@leuduan/lagent 0.1.2 → 44.0.0

package/dist/plugins/delegations/record.d.ts

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import { type PluginJournal } from '../../journal/index.js';
-import { type AnswerCheck } from '../../loop/index.js';
-import type { JournalEvent, Seq, ThreadOrigin, ThreadSummary, ToolResult, ToolResultPayloadInput, TurnEndReason } from '../../models/index.js';
+import { type AnswerCheck } from '../../state/index.js';
+import type { JournalEvent, Seq, ThreadOrigin, ThreadSummary, TurnEndReason } from '../../records/journal.js';
+import type { ToolResult, ToolResultPayloadInput } from '../../records/toolResult.js';
 import type { DeepReadonly } from '../../util/json.js';
 import { type AssignmentOutcome } from './request.js';
 import type { ReadonlyState } from '../../util/foldState.js';
@@ -84,7 +85,7 @@ export declare const delegationRow: {
     } | {
         op: "stop_cleaned";
         task_id: string;
-    }) => import("../../models/index.js").ExtensionRecord;
+    }) => import("../../records/journal.js").ExtensionRecord;
     parse: (value: {
         op: "started";
         task_id: string;
@@ -235,7 +236,7 @@ export declare const delegationRow: {
         task_id: string;
     } | undefined;
     contribution(message: {
-        role?: import("../../models/index.js").InputRole;
+        role?: import("../../records/journal.js").InputRole;
         content: string | readonly import("../../llm/content.js").ContentPartInput[];
     }, value: {
         op: "started";
@@ -266,8 +267,8 @@ export declare const delegationRow: {
         task_id: string;
     }, options?: {
         sourceSeqs?: readonly Seq[];
-    }): import("../../models/index.js").StepContribution;
-    matchesSource(record: DeepReadonly<import("../../models/index.js").ExtensionRecord>): boolean;
+    }): import("../../records/journal.js").StepContribution;
+    matchesSource(record: DeepReadonly<import("../../records/journal.js").ExtensionRecord>): boolean;
     rejection(reason: string, value: {
         op: "started";
         task_id: string;
@@ -298,7 +299,7 @@ export declare const delegationRow: {
     }): {
         decision: "reject";
         reason: string;
-        source: import("../../models/index.js").ExtensionRecord;
+        source: import("../../records/journal.js").ExtensionRecord;
     };
     readContribution: (event: JournalEvent) => {
         op: "started";
@@ -328,7 +329,7 @@ export declare const delegationRow: {
         op: "stop_cleaned";
         task_id: string;
     } | undefined;
-    readSource: (source: DeepReadonly<import("../../models/index.js").ExtensionRecord> | null) => {
+    readSource: (source: DeepReadonly<import("../../records/journal.js").ExtensionRecord> | null) => {
         op: "started";
         task_id: string;
         origin: {
@@ -356,7 +357,7 @@ export declare const delegationRow: {
         op: "stop_cleaned";
         task_id: string;
     } | undefined;
-    told: import("../../journal/projection.js").PluginProjection<import("../../kit/extension.js").ToldNotices<{
+    told: import("../../journal/projection.js").PluginProjection<import("../../services/extensionEvents.js").ToldNotices<{
         op: "started";
         task_id: string;
         origin: {
@@ -589,7 +590,7 @@ export declare const DELEGATIONS_OWNER = "lagent:delegations";
  */
 export declare const taskManaged: (summary: Pick<ThreadSummary, "requires">) => boolean;
 /** A managed thread's latest task, contributed to its catalog entry while delegations is mounted. */
-export declare const latestTask: import("../../services/contributions.js").ContributionDefinition<{
+export declare const latestTask: import("../../services/catalogContributions.js").ContributionDefinition<{
     task_id: string;
     origin: {
         caller_thread_id: string;

package/dist/plugins/delegations/request.d.ts

@@ -1,11 +1,14 @@
 import type { Context } from '@leuduan/cordis';
 import { z } from 'zod';
-import type { ModelRoute } from '../../llm/index.js';
-import type { InvocationContext, ModelSelection, WriteRows } from '../../loop/index.js';
-import type { Seq, ThreadEnvironment, ToolResultPayloadInput, TurnEndReason } from '../../models/index.js';
+import type { ModelRoute } from '../../llm/provider.js';
+import type { InvocationContext } from '../../loop/index.js';
+import type { ModelSelection } from '../../llm/provider.js';
+import type { WriteRows } from '../../state/index.js';
+import type { Seq, ThreadEnvironment, TurnEndReason } from '../../records/journal.js';
+import type { ToolResultPayloadInput } from '../../records/toolResult.js';
 import type { DeepReadonly } from '../../util/json.js';
-import type { InitialInstallationInput } from '../../services/presets.js';
-import type { Thread } from '../../services/thread.js';
+import type { InitialInstallationInput } from '../../services/presets/installations.js';
+import type { Thread } from '../../services/threads/index.js';
 import type { StopBy, TaskRef, TaskSettlement } from './record.js';
 import type { RoleConfig } from './role.js';
 /**

package/dist/plugins/delegations/role.d.ts

@@ -23,7 +23,7 @@ export declare const ROLE_PRESET = "role";
  * here would stop existing children from ever activating once a root tool is renamed. The
  * delegations service checks them before creating a child.
  */
-export declare const rolePreset: import("../../services/preset.js").Preset<z.ZodObject<{
+export declare const rolePreset: import("../../services/presets/definition.js").Preset<z.ZodObject<{
     id: z.ZodString;
     basePrompt: z.ZodString;
     tools: z.ZodArray<z.ZodString>;

package/dist/plugins/delegations/service.d.ts

@@ -1,9 +1,10 @@
 import { Service, type Context } from '@leuduan/cordis';
 import { z } from 'zod';
 import type { InvocationContext, WaitRequest } from '../../loop/index.js';
-import type { ThreadSummary, ToolResultPayloadInput } from '../../models/index.js';
+import type { ThreadSummary } from '../../records/journal.js';
+import type { ToolResultPayloadInput } from '../../records/toolResult.js';
 import type { AppendEntry, PluginJournal } from '../../journal/index.js';
-import type { ToolReply } from '../../kit/tool.js';
+import type { ToolReply } from '../../services/tools.js';
 import { type StopOptions, type StopOutcome } from './cleanup.js';
 import { type TaskRef, type TaskState } from './record.js';
 import { type AdmissionRefused, type AssignmentOwner, type DelegationRequest, type AssignmentOwnerHandle } from './request.js';
@@ -16,7 +17,7 @@ declare module '@leuduan/cordis' {
 }
 export declare const DelegationsConfigSchema: z.ZodObject<{
     maxOpenTasks: z.ZodNumber;
-    clock: z.ZodCustom<import("../../kit/timers.js").Clock, import("../../kit/timers.js").Clock>;
+    clock: z.ZodCustom<import("../../util/timers.js").Clock, import("../../util/timers.js").Clock>;
 }, z.core.$strict>;
 export type DelegationsConfig = z.input<typeof DelegationsConfigSchema>;
 /**
@@ -83,7 +84,7 @@ export type ReadOutcome = {
  * on its live owner's say, with no call, receipt or wait, and owes no notice. A blocking call suspends on a
  * durable wait (`waitFor`) that this service resolves with the task's answer; a background call
  * returns a receipt and `read_agent` waits the same way. The waits, slots and constraint are
- * described in `docs/delegation.md`. A call's task ends no later than its opening call's result, unless
+ * described in `docs/records/delegation.md`. A call's task ends no later than its opening call's result, unless
  * that result is its receipt:
  * the service watches `tool/result` rows, and one citing a task's opening call ends the task if it
  * is still open, however core answered the call, a deny, an unregistered tool, an aborted turn or a
@@ -149,9 +150,9 @@ export declare class DelegationsService extends Service<DelegationsConfig> {
     private readonly owners;
     /** Owners' tasks whose settling their owner was told of in this process. */
     private readonly settledTold;
-    /** The task constraint's registration with the owner, through which the wait book resolves delegation waits. */
+    /** The task constraint's registration with the owner, through which the wait resolver resolves delegation waits. */
     private constraint;
-    /** Every delegation wait, from its declaration to its call's answer, and when and with what it resolves (`waitBook.ts`). */
+    /** Every delegation wait, from its declaration to its call's answer, and when and with what it resolves (`waitResolver.ts`). */
     private readonly waits;
     private closing;
     constructor(ctx: Context, config: DelegationsConfig);
@@ -493,7 +494,7 @@ export declare class DelegationsService extends Service<DelegationsConfig> {
     /** Resolves once the run that served `task`, if still pending, is held or settled. */
     private runStopped;
     /**
-     * Hands every row to the wait book, a turn's end and a receipt to the notice owner, and ends a task whose opening call was
+     * Hands every row to the wait resolver, a turn's end and a receipt to the notice owner, and ends a task whose opening call was
      * answered other than by its receipt. The stop is asked for here, synchronously, and the cleanup
      * owner queues its write before returning, so it lands before anything the caller writes after its
      * result.
@@ -539,7 +540,7 @@ export declare class DelegationsService extends Service<DelegationsConfig> {
      */
     private openTaskOf;
     /**
-     * Stops the wait book deciding and lets each decision under way land; lets each call in flight,
+     * Stops the wait resolver deciding and lets each decision under way land; lets each call in flight,
      * opening its task, be answered on its aborted turn, so a result other than its receipt or its
      * wait stops its task, and each owner's start in flight finish, a new one being refused; then
      * waits for the stops and their cleanups while the journal still takes their rows. Tasks whose calls wait durably stay open, as

