t.allowedAt=e.seq),t.run!==null&&(P(n,t.run.key).decision={seq:e.seq,denied:e.data.decision==="deny"});break}case"tool/result":{let{result:t}=e.data,r=n.calls.get(t.call_id);if(n.calls.delete(t.call_id),r===void 0||r.allowedAt===null)break;if(r.run===null){n.changedAt=e.seq,A(n,null);break}let i=P(n,r.run.key);i.resultAt=e.seq,Z(t,r.run.cwd)?i.provenAt=Math.max(i.provenAt??0,r.allowedAt):i.failedAt=e.seq,A(n,r.run.key);break}case"ext":N.read(e)!==void 0&&(n.changedAt=e.seq,A(n,null));break;case"input/message":if(e.data.source===null)n.personAt=e.seq,n.reminders.clear();else{let t=J.readContribution(e);if(t!==void 0){let r=m(t.command,t.cwd);n.reminders.set(r,[...n.reminders.get(r)??[],e.seq])}}break;default:break}return n}});function ee(n,e){let t=e.command;if(typeof t!="string"||n.threadCwd===null)return{key:m(JSON.stringify(t??null),null),cwd:null};let r=e.workdir,i=typeof r=="string"&&r!==""?y(n.threadCwd,r):n.threadCwd;return{key:m(t,i),cwd:i}}var f=(n,e)=>n===null?e:e===null?n:Math.max(n,e);function ne(n){let e=n.changedAt;for(let t of n.commands.values())e=f(e,t.resultAt);return e}var j=C({key:"verify",version:1,schema:d.strictObject({changed_at:d.number().int().positive().nullable()}),applies:()=>!0,compute:(n,e)=>({changed_at:ne(n.state(h,e))})});function D(n,e){let t=new Set([e]),r=null;for(let i of n.origins.subtree(e,{self:!0})){let{origin:s,thread_id:o}=i;if(s===null||s.cause.kind==="assignment"||!t.has(s.caller_thread_id))continue;t.add(o);let a=j.read(n,o);if(a.status!=="available")return{unreadable:`agent ${o}: ${a.status==="unavailable"?a.reason:"its changes are not recorded"}`};r=f(r,a.value.changed_at)}return{at:r}}function _(n,e,t,r){let i=m(e.command,e.cwd),s=r;for(let[u,$]of n.commands)s=f(s,u===i?$.failedAt:$.resultAt);s=f(s,n.changedAt);let o=n.commands.get(i),a=o?.decision??null,c=f(n.personAt,t),l=f(t,r);return{mutatedAt:s,provenAt:o?.provenAt??null,denied:a!==null&&a.denied&&(c===null||a.seq>c),reminders:(n.reminders.get(i)??[]).filter(u=>l===null||u>l).length}}var te=d.strictObject({owner:d.string().min(1),assignment:d.string().min(1),generation:d.number().int().nonnegative(),input:d.string().min(1),command:d.string().trim().min(1),cwd:d.string().refine(H,"An absolute path")}),x=g({plugin:"lagent:verify",kind:"requirement",version:1,schema:te});function I(n){let e=x.parse(n);return{...e,cwd:y(e.cwd)}}var K=n=>JSON.stringify([n.owner,n.assignment,n.generation]),U=x.projection({key:"requirements",init:()=>new Map,onFork:"reset",apply(n,e,t){let r=K(e);return n.has(r)||n.set(r,{value:e,seq:t.seq}),n}});function W(n,e,t,r){let i=t?void 0:n.state(U,e).get(K(r));return i===void 0?[x.entry(r,{threadId:e})]:JSON.stringify(i.value)===JSON.stringify(r)?[]:{refuse:{message:`Verification for assignment ${r.assignment} is already owed on ${e}, differently`}}}function B(n,e){let t=n.state(U,e);if(t.size===0)return null;let{inputs:r}=n.state(w,e),i=T(n,e),s=null;for(let{value:o,seq:a}of t.values()){let c=r.get(o.input)?.claimedAt??null;if(c===null)continue;let l=Math.max(a,c);i!