@lloyal-labs/lloyal-agents 2.1.0 → 3.0.0

package/LICENSE

@@ -0,0 +1,107 @@
+# Functional Source License, Version 1.1, Apache 2.0 Future License
+
+## Abbreviation
+
+FSL-1.1-Apache-2.0
+
+## Notice
+
+Copyright 2026 Lloyal Labs
+
+## Terms and Conditions
+
+### Licensor ("We")
+
+The party offering the Software under these Terms and Conditions.
+
+### The Software
+
+The "Software" is each version of the software that we make available under
+these Terms and Conditions, as indicated by our inclusion of these Terms and
+Conditions with the Software.
+
+### License Grant
+
+Subject to your compliance with this License Grant and the Patents,
+Redistribution and Trademark clauses below, we hereby grant you the right to
+use, copy, modify, create derivative works, publish, and distribute the
+Software for any Permitted Purpose identified below.
+
+### Permitted Purpose
+
+A "Permitted Purpose" is any purpose other than a Competing Use. A
+"Competing Use" means making the Software available to others in a
+commercial product or service that:
+
+1. substitutes for the Software;
+
+2. substitutes for any other product or service we offer using the Software
+   that exists as of the date we make the Software available; or
+
+3. offers the same or substantially similar functionality as the Software.
+
+Permitted Purposes specifically include using the Software:
+
+1. for your internal use and access;
+
+2. for non-commercial education;
+
+3. for non-commercial research; and
+
+4. in connection with professional services that you provide to a Licensee
+   using the Software in accordance with these Terms and Conditions.
+
+### Patents
+
+To the extent your use for a Permitted Purpose would necessarily infringe our
+patents, the license grant above includes a license under our patents. If you
+make a claim against any party that the Software infringes or contributes to
+the infringement of any patent, then your patent license to the Software ends
+immediately.
+
+### Redistribution
+
+The Terms and Conditions apply to all copies, modifications and derivatives
+of the Software.
+
+If you redistribute any copies, modifications or derivatives of the Software,
+you must include a copy of or a link to these Terms and Conditions and not
+remove any copyright notices provided in or with the Software.
+
+### Disclaimer
+
+THE SOFTWARE IS PROVIDED "AS IS" AND WITHOUT WARRANTIES OF ANY KIND,
+INCLUDING WITHOUT LIMITATION WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE,
+MERCHANTABILITY, TITLE OR NON-INFRINGEMENT.
+
+IN NO EVENT WILL WE HAVE ANY LIABILITY TO YOU ARISING OUT OF OR RELATED TO
+THE SOFTWARE, INCLUDING INDIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL
+DAMAGES, EVEN IF WE HAVE BEEN INFORMED OF THEIR POSSIBILITY IN ADVANCE.
+
+### Trademarks
+
+Except for displaying the License Details and identifying us as the origin of
+the Software, you have no right under these Terms and Conditions to use our
+trademarks, trade names, service marks or product names.
+
+## Grant of Future License
+
+We hereby irrevocably grant you an additional license to use the Software
+under the Apache License, Version 2.0 that is effective on the second
+anniversary of the date we make the Software available. On or after that
+date, you may use the Software under the Apache License, Version 2.0, in
+which case the following will apply:
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may not
+use this file except in compliance with the License.
+
+You may obtain a copy of the License at
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+
+See the License for the specific language governing permissions and
+limitations under the License.

package/LICENSE-FAQ.md

@@ -0,0 +1,256 @@
+# Licensing FAQ
+
+> Canonical version at https://docs.lloyal.ai/licensing/faq.
+> This file is a synced copy. Edit the canonical source and re-run
+> `scripts/sync-license-faq.sh` in lloyal-sdk to update all copies.
+
+
+**You can build and sell commercial products using HDK.**
+
+> HDK is free to build products with; it is not free to become the
+> replacement HDK platform.
+
+That single sentence is the entire restriction reduced to one line. The rest
+of this page is illustration.
+
+## The short version
+
+HDK 3.0 runtime packages — `liblloyal`, `lloyal-node`, and the lloyal-sdk
+packages (`agents`, `sdk`, `rig`, `apps/corpus`, `apps/web`) — are
+source-available under **FSL-1.1-Apache-2.0** (the Functional Source License,
+Apache 2.0 future grant). FSL is a [Fair Source](https://fair.io) license.
+
+Each version converts to Apache 2.0 two years after its release. The
+restriction during those two years is narrow: **you cannot offer a competing
+HDK runtime, a managed HDK service, or an alternative HDK App distribution
+channel.** Everything else — commercial use, redistribution, modification,
+sale, embedding in shipped products — is freely permitted.
+
+The reason the channel restriction exists is consumer-protective: every App
+listed on `apps.lloyal.ai` is reviewed by Lloyal Labs for tool-safety,
+manifest conformance, and signature provenance before publication. Pinning
+the App ecosystem to one verified channel keeps the AI-safety review meaningful
+(consumers can rely on a single trust boundary) and prevents protocol
+fragmentation (an App that works on one harness works on every harness).
+
+The `harness.dev` CLI and `hdk-create-app` scaffolder are licensed under
+**Apache 2.0** (unrestricted). They're not part of the runtime stack.
+
+## Can I ship a commercial product built on HDK?
+
+**Yes.** This is the question everyone has and the answer is straightforward.