package/dist/plugins/delegations/{waitBook.d.ts → waitResolver.d.ts}

@@ -1,9 +1,9 @@
 import type { Context } from '@leuduan/cordis';
-import { type Clock } from '../../kit/timers.js';
-import type { JournalEvent } from '../../models/index.js';
-import type { OwnerHandle } from '../../services/owner.js';
+import { type Clock } from '../../util/timers.js';
+import type { JournalEvent } from '../../records/journal.js';
+import type { OwnerHandle } from '../../services/threads/index.js';
 import type { NoticeDelivery } from './notices.js';
-import { type ReadWait, type ReadWhy } from './waits.js';
+import { type ReadWait, type ReadWhy } from './waitContracts.js';
 /**
  * Why a read wait returns now, or `null` while it waits: a named task ended (`settled`); with
  * `activity`, a named child recorded a row after the read looked; nothing can advance a named open
@@ -12,8 +12,8 @@ import { type ReadWait, type ReadWhy } from './waits.js';
  * constraint. Read from the catalog and the owner, synchronously.
  */
 export declare function readCondition(ctx: Context, wait: ReadWait): ReadWhy | null;
-/** What the book is handed by the service that mounts it. */
-export type WaitBookOptions = {
+/** What the resolver is handed by the service that mounts it. */
+export type WaitResolverOptions = {
     /** The clock `read_agent`'s deadlines and the retries of failed decisions are kept on. */
     readonly clock: Clock;
     /** Resolves once the task state can be served: no decision is taken before. */
@@ -44,7 +44,7 @@ export type WaitBookOptions = {
  * satisfied while the process was down; the drain stops deciding at shutdown, leaving what is due to
  * the next startup's repair.
  */
-export declare class WaitBook {
+export declare class WaitResolver {
     /** Every delegation wait whose call is not answered yet, by caller and call. */
     private readonly waits;
     /** The unresolved waits by each child they name. */
@@ -59,9 +59,9 @@ export declare class WaitBook {
     private closing;
     private readonly ctx;
     private readonly options;
-    constructor(ctx: Context, options: WaitBookOptions);
+    constructor(ctx: Context, options: WaitResolverOptions);
     /**
-     * What a row does to the book: a declaration naming delegations is booked; a resolution stops
+     * What a row does to the resolver: a declaration naming delegations is booked; a resolution stops
      * deciding its wait, and a result of a booked call forgets it, telling a blocking call's task's
      * child, whose authority the call was; any row of a child a wait names decides that wait again, so
      * `until: 'activity'` sees the row and a task that ended is seen at once.

package/dist/plugins/diagnostics/digest.d.ts

@@ -1,4 +1,4 @@
-import type { ConversationMessage } from '../../llm/index.js';
+import type { ConversationMessage } from '../../llm/primitives.js';
 import { type DeepReadonly } from '../../util/json.js';
 import type { SentModelRequest } from '../../loop/index.js';
 /** Enough of a fingerprint to tell one value from another across restarts. */

package/dist/plugins/diagnostics/index.d.ts

@@ -1,7 +1,7 @@
 import type { Plugin } from '@leuduan/cordis';
 import { z } from 'zod';
 import type { PluginJournal } from '../../journal/index.js';
-import type { RowRef } from '../../loop/index.js';
+import type { RowRef } from '../../state/index.js';
 /**
  * How a fork's first request compares with its source's request at the cut: whether it sent the
  * same head and route, and extended the same messages. `unavailable` when there is nothing to

package/dist/plugins/diagnostics/index.js

@@ -1 +1 @@
-import{b as q}from"../../chunks/DRYAN665.js";import{d as y}from"../../chunks/2OSESBIL.js";import"../../chunks/YLNJXQ3Z.js";import"../../chunks/DDANMY45.js";import{d as c}from"../../chunks/37YOGDGY.js";import"../../chunks/KESCTXGO.js";import"../../chunks/TYTQRLTX.js";import{A as _}from"../../chunks/D7E6EWIE.js";import{z as r}from"zod";import{createHash as I}from"node:crypto";var m=e=>I("sha256").update(e).digest("hex").slice(0,12);function b(e){let{messages:s,agentName:t,threadId:a,llmCallId:o,purpose:n,...u}=e;return m(c(u))}var f=e=>m(c(e));var S=r.strictObject({status:r.enum(["matched","mismatched","unavailable"]),differs:r.array(r.enum(["head","route","messages"])),replaced:r.number().int().positive().nullable()}),j=r.strictObject({purpose:r.enum(["step","auxiliary"]),system_prompt_chars:r.number().int().nonnegative(),system_prompt_digest:r.string(),head_digest:r.string(),messages_digest:r.string(),prefix_check:S.nullable()}),x=q({plugin:"lagent:diagnostics",kind:"request",version:1,schema:j}),L={name:"lagent:diagnostics",inject:["journal"],apply(e){y(e,"diagnostics"),e.on("lagent/llm/sent",async({request:s,row:t})=>{let a=_(s.systemPrompt),o=b(s),n=t.type==="llm/request"?E(e.journal,t,o,s.messages):null;await x.append(e.journal,{purpose:s.purpose,system_prompt_chars:a.length,system_prompt_digest:m(a),head_digest:o,messages_digest:f(s.messages),prefix_check:n},{threadId:t.thread_id,sourceSeqs:[t.seq]}),n?.status==="mismatched"&&n.replaced===null&&e.reportError(new Error(`Thread ${t.thread_id}: a fork's first request differs from its source's in ${n.differs.join(", ")}`))})}};function D(e,s){for(let t of e.rowsAfter(s.threadId,s.seq)){if(!t.source_seqs.includes(s.seq))continue;let a=x.read(t);if(a!==void 0)return a}}function E(e,s,t,a){let o=e.rows(s.thread_id),n=o[0];if(n?.type!=="thread/spawned"||n.data.fork===null||o.some(i=>i.type==="llm/request"&&i.seq!==s.seq))return null;let{thread_id:u,seq:v}=n.data.fork,d=e.lineage(u,v).findLast(i=>i.type==="llm/request");if(d===void 0||d.type!=="llm/request")return k;let p=D(e,{threadId:d.thread_id,seq:d.seq});if(p===void 0)return k;let l=[];t!==p.head_digest&&l.push("head"),c(s.data.route)!==c(d.data.route)&&l.push("route");let g=d.data.message_count,h=null;return(a.length<g||f(a.slice(0,g))!==p.messages_digest)&&(l.push("messages"),h=e.lineage(s.thread_id).find(i=>i.type==="surface/replaced"&&i.seq>d.seq&&i.seq<s.seq)?.seq??null),{status:l.length===0?"matched":"mismatched",differs:l,replaced:h}}var k={status:"unavailable",differs:[],replaced:null};export{S as PrefixCheckSchema,L as diagnostics,D as requestMeasures};
+import{d as y}from"../../chunks/S34ZA2R6.js";import{b as q}from"../../chunks/6FRNHMCV.js";import"../../chunks/CUK7CGC7.js";import"../../chunks/BPRCULZH.js";import"../../chunks/DDANMY45.js";import{c}from"../../chunks/BBCW2FZK.js";import"../../chunks/MMNNZCBO.js";import"../../chunks/G44LG6VL.js";import{A as _}from"../../chunks/D4PQP5MA.js";import{z as r}from"zod";import{createHash as I}from"node:crypto";var m=e=>I("sha256").update(e).digest("hex").slice(0,12);function b(e){let{messages:s,agentName:t,threadId:a,llmCallId:o,purpose:n,...u}=e;return m(c(u))}var f=e=>m(c(e));var S=r.strictObject({status:r.enum(["matched","mismatched","unavailable"]),differs:r.array(r.enum(["head","route","messages"])),replaced:r.number().int().positive().nullable()}),j=r.strictObject({purpose:r.enum(["step","auxiliary"]),system_prompt_chars:r.number().int().nonnegative(),system_prompt_digest:r.string(),head_digest:r.string(),messages_digest:r.string(),prefix_check:S.nullable()}),x=q({plugin:"lagent:diagnostics",kind:"request",version:1,schema:j}),L={name:"lagent:diagnostics",inject:["journal"],apply(e){y(e,"diagnostics"),e.on("lagent/llm/sent",async({request:s,row:t})=>{let a=_(s.systemPrompt),o=b(s),n=t.type==="llm/request"?E(e.journal,t,o,s.messages):null;await x.append(e.journal,{purpose:s.purpose,system_prompt_chars:a.length,system_prompt_digest:m(a),head_digest:o,messages_digest:f(s.messages),prefix_check:n},{threadId:t.thread_id,sourceSeqs:[t.seq]}),n?.status==="mismatched"&&n.replaced===null&&e.reportError(new Error(`Thread ${t.thread_id}: a fork's first request differs from its source's in ${n.differs.join(", ")}`))})}};function D(e,s){for(let t of e.rowsAfter(s.threadId,s.seq)){if(!t.source_seqs.includes(s.seq))continue;let a=x.read(t);if(a!==void 0)return a}}function E(e,s,t,a){let o=e.rows(s.thread_id),n=o[0];if(n?.type!=="thread/spawned"||n.data.fork===null||o.some(i=>i.type==="llm/request"&&i.seq!==s.seq))return null;let{thread_id:u,seq:v}=n.data.fork,d=e.lineage(u,v).findLast(i=>i.type==="llm/request");if(d===void 0||d.type!=="llm/request")return k;let p=D(e,{threadId:d.thread_id,seq:d.seq});if(p===void 0)return k;let l=[];t!==p.head_digest&&l.push("head"),c(s.data.route)!==c(d.data.route)&&l.push("route");let g=d.data.message_count,h=null;return(a.length<g||f(a.slice(0,g))!==p.messages_digest)&&(l.push("messages"),h=e.lineage(s.thread_id).find(i=>i.type==="surface/replaced"&&i.seq>d.seq&&i.seq<s.seq)?.seq??null),{status:l.length===0?"matched":"mismatched",differs:l,replaced:h}}var k={status:"unavailable",differs:[],replaced:null};export{S as PrefixCheckSchema,L as diagnostics,D as requestMeasures};