==null&&i>l||(s===null||s.at<l)&&(s={verification:{command:o.command,cwd:o.cwd},at:l})}return s}function L(n,e,t,r){let i=`\`${e.command}\` (in ${e.cwd})`;if("unreadable"in r)return k.rejection(`The changes of the work this conversation delegated cannot be read (${r.unreadable}), so ${i} cannot be shown to cover them.`,{...e,cause:"unverified"});let{mutatedAt:s,provenAt:o,denied:a,reminders:c}=_(n,e,t,r.at),l=f(s,t);if(l===null||o!==null&&o>l)return;let u=t!==null&&t===l;return a?k.rejection(`Verification is not allowed in this mode: ${i} was denied, so ${u?"the assignment is":"the changes since it last passed are"} unverified.`,{...e,cause:"denied"}):c>=Y?k.rejection(`${i} has not passed since ${u?"the assignment began":"the last change"}, after ${c} reminder${c===1?"":"s"} to run it.`,{...e,cause:"unverified"}):{decision:"continue",message:J.contribution({content:`Before finishing, run ${i} and fix what fails.`},e)}}import{resolve as G}from"node:path";import{Service as re}from"@leuduan/cordis";function ie(n){if(n.kind==="send")return null;if(n.kind==="create"){let{origin:i,spec:s}=n.opening;return{origin:i,requires:s.requires,installations:s.installations}}let{origin:e,requires:t,inherits:r}=n.opening;return{origin:e,requires:t,installations:r.installations}}var v="lagent:verify",b=class extends re{static inject=["threads","journal"];gates=new Map;constructor(e){super(e,"verify"),e.effect(()=>e.threads.registerOwner({owner:v}).dispose),e.effect(()=>e.journal.register(h)),j.register(e),e.on("lagent/turn/stop",t=>this.judge(t))}gate(e,t){let r=Symbol("verify gate"),i=this.gates.get(e);return i===void 0&&this.gates.set(e,i=new Map),i.set(r,{command:t.command,cwd:G(t.cwd)}),()=>{i.delete(r),i.size===0&&this.gates.get(e)===i&&this.gates.delete(e)}}owed(e){let{inputId:t,...r}=e,i=I({...r,input:t}),s=m(i.command,i.cwd);return o=>{let{threadId:a}=o,c=ie(o);if(!this.required(a,c))return{refuse:{message:`Thread ${a} owes verification, so it must require ${v}`}};let l=this.inPlace(a,c).find(u=>m(u.command,u.cwd)!==s);return l!==void 0?{refuse:{message:`Thread ${a} verifies with \`${l.command}\` (in ${l.cwd}), not the \`${i.command}\` (in ${i.cwd}) this assignment pins`}}:W(this.ctx.journal,a,c!==null,i)}}judge({threadId:e,observe:t}){t(()=>this.observed(e));let{judged:r,delegated:i}=this.reading(e);if(r.size===0)return;let s=this.ctx.journal.state(h,e),o;for(let{verification:a,armedAt:c}of r.values()){let l=L(s,a,c,i);if(l?.decision==="reject")return l;o??=l}return o}observed(e){let{judged:t,delegated:r}=this.reading(e),i=this.ctx.journal.state(h,e);return JSON.stringify([[...t].map(([s,{verification:o,armedAt:a}])=>[s,a,"unreadable"in r?null:_(i,o,a,r.at)]),r])}reading(e){let t=new Map,r=B(this.ctx.journal,e);for(let i of this.gates.get(e)?.values()??[])t.set(m(i.command,i.cwd),{verification:i,armedAt:null});return r!==null&&t.set(m(r.verification.command,r.verification.cwd),{verification:r.verification,armedAt:r.at}),{judged:t,delegated:t.size===0?