+Concretely:
+
+- **Shipping a paid intelligent inbox app to consumers** — permitted ✅
+- **Selling an Excel-with-AI desktop app to enterprises** — permitted ✅
+- **Embedding HDK in a medical device sold commercially** — permitted ✅
+- **A consulting firm building a custom intelligent harness for a Fortune
+  500 client, charging $500K for the engagement, deploying on client
+  infrastructure** — permitted ✅
+- **An indie dev shipping a paid productivity app on the Mac App Store** —
+  permitted ✅
+- **An OEM shipping HDK inside an infotainment system or industrial device**
+  — permitted ✅
+- **A startup building an end-user product on top of HDK** — including
+  vertical research apps, workflow tools, and agent applications — permitted
+  ✅, *as long as the product is not offering HDK itself as a substitute
+  runtime, managed HDK service, or competing App distribution channel*.
+- **A research lab using HDK in published academic work** — permitted ✅
+- **Forking HDK on GitHub to learn, modify, demo, or contribute** — permitted ✅
+- **Running HDK internally inside your company for any business use** —
+  permitted ✅
+
+If you are building something *with* HDK, you are almost certainly fine.
+
+## What is actually restricted?
+
+The restriction is narrow and specific: **don't become the replacement
+platform vendor**. Concretely:
+
+- **AWS / Google / Microsoft launching "Bedrock Managed HDK" or "Vertex HDK"
+  as a hosted runtime service** — restricted ❌
+- **A competitor publishing "OpenHDK" as a forked harness runtime under a
+  different name** — restricted ❌
+- **A clean-room reimplementation of the HDK runtime in Python / Rust / Go
+  intended as a drop-in replacement** — restricted ❌ (Competing Use doesn't
+  require forking source code — a reimplementation that competes is the
+  same problem)
+- **Launching `apps.competitor.com` as an alternative HDK App distribution
+  channel** — restricted ❌
+- **Offering "managed HDK hosting" or "HDK-as-a-Service" as a competing
+  SaaS** — restricted ❌
+- **A hosted orchestration service exposing HDK-compatible APIs as a
+  substitute for the HDK runtime** — restricted ❌
+
+Notice the pattern: every restricted scenario is "become the platform
+vendor," not "build products with HDK." If your project doesn't compete
+directly with the HDK runtime or its distribution channel, FSL doesn't
+affect you.
+
+## Why does the LICENSE list four narrow Permitted Purposes then?
+
+You may read the FSL LICENSE and see this section:
+
+> Permitted Purposes specifically include using the Software:
+> 1. for your internal use and access;
+> 2. for non-commercial education;
+> 3. for non-commercial research; and
+> 4. in connection with professional services that you provide to a
+>    Licensee using the Software in accordance with these Terms and
+>    Conditions.
+
+A careful first reading can mistake this list for the *exclusive* set of
+permitted uses — leading to the (incorrect) conclusion that commercial
+product distribution is prohibited.
+
+It isn't. **The operative definition is broader.** Earlier in the same
+section, the license states:
+
+> A "Permitted Purpose" is any purpose other than a Competing Use.
+
+The four enumerated items are **illustrative examples** added because those
+specific cases are ones a careful reader might otherwise hesitate about
+("is research permitted? is consulting permitted?"). The four items are
+additive clarifications, not a closing of the open-ended definition.
+
+Sentry, who authored FSL and uses it on their own software, [confirms this
+explicitly in their FAQ](https://fsl.software):
+
+> "You can do anything with FSL software except undermine its producer. You
+> can run it for almost all purposes, study it, modify it, and distribute
+> your changes…"
+
+If the license felt restrictive on first read, that's a documented
+[FSL adoption hazard](https://fair.io) — many developers hit the same wall.
+The answer is to read the "any purpose other than a Competing Use" line as
+the operative definition and treat the four enumerated items as examples,
+not as a closed list.
+
+## Will it become Apache 2.0?
+
+**Yes — automatically, on a per-version schedule.** Each released version of
+the runtime stack converts to Apache 2.0 exactly two years after its release
+date. The conversion is irrevocable and written into the license text — it's
+not a promise from Lloyal Labs, it's a contractual clause.
+
+For example: if `lloyal-sdk @lloyal-labs/lloyal-agents` v3.0.0 is released
+on 2026-06-01, that exact version becomes available under Apache 2.0 on
+2028-06-01. Any consumer can elect to use that version under Apache 2.0
+from that date forward — Lloyal Labs takes no action; the grant is
+automatic.
+
+New versions released after v3.0.0 start their own two-year clock from
+their own release dates. There is no single global Change Date.
+
+## Is this OSI-approved open source?
+
+**No, and we want to be honest about that.** FSL is not OSI-approved
+because the OSI definition of open source (clause 6, "No Discrimination
+Against Fields of Endeavor") does not permit restrictions on specific
+use cases. FSL restricts Competing Use. That restriction takes it out of
+strict OSI compliance.
+
+FSL falls under the [Fair Source](https://fair.io) classification —
+source-available licenses that are explicitly developer-friendly:
+commercial use permitted, free redistribution, eventual open-source
+conversion. Fair Source is a more developer-friendly framing than the
+generic "source-available" label, which has been tainted by the
+SSPL / Elastic / MongoDB relicensing trauma cycles.
+
+What this means practically:
+
+- **You can read the source.** ✅
+- **You can modify it.** ✅
+- **You can sell products built with it.** ✅
+- **You can redistribute it (with the same FSL terms).** ✅
+- **It will be Apache 2.0 in two years.** ✅
+- Some enterprise procurement policies that strictly require OSI-approved
+  licenses will require an exception for this. We're working on making
+  that exception easy to grant.
+
+## Why FSL specifically — why not stay Apache?
+
+HDK 3.0 introduces installable HDK Apps. Every App declares against a
+specific App protocol — the bytes-locked intro, catalog format,
+tool-selection rule, and boundary marker that the runtime renders into
+the spine. Your App's reliability depends on every HDK runtime your users
+install agreeing on the same protocol.
