@lloyal-labs/lloyal-agents 2.1.0 → 3.0.0

package/dist/chunk.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Chunk / Reranker abstraction types.
+ *
+ * These interfaces live in `@lloyal-labs/lloyal-agents` (not rig) so that
+ * agent-pool code, app factories, and harness contexts can refer to a
+ * common Reranker shape without depending on rig's concrete chunking
+ * implementation. Concrete chunking utilities (`chunkResources`,
+ * `chunkHtml`, `chunkFetchedPages`) and the cross-encoder-backed
+ * `createReranker(...)` factory live in `@lloyal-labs/rig`.
+ *
+ * The pattern mirrors `Source` and `Tool`: abstract type in agents,
+ * concrete subclasses/factories in rig.
+ *
+ * @packageDocumentation
+ * @category Contract
+ */
+/**
+ * A loaded document available for search, read, and grep operations.
+ *
+ * Represents a single file (typically Markdown) loaded into memory.
+ * Resources are chunked into {@link Chunk} instances for reranking.
+ */
+export interface Resource {
+    /** File name (basename, not full path) used as the resource identifier. */
+    name: string;
+    /** Full text content of the file. */
+    content: string;
+}
+/**
+ * A scored passage within a {@link Resource}, used for reranking and retrieval.
+ *
+ * The `tokens` array is populated lazily by {@link Reranker.tokenizeChunks}
+ * before scoring. Once tokenized, a chunk is bound to that reranker's
+ * cross-encoder vocabulary — re-binding requires re-tokenization.
+ */
+export interface Chunk {
+    /** Resource identifier (file name or URL) this chunk belongs to. */
+    resource: string;
+    /** Leaf section heading (e.g. "Recovery loop"). */
+    heading: string;
+    /** Hierarchical section path (e.g. "Agents > Lifecycle > Recovery loop"). Empty for web chunks. */
+    section: string;
+    /** Raw text content of the chunk. */
+    text: string;
+    /** Pre-tokenized representation for the reranker — empty until {@link Reranker.tokenizeChunks} runs. */
+    tokens: number[];
+    /** First line number (1-based) in the source resource. */
+    startLine: number;
+    /** Last line number (1-based) in the source resource. */
+    endLine: number;
+}
+/**
+ * A single chunk scored by the {@link Reranker} against a query.
+ */
+export interface ScoredChunk {
+    /** Source filename containing the chunk. */
+    file: string;
+    /** Leaf section heading (e.g. "Recovery loop"). */
+    heading: string;
+    /** Hierarchical section path (e.g. "Agents > Lifecycle > Recovery loop"). Empty for web chunks. */
+    section: string;
+    /** First ~200 chars of chunk text — gives agents content at search time. */
+    snippet: string;
+    /** Relevance score (higher = more relevant). */
+    score: number;
+    /** Start line in the source file (1-indexed). */
+    startLine: number;
+    /** End line in the source file (1-indexed). */
+    endLine: number;
+}
+/**
+ * Progressive reranker output emitted during scoring.
+ *
+ * Streamed from {@link Reranker.score} as an async iterable, allowing
+ * callers to report progress while scoring is in flight.
+ */
+export interface ScoredResult {
+    /** Scored chunks accumulated so far, ordered by relevance. */
+    results: ScoredChunk[];
+    /** Number of chunks scored so far. */
+    filled: number;
+    /** Total number of chunks to score. */
+    total: number;
+}
+/**
+ * Cross-encoder reranker for scoring corpus chunks against a query.
+ *
+ * Apps obtain the harness-wide reranker via `RerankerCtx.expect()` at
+ * factory time — `source.bind({reranker})` is no longer the mechanism.
+ * Implementations tokenize chunks up front via {@link tokenizeChunks},
+ * then stream progressive results from {@link score}.
+ */
+export interface Reranker {
+    /** Score chunks against a query, streaming progressive results. */
+    score(query: string, chunks: Chunk[]): AsyncIterable<ScoredResult>;
+    /**
+     * Score raw text strings against a query in one batch.
+     *
+     * Returns logit-diff scores (`logit("yes") - logit("no")`, unbounded) in
+     * input order. This is the log-odds of the reranker's ABSOLUTE yes/no
+     * relevance judgment — `P(yes) = sigmoid(score)`, so 0 ≡ P 0.5 — the
+     * monotone equivalent of the official Qwen3-Reranker two-token softmax.
+     * Scores are thresholdable and comparable across queries to the extent of
+     * the model's calibration (quantization adds noise at the extremes).
+     */
+    scoreBatch(query: string, texts: string[]): Promise<number[]>;
+    /** Pre-tokenize chunks for subsequent scoring calls. */
+    tokenizeChunks(chunks: Chunk[]): Promise<void>;
+    /**
+     * Tokenize an arbitrary text string through the reranker's tokenizer.
+     * Use when consumers need to operate on tokens from the same vocabulary
+     * as the chunks (e.g. BM25 first-stage scoring at query time).
+     */
+    tokenize(text: string): Promise<number[]>;
+    /** Release reranker resources. */
+    dispose(): void;
+}
+//# sourceMappingURL=chunk.d.ts.map