{at:null}:D(this.ctx.journal,e)}}inPlace(e,t){return[...(t===null?[...this.ctx.journal.state(w,e).installations.current.values()].map(({presetId:s,config:o})=>({presetId:s,config:o})):t.installations.map(({preset_id:s,config:o})=>({presetId:s,config:o}))).flatMap(({presetId:s,config:o})=>{if(s!==p)return[];let{command:a,cwd:c}=o;return[{command:a,cwd:G(c)}]}),...this.gates.get(e)?.values()??[]]}required(e,t){let{owners:r}=this.ctx.journal.origins.requiredOwners(t??e);return r.some(({owner:i})=>i===v)}};var ae=E.strictObject({command:E.string().trim().min(1),cwd:E.string().refine(se,"An absolute path: resolve it against the thread's cwd before installing")}),Oe=F({id:p,placement:"thread",schema:ae,inject:["journal","verify"],setup(n,e,t){let r=V(n,"verify","verifyPreset"),i={command:e.command,cwd:oe(e.cwd)},s=`\`${i.command}\` (in ${i.cwd})`;M(n,{event:z,rank:1,current:()=>i,render:()=>R("verification",`This conversation verifies its work with ${s}: after changing files, run it and fix what fails before you finish.`)}),n.effect(()=>r.gate(t.thread.id,i))}}),Fe={name:"lagent:verify",inject:["threads","journal"],async apply(n){O(n,"verify"),await n.plugin(b)}};export{v as VERIFY_OWNER,p as VERIFY_PRESET,Y as VERIFY_REMINDERS,ae as VerifyConfigSchema,Fe as verify,Oe as verifyPreset};
+import{t as K,w as W,x as U}from"../../chunks/CANPZYTH.js";import"../../chunks/VYMT4TXD.js";import"../../chunks/MNJ4SRF7.js";import{a as C,d as J}from"../../chunks/JFZZXVWD.js";import"../../chunks/N6IXG2VL.js";import"../../chunks/6DRCKZ2C.js";import"../../chunks/7LI64H5X.js";import"../../chunks/3UMZMPWW.js";import"../../chunks/34KW6VNQ.js";import"../../chunks/KUZCL2SH.js";import"../../chunks/CQEVREBT.js";import"../../chunks/HK6ZSONF.js";import{a as N}from"../../chunks/7VAPNE3L.js";import"../../chunks/EPYQ5M3B.js";import"../../chunks/5IRF47YB.js";import{a as M}from"../../chunks/OL5A6ITQ.js";import"../../chunks/JFX2MXBA.js";import{c as P,d as T}from"../../chunks/S34ZA2R6.js";import{b as g,e as Y}from"../../chunks/6FRNHMCV.js";import"../../chunks/CUK7CGC7.js";import{s as v}from"../../chunks/BPRCULZH.js";import"../../chunks/FJLU4UH3.js";import"../../chunks/DDANMY45.js";import{h as F}from"../../chunks/BBCW2FZK.js";import{a as V}from"../../chunks/MMNNZCBO.js";import"../../chunks/G44LG6VL.js";import"../../chunks/D4PQP5MA.js";import{isAbsolute as pe,resolve as ge}from"node:path";import{z as O}from"zod";import{isAbsolute as ae,resolve as oe}from"node:path";import{z as u}from"zod";var w="verify",k=2,j=u.strictObject({command:u.string(),cwd:u.string()}),B=g({plugin:"lagent:verify",kind:"notice",version:2,schema:j}),$=g({plugin:"lagent:verify",kind:"repair",version:1,schema:j}),D=g({plugin:"lagent:verify",kind:"rejected",version:2,schema:u.strictObject({...j.shape,cause:u.enum(["denied","unverified","execution"])})}),se=u.strictObject({owner:u.string().min(1),assignment:u.string().min(1),generation:u.number().int().nonnegative(),input:u.string().min(1),command:u.string().trim().min(1),cwd:u.string().refine(ae,"An