+
+Under a permissive license alone, the protocol is forkable. A
+well-resourced redistributor could fork the runtime, modify the protocol
+surface, and distribute a variant under a different name with captive
+distribution. App developers then face a fragmented ecosystem: target one
+protocol, target both, or pick the bigger distribution and abandon the
+others. The cost of that split is paid by App developers in testing
+burden, divergent behavior, and reliability degradation across runtimes.
+
+FSL's two-year Competing Use restriction is shaped to block that
+fragmentation specifically. After the conversion, anyone can build
+whatever they want — by which time the protocol has had enough time to
+stabilize through ecosystem use and the protection is no longer the load-
+bearing thing keeping it coherent.
+
+For the longer treatment of this argument, see
+[Why FSL](./why-fsl).
+
+We could have used Apache 2.0 and tried to protect only the channel via
+terms-of-service. We could have written a custom license. We chose
+standard FSL because it's:
+
+- **Off-the-shelf** — no bespoke license review at every adopter
+- **Recognizable** — Sentry, PowerSync, and others use it
+- **Documented** — the FAQ, definitions, and edge cases have been
+  litigated publicly
+- **Time-bounded** — the protocolual Apache 2.0 conversion is the answer
+  to the "is this just source-available forever?" critique
+- **Pre-launch** — relicensing at HDK 3.0 launch is structurally
+  different from MongoDB / Elastic / HashiCorp relicensing under an
+  existing installed base, which is what causes the backlash cycle
+
+## What about the lloyal stack — what's under FSL and what's not?
+
+| Component | License | Why |
+|---|---|---|
+| `liblloyal` (C++ engine) | FSL-1.1-Apache-2.0 | Native primitives the runtime is built on |
+| `lloyal-node` (N-API binding) | FSL-1.1-Apache-2.0 | The binding that lets Effection drive llama.cpp |
+| `@lloyal-labs/lloyal-agents` | FSL-1.1-Apache-2.0 | Runtime framework |
+| `@lloyal-labs/lloyal-sdk` | FSL-1.1-Apache-2.0 | Runtime framework |
+| `@lloyal-labs/rig` | FSL-1.1-Apache-2.0 | Runtime framework — holds the App protocol |
+| `@lloyal-labs/corpus`, `@lloyal-labs/web` | FSL-1.1-Apache-2.0 | Reference Apps shipped in-tree |
+| **`@lloyal-labs/harness-cli` (the `harness.dev` CLI)** | **Apache 2.0** | Scaffolder — unrestricted for scaffolding new harnesses and Apps |
+| **`hdk-create-app`** (when shipped) | **Apache 2.0** | Scaffolder — same as above |
+| `llama.cpp` (vendored dependency) | MIT (unchanged) | External upstream library; we don't relicense their code |
+
+## Can I contribute to HDK?
+
+**Yes.** Contributions are welcome under the same FSL license terms. If you
+submit a PR, you're granting Lloyal Labs the right to distribute your
+contribution under FSL-1.1-Apache-2.0 (and automatically under Apache 2.0
+two years after each release that includes it). The CONTRIBUTING file in
+each repo has the details.
+
+## I have a use case that's borderline — who do I ask?
+
+Email [legal@lloyal.ai](mailto:legal@lloyal.ai) (or open a discussion in the repo). The runtime
+team will help you confirm whether your use case falls under Permitted
+Purpose or Competing Use. We'd rather give you a quick yes than have you
+worry about it.
+
+## Further reading
+
+- [FSL official site](https://fsl.software) — Sentry's canonical FSL
+  resources and FAQ
+- [Fair Source](https://fair.io) — the category FSL belongs to
+- [The FSL template, instantiated for each repo](./fsl-template)
+- [Why we chose FSL over BSL, Apache, or a custom license](./why-fsl)
+
+## Is there a safe harbor for building products with the HDK?
+
+Yes. The [Lloyal Harness Builder Grant](https://github.com/lloyal-ai/hdk/blob/main/GRANT.md)
+irrevocably guarantees that building, selling, and hosting Harnesses and Apps
+is a Permitted Purpose and never a Competing Use — even products that compete
+head-on with Lloyal's own (including reasoning.run). Only three uses remain
+restricted: offering the HDK itself as a developer framework, hosting the HDK
+as-a-service for third-party developers, and operating a general-purpose App
+distribution channel. Private/internal App distribution and your Harness's
+own plugin system are explicitly permitted.

package/README.md

@@ -31,6 +31,16 @@ import {
   Tool, Source,
   DefaultAgentPolicy,
   Ctx, Store, Events,
+  // App protocol primitives — types + contexts the registry + agent pool
+  // pick up. Construction lives in `@lloyal-labs/rig` (`defineApp`,
+  // `createAppRegistry`).
+  AppRegistryCtx, AppConfigStoreCtx, GrantStoreCtx, RerankerCtx,
+} from "@lloyal-labs/lloyal-agents";
+
+import type {
+  App, AppManifest, AppProtocol, AppFactory, AppState,
+  AgentRenderCtx, SkillTemplateFn,
+  AppConfigStore, GrantStore,
 } from "@lloyal-labs/lloyal-agents";
 ```
 
@@ -233,10 +243,16 @@ The runtime emits structured events for TUI, logging, or telemetry:
 | `agent:recovered`     | `agentId`, `result` — recovery extracted findings from killed agent |
 | `agent:done`          | `agentId`                                                 |
 
+## App protocol
+
+`lloyal-agents` ships the App protocol primitives — types ({@link App}, {@link AppManifest}, {@link AppProtocol}, {@link AppRegistry}), contexts (`AppRegistryCtx`, `AppConfigStoreCtx`, `GrantStoreCtx`, `RerankerCtx`), and the `Tool.protected` flag + authGuard hook in the agent policy. Construction primitives — `defineApp`, `createAppRegistry`, `createInMemoryConfigStore`, `createGrantStore`, `renderSpine`, `renderAgentPreamble` — live in [`@lloyal-labs/rig`](../rig). Reference Apps (`@lloyal-labs/web-app`, `@lloyal-labs/corpus-app`, `@lloyal-labs/wikipedia-app`) consume both.