package/dist/plugins/fileTools/config.d.ts

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+/**
+ * What the file tools are configured with, all of it the host's choice: the spawn environment and
+ * the trusted `rg` the search tools run (`rg: null` for none).
+ */
+export declare const FileToolsConfigSchema: z.ZodObject<{
+    environment: z.ZodRecord<z.ZodString, z.ZodString>;
+    rg: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type FileToolsConfig = z.input<typeof FileToolsConfigSchema>;

package/dist/plugins/{tools → fileTools}/editFiles.d.ts

@@ -1,7 +1,7 @@
-import type { Stats } from 'node:fs';
 import { z } from 'zod';
 import type { InvocationContext } from '../../loop/index.js';
-import type { ToolResultPayload } from '../../models/index.js';
+import type { ToolResultPayload } from '../../records/toolResult.js';
+import type { FileAccess } from '../../services/confinement/service.js';
 import { type UnifiedDiff } from '../../util/diff.js';
 /** The largest file `edit_files` reads, which bounds the memory one call takes. */
 export declare const MAX_EDIT_FILE_BYTES: number;
@@ -33,11 +33,14 @@ type Operation = z.infer<typeof OperationSchema>;
 /**
  * The one tool that changes files: creates, updates, deletes and moves, any number in one call.
  *
- * Everything is checked before anything is written: every path is placed inside the write roots
- * and outside every git directory, every file read, every hunk located, and the operations checked
- * against each other. Each file is then written to a temporary sibling and renamed over its target,
- * or hard-linked into place when it must not replace anything, so no reader sees half of it; a
- * filesystem without hard links gets no new file. There is no transaction across files: when one
+ * Everything is checked before anything is written: every path is judged by the call's file policy
+ * (read and write for what is changed or moved, write for what is created or moved to) and kept out
+ * of every git directory, every file read, every hunk located, and the operations checked against
+ * each other. Each file is then written to a temporary sibling and renamed over its target, or
+ * hard-linked into place when it must not replace anything, so no reader sees half of it; a
+ * filesystem without hard links gets no new file. The call touches files only through its
+ * operation's facade, which judges every step again as it happens, and never opens an existing file
+ * for writing. There is no transaction across files: when one
  * fails to commit, or the call is cancelled, the call stops there, before its next filesystem
  * change, and its result says which files were committed and which were not.
  *
@@ -46,25 +49,6 @@ type Operation = z.infer<typeof OperationSchema>;
  * change by anything else in between fails that file instead of being overwritten.
  */
 export declare const editFilesTool: import("../../loop/tool.js").Tool;
-/**
- * The filesystem calls `edit_files` makes, so a test can fail or delay one. Every other caller
- * passes {@link nodeEditFs}.
- */
-export type EditFs = {
-    readFile(path: string): Promise<Buffer>;
-    /** Creates `path`, which must not exist. */
-    writeFile(path: string, data: Buffer, options: {
-        mode?: number;
-    }): Promise<void>;
-    rename(from: string, to: string): Promise<void>;
-    link(existing: string, created: string): Promise<void>;
-    unlink(path: string): Promise<void>;
-    stat(path: string): Promise<Stats>;
-    lstat(path: string): Promise<Stats>;
-    mkdir(path: string): Promise<void>;
-    chmod(path: string, mode: number): Promise<void>;
-};
-export declare const nodeEditFs: EditFs;
 /** A path an operation names: as named, as shown, and where it really is. */
 type Target = {
     readonly named: string;
@@ -74,6 +58,8 @@ type Target = {
     readonly display: string;
     /** With its symbolic links resolved: what is read, written, compared and locked. */
     readonly real: string;
+    /** What the policy was asked to allow for it, and is asked again when it is committed. */
+    readonly access: readonly FileAccess[];
 };
 /** What a file was when it was read, to tell whether it changed before it is replaced. */
 type Snapshot = {
@@ -81,6 +67,9 @@ type Snapshot = {
     readonly mtimeMs: number;
     readonly hash: string;
     readonly mode: number;
+    /** Which file it was: a file replaced by another with the same content is not the one that was read. */
+    readonly dev: number;
+    readonly ino: number;
 };
 type Planned = {
     readonly kind: 'created';
@@ -124,5 +113,5 @@ export type EditedFile = {
  * Applies `operations` for a call: the whole of `edit_files` but its parameter parsing. See
  * {@link editFilesTool}.
  */
-export declare function applyFileOperations(operations: readonly Operation[], context: InvocationContext, fs: EditFs): Promise<ToolResultPayload>;
+export declare function applyFileOperations(operations: readonly Operation[], context: InvocationContext): Promise<ToolResultPayload>;
 export {};

package/dist/plugins/fileTools/gitDiscovery.d.ts

@@ -0,0 +1,9 @@
+import type { FileScope } from '../../services/confinement/files.js';
+import type { RepositoryLocation } from '../../sys/git.js';
+/**
+ * The repository containing `path`: the nearest directory at or above it holding a `.git` entry, as
+ * `findRepository` finds it, with every file read through `files`. A path the policy refuses to be
+ * read rejects with its `FileAccessError`, since whether it is git's own cannot then be told; a file
+ * system error counts as not there.
+ */
+export declare function findRepositoryThrough(files: FileScope, path: string): Promise<RepositoryLocation | null>;

package/dist/plugins/fileTools/index.d.ts

@@ -0,0 +1,18 @@
+import type { Plugin } from '@leuduan/cordis';
+import { type FileToolsConfig } from './config.js';
+export type { FileToolsConfig } from './config.js';
+/** The file tools that read the workspace without changing it. */
+export declare const READ_ONLY_TOOLS: readonly ["read_file", "list_dir", "rg_search", "rg_files"];
+/** The file tools that run `rg`, provided only where the host has it (`rg` in the configuration). */
+export declare const RG_TOOLS: readonly string[];
+/**
+ * Registers `read_file`, `list_dir`, `rg_search`, `rg_files` and `edit_files` for the life of the
+ * plugin. A tool reaches files through `InvocationContext.operation`, so the confinement policy
+ * judges every path; the host names the spawn environment and the trusted `rg` the search tools
+ * run, and there is no default for either.
+ *
+ * Ungranted: `agents` choose which of them each agent sees. The web tools ship as `webTools`, the
+ * shell commands as `commands`, which owns their processes, and `ask_question` as the `lagent:ask`
+ * plugin, since it needs a host that can reach the user.
+ */
+export declare const fileTools: Plugin.Object<FileToolsConfig>;

package/dist/plugins/fileTools/index.js

@@ -0,0 +1 @@
+import{a,b,c}from"../../chunks/IAAEP6VL.js";import"../../chunks/VYMT4TXD.js";import"../../chunks/N6IXG2VL.js";import"../../chunks/6DRCKZ2C.js";import"../../chunks/7LI64H5X.js";import"../../chunks/3UMZMPWW.js";import"../../chunks/34KW6VNQ.js";import"../../chunks/JFX2MXBA.js";import"../../chunks/CUK7CGC7.js";import"../../chunks/BPRCULZH.js";import"../../chunks/FJLU4UH3.js";import"../../chunks/DDANMY45.js";import"../../chunks/BBCW2FZK.js";import"../../chunks/MMNNZCBO.js";import"../../chunks/G44LG6VL.js";import"../../chunks/D4PQP5MA.js";export{a as READ_ONLY_TOOLS,b as RG_TOOLS,c as fileTools};