absolute path")}),q=g({plugin:"lagent:verify",kind:"requirement",version:1,schema:se});function I(n){let e=q.parse(n);return{...e,cwd:oe(e.cwd)}}import{resolve as S}from"node:path";import{Service as ue}from"@leuduan/cordis";import{z as me}from"zod";import{resolve as ce}from"node:path";import{z as G}from"zod";var m=(n,e)=>JSON.stringify([n,e]),f=(n,e)=>n===null?e:e===null?n:Math.max(n,e),y=F({key:"lagent:verify:facts",init:()=>({calls:new Map,changedAt:null,personAt:null,repairs:new Map,attempts:new Map}),apply(n,e){switch(e.type){case"assistant/message":for(let t of e.data.response.message.tool_calls)t.arguments!==null&&(t.name==="edit_files"||t.name==="run_command")&&n.calls.set(t.call_id,null);break;case"tool/authorization":n.calls.has(e.data.call_id)&&e.data.decision==="allow"&&(n.calls.set(e.data.call_id,e.seq),n.changedAt=e.seq);break;case"tool/result":{n.calls.get(e.data.result.call_id)!=null&&(n.changedAt=e.seq),n.calls.delete(e.data.result.call_id);break}case"execution/requested":{let{owner:t,operation:r,candidate_seq:i,key:a}=e.data;if(t!=="lagent:verify"&&(r.name==="run_command"||r.name==="edit_files")&&n.calls.set(`runtime_${e.seq}`,null),t!=="lagent:verify"||r.name!=="run_command")break;let{command:o,workdir:c}=r.arguments;if(typeof o!="string"||typeof c!="string")break;n.attempts.set(e.seq,{seq:e.seq,candidate:i,key:a,verification:{command:o,cwd:ce(c)},authorizedAt:null,resultAt:null,result:null});break}case"execution/authorization":{let t=`runtime_${e.data.request_seq}`;n.calls.has(t)&&e.data.decision==="allow"&&(n.calls.set(t,e.seq),n.changedAt=e.seq);let r=n.attempts.get(e.data.request_seq);r!==void 0&&e.data.decision==="allow"&&(r.authorizedAt=e.seq);break}case"execution/result":{let t=`runtime_${e.data.request_seq}`;n.calls.get(t)!=null&&(n.changedAt=e.seq),n.calls.delete(t);let r=n.attempts.get(e.data.request_seq);r!==void 0&&(r.resultAt=e.seq,r.result=e.data.result);break}case"ext":C.read(e)!==void 0&&(n.changedAt=e.seq);break;case"input/message":if(e.data.source===null)n.personAt=e.seq,n.repairs.clear();else{let t=$.readContribution(e);if(t!==void 0){let r=m(t.command,t.cwd);n.repairs.set(r,[...n.repairs.get(r)??[],e.seq])}}break}return n}});function de(n){let e=n.changedAt;for(let t of n.attempts.values())t.authorizedAt!==null&&(e=f(e,f(t.authorizedAt,t.resultAt)));return e}var A=N({key:"verify",version:2,schema:G.strictObject({changed_at:G.number().int().positive().nullable()}),applies:()=>!0,compute:(n,e)=>({changed_at:de(n.state(y,e))})});function R(n,e){let t=new Set([e]);for(let r of n.origins.subtree(e,{self:!0})){let{origin:i,thread_id:a}=r;i===null||i.cause.kind==="assignment"||!t.has(i.caller_thread_id)||t.add(a)}return t}function H(n,e){let t=null;for(let r of R(n,e)){if(r===e)continue;let i=A.read(n,r);if(i.status!