+
+Scaffold an App with `npx harness.dev app <name>`; install one with `npx harness.dev install <publisher>/<name>`.
+
 ## Documentation
 
 Full positioning, mechanics, learn pages, and reference at [docs.lloyal.ai](https://docs.lloyal.ai).
 
 ## License
 
-Apache-2.0
+See [LICENSE](./LICENSE) (Functional Source License 1.1 — Apache 2.0 Future License) and the [licensing FAQ](./LICENSE-FAQ.md).

package/dist/Agent.d.ts

@@ -6,7 +6,7 @@ import type { TraceToken } from './types';
  * Agent status — domain language for where the agent is in its lifecycle.
  *
  * - `idle`: created but not yet generating, OR finished but branch still
- *    alive (extraction window for scratchpad)
+ *    alive (extraction window for recovery)
  * - `active`: generating tokens (between PRODUCE start and stop token)
  * - `awaiting_tool`: tool call parsed, waiting for result in SETTLE
  * - `disposed`: branch pruned, agent no longer usable
@@ -19,7 +19,7 @@ export type AgentStatus = 'idle' | 'active' | 'awaiting_tool' | 'disposed';
  *
  * @category Agents
  */
-export type ResultSource = 'voluntary_return' | 'free_text' | 'scratchpad' | 'nudge' | 'tool_error';
+export type ResultSource = 'voluntary_return' | 'free_text' | 'recovery' | 'nudge' | 'tool_error';
 /**
  * Immutable prompt format configuration set at agent creation.
  * Derived from `formatChatSync()` output.
@@ -91,6 +91,15 @@ export declare class Agent {
     readonly fmt: FormatConfig;
     /** The task text this agent was assigned — used by echo detection guard */
     readonly task: string;
+    /**
+     * Optional non-enforcing label naming the App a spawn nominally belongs
+     * to (`SpawnSpec.assignedApp`), or `null` for harness-internal spawns.
+     * Purely informational since the authGuard moved the security boundary
+     * into the tool: tool access is gated by {@link Tool.protected}
+     * + session grants, not by app membership. Carried so trace events
+     * (`tool:authReject`) and harness UI can attribute work to an app.
+     */
+    readonly assignedApp: string | null;
     private _status;
     private _statusSignal;
     private _startedAt;
@@ -115,6 +124,8 @@ export declare class Agent {
         fmt: FormatConfig;
         parent?: Agent | null;
         task?: string;
+        /** Optional non-enforcing app label — see {@link assignedApp}. */
+        assignedApp?: string | null;
     });
     get status(): AgentStatus;
     /**

package/dist/Agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Agent.d.ts","sourceRoot":"","sources":["../src/Agent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAI1C;;;;;;;;;;GAUG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,eAAe,GAAG,UAAU,CAAC;AAE3E;;;;GAIG;AACH,MAAM,MAAM,YAAY,GACpB,kBAAkB,GAClB,WAAW,GACX,YAAY,GACZ,OAAO,GACP,YAAY,CAAC;AAIjB;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC;;;;;;;OAOG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAID;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,gBAAgB,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,KAAK;IAGhB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,sCAAsC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,4CAA4C;IAC5C,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAE3B,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAItB,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,aAAa,CAAgE;IACrF,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,UAAU,CAAM;IACxB,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,cAAc,CAAgB;IACtC,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,OAAO,CAAsC;IAErD,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,CAAQ;gBAIzB,IAAI,EAAE;QAChB,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,YAAY,CAAC;QAClB,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf;IAWD,IAAI,MAAM,IAAI,WAAW,CAAyB;IAElD;;;;OAIG;IACH,IAAI,YAAY,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAA+B;IAE5E;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,EAAE,WAAW,GAAG,IAAI;IAgBjC;;;;OAIG;IACH,IAAI,SAAS,IAAI,MAAM,GAAG,IAAI,CAA4B;IAI1D,IAAI,SAAS,IAAI,MAAM,CAA4B;IACnD,IAAI,UAAU,IAAI,MAAM,CAA6B;IACrD,IAAI,aAAa,IAAI,MAAM,CAAgC;IAC3D,IAAI,KAAK,IAAI,MAAM,CAAwB;IAC3C,IAAI,WAAW,IAAI,UAAU,EAAE,CAA8B;IAC7D,IAAI,WAAW,IAAI,MAAM,GAAG,IAAI,CAA8B;IAC9D,IAAI,MAAM,IAAI,qBAAqB,GAAG,IAAI,CAAyB;IAEnE,4DAA4D;IAC5D,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAKnC,uCAAuC;IACvC,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAMhF;;;;;OAKG;IACH,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI;IAclC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,EAAE,cAAc,GAAG,qBAAqB