package/dist/plugins/fileTools/tools.d.ts

@@ -0,0 +1,6 @@
+import type { Tool } from '../../loop/index.js';
+import type { FileToolsConfig } from './config.js';
+/** What the model is told about the tools that need more than their description. */
+export declare const guidance: Map<string, string>;
+/** The file tools `config` provides: without `rg`, neither search tool; nothing searches by another means. */
+export declare const fileToolsFor: (config: FileToolsConfig) => readonly Tool[];

package/dist/plugins/historyRecall/history.d.ts

@@ -1,5 +1,5 @@
 import type { Journal } from '../../journal/index.js';
-import type { Seq } from '../../models/index.js';
+import type { Seq } from '../../records/journal.js';
 /**
  * Every message that has ever been on a thread's surface, numbered from 1 in lineage order, by the
  * row behind it. Stand-ins are not numbered, so a number never moves: not across compactions,

package/dist/plugins/historyRecall/index.js

@@ -1 +1 @@
-import{a,b,c,d,e}from"../../chunks/UC3FVVJ2.js";import"../../chunks/NAOUTU7A.js";import"../../chunks/UKXMCHHT.js";import"../../chunks/2OSESBIL.js";import"../../chunks/YLNJXQ3Z.js";import"../../chunks/DDANMY45.js";import"../../chunks/37YOGDGY.js";import"../../chunks/KESCTXGO.js";import"../../chunks/TYTQRLTX.js";import"../../chunks/D7E6EWIE.js";export{b as HISTORY_RECALL_TOOLS,d as HistoryRecallConfigSchema,a as historyNumbers,e as historyRecall,c as renderRecall};
+import{a,b,c,d,e}from"../../chunks/2GCIWSOA.js";import"../../chunks/JFX2MXBA.js";import"../../chunks/S34ZA2R6.js";import"../../chunks/CUK7CGC7.js";import"../../chunks/BPRCULZH.js";import"../../chunks/FJLU4UH3.js";import"../../chunks/DDANMY45.js";import"../../chunks/BBCW2FZK.js";import"../../chunks/MMNNZCBO.js";import"../../chunks/G44LG6VL.js";import"../../chunks/D4PQP5MA.js";export{b as HISTORY_RECALL_TOOLS,d as HistoryRecallConfigSchema,a as historyNumbers,e as historyRecall,c as renderRecall};

package/dist/plugins/historyRecall/render.d.ts

@@ -1,5 +1,5 @@
 import type { PluginJournal } from '../../journal/index.js';
-import { type MessageRole } from '../../llm/index.js';
+import { type MessageRole } from '../../llm/primitives.js';
 /** One message that has been on a thread's surface, as recall shows it. */
 export type HistoryMessage = {
     /** Its history number: 1 for the first message the thread's conversation ever held. */

package/dist/plugins/mcp/catalog.d.ts

@@ -1,6 +1,6 @@
 import type { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import { type Tool as RemoteTool } from '@modelcontextprotocol/sdk/types.js';
-import { type ToolSpec } from '../../llm/index.js';
+import { type ToolSpec } from '../../llm/primitives.js';
 import type { McpConfig } from './config.js';
 import type { UnexposableTool } from './errors.js';
 /** One exposable tool: its lagent name, the definition the server listed, and the spec built from it. */