=="available")return{unreadable:`agent ${r}: ${i.status==="unavailable"?i.reason:"its changes are not recorded"}`};t=f(t,i.value.changed_at)}return{at:t}}var L=n=>JSON.stringify([n.owner,n.assignment,n.generation]),Q=q.projection({key:"requirements",init:()=>new Map,onFork:"reset",apply(n,e,t){let r=L(e);return n.has(r)||n.set(r,{value:e,seq:t.seq}),n}});function X(n,e,t,r){let i=t?void 0:n.state(Q,e).get(L(r));return i===void 0?[q.entry(r,{threadId:e})]:JSON.stringify(i.value)===JSON.stringify(r)?[]:{refuse:{message:`Verification for assignment ${r.assignment} is already owed on ${e}, differently`}}}function E(n,e){let t=n.state(Q,e);if(t.size===0)return null;let{inputs:r}=n.state(v,e),i=K(n,e),a=null;for(let{value:o,seq:c}of t.values()){let d=r.get(o.input)?.claimedAt??null;if(d===null)continue;let l=Math.max(c,d);i!==null&&i>l||(a===null||a.at<l)&&(a={verification:{command:o.command,cwd:o.cwd},at:l})}return a}import{resolve as Z}from"node:path";var le=(n,e)=>JSON.stringify([n.command,n.cwd,e]);function ee(n,e){let{metadata:t}=n;return!n.is_error&&t.exit_code===0&&t.timed_out===!1&&t.aborted===!1&&t.stop_failed===!1&&typeof t.cwd=="string"&&Z(t.cwd)===e}function x(n,e,t,r){let i=m(e.command,e.cwd),a=f(n.changedAt,r),o=null;for(let d of n.attempts.values())d.authorizedAt!==null&&(m(d.verification.command,d.verification.cwd)===i&&d.result!==null&&ee(d.result,e.cwd)?o=f(o,d.authorizedAt):a=f(a,f(d.authorizedAt,d.resultAt)));let c=f(a,t);return{mutatedAt:a,provenAt:o,fresh:c===null||o!==null&&o>c,repairs:(n.repairs.get(i)??[]).filter(d=>t===null||d>t).length}}function te(n,e,t,r,i){let a=`\`${e.command}\` (in ${e.cwd})`,o=(h,ie="unverified")=>D.rejection(h,{...e,cause:ie});if("unreadable"in r)return o(`Delegated changes cannot be read (${r.unreadable}), so ${a} cannot be verified.`);let c=x(n,e,t,r.at);if(c.fresh)return;let d=le(e,t),l=[...n.attempts.values()].find(h=>h.candidate===i&&h.key===d);if(l===void 0||l.result===null&&l.authorizedAt===null)return{decision:"prepare",request:{owner:"lagent:verify",key:d,operation:{name:"run_command",arguments:{command:e.command,workdir:e.cwd}}}};let s=l.result;if(s===null)return o(`Runtime verification ${a} may have started but its result is unknown. Reconcile its command and cleanup before an explicit retry.`,"execution");if(s.metadata.not_dispatched===!0)return o(`Runtime verification ${a} was not dispatched; no process was started. It was not replayed automatically. Submit a new candidate to verify again.
+${s.output}`,"execution");if(s.metadata.runtime_denied===!0)return o(`Runtime verification ${a} was denied: ${s.output}`,"denied");if(typeof s.metadata.cwd=="string"&&Z(s.metadata.cwd)!==e.cwd)return o(`Runtime verification ran in ${s.metadata.cwd}, rather than the pinned directory ${e.cwd}.`,"execution");if(s.metadata.aborted===!0&&s.metadata.stop_failed===!1){let h=s.metadata.not_started===!0?"was cancelled before execution; no process was started.":"was interrupted; process cleanup completed, but file changes were not rolled back.";return o(`Runtime verification ${a} ${h} It was not replayed automatically. Submit a new candidate to verify again.