package/dist/chunk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk.d.ts","sourceRoot":"","sources":["../src/chunk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,KAAK;IACpB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,mGAAmG;IACnG,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,wGAAwG;IACxG,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,mGAAmG;IACnG,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,8DAA8D;IAC9D,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,QAAQ;IACvB,mEAAmE;IACnE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IACnE;;;;;;;;;OASG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,wDAAwD;IACxD,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,kCAAkC;IAClC,OAAO,IAAI,IAAI,CAAC;CACjB"}

package/dist/chunk.js

@@ -0,0 +1,19 @@
+"use strict";
+/**
+ * Chunk / Reranker abstraction types.
+ *
+ * These interfaces live in `@lloyal-labs/lloyal-agents` (not rig) so that
+ * agent-pool code, app factories, and harness contexts can refer to a
+ * common Reranker shape without depending on rig's concrete chunking
+ * implementation. Concrete chunking utilities (`chunkResources`,
+ * `chunkHtml`, `chunkFetchedPages`) and the cross-encoder-backed
+ * `createReranker(...)` factory live in `@lloyal-labs/rig`.
+ *
+ * The pattern mirrors `Source` and `Tool`: abstract type in agents,
+ * concrete subclasses/factories in rig.
+ *
+ * @packageDocumentation
+ * @category Contract
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=chunk.js.map

package/dist/chunk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk.js","sourceRoot":"","sources":["../src/chunk.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG"}