package/dist/plugins/mcp/index.d.ts

@@ -5,7 +5,7 @@ export type { McpConfig, McpConfigInput, McpTransportConfig, McpTransportFactory
 export { McpServerError } from './errors.js';
 export type { McpServerErrorKind, UnexposableTool } from './errors.js';
 export { MAX_TOOL_NAME_LENGTH, mcpToolName } from './names.js';
-export { CALL_META_KEY, SESSION_RESET_NOTE } from './tool.js';
+export { CALL_META_KEY, SESSION_RESET_NOTE } from './tools.js';
 /**
  * Connects to one MCP server and exposes its tools as ordinary lagent tools named
  * `mcp__<server>__<tool>`, granted to `agents`. One mount is one server: a server that cannot be
@@ -28,6 +28,6 @@ export { CALL_META_KEY, SESSION_RESET_NOTE } from './tool.js';
  * })
  * ```
  *
- * The design and its reasons are in `docs/mcp.md`.
+ * The design and its reasons are in `docs/records/mcp.md`.
  */
 export declare const mcp: Plugin.Object<McpConfigInput>;

package/dist/plugins/mcp/index.js

@@ -1,4 +1,4 @@
-import{a as Y}from"../../chunks/BM3S37EZ.js";import{b as z}from"../../chunks/RK3VP2Q4.js";import{a as B,b as W}from"../../chunks/NAOUTU7A.js";import"../../chunks/UKXMCHHT.js";import{a as v}from"../../chunks/34KW6VNQ.js";import{a as w}from"../../chunks/PUSUPTAT.js";import"../../chunks/CDQG7RKA.js";import{a as N,b as H}from"../../chunks/DXFXAYDN.js";import"../../chunks/DRYAN665.js";import{a as U}from"../../chunks/2OSESBIL.js";import"../../chunks/YLNJXQ3Z.js";import"../../chunks/DDANMY45.js";import{d as g}from"../../chunks/37YOGDGY.js";import"../../chunks/KESCTXGO.js";import"../../chunks/TYTQRLTX.js";import{m as A}from"../../chunks/D7E6EWIE.js";import{scopeOf as Fe}from"@leuduan/cordis";import{z as c}from"zod";var S=64,Z=/^(?!.*__)[A-Za-z0-9](?:[A-Za-z0-9_-]*[A-Za-z0-9-])?$/,V=/^[A-Za-z0-9_-]+$/,me=n=>n.replace(/[^A-Za-z0-9_-]/g,"_"),O=(n,e,t)=>`mcp__${n}__${t??me(e)}`;var D=24,pe=c.strictObject({kind:c.literal("stdio"),command:c.tuple([c.string().min(1)],c.string()),cwd:c.string().min(1),env:c.record(c.string(),c.string())}),fe=c.strictObject({kind:c.literal("streamable-http"),url:c.url({protocol:/^https?$/,error:"url must be an http or https URL"}),headers:c.record(c.string(),c.string()).default({})}),ge=c.strictObject({kind:c.literal("custom"),create:c.custom(n=>typeof n=="function","create must be a function")}),X=c.discriminatedUnion("kind",[pe,fe,ge]),we=c.union([c.string().min(1),c.strictObject({name:c.string().min(1),as:c.string().regex(V,"as must use A-Z a-z 0-9 _ -")})]),P=n=>c.number().positive().finite().default(n),k=c.strictObject({name:c.string().max(D).regex(Z,"name must use A-Z a-z 0-9 _ -, start with a letter or digit, never end with _, and never contain __"),transport:X,agents:U,confirm:c.union([c.literal("all"),c.literal("none"),c.strictObject({except:c.array(c.string())})]),onInterrupted:c.union([c.literal("report"),c.literal("annotations"),c.strictObject({rerun:c.array(c.string())})]),maxConcurrentCalls:c.union([c.number().int().positive(),c.literal("unbounded")]),tools:c.array(we).optional(),instructions:c.boolean().default(!1),connectTimeoutSeconds:P(30),callTimeoutSeconds:P(120),maxCallSeconds:P(600),maxContentBytes:c.number().int().nonnegative().default(1024*1024),signal:c.custom(n=>n instanceof AbortSignal,"signal must be an AbortSignal").optional()}).superRefine((n,e)=>{if(n.maxCallSeconds<n.callTimeoutSeconds&&e.addIssue({code:"custom",path:["maxCallSeconds"],message:"must be at least callTimeoutSeconds"}),n.tools===void 0)return;let t=n.tools.map(s=>typeof s=="string"?s:s.name),r=t.find((s,a)=>t.indexOf(s)!==a);if(r!==void 0&&e.addIssue({code:"custom",path:["tools"],message:`lists ${r} more than once`}),typeof n.confirm=="object")for(let s of n.confirm.except)t.includes(s)||e.addIssue({code:"custom",path:["confirm","except"],message:`${s} is not in tools`});if(typeof n.onInterrupted=="object")for(let s of n.onInterrupted.rerun)t.includes(s)||e.addIssue({code:"custom",path:["onInterrupted","rerun"],message:`${s} is not in tools`})});import{ListToolsResultSchema as be}from"@modelcontextprotocol/sdk/types.js";var K={entries:new Map,unexposable:[]};async function Q(n,e){let t=[],r=new Set,s;do{let a=await n.request({method:"tools/list",params:s===void 0?{}:{cursor:s}},be,{signal:e});if(t.push(...a.tools),s=a.nextCursor,s!==void 0){if(r.has(s))throw new Error(`the server repeated the pagination cursor ${s}`);r.add(s)}}while(s!==void 0);return t}function ee(n,e){let t=n.tools===void 0?void 0:new Map(n.tools.map(o=>typeof o=="string"?[o,void 0]:[o.name,o.as])),r=[],s=[];for(let o of e){if(t!==void 0&&!t.has(o.name))continue;let u=O(n.name,o.name,t?.get(o.name));s.push({remote:o,name:u,problem:ve(o,u)})}if(t!==void 0){let o=new Set(e.map(u=>u.name));for(let u of t.keys())o.has(u)||r.push({tool:u,reason:"the server does not offer it"})}let a=new Map;for(let o of s)a.set(o.name,[...a.get(o.name)??[],o]);let i=new Map;for(let o of s){let u=a.get(o.name);if(u.length>1){let p=u.filter(l=>l!==o).map(l=>l.remote.name);r.push({tool:o.remote.name,reason:`${o.name} collides with ${p.join(", ")}`});continue}if(o.problem!==null){r.push({tool:o.remote.name,reason:o.problem});continue}i.set(o.name,{name:o.name,remoteName:o.remote.name,definition:o.remote,spec:A.parse(te(o.remote,o.name)),fingerprint:g(o.remote)})}return{entries:i,unexposable:L(r)}}var J=(n,e)=>n<e?-1:n>e?1:0,te=(n,e)=>({name:e,description:n.description??n.title??"",input_schema:n.inputSchema});function ve(n,e){return e.length>64?`${e} is ${e.length} characters, over the ${64} a tool name may have`:n.execution?.taskSupport==="required"?"it requires task-augmented execution":A.safeParse(te(n,e)).success?null:"its input schema is not an object schema"}var L=n=>[...n].sort((e,t)=>J(e.tool,t.tool)||J(e.reason,t.reason)),ne=(n,e)=>g(n)===g(e);import{Client as Ee}from"@modelcontextprotocol/sdk/client/index.js";import{StreamableHTTPClientTransport as oe,StreamableHTTPError as _e}from"@modelcontextprotocol/sdk/client/streamableHttp.js";import{ToolListChangedNotificationSchema as Me}from"@modelcontextprotocol/sdk/types.js";import Te from"@leuduan/lagent/package.json"with{type:"json"};function re(){return Te.version}import{ReadBuffer as xe,serializeMessage as Se}from"@modelcontextprotocol/sdk/shared/stdio.js";var ye=8*1024,b=class{onclose;onerror;onmessage;spawned=null;buffer=new xe;stderr="";exit=null;closed=!1;closedEarly=!1;options;constructor(e){this.options=e}get pid(){return this.spawned?.pid}get stderrTail(){return this.stderr}get exited(){return this.exit}async start(){if(this.spawned!==null)throw new Error("ContainedStdioTransport already started");let e=await H({command:this.options.command,cwd:this.options.cwd,env:this.options.env,signal:this.options.signal,killGraceMs:this.options.killGraceMs??N,stdio:"pipes"});if(this.spawned=e,this.closedEarly)throw await e.stop(),new Error("ContainedStdioTransport closed while starting");e.stdout.on("data",t=>this.receive(t)),e.stderr.setEncoding("utf8"),e.stderr.on("data",t=>{this.stderr=(this.stderr+t).slice(-ye),w.debug("MCP server '%s' stderr: %s",this.options.server,t.trimEnd())}),e.stdin.on("error",t=>this.onerror?.(t)),e.result.then(t=>{this.exit=t,this.closed=!0,this.onclose?.()})}receive(e){try{this.buffer.append(e)}catch(t){this.onerror?.(t instanceof Error?t:new Error(String(t)));return}for(;;){let t;try{t=this.buffer.readMessage()}catch(r){this.onerror?.(r instanceof Error?r:new Error(String(r)));continue}if(t===null)return;this.onmessage?.(t)}}async send(e){let t=this.spawned?.stdin;if(t===void 0||this.closed||t.destroyed)throw new Error("The MCP server is not running");t.write(Se(e))||await new Promise((r,s)=>{let a=()=>{t.off("close",i),r()},i=()=>{t.off("drain",a),s(new Error("The MCP server closed its input"))};t.once("drain",a),t.once("close",i)})}async close(){let e=this.spawned;if(e===null){this.closedEarly=!0;return}e.stdin.end();let t=this.options.killGraceMs??N,r,s=await Promise.race([e.result.then(()=>!0),new Promise(a=>r=setTimeout(()=>a(!1),t))]);clearTimeout(r),s?await e.result:await e.stop()}};var $e=5e3,y=class{live=null;count=0;disposed=!1;options;constructor(e){this.options=e}get current(){return this.live?.alive?this.live:null}async open(e,t){if(this.disposed)throw new Error("the mount is disposed");e.throwIfAborted();let r=new Ee({name:"lagent",version:re()},{capabilities:{}}),s={alive:!0},a={transport:null},i=null;r.onerror=l=>w.debug("MCP server '%s': %s",this.options.server,l),r.onclose=()=>{s.alive&&(s.alive=!1,i!==null&&(i.alive=!1),i!==null&&a.transport!