+${s.output}`,"execution")}if(s.metadata.stop_failed!==!1||s.metadata.aborted===!0||typeof s.metadata.exit_code!="number"&&s.metadata.timed_out!==!0)return o(`Runtime verification ${a} has no usable completed result or cleanup evidence: ${s.output}`,"execution");let p=ee(s,e.cwd),re=p?`Its proof became stale after recorded activity at row ${c.mutatedAt??t}.`:`It failed (exit ${s.metadata.exit_code}${s.metadata.timed_out===!0?", timed out":""}).`,z=`Runtime verification ${a}: ${re}
+${s.output}`;return c.repairs>=k?o(`${z}
+The ${k} repair continuations are spent; this candidate is rejected.`):{decision:"continue",message:$.contribution({content:`${z}
+${p?"Wait for the invalidating work to settle, inspect any changes, and submit again; the command itself succeeded.":"Fix the reported problem and submit again."} Verification runs automatically; ordinary command calls do not satisfy it.`},e)}}function fe(n){if(n.kind==="send")return null;if(n.kind==="create"){let{origin:i,spec:a}=n.opening;return{origin:i,requires:a.requires,installations:a.installations}}let{origin:e,requires:t,inherits:r}=n.opening;return{origin:e,requires:t,installations:r.installations}}var b="lagent:verify",ne=g({plugin:b,kind:"eligibility",version:1,schema:me.strictObject({})}),_=class extends ue{static inject=["threads","journal","commands"];gates=new Map;constructor(e){super(e,"verify"),e.effect(()=>e.threads.registerOwner({owner:b}).dispose),e.effect(()=>e.journal.register(y)),A.register(e),e.on("lagent/turn/stop",t=>this.judge(t))}gate(e,t){let r=m(t.command,S(t.cwd)),i=E(this.ctx.journal,e);if(i!==null&&m(i.verification.command,i.verification.cwd)!==r)throw new Error(`Thread ${e} owes a different pinned assignment verification`);if([...this.gates.get(e)?.values()??[]].some(c=>m(c.command,c.cwd)!==r))throw new Error(`Thread ${e} already has a different verification gate`);let a=Symbol("verify gate"),o=this.gates.get(e);return o===void 0&&this.gates.set(e,o=new Map),o.set(a,{command:t.command,cwd:S(t.cwd)}),()=>{o.delete(a),o.size===0&&this.gates.get(e)===o&&this.gates.delete(e)}}owed(e){let{inputId:t,...r}=e,i=I({...r,input:t}),a=m(i.command,i.cwd);return o=>{let{threadId:c}=o,d=fe(o);if(!this.required(c,d))return{refuse:{message:`Thread ${c} owes verification, so it must require ${b}`}};let l=this.inPlace(c,d).find(s=>m(s.command,s.cwd)!==a);return l!==void 0?{refuse:{message:`Thread ${c} verifies with \`${l.command}\` (in ${l.cwd}), not the \`${i.command}\` (in ${i.cwd}) this assignment pins`}}:X(this.ctx.journal,c,d!==null,i)}}judge({threadId:e,observe:t,answer:r}){t(()=>this.observed(e,r.seq));let{judged:i,delegated:a}=this.reading(e);if(i.size===0)return;let o=this.ctx.journal.state(y,e),c=[...i.values()].map(({verification:s,armedAt:p})=>te(o,s,p,a,r.seq)),d=c.find(s=>s?.decision==="reject");if(d!==void 0)return d;if([...i.values()].some(({verification:s,armedAt:p})=>"unreadable"in a?!0:p!==null||x(o,s,p,a.at).mutatedAt!==null)){let s=this.work(e);if(s.unresolved.length>0)return ne.rejection(`Verification cannot proceed while work is unresolved: ${s.unresolved.join("; ")}`,{});if(s.draining.length>0)return{decision:"continue",message:ne.contribution({content:`Before automatic verification, wait for relevant commands and agents to settle, or stop them: ${s.draining.join("; ")}`},{})}}return c.find(s=>s!==void 0)}observed(e,t){let{judged:r,delegated:i}=this.reading(e),a=this.ctx.journal.state(y,e);return JSON.stringify([[...r].map(([o,{verification:c,armedAt:d}])=>[o,d,"unreadable"in i?null:x(a,c,d,i.at)]),i,r.size===0?null:this.work(e),[...a.attempts.values()].filter(o=>o.candidate===t&&o.resultAt!