;IAYpD,yDAAyD;IACzD,SAAS,IAAI,IAAI;IAOjB,6BAA6B;IAC7B,cAAc,IAAI,IAAI;IAEtB,kCAAkC;IAClC,kBAAkB,IAAI,IAAI;IAI1B,IAAI,WAAW,IAAI,SAAS,gBAAgB,EAAE,CAA8B;IAE5E,sDAAsD;IACtD,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAM/C,gFAAgF;IAChF,IAAI,aAAa,IAAI,SAAS,MAAM,EAAE,CAAgC;IAEtE,4DAA4D;IAC5D,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI;IAIzC;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE;IAYzD,IAAI,MAAM,IAAI,MAAM,GAAG,IAAI,CAAyB;IACpD,IAAI,YAAY,IAAI,YAAY,GAAG,IAAI,CAA+B;IAEtE,0EAA0E;IAC1E,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI;IAOtD,IAAI,QAAQ,IAAI,MAAM,CAAiC;IACvD,IAAI,QAAQ,IAAI,MAAM,CAAiC;IACvD,qEAAqE;IACrE,IAAI,WAAW,IAAI,MAAM,CAAwD;IAEjF,uEAAuE;IACvE,IAAI,qBAAqB,IAAI,OAAO,CAEnC;IAID;;;;;;;;;;OAUG;IACI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,qBAAqB,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IASvF,oEAAoE;IACpE,OAAO,IAAI,IAAI;CAIhB"}
+{"version":3,"file":"Agent.d.ts","sourceRoot":"","sources":["../src/Agent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAI1C;;;;;;;;;;GAUG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,eAAe,GAAG,UAAU,CAAC;AAE3E;;;;GAIG;AACH,MAAM,MAAM,YAAY,GACpB,kBAAkB,GAClB,WAAW,GACX,UAAU,GACV,OAAO,GACP,YAAY,CAAC;AAIjB;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC;;;;;;;OAOG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAID;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,gBAAgB,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,KAAK;IAGhB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,sCAAsC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,4CAA4C;IAC5C,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAE3B,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAIpC,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,aAAa,CAAgE;IACrF,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,UAAU,CAAM;IACxB,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,cAAc,CAAgB;IACtC,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,OAAO,CAAsC;IAErD,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,CAAQ;gBAIzB,IAAI,EAAE;QAChB,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,YAAY,CAAC;QAClB,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,kEAAkE;QAClE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B;IAYD,IAAI,MAAM,IAAI,WAAW,CAAyB;IAElD;;;;OAIG;IACH,IAAI,YAAY,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAA+B;IAE5E;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,EAAE,WAAW,GAAG,IAAI;IAgBjC;;;;OAIG;IACH,IAAI,SAAS,IAAI,MAAM,GAAG,IAAI,CAA4B;IAI1D,IAAI,SAAS,IAAI,MAAM,CAA4B;IACnD,IAAI,UAAU,IAAI,MAAM,CAA6B;IACrD,IAAI,aAAa,IAAI,MAAM,CAAgC;IAC3D,IAAI,KAAK,IAAI,MAAM,CAAwB;IAC3C,IAAI,WAAW,IAAI,UAAU,EAAE,CAA8B;IAC7D,IAAI,WAAW,IAAI,MAAM,GAAG,IAAI,CAA8B;IAC9D,IAAI,MAAM,IAAI,qBAAqB,GAAG,IAAI,CAAyB;IAEnE,4DAA4D;IAC5D,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAKnC,uCAAuC;IACvC,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAMhF;;;;;OAKG;IACH,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI;IAclC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,EAAE,cAAc,GAAG,qBAAqB;IAYpD,yDAAyD;IACzD,SAAS,IAAI,IAAI;IAOjB,6BAA6B;IAC7B,cAAc,IAAI,IAAI;IAEtB,kCAAkC;IAClC,kBAAkB,IAAI,IAAI;IAI1B,IAAI,WAAW,IAAI,SAAS,gBAAgB,EAAE,CAA8B;IAE5E,sDAAsD;IACtD,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAM/C,gFAAgF;IAChF,IAAI,aAAa,IAAI,SAAS,MAAM,EAAE,CAAgC;IAEtE,4DAA4D;IAC5D,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI;IAIzC;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE;IAYzD,IAAI,MAAM,IAAI,MAAM,GAAG,IAAI,CAAyB;IACpD,IAAI,YAAY,IAAI,YAAY,GAAG,IAAI,CAA+B;IAEtE,0EAA0E;IAC1E,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI;IAOtD,IAAI,QAAQ,IAAI,MAAM,CAAiC;IACvD,IAAI,QAAQ,IAAI,MAAM,CAAiC;IACvD,qEAAqE;IACrE,IAAI,WAAW,IAAI,MAAM,CAAwD;IAEjF,uEAAuE;IACvE,IAAI,qBAAqB,IAAI,OAAO,CAEnC;IAID;;;;;;;;;;OAUG;IACI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,qBAAqB,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IASvF,oEAAoE;IACpE,OAAO,IAAI,IAAI;CAIhB"}

package/dist/Agent.js

@@ -32,6 +32,15 @@ class Agent {
     fmt;
     /** The task text this agent was assigned — used by echo detection guard */
     task;
+    /**
+     * Optional non-enforcing label naming the App a spawn nominally belongs
+     * to (`SpawnSpec.assignedApp`), or `null` for harness-internal spawns.
+     * Purely informational since the authGuard moved the security boundary
+     * into the tool: tool access is gated by {@link Tool.protected}
+     * + session grants, not by app membership. Carried so trace events
+     * (`tool:authReject`) and harness UI can attribute work to an app.