==null&&!this.disposed&&this.options.onLost(i,this.describeClose(a.transport)))};let o=!1;r.setNotificationHandler(Me,async()=>{i===null?o=!0:i===this.current&&this.options.onToolsChanged(i)});let u=(async()=>{let l=Ce(await this.createTransport(e));if(a.transport=l,e.aborted)throw await T(l.close()),e.reason;await r.connect(l,{signal:e,timeout:t})})();try{if(await v(u,e),e.throwIfAborted(),this.disposed)throw new Error("the mount is disposed")}catch(l){throw s.alive=!1,await T(r.close()),se(l,a.transport)}let p=a.transport;if(i={number:this.count+1,client:r,transport:p,instructions:r.getInstructions()??null,get alive(){return s.alive},set alive(l){s.alive=l}},!s.alive)throw se(new Error("the connection closed during initialization"),p);return this.count=i.number,this.live=i,o&&this.options.onToolsChanged(i),i}async invalidate(e){e.alive&&(e.alive=!1,await T(e.client.close()))}async dispose(){this.disposed=!0;let e=this.live;this.live=null,!(e===null||!e.alive)&&(e.alive=!1,await T(e.client.close()))}async createTransport(e){let t=this.options.transport;switch(t.kind){case"stdio":return new b({server:this.options.server,command:t.command,cwd:t.cwd,env:t.env,signal:this.options.lifetime});case"streamable-http":return new oe(new URL(t.url),{requestInit:{headers:t.headers}});case"custom":return await t.create(e)}}describeClose(e){if(!(e instanceof b))return"the connection closed";let t=e.exited,r=t===null?"its connection closed":t.exitCode!==null?`it exited with code ${t.exitCode}`:`it was ended by ${t.exitSignal??"a signal"}`;return ae(`the server process ended: ${r}`,e)}},ie=n=>n instanceof _e&&n.code===404;function Ce(n){let e=n.close.bind(n),t;return n.close=()=>t??=(async()=>{try{n instanceof oe&&await T(n.terminateSession()),await e()}catch(r){w.debug("MCP transport close failed: %s",r)}})(),n}async function T(n){let e;await Promise.race([n.catch(t=>w.debug("MCP cleanup failed: %s",t)),new Promise(t=>e=setTimeout(t,$e))]),clearTimeout(e)}function ae(n,e){let t=e instanceof b?e.stderrTail.trim():"";return t?`${n}; its stderr ended with:
+import{a as Y}from"../../chunks/ASSQZH3F.js";import{a as N,c as H}from"../../chunks/7LI64H5X.js";import{a as w}from"../../chunks/PUSUPTAT.js";import{a as v}from"../../chunks/34KW6VNQ.js";import"../../chunks/DDZ7YF26.js";import{b as z}from"../../chunks/EPYQ5M3B.js";import{b as B,c as W}from"../../chunks/JFX2MXBA.js";import"../../chunks/6FRNHMCV.js";import{c as U}from"../../chunks/CUK7CGC7.js";import"../../chunks/BPRCULZH.js";import"../../chunks/FJLU4UH3.js";import"../../chunks/DDANMY45.js";import{c as g}from"../../chunks/BBCW2FZK.js";import"../../chunks/MMNNZCBO.js";import"../../chunks/G44LG6VL.js";import{h as A}from"../../chunks/D4PQP5MA.js";import{scopeOf as Fe}from"@leuduan/cordis";import{z as c}from"zod";var S=64,Z=/^(?!.*__)[A-Za-z0-9](?:[A-Za-z0-9_-]*[A-Za-z0-9-])?$/,V=/^[A-Za-z0-9_-]+$/,me=n=>n.replace(/[^A-Za-z0-9_-]/g,"_"),O=(n,e,t)=>`mcp__${n}__${t??me(e)}`;var D=24,pe=c.strictObject({kind:c.literal("stdio"),command:c.tuple([c.string().min(1)],c.string()),cwd:c.string().min(1),env:c.record(c.string(),c.string())}),fe=c.strictObject({kind:c.literal("streamable-http"),url:c.url({protocol:/^https?$/,error:"url must be an http or https URL"}),headers:c.record(c.string(),c.string()).default({})}),ge=c.strictObject({kind:c.literal("custom"),create:c.custom(n=>typeof n=="function","create must be a function")}),X=c.discriminatedUnion("kind",[pe,fe,ge]),we=c.union([c.string().min(1),c.strictObject({name:c.string().min(1),as:c.string().regex(V,"as must use A-Z a-z 0-9 _ -")})]),P=n=>c.number().positive().finite().default(n),k=c.strictObject({name:c.string().max(D).regex(Z,"name must use A-Z a-z 0-9 _ -, start with a letter or digit, never end with _, and never contain __"),transport:X,agents:U,confirm:c.union([c.literal("all"),c.literal("none"),c.strictObject({except:c.array(c.string())})]),onInterrupted:c.union([c.literal("report"),c.literal("annotations"),c.strictObject({rerun:c.array(c.string())})]),maxConcurrentCalls:c.union([c.number().int().positive(),c.literal("unbounded")]),tools:c.array(we).optional(),instructions:c.boolean().default(!1),connectTimeoutSeconds:P(30),callTimeoutSeconds:P(120),maxCallSeconds:P(600),maxContentBytes:c.number().int().nonnegative().default(1024*1024),signal:c.custom(n=>n instanceof AbortSignal,"signal must be an AbortSignal").optional()}).superRefine((n,e)=>{if(n.maxCallSeconds<n.callTimeoutSeconds&&e.addIssue({code:"custom",path:["maxCallSeconds"],message:"must be at least callTimeoutSeconds"}),n.tools===void 0)return;let t=n.tools.map(s=>typeof s=="string"?s:s.name),r=t.find((s,a)=>t.indexOf(s)!==a);if(r!==void 0&&e.addIssue({code:"custom",path:["tools"],message:`lists ${r} more than once`}),typeof n.confirm=="object")for(let s of n.confirm.except)t.includes(s)||e.addIssue({code:"custom",path:["confirm","except"],message:`${s} is not in tools`});if(typeof n.onInterrupted=="object")for(let s of n.onInterrupted.rerun)t.includes(s)||e.addIssue({code:"custom",path:["onInterrupted","rerun"],message:`${s} is not in tools`})});import{ListToolsResultSchema as be}from"@modelcontextprotocol/sdk/types.js";var K={entries:new Map,unexposable:[]};async function Q(n,e){let t=[],r=new Set,s;do{let a=await n.request({method:"tools/list",params:s===void 0?{}:{cursor:s}},be,{signal:e});if(t.push(...a.tools),s=a.nextCursor,s!==void 0){if(r.has(s))throw new Error(`the server repeated the pagination cursor ${s}`);r.add(s)}}while(s!==void 0);return t}function ee(n,e){let t=n.tools===void 0?void 0:new Map(n.tools.map(o=>typeof o=="string"?[o,void 0]:[o.name,o.as])),r=[],s=[];for(let o of e){if(t!==void 0&&!t.has(o.name))continue;let u=O(n.name,o.name,t?.get(o.name));s.push({remote:o,name:u,problem:ve(o,u)})}if(t!==void 0){let o=new Set(e.map(u=>u.name));for(let u of t.keys())o.has(u)||r.push({tool:u,reason:"the server does not offer it"})}let a=new Map;for(let o of s)a.set(o.name,[...a.get(o.name)??[],o]);let i=new Map;for(let o of s){let u=a.get(o.name);if(u.length>1){let p=u.filter(l=>l!==o).map(l=>l.remote.name);r.push({tool:o.remote.name,reason:`${o.name} collides with ${p.join(", ")}`});continue}if(o.problem!==null){r.push({tool:o.remote.name,reason:o.problem});continue}i.set(o.name,{name:o.name,remoteName:o.remote.name,definition:o.remote,spec:A.parse(te(o.remote,o.name)),fingerprint:g(o.remote)})}return{entries:i,unexposable:L(r)}}var J=(n,e)=>n<e?-1:n>e?1:0,te=(n,e)=>({name:e,description:n.description??n.title??"",input_schema:n.inputSchema});function ve(n,e){return e.length>64?`${e} is ${e.length} characters, over the ${64} a tool name may have`:n.execution?.taskSupport==="required"?"it requires task-augmented execution":A.safeParse(te(n,e)).success?null:"its input schema is not an object schema"}var L=n=>[...n].sort((e,t)=>J(e.tool,t.tool)||J(e.reason,t.reason)),ne=(n,e)=>g(n)===g(e);import{Client as Ee}from"@modelcontextprotocol/sdk/client/index.js";import{StreamableHTTPClientTransport as oe,StreamableHTTPError as _e}from"@modelcontextprotocol/sdk/client/streamableHttp.js";import{ToolListChangedNotificationSchema as Me}from"@modelcontextprotocol/sdk/types.js";import Te from"@leuduan/lagent/package.json"with{type:"json"};function re(){return Te.version}import{ReadBuffer as xe,serializeMessage as Se}from"@modelcontextprotocol/sdk/shared/stdio.js";var ye=8*1024,b=class{onclose;onerror;onmessage;spawned=null;buffer=new xe;stderr="";exit=null;closed=!1;closedEarly=!1;options;constructor(e){this.options=e}get pid(){return this.spawned?.pid}get stderrTail(){return this.stderr}get exited(){return this.exit}async start(){if(this.spawned!==null)throw new Error("ContainedStdioTransport already started");let e=await H({command:this.options.command,cwd:this.options.cwd,env:this.options.env,signal:this.options.signal,killGraceMs:this.options.killGraceMs??N,stdio:"pipes"});if(this.spawned=e,this.closedEarly)throw await e.stop(),new Error("ContainedStdioTransport closed while starting");e.stdout.on("data",t=>this.receive(t)),e.stderr.setEncoding("utf8"),e.stderr.on("data",t=>{this.stderr=(this.stderr+t).slice(-ye),w.debug("MCP server '%s' stderr: %s",this.options.server,t.trimEnd())}),e.stdin.on("error",t=>this.onerror?.(t)),e.result.then(t=>{this.exit=t,this.closed=!0,this.onclose?.()})}receive(e){try{this.buffer.append(e)}catch(t){this.onerror?.(t instanceof Error?t:new Error(String(t)));return}for(;;){let t;try{t=this.buffer.readMessage()}catch(r){this.onerror?.(r instanceof Error?r:new Error(String(r)));continue}if(t===null)return;this.onmessage?.(t)}}async send(e){let t=this.spawned?.stdin;if(t===void 0||this.closed||t.destroyed)throw new Error("The MCP server is not running");t.write(Se(e))||await new Promise((r,s)=>{let a=()=>{t.off("close",i),r()},i=()=>{t.off("drain",a),s(new Error("The MCP server closed its input"))};t.once("drain",a),t.once("close",i)})}async close(){let e=this.spawned;if(e===null){this.closedEarly=!0;return}e.stdin.end();let t=this.options.killGraceMs??N,r,s=await Promise.race([e.result.then(()=>!0),new Promise(a=>r=setTimeout(()=>a(!1),t))]);clearTimeout(r),s?await e.result:await e.stop()}};var $e=5e3,y=class{live=null;count=0;disposed=!1;options;constructor(e){this.options=e}get current(){return this.live?.alive?this.live:null}async open(e,t){if(this.disposed)throw new Error("the mount is disposed");e.throwIfAborted();let r=new Ee({name:"lagent",version:re()},{capabilities:{}}),s={alive:!0},a={transport:null},i=null;r.onerror=l=>w.debug("MCP server '%s': %s",this.options.server,l),r.onclose=()=>{s.alive&&(s.alive=!1,i!