==null).map(o=>[o.key,o.resultAt])])}work(e){let t=R(this.ctx.journal,e),r=[],i=[];for(let a of t){let o=J(this.ctx,a,{descendants:!1});r.push(...o.draining),i.push(...o.unresolved);for(let c of W(this.ctx.journal,a))r.push(`thread ${a}: ${c.targets.length} agent stops are pending`)}for(let a of U(this.ctx.journal,e))t.has(a.childId)&&(a.state==="unavailable"?i.push(`agent ${a.childId}: ${a.error}`):(a.state==="open"||a.draining||a.cleanupPending)&&r.push(`agent ${a.childId} has not settled`));return{draining:r,unresolved:i}}reading(e){let t=new Map,r=E(this.ctx.journal,e);for(let i of this.gates.get(e)?.values()??[])t.set(m(i.command,i.cwd),{verification:i,armedAt:null});return r!==null&&t.set(m(r.verification.command,r.verification.cwd),{verification:r.verification,armedAt:r.at}),{judged:t,delegated:t.size===0?{at:null}:H(this.ctx.journal,e)}}inPlace(e,t){return[...(t===null?[...this.ctx.journal.state(v,e).installations.current.values()].map(({presetId:a,config:o})=>({presetId:a,config:o})):t.installations.map(({preset_id:a,config:o})=>({presetId:a,config:o}))).flatMap(({presetId:a,config:o})=>{if(a!==w)return[];let{command:c,cwd:d}=o;return[{command:c,cwd:S(d)}]}),...this.gates.get(e)?.values()??[]]}required(e,t){let{owners:r}=this.ctx.journal.origins.requiredOwners(t??e);return r.some(({owner:i})=>i===b)}};var he=O.strictObject({command:O.string().trim().min(1),cwd:O.string().refine(pe,"An absolute path: resolve it against the thread's cwd before installing")}),et=M({id:w,placement:"thread",schema:he,inject:["journal","verify"],setup(n,e,t){let r=P(n,"verify","verifyPreset"),i={command:e.command,cwd:ge(e.cwd)},a=`\`${i.command}\` (in ${i.cwd})`;Y(n,{event:B,rank:1,current:()=>i,render:()=>V("verification",`Verification runs automatically with ${a} when you submit or finish after changes. Test as useful while working, settle your commands and agents, then submit. Address runtime failure feedback; ordinary command calls do not satisfy verification.`)}),n.effect(()=>r.gate(t.thread.id,i))}}),tt={name:"lagent:verify",inject:["threads","journal","commands"],async apply(n){T(n,"verify"),await n.plugin(_)}};export{b as VERIFY_OWNER,w as VERIFY_PRESET,k as VERIFY_REPAIRS,he as VerifyConfigSchema,tt as verify,et as verifyPreset};

package/dist/plugins/verify/judgement.d.ts

@@ -0,0 +1,16 @@
+import type { StopVerdict } from '../../loop/index.js';
+import type { Seq } from '../../records/journal.js';
+import type { ToolResult } from '../../records/toolResult.js';
+import type { ReadonlyState } from '../../util/foldState.js';
+import { type Verification } from './record.js';
+import { type VerifyFacts, type DelegatedChange } from './state.js';
+export declare const attemptKey: (verification: Verification, armedAt: Seq | null) => string;
+export declare function passed(result: ReadonlyState<ToolResult>, cwd: string): boolean;
+export declare function judgment(facts: ReadonlyState<VerifyFacts>, verification: Verification, armedAt: Seq | null, delegatedAt: Seq | null): {
+    mutatedAt: number | null;
+    provenAt: number | null;
+    fresh: boolean;
+    repairs: number;
+};
+/** A pure completion plan, or bounded feedback from this candidate's one durable attempt. */
+export declare function verdict(facts: ReadonlyState<VerifyFacts>, verification: Verification, armedAt: Seq | null, delegated: DelegatedChange, candidateSeq: Seq): StopVerdict | undefined;