+     */
+    assignedApp;
     // ── Mutable state ───────────────────────────────────────
     _status = 'idle';
     _statusSignal = (0, effection_1.createSignal)();
@@ -58,6 +67,7 @@ class Agent {
         this.fmt = opts.fmt;
         this.task = opts.task ?? '';
         this.parent = opts.parent ?? null;
+        this.assignedApp = opts.assignedApp ?? null;
     }
     // ── Status ──────────────────────────────────────────────
     get status() { return this._status; }

package/dist/Agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"Agent.js","sourceRoot":"","sources":["../src/Agent.ts"],"names":[],"mappings":";;;AAEA,yCAAsD;AA+EtD,+DAA+D;AAE/D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAa,KAAK;IAChB,2DAA2D;IAE3D,+CAA+C;IACtC,EAAE,CAAS;IAEpB,uEAAuE;IAC9D,QAAQ,CAAS;IAE1B,sCAAsC;IAC7B,MAAM,CAAS;IAExB,4CAA4C;IACnC,GAAG,CAAe;IAE3B,2EAA2E;IAClE,IAAI,CAAS;IAEtB,2DAA2D;IAEnD,OAAO,GAAgB,MAAM,CAAC;IAC9B,aAAa,GAA8B,IAAA,wBAAY,GAAqB,CAAC;IAC7E,UAAU,GAAkB,IAAI,CAAC;IACjC,UAAU,GAAG,EAAE,CAAC;IAChB,WAAW,GAAG,CAAC,CAAC;IAChB,cAAc,GAAG,CAAC,CAAC;IACnB,MAAM,GAAG,CAAC,CAAC;IACX,OAAO,GAAkB,IAAI,CAAC;IAC9B,aAAa,GAAwB,IAAI,CAAC;IAC1C,YAAY,GAAuB,EAAE,CAAC;IACtC,cAAc,GAAa,EAAE,CAAC;IAC9B,YAAY,GAAiB,EAAE,CAAC;IAChC,YAAY,GAAkB,IAAI,CAAC;IACnC,aAAa,GAAG,KAAK,CAAC;IACtB,OAAO,GAAiC,IAAI,CAAC;IAErD,0FAA0F;IACjF,MAAM,GAAiB,IAAI,CAAC;IAErC,2DAA2D;IAE3D,YAAY,IAOX;QACC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IACpC,CAAC;IAED,2DAA2D;IAE3D,IAAI,MAAM,KAAkB,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAElD;;;;OAIG;IACH,IAAI,YAAY,KAAgC,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAE5E;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAe;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,MAAM,KAAK,GACT,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,UAAU,CAAC,CAAC;YAC3D,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,EAAE,KAAK,eAAe,IAAI,EAAE,KAAK,MAAM,CAAC,CAAC;YAChE,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAChD,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,IAAI,SAAS,KAAoB,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1D,2DAA2D;IAE3D,IAAI,SAAS,KAAa,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACnD,IAAI,UAAU,KAAa,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACrD,IAAI,aAAa,KAAa,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC3D,IAAI,KAAK,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,IAAI,WAAW,KAAmB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7D,IAAI,WAAW,KAAoB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9D,IAAI,MAAM,KAAmC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAEnE,4DAA4D;IAC5D,eAAe,CAAC,IAAY;QAC1B,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;QACxB,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED,uCAAuC;IACvC,wBAAwB,CAAC,IAAY,EAAE,OAAe,EAAE,SAAiB;QACvE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;QACxB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,GAAmB;QACzB,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO;QAC/B,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YACnE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe;YACzC,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB;YAC3C,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;YACvB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,GAAmB;QAC1B,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YACnE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe;YACzC,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB;YAC3C,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,yDAAyD;IACzD,SAAS;QACP,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,6BAA6B;IAC7B,cAAc,KAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEzC,kCAAkC;IAClC,kBAAkB,KAAW,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IAErD,2DAA2D;IAE3D,IAAI,WAAW,KAAkC,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAE5E,sDAAsD;IACtD,gBAAgB,CAAC,KAAuB;QACtC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,8DAA8D;IAE9D,gFAAgF;IAChF,IAAI,aAAa,KAAwB,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAEtE,4DAA4D;IAC5D,gBAAgB,CAAC,OAAiB;QAChC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,aAAa,CAAI,EAAkC;QACjD,MAAM,MAAM,GAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,OAAO,OAAO,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5B,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2DAA2D;IAE3D,IAAI,MAAM,KAAoB,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,IAAI,YAAY,KAA0B,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAEtE,0EAA0E;IAC1E,SAAS,CAAC,OAAe,EAAE,MAAoB;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;IAC9B,CAAC;IAED,2DAA2D;IAE3D,IAAI,QAAQ,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,IAAI,QAAQ,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,qEAAqE;IACrE,IAAI,WAAW,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEjF,uEAAuE;IACvE,IAAI,qBAAqB;QACvB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;IACpD,CAAC;IAED,2DAA2D;IAE3D;;;;;;;;;;OAUG;IACH,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3B,IAAI,KAAK,EAAE,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,QAAQ,CAAC;QACjB,CAAC;IACH,CAAC;IAED,2DAA2D;IAE3D,oEAAoE;IACpE,OAAO;QACL,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;QAC1B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;CACF;AA5QD,sBA4QC"}