package/dist/context.d.ts

@@ -1,9 +1,13 @@
 import type { SessionContext } from '@lloyal-labs/sdk';
-import type { BranchStore, Branch } from '@lloyal-labs/sdk';
+import type { BranchStore } from '@lloyal-labs/sdk';
 import type { Channel } from 'effection';
 import type { AgentEvent } from './types';
 import type { TraceWriter } from './trace-writer';
 import type { Agent, FormatConfig } from './Agent';
+import type { Reranker } from './chunk';
+import type { AppRegistry } from './app-types';
+import type { AppConfigStore } from './app-config';
+import type { GrantStore } from './grant-store';
 /**
  * Effection context holding the active {@link SessionContext}
  *
@@ -51,17 +55,6 @@ export declare const Trace: import("effection").Context<TraceWriter>;
  * @category Agents
  */
 export declare const TraceParent: import("effection").Context<number>;
-/**
- * Effection context holding the scratchpad fork parent branch
- *
- * Set by {@link withSpine} to the current spine branch. Tools that
- * need scratchpad extraction (e.g. BufferingFetchPage, BufferingWebSearch)
- * read this via `yield* ScratchpadParent.expect()` to fork from the
- * innermost active spine — never a stale reference from a prior scope.
- *
- * @category Agents
- */
-export declare const ScratchpadParent: import("effection").Context<Branch>;
 /**
  * Effection context holding the calling agent during DISPATCH
  *
@@ -93,4 +86,67 @@ export declare const CallingAgent: import("effection").Context<Agent>;
  * @category Agents
  */
 export declare const SpineFmt: import("effection").Context<FormatConfig | null>;
+/**
+ * Effection context holding the harness-wide {@link Reranker}.
+ *
+ * Set by the harness once via `RerankerCtx.set(reranker)` after
+ * `createReranker(...)`. App factories (`createWebApp`, `createCorpusApp`,
+ * third-party apps) read this via `yield* RerankerCtx.expect()` at
+ * construction time and pass it to their `Source` / search tools.
+ *
+ * Replaces the per-source `source.bind({reranker})` pattern — chunks
+ * tokenized by one reranker can't be re-bound to another without
+ * re-tokenization, so one cross-encoder per harness
+ * is the invariant.
+ *
+ * @category Contract
+ */
+export declare const RerankerCtx: import("effection").Context<Reranker>;
+/**
+ * Effection context holding the {@link AppRegistry}.
+ *
+ * Set by `createAppRegistry(...)` (lives in `@lloyal-labs/rig`). The
+ * scope-guard reads this at tool-dispatch time to resolve
+ * the allowed-tools set for an App-assigned spawn — looking up
+ * `registry.byName(spawn.assignedApp)` and matching the dispatched
+ * `toolName` against `manifest.protocol.tools`.
+ *
+ * The spine renderer also reads this to compose the catalog in
+ * registration order.
+ *
+ * @category Contract
+ */
+export declare const AppRegistryCtx: import("effection").Context<AppRegistry>;
+/**
+ * Effection context holding the harness's {@link AppConfigStore}.
+ *
+ * Set by `createAppRegistry({ configStore })` from its `configStore`
+ * option, and seeded into each app's detached scope so factories can
+ * read it. App factories read their own config via
+ * `(yield* AppConfigStoreCtx.expect()).get(manifest.name)` at
+ * construction time. The framework validates the stored config against
+ * `app.manifest.configSchema` when the app is enabled.
+ *
+ * Whole-replace semantics on `set`; last-write-wins on concurrent
+ * writes.
+ *
+ * @category Contract
+ */
+export declare const AppConfigStoreCtx: import("effection").Context<AppConfigStore>;
+/**
+ * Effection context holding the session's {@link GrantStore}.
+ *
+ * Seeded by `createAppRegistry({ grantStore })` (lives in `@lloyal-labs/rig`)
+ * alongside {@link AppConfigStoreCtx}. The authGuard
+ * reads it once per pool to resolve which `protected` tools the session is
+ * authorized to call — `protected` tools without a grant reject at dispatch
+ * time (`tool:authReject`). The store holds the consent decision; the
+ * **credential never enters the model's context**.
+ *
+ * Absent context = fail-closed: no grants, every protected tool denied.
+ * Open (non-protected) tools never consult it.
+ *
+ * @category Contract
+ */
+export declare const GrantStoreCtx: import("effection").Context<GrantStore>;
 //# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD;;;;;;;;GAQG;AACH,eAAO,MAAM,GAAG,6CAA8C,CAAC;AAE/D;;;;;;;GAOG;AACH,eAAO,MAAM,KAAK,0CAA6C,CAAC;AAEhE;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,wDAA4D,CAAC;AAEhF;;;;;;;GAOG;AACH,eAAO,MAAM,KAAK,0CAA6C,CAAC;AAEhE;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW,qCAA+C,CAAC;AAExE;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,qCAAmD,CAAC;AAEjF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,YAAY,oCAA8C,CAAC;AAExE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ,kDAA8D,CAAC"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAU,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD;;;;;;;;GAQG;AACH,eAAO,MAAM,GAAG,6CAA8C,CAAC;AAE/D;;;;;;;GAOG;AACH,eAAO,MAAM,KAAK,0CAA6C,CAAC;AAEhE;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,wDAA4D,CAAC;AAEhF;;;;;;;GAOG;AACH,eAAO,MAAM,KAAK,0CAA6C,CAAC;AAEhE;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW,qCAA+C,CAAC;AAExE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,YAAY,oCAA8C,CAAC;AAExE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ,kDAA8D,CAAC;AAEpF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,WAAW,uCAA6C,CAAC;AAEtE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,cAAc,0CAAmD,CAAC;AAE/E;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,6CAAyD,CAAC;AAExF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,aAAa,yCAAiD,CAAC"}