==null&&(i.alive=!1),i!==null&&a.transport!==null&&!this.disposed&&this.options.onLost(i,this.describeClose(a.transport)))};let o=!1;r.setNotificationHandler(Me,async()=>{i===null?o=!0:i===this.current&&this.options.onToolsChanged(i)});let u=(async()=>{let l=Ce(await this.createTransport(e));if(a.transport=l,e.aborted)throw await T(l.close()),e.reason;await r.connect(l,{signal:e,timeout:t})})();try{if(await v(u,e),e.throwIfAborted(),this.disposed)throw new Error("the mount is disposed")}catch(l){throw s.alive=!1,await T(r.close()),se(l,a.transport)}let p=a.transport;if(i={number:this.count+1,client:r,transport:p,instructions:r.getInstructions()??null,get alive(){return s.alive},set alive(l){s.alive=l}},!s.alive)throw se(new Error("the connection closed during initialization"),p);return this.count=i.number,this.live=i,o&&this.options.onToolsChanged(i),i}async invalidate(e){e.alive&&(e.alive=!1,await T(e.client.close()))}async dispose(){this.disposed=!0;let e=this.live;this.live=null,!(e===null||!e.alive)&&(e.alive=!1,await T(e.client.close()))}async createTransport(e){let t=this.options.transport;switch(t.kind){case"stdio":return new b({server:this.options.server,command:t.command,cwd:t.cwd,env:t.env,signal:this.options.lifetime});case"streamable-http":return new oe(new URL(t.url),{requestInit:{headers:t.headers}});case"custom":return await t.create(e)}}describeClose(e){if(!(e instanceof b))return"the connection closed";let t=e.exited,r=t===null?"its connection closed":t.exitCode!==null?`it exited with code ${t.exitCode}`:`it was ended by ${t.exitSignal??"a signal"}`;return ae(`the server process ended: ${r}`,e)}},ie=n=>n instanceof _e&&n.code===404;function Ce(n){let e=n.close.bind(n),t;return n.close=()=>t??=(async()=>{try{n instanceof oe&&await T(n.terminateSession()),await e()}catch(r){w.debug("MCP transport close failed: %s",r)}})(),n}async function T(n){let e;await Promise.race([n.catch(t=>w.debug("MCP cleanup failed: %s",t)),new Promise(t=>e=setTimeout(t,$e))]),clearTimeout(e)}function ae(n,e){let t=e instanceof b?e.stderrTail.trim():"";return t?`${n}; its stderr ended with:
 ${t}`:n}function se(n,e){let t=n instanceof Error?n:new Error(String(n)),r=e===null?t.message:ae(t.message||t.name,e);return r===t.message?t:new Error(r,{cause:t})}var h=class extends Error{name="McpServerError";server;kind;tools;constructor(e,t,r,s={}){super(`MCP server '${e}': ${r}`,s.cause===void 0?{}:{cause:s.cause}),this.server=e,this.kind=t,this.tools=s.tools??[]}},f=n=>n instanceof Error?n.message||n.name:String(n);var E=class{active=0;waiters=[];limit;constructor(e){this.limit=e}acquire(e){return e.throwIfAborted(),this.active<this.limit?(this.active+=1,Promise.resolve(this.releaser())):new Promise((t,r)=>{let s={grant:()=>{e.removeEventListener("abort",a),this.active+=1,t(this.releaser())}},a=()=>{let i=this.waiters.indexOf(s);i>=0&&this.waiters.splice(i,1),r(e.reason)};e.addEventListener("abort",a,{once:!0}),this.waiters.push(s)})}get waiting(){return this.waiters.length}releaser(){let e=!1;return()=>{e||(e=!0,this.active-=1,this.waiters.shift()?.grant())}}};import{CallToolResultSchema as Re,ErrorCode as le,McpError as I}from"@modelcontextprotocol/sdk/types.js";var Ae="The tool returned content addressed to the user only; nothing in it is for you.",Ne="The tool returned no content.",Oe=new Set(["image/png","image/jpeg","image/webp","image/gif"]),Pe=n=>{let e=n.trim().toLowerCase();return e==="image/jpg"?"image/jpeg":e};function ce(n,e){let t=[],r=[],s=[],a=[],i=e.maxContentBytes,o=l=>l>i?!1:(i-=l,!0);for(let l of n.content){if(!ke(l)){s.push(Le(l,o));continue}switch(l.type){case"text":a.push(l.text),t.push(l.text);break;case"image":{let m=_(l.data),d=Pe(l.mimeType);Oe.has(d)?o(m)?(r.push({type:"image",url:null,data:l.data,media_type:d,detail:"auto"}),t.push(`[image: ${d}, ${x(m)}]`)):t.push(`[image omitted: ${l.mimeType}, ${x(m)}, over this result's limit]`):t.push(`[image not shown: ${l.mimeType}, ${x(m)}; only PNG, JPEG, WebP and GIF are shown]`);break}case"audio":t.push(`[audio not shown: ${l.mimeType}, ${x(_(l.data))}]`);break;case"resource_link":t.push(`[resource link: ${l.name} <${l.uri}>${l.mimeType?` (${l.mimeType})`:""}]`);break;case"resource":{let m=l.resource;if("text"in m)t.push(`[resource: ${m.uri}]
 ${m.text}`);else{let d=m.mimeType?`${m.mimeType}, `:"";t.push(`[resource not shown: ${m.uri}, ${d}${x(_(m.blob))}]`)}break}}}let u=n.structuredContent;return u!==void 0&&!a.some(l=>Ie(l,u))&&t.push(JSON.stringify(u,null,2)),{output:t.join(`
 `)||(s.length>0?Ae:Ne),...r.length>0?{content:r}:{},is_error:n.isError===!0,notes:null,metadata:{mcp_server:e.server,mcp_tool:e.remoteName,...s.length>0?{user_content:s}:{}}}}function ke(n){let e=n.annotations?.audience;return e===void 0||e.includes("assistant")}function Le(n,e){let t=(r,s)=>{let a=_(r);return e(a)?{...s,data:r}:{...s,bytes:a,omitted:!0}};switch(n.type){case"text":return{type:"text",text:n.text};case"image":case"audio":return t(n.data,{type:n.type,mime_type:n.mimeType});case"resource_link":return{type:"resource_link",uri:n.uri,name:n.name,mime_type:n.mimeType??null};case"resource":return"text"in n.resource?{type:"resource",uri:n.resource.uri,text:n.resource.text}:t(n.resource.blob,{type:"resource",uri:n.resource.uri,mime_type:n.resource.mimeType??null})}}function Ie(n,e){try{return g(JSON.parse(n))===g(e)}catch{return!1}}function _(n){let e=n.endsWith("==")?2:n.endsWith("=")?1:0;return Math.max(0,Math.floor(n.length*3/4)-e)}function x(n){return n<1024?`${n} B`:n<1024*1024?`${(n/1024).toFixed(1)} KB`:`${(n/(1024*1024)).toFixed(1)} MB`}var ue="work.leuduan.lagent/call",R="The connection to this MCP server was re-established; any session state the server held may have been reset.";function je(n,e){if(n==="report")return"report";if(n==="annotations"){let t=e.definition.annotations;return t?.readOnlyHint===!0||t?.idempotentHint===!0?"rerun":"report"}return n.rerun.includes(e.remoteName)?"rerun":"report"}var de=(n,e)=>B({name:e.name,description:e.spec.description,parameters:{jsonSchema:e.spec.input_schema},onInterrupted:je(n.config.onInterrupted,e),executionMode:"parallel",execute:(t,r)=>Ge(n,e,t,r)});async function Ge(n,e,t,r){let s=d=>({output:d,is_error:!0,metadata:{mcp_server:n.server,mcp_tool:e.remoteName}}),{maxCallSeconds:a,callTimeoutSeconds:i,maxContentBytes:o}=n.config,u=AbortSignal.timeout(a*1e3),p=AbortSignal.any([r.signal,u]),l=d=>s(r.signal.aborted?`The call was cancelled ${d}; it was never sent to the MCP server.`:`The call's ${a} s deadline passed ${d}; it was never sent to the MCP server.`),m;try{m=await n.slots.acquire(p)}catch{return l("while it waited for a free slot")}try{let d;try{d=await n.ready(p)}catch(C){return p.aborted?l("while the connection was being re-established"):s(`The call was not sent. ${f(C)}`)}let $=n.entry(e.name);if($===void 0||$.fingerprint!==e.fingerprint)return s($===void 0?`The MCP server no longer offers ${e.remoteName}, so the call was not sent.`:`The MCP server changed the definition of ${e.remoteName}, so the call was not sent. Review the new definition and call again if it still fits.`);if(!d.alive)return s("The connection to the MCP server closed before the call was sent.");let G;try{G=await d.client.request({method:"tools/call",params:{name:e.remoteName,arguments:t,_meta:{[ue]:`${r.threadId}#${r.callSeq}`}}},Re,{signal:p,timeout:i*1e3,resetTimeoutOnProgress:!0,onprogress:()=>{}})}catch(C){return s(qe(n,C,d,r.signal,u))}let q=ce(G,{server:n.server,remoteName:e.remoteName,maxContentBytes:o}),F=n.takeSessionNote(d);return F===null?q:{...q,notes:[F]}}finally{m()}}function qe(n,e,t,r,s){let a="The server may or may not have run it.";return r.aborted?`The call was cancelled after it was sent. ${a}`:s.aborted?`The call's ${n.config.maxCallSeconds} s deadline passed after it was sent. ${a}`:ie(e)?(n.invalidate(t),"The MCP server had ended its session, so the call did not run. A new session opens with the next call."):e instanceof I&&e.code===le.RequestTimeout?`The MCP server sent no response or progress for ${n.config.callTimeoutSeconds} s. ${a}`:e instanceof I&&e.code===le.ConnectionClosed?`The connection to the MCP server was lost while the call was in flight. ${a}`:e instanceof I?