+{"version":3,"file":"Agent.js","sourceRoot":"","sources":["../src/Agent.ts"],"names":[],"mappings":";;;AAEA,yCAAsD;AA+EtD,+DAA+D;AAE/D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAa,KAAK;IAChB,2DAA2D;IAE3D,+CAA+C;IACtC,EAAE,CAAS;IAEpB,uEAAuE;IAC9D,QAAQ,CAAS;IAE1B,sCAAsC;IAC7B,MAAM,CAAS;IAExB,4CAA4C;IACnC,GAAG,CAAe;IAE3B,2EAA2E;IAClE,IAAI,CAAS;IAEtB;;;;;;;OAOG;IACM,WAAW,CAAgB;IAEpC,2DAA2D;IAEnD,OAAO,GAAgB,MAAM,CAAC;IAC9B,aAAa,GAA8B,IAAA,wBAAY,GAAqB,CAAC;IAC7E,UAAU,GAAkB,IAAI,CAAC;IACjC,UAAU,GAAG,EAAE,CAAC;IAChB,WAAW,GAAG,CAAC,CAAC;IAChB,cAAc,GAAG,CAAC,CAAC;IACnB,MAAM,GAAG,CAAC,CAAC;IACX,OAAO,GAAkB,IAAI,CAAC;IAC9B,aAAa,GAAwB,IAAI,CAAC;IAC1C,YAAY,GAAuB,EAAE,CAAC;IACtC,cAAc,GAAa,EAAE,CAAC;IAC9B,YAAY,GAAiB,EAAE,CAAC;IAChC,YAAY,GAAkB,IAAI,CAAC;IACnC,aAAa,GAAG,KAAK,CAAC;IACtB,OAAO,GAAiC,IAAI,CAAC;IAErD,0FAA0F;IACjF,MAAM,GAAiB,IAAI,CAAC;IAErC,2DAA2D;IAE3D,YAAY,IASX;QACC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED,2DAA2D;IAE3D,IAAI,MAAM,KAAkB,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAElD;;;;OAIG;IACH,IAAI,YAAY,KAAgC,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAE5E;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAe;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,MAAM,KAAK,GACT,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,UAAU,CAAC,CAAC;YAC3D,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,EAAE,KAAK,eAAe,IAAI,EAAE,KAAK,MAAM,CAAC,CAAC;YAChE,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAChD,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,IAAI,SAAS,KAAoB,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1D,2DAA2D;IAE3D,IAAI,SAAS,KAAa,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACnD,IAAI,UAAU,KAAa,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACrD,IAAI,aAAa,KAAa,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC3D,IAAI,KAAK,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,IAAI,WAAW,KAAmB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7D,IAAI,WAAW,KAAoB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9D,IAAI,MAAM,KAAmC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAEnE,4DAA4D;IAC5D,eAAe,CAAC,IAAY;QAC1B,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;QACxB,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED,uCAAuC;IACvC,wBAAwB,CAAC,IAAY,EAAE,OAAe,EAAE,SAAiB;QACvE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;QACxB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,GAAmB;QACzB,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO;QAC/B,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YACnE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe;YACzC,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB;YAC3C,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;YACvB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,GAAmB;QAC1B,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YACnE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe;YACzC,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB;YAC3C,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,yDAAyD;IACzD,SAAS;QACP,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,6BAA6B;IAC7B,cAAc,KAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEzC,kCAAkC;IAClC,kBAAkB,KAAW,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IAErD,2DAA2D;IAE3D,IAAI,WAAW,KAAkC,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAE5E,sDAAsD;IACtD,gBAAgB,CAAC,KAAuB;QACtC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,8DAA8D;IAE9D,gFAAgF;IAChF,IAAI,aAAa,KAAwB,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAEtE,4DAA4D;IAC5D,gBAAgB,CAAC,OAAiB;QAChC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,aAAa,CAAI,EAAkC;QACjD,MAAM,MAAM,GAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,OAAO,OAAO,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5B,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2DAA2D;IAE3D,IAAI,MAAM,KAAoB,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,IAAI,YAAY,KAA0B,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAEtE,0EAA0E;IAC1E,SAAS,CAAC,OAAe,EAAE,MAAoB;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;IAC9B,CAAC;IAED,2DAA2D;IAE3D,IAAI,QAAQ,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,IAAI,QAAQ,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,qEAAqE;IACrE,IAAI,WAAW,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEjF,uEAAuE;IACvE,IAAI,qBAAqB;QACvB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;IACpD,CAAC;IAED,2DAA2D;IAE3D;;;;;;;;;;OAUG;IACH,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3B,IAAI,KAAK,EAAE,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,QAAQ,CAAC;QACjB,CAAC;IACH,CAAC;IAED,2DAA2D;IAE3D,oEAAoE;IACpE,OAAO;QACL,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;QAC1B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;CACF;AAzRD,sBAyRC"}

package/dist/AgentPolicy.d.ts

@@ -1,20 +1,42 @@
 import type { Agent, ToolHistoryEntry } from './Agent';
+import type { ToolRetryError } from './Tool';
 import { ContextPressure } from './agent-pool';
 import type { ParsedToolCall } from '@lloyal-labs/sdk';
 import type { PressureThresholds } from './types';
 /**
- * A declarative guard that rejects tool calls based on agent lineage.
+ * A declarative guard that rejects tool calls based on agent state.
  * Guards are checked in order before any tool is dispatched.
  *
+ * `tools` selects which tool calls this guard sees: a `string[]` matches
+ * by exact name; the literal `'*'` matches every call (used by the
+ * framework-injected authGuard — guards that need to
+ * inspect *every* call regardless of tool name).
+ *
+ * `reject` returns `true` to reject the call with `message`. It receives
+ * the parsed args, the full agent lineage's tool history, the agent
+ * itself, `toolName` (so `tools: '*'` guards know which tool they're
+ * gating), and the pool-level `config` (so guards can consult
+ * pool-resolved state such as the protected-tool set and the session's
+ * grants — see {@link PolicyConfig}). Guards that don't need `config`
+ * simply omit the parameter.
+ *
+ * `name` is the optional guard identifier surfaced via
+ * `ProduceAction.nudge.guard` so the pool can emit per-guard trace
+ * events (e.g., `tool:authReject` for `name: 'auth_reject'`). Omit it
+ * for guards whose only observable footprint is the resulting
+ * `pool:agentNudge` event.
+ *
  * @category Agents
  */
 export interface ToolGuard {
-    /** Tool names this guard applies to */
-    tools: string[];
-    /** Return true to reject the call. Receives parsed args, full lineage history, and the agent itself. */
-    reject: (args: Record<string, unknown>, lineageHistory: ToolHistoryEntry[], agent: Agent) => boolean;
-    /** Error message sent back to the agent as a tool result */
+    /** Tool names this guard applies to; `'*'` matches every call. */
+    tools: string[] | '*';
+    /** Return true to reject the call. */
+    reject: (args: Record<string, unknown>, lineageHistory: ToolHistoryEntry[], agent: Agent, toolName: string, config: PolicyConfig) => boolean;
+    /** Error message sent back to the agent as a tool result. */
     message: string;
+    /** Optional identifier surfaced via `ProduceAction.nudge.guard`. */
+    name?: string;
 }
 export declare const defaultToolGuards: ToolGuard[];
 /**
@@ -32,9 +54,14 @@ export type ProduceAction = {
 } | {
     type: 'return';
     result: string;
-} | {
+}
+/** `guard` carries the identifier of the rejecting `ToolGuard` — used to
+ *  route `auth_reject` rejections to the `tool:authReject` trace event.
+ *  Absent for nudges not produced by a guard. */
+ | {
     type: 'nudge';
     message: string;
+    guard?: string;
 } | {
     type: 'idle';
     reason: IdleReason;
@@ -67,6 +94,25 @@ export type RecoveryAction = {
 } | {
     type: 'skip';
 };
+/**
+ * Action returned by policy.onToolRetry — what to do when a tool throws
+ * {@link ToolRetryError} (transient failure, e.g. provider rate-limited).
+ *
+ * `retry` parks the agent (`awaiting_tool`, skipped by PRODUCE at zero
+ * cost — no turns, no tokens, no KV) and re-executes the same call after
+ * `afterMs` (defaults to the error's own `retryAfterMs` estimate).
+ * `fail` settles `message` (or the pool's directive default) as the tool
+ * result so the model can pivot.
+ *
+ * @category Agents
+ */
+export type ToolRetryAction = {
+    type: 'retry';
+    afterMs?: number;
+} | {
+    type: 'fail';
+    message?: string;
+};
 /**
  * Agent lifecycle policy — injected strategy for pressure, nudge,
  * recursion, report timing, and result quality decisions.
@@ -154,6 +200,18 @@ export interface AgentPolicy {
      * Optional — defaults to skip when absent.
      */
     onRecovery?(agent: Agent, pressure: ContextPressure): RecoveryAction;
+    /**
+     * Transient tool failure (the tool threw {@link ToolRetryError}).
+     * Decide whether to park-and-retry or settle a failure result. The tool
+     * supplies a `retryAfterMs` estimate on the error; the policy may override
+     * it (`afterMs`) or refuse to wait at all — e.g. when the time budget
+     * can't afford a park.
+     *
+     * Absent → pool default: one retry at the error's own delay, then fail.
+     *
+     * @param attempt - 1 on the first failure of a call, 2 after one retry, …
+     */
+    onToolRetry?(agent: Agent, tool: string, error: ToolRetryError, attempt: number): ToolRetryAction;
 }
 /**
  * Pool-level configuration passed to policy methods.
@@ -163,6 +221,20 @@ export interface PolicyConfig {
     maxTurns: number;
     terminalToolName?: string;
     hasNonTerminalTools: boolean;
+    /**
+     * Tool names this pool declares `protected` (gathered from each
+     * {@link Tool.protected} flag). The authGuard gates only these; every
+     * other tool is open. Resolved once at pool setup. Undefined/empty when
+     * no tool in the pool is protected (the common case).
+     */
+    protectedTools?: ReadonlySet<string>;
+    /**
+     * Protected tool names the session currently holds a grant for — read
+     * from {@link GrantStoreCtx} at pool setup. The authGuard allows a
+     * protected tool iff its name is in this set. Undefined/empty = no
+     * grants (fail-closed: every protected tool denied).
+     */
+    grants?: ReadonlySet<string>;
 }
 /**
  * Default policy replicating the current inline if-logic from agent-pool.ts.
@@ -232,6 +304,9 @@ export interface DefaultAgentPolicyOpts {
      *  protected from shouldExit — the hard limit is deferred until the tool
      *  call completes naturally or KV pressure forces a kill. */
     terminalToolName?: string;
+    /** Max park-and-retry attempts per tool call on {@link ToolRetryError}
+     *  before failing the call with a directive result. @default 1 */
+    maxToolRetries?: number;
 }
 export declare class DefaultAgentPolicy implements AgentPolicy {
     private _minToolCalls;
@@ -242,8 +317,10 @@ export declare class DefaultAgentPolicy implements AgentPolicy {
     private _recovery;
     private _budget;
     private _terminalToolName;
+    private _maxToolRetries;
     private _startTime;
     constructor(opts?: DefaultAgentPolicyOpts);
+    onToolRetry(_agent: Agent, _tool: string, _error: ToolRetryError, attempt: number): ToolRetryAction;
     /**
      * Elapsed wall time for *this agent* (since its first idle→active transition),
      * falling back to the policy's own construction time when the agent hasn't