`The MCP server answered with an error: ${f(e)}`:`The request to the MCP server failed: ${f(e)}. ${a}`}var M=class{server;slots;connection;lifetime=new AbortController;catalog=K;listedFrom=null;published=new Map;known=new Map;reported=[];started=!1;changedWhileStarting=!1;runningFor=null;disposed=!1;running=null;queued=null;reconnecting=null;noteOwedTo=null;cachedInstructions=null;ctx;config;constructor(e,t){this.ctx=e,this.config=t,this.server=t.name,this.slots=new E(t.maxConcurrentCalls==="unbounded"?1/0:t.maxConcurrentCalls),this.connection=new y({server:t.name,transport:t.transport,lifetime:this.lifetime.signal,onToolsChanged:()=>{this.started?this.refresh():this.changedWhileStarting=!0},onLost:(r,s)=>this.report(new h(this.server,"disconnect",s))})}get connectTimeoutMs(){return this.config.connectTimeoutSeconds*1e3}async start(){let e=[this.lifetime.signal,AbortSignal.timeout(this.connectTimeoutMs)];this.config.signal!==void 0&&e.push(this.config.signal);let t=AbortSignal.any(e);try{let s=await this.connection.open(t,this.connectTimeoutMs);this.cachedInstructions=s.instructions}catch(s){throw new h(this.server,"connect",`could not connect: ${f(s)}`,{cause:s})}let r=await this.refresh(t);if(!r.ok)throw r.error;this.started=!0,this.changedWhileStarting&&this.refresh()}async ready(e){let t=this.connection.current;if(t===null){if(this.disposed)throw new Error("the mount is disposed");this.reconnecting??=this.reconnect().finally(()=>{this.reconnecting=null}),t=await v(this.reconnecting,e)}if(this.listedFrom!==t.number){let r=this.running!==null&&this.runningFor===t?this.running:this.refresh(),s=await v(r,e);if(!s.ok)throw s.error;if(this.listedFrom!==t.number||!t.alive)throw new h(this.server,"refresh","the connection changed while its tools were being listed")}return t}async reconnect(){let e;try{let t=AbortSignal.any([this.lifetime.signal,AbortSignal.timeout(this.connectTimeoutMs)]);e=await this.connection.open(t,this.connectTimeoutMs)}catch(t){let r=new h(this.server,"connect",`could not reconnect: ${f(t)}`,{cause:t});throw this.report(r),r}return this.cachedInstructions=e.instructions,this.noteOwedTo=e.number,e}entry(e){return this.catalog.entries.get(e)}takeSessionNote(e){return this.noteOwedTo!==e.number?null:(this.noteOwedTo=null,R)}invalidate(e){e.alive&&(this.report(new h(this.server,"disconnect","the server ended its session")),this.connection.invalidate(e))}remoteNameOf(e){return this.known.get(e)}get instructions(){return this.cachedInstructions}refresh(e){return this.queued!==null?this.queued:this.running===null?this.run(e):(this.queued=this.running.then(()=>(this.queued=null,this.run())),this.queued)}run(e){let t=this.refreshOnce(e);return this.running=t,this.runningFor=this.connection.current,t.finally(()=>{this.running===t&&(this.running=null,this.runningFor=null)}),t}async refreshOnce(e){try{return await this.listAndPublish(e)}catch(t){let r=new h(this.server,"refresh",`could not publish its tools: ${f(t)}`,{cause:t});return this.report(r),{ok:!1,error:r}}}async listAndPublish(e){let t=this.connection.current;if(t===null)return{ok:!1,error:new h(this.server,"refresh","not connected")};let r;try{let o=e??AbortSignal.any([this.lifetime.signal,AbortSignal.timeout(this.connectTimeoutMs)]);r=ee(this.config,await Q(t.client,o))}catch(o){let u=new h(this.server,"refresh",`could not list its tools: ${f(o)}`,{cause:o});return this.started&&this.live(t)&&this.report(u),{ok:!1,error:u}}if(!this.live(t))return{ok:!1,error:new h(this.server,"refresh","the listing is out of date")};if(this.config.tools!==void 0&&r.unexposable.length>0&&!this.started)return{ok:!1,error:new h(this.server,"unexposable",j(r.unexposable),{tools:r.unexposable})};let a=this.publish(r),i=this.catalog.unexposable;return a.length>0&&this.config.tools!==void 0&&!this.started?{ok:!1,error:new h(this.server,"unexposable",j(i),{tools:i})}:(this.listedFrom=t.number,ne(i,this.reported)||(this.reported=i,i.length>0&&this.report(new h(this.server,"unexposable",j(i),{tools:i}))),{ok:!0})}live(e){return!this.disposed&&this.ctx.fiber.uid!==null&&e===this.connection.current}publish(e){let t=[];for(let[i,o]of this.published)e.entries.get(i)?.fingerprint!==o.entry.fingerprint&&(this.published.delete(i),o.withdraw());let r=this.ctx,s=this.config.agents;for(let i of e.entries.values()){if(this.published.has(i.name))continue;let o;try{o=W(r,de(this,i),{agents:s})}catch(u){t.push({tool:i.remoteName,reason:`${i.name} cannot be registered: ${f(u)}`});continue}this.published.set(i.name,{entry:i,withdraw:o}),this.known.set(i.name,i.remoteName)}let a=new Map([...e.entries].filter(([i])=>this.published.has(i)));return this.catalog={entries:a,unexposable:L([...e.unexposable,...t])},t}report(e){this.disposed||this.ctx.fiber.uid===null||this.ctx.reportError(e)}async dispose(){this.disposed=!0,await this.connection.dispose(),this.lifetime.abort()}},j=n=>`cannot expose ${n.map(e=>`${e.tool} (${e.reason})`).join("; ")}`;var he=new WeakMap;function Ue(n,e){let t=Fe(n),r=he.get(n.tools);r===void 0&&he.set(n.tools,r=new Map);let s=r.get(t);if(s===void 0&&r.set(t,s=new Set),s.has(e))throw new Error(`Another mcp mount in this layer already uses the server name '${e}'`);let a=s;n.effect(()=>(a.add(e),()=>a.delete(e)))}function He(n,e){if(n.confirm==="all")return"confirm";if(n.confirm!=="none")return n.confirm.except.includes(e)?void 0:"confirm"}var Rt={name:"lagent:mcp",inject:["tools","prompts"],async apply(n,e){let t=k.parse(e);Ue(n,t.name);let r=new M(n,t);n.effect(()=>()=>r.dispose()),await n.plugin(Y,{confirm:s=>{let a=r.remoteNameOf(s);return a!==void 0&&He(t,a)==="confirm"}}),t.instructions&&z(n,{tag:`mcp:${t.name}`,slot:"instruction",agents:t.agents,render:()=>{let s=r.instructions?.trim();return s?`Instructions from the MCP server "${t.name}" about its tools:

package/dist/plugins/mcp/mount.d.ts

@@ -4,7 +4,7 @@ import type { McpConfig } from './config.js';
 import { type Generation } from './connection.js';
 import { McpServerError } from './errors.js';
 import { CallSlots } from './slots.js';
-import { type McpToolHost } from './tool.js';
+import { type McpToolHost } from './tools.js';
 type RefreshOutcome = {
     readonly ok: true;
 } | {
@@ -86,7 +86,7 @@ export declare class McpMount implements McpToolHost {
     /** Whether `generation` is still the live one of a mount that has not been disposed. */
     private live;
     /**
-     * Replaces the published tools with `catalog`'s. Each tool is one `provideTool` effect holding its
+     * Replaces the published tools with `catalog`'s. Each tool is one `registerTool` effect holding its
      * registration and its grant, so withdrawing it releases both. A name another tool in this layer
      * already holds cannot be registered; that tool is returned as unexposable.
      */

package/dist/plugins/mcp/render.d.ts

@@ -1,5 +1,5 @@
 import type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
-import type { ToolResultPayload } from '../../models/index.js';
+import type { ToolResultPayload } from '../../records/toolResult.js';
 /** Said when nothing is left for the model because every item was addressed to the user. */
 export declare const USER_ONLY_OUTPUT = "The tool returned content addressed to the user only; nothing in it is for you.";
 export declare const EMPTY_OUTPUT = "The tool returned no content.";

package/dist/plugins/mcp/{tool.d.ts → tools.d.ts}

@@ -1,5 +1,5 @@
 import type { Tool } from '../../loop/index.js';
-import type { InterruptionPolicy } from '../../models/index.js';
+import type { InterruptionPolicy } from '../../records/journal.js';
 import type { CatalogEntry } from './catalog.js';
 import type { McpConfig } from './config.js';
 import { type Generation } from './connection.js';

package/dist/plugins/{routeContext.d.ts → routeNotice.d.ts}

@@ -1,5 +1,5 @@
 import type { Plugin } from '@leuduan/cordis';
-import { type ModelRoute } from '../llm/index.js';
+import { type ModelRoute } from '../llm/provider.js';
 /**
  * Tells an agent the route it runs on: provider, model and thinking effort.
  *
@@ -15,7 +15,7 @@ import { type ModelRoute } from '../llm/index.js';
  * does. Mounted on the root it tells every thread; mounted through `thread.ctx` it tells that thread
  * only.
  */
-export declare const routeContext: Plugin.Object<undefined>;
+export declare const routeNotice: Plugin.Object<undefined>;
 /** What a thread is told: its route, and the one it replaces when the model can still see another. */
 export declare function renderRouteNotice(route: ModelRoute, told: ModelRoute | null): string;
 /** A route as a model reads it; an effort of `null` is the provider's default. */

package/dist/plugins/routeNotice.js

@@ -0,0 +1 @@
+import{a,b,c}from"../chunks/OCBPT7KE.js";import"../chunks/6FRNHMCV.js";import"../chunks/CUK7CGC7.js";import"../chunks/BPRCULZH.js";import"../chunks/DDANMY45.js";import"../chunks/BBCW2FZK.js";import"../chunks/MMNNZCBO.js";import"../chunks/G44LG6VL.js";import"../chunks/D4PQP5MA.js";export{c as renderRoute,b as renderRouteNotice,a as routeNotice};