package/dist/context.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SpineFmt = exports.CallingAgent = exports.ScratchpadParent = exports.TraceParent = exports.Trace = exports.Events = exports.Store = exports.Ctx = void 0;
+exports.GrantStoreCtx = exports.AppConfigStoreCtx = exports.AppRegistryCtx = exports.RerankerCtx = exports.SpineFmt = exports.CallingAgent = exports.TraceParent = exports.Trace = exports.Events = exports.Store = exports.Ctx = void 0;
 const effection_1 = require("effection");
 /**
  * Effection context holding the active {@link SessionContext}
@@ -49,17 +49,6 @@ exports.Trace = (0, effection_1.createContext)('lloyal.trace');
  * @category Agents
  */
 exports.TraceParent = (0, effection_1.createContext)('lloyal.traceParent');
-/**
- * Effection context holding the scratchpad fork parent branch
- *
- * Set by {@link withSpine} to the current spine branch. Tools that
- * need scratchpad extraction (e.g. BufferingFetchPage, BufferingWebSearch)
- * read this via `yield* ScratchpadParent.expect()` to fork from the
- * innermost active spine — never a stale reference from a prior scope.
- *
- * @category Agents
- */
-exports.ScratchpadParent = (0, effection_1.createContext)('lloyal.scratchpadParent');
 /**
  * Effection context holding the calling agent during DISPATCH
  *
@@ -91,4 +80,67 @@ exports.CallingAgent = (0, effection_1.createContext)('lloyal.callingAgent');
  * @category Agents
  */
 exports.SpineFmt = (0, effection_1.createContext)('lloyal.spineFmt', null);
+/**
+ * Effection context holding the harness-wide {@link Reranker}.
+ *
+ * Set by the harness once via `RerankerCtx.set(reranker)` after
+ * `createReranker(...)`. App factories (`createWebApp`, `createCorpusApp`,
+ * third-party apps) read this via `yield* RerankerCtx.expect()` at
+ * construction time and pass it to their `Source` / search tools.
+ *
+ * Replaces the per-source `source.bind({reranker})` pattern — chunks
+ * tokenized by one reranker can't be re-bound to another without
+ * re-tokenization, so one cross-encoder per harness
+ * is the invariant.
+ *
+ * @category Contract
+ */
+exports.RerankerCtx = (0, effection_1.createContext)('lloyal.reranker');
+/**
+ * Effection context holding the {@link AppRegistry}.
+ *
+ * Set by `createAppRegistry(...)` (lives in `@lloyal-labs/rig`). The
+ * scope-guard reads this at tool-dispatch time to resolve
+ * the allowed-tools set for an App-assigned spawn — looking up
+ * `registry.byName(spawn.assignedApp)` and matching the dispatched
+ * `toolName` against `manifest.protocol.tools`.
+ *
+ * The spine renderer also reads this to compose the catalog in
+ * registration order.
+ *
+ * @category Contract
+ */
+exports.AppRegistryCtx = (0, effection_1.createContext)('lloyal.appRegistry');
+/**
+ * Effection context holding the harness's {@link AppConfigStore}.
+ *
+ * Set by `createAppRegistry({ configStore })` from its `configStore`
+ * option, and seeded into each app's detached scope so factories can
+ * read it. App factories read their own config via
+ * `(yield* AppConfigStoreCtx.expect()).get(manifest.name)` at
+ * construction time. The framework validates the stored config against
+ * `app.manifest.configSchema` when the app is enabled.
+ *
+ * Whole-replace semantics on `set`; last-write-wins on concurrent
+ * writes.
+ *
+ * @category Contract
+ */
+exports.AppConfigStoreCtx = (0, effection_1.createContext)('lloyal.appConfigStore');
+/**
+ * Effection context holding the session's {@link GrantStore}.
+ *
+ * Seeded by `createAppRegistry({ grantStore })` (lives in `@lloyal-labs/rig`)
+ * alongside {@link AppConfigStoreCtx}. The authGuard
+ * reads it once per pool to resolve which `protected` tools the session is
+ * authorized to call — `protected` tools without a grant reject at dispatch
+ * time (`tool:authReject`). The store holds the consent decision; the
+ * **credential never enters the model's context**.
+ *
+ * Absent context = fail-closed: no grants, every protected tool denied.
+ * Open (non-protected) tools never consult it.
+ *
+ * @category Contract
+ */
+exports.GrantStoreCtx = (0, effection_1.createContext)('lloyal.grantStore');
 //# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":";;;AAAA,yCAA0C;AAS1C;;;;;;;;GAQG;AACU,QAAA,GAAG,GAAG,IAAA,yBAAa,EAAiB,YAAY,CAAC,CAAC;AAE/D;;;;;;;GAOG;AACU,QAAA,KAAK,GAAG,IAAA,yBAAa,EAAc,cAAc,CAAC,CAAC;AAEhE;;;;;;;GAOG;AACU,QAAA,MAAM,GAAG,IAAA,yBAAa,EAA4B,eAAe,CAAC,CAAC;AAEhF;;;;;;;GAOG;AACU,QAAA,KAAK,GAAG,IAAA,yBAAa,EAAc,cAAc,CAAC,CAAC;AAEhE;;;;;;;;GAQG;AACU,QAAA,WAAW,GAAG,IAAA,yBAAa,EAAU,oBAAoB,CAAC,CAAC;AAExE;;;;;;;;;GASG;AACU,QAAA,gBAAgB,GAAG,IAAA,yBAAa,EAAS,yBAAyB,CAAC,CAAC;AAEjF;;;;;;;;;;;;GAYG;AACU,QAAA,YAAY,GAAG,IAAA,yBAAa,EAAQ,qBAAqB,CAAC,CAAC;AAExE;;;;;;;;;;;;;;;GAeG;AACU,QAAA,QAAQ,GAAG,IAAA,yBAAa,EAAsB,iBAAiB,EAAE,IAAI,CAAC,CAAC"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":";;;AAAA,yCAA0C;AAa1C;;;;;;;;GAQG;AACU,QAAA,GAAG,GAAG,IAAA,yBAAa,EAAiB,YAAY,CAAC,CAAC;AAE/D;;;;;;;GAOG;AACU,QAAA,KAAK,GAAG,IAAA,yBAAa,EAAc,cAAc,CAAC,CAAC;AAEhE;;;;;;;GAOG;AACU,QAAA,MAAM,GAAG,IAAA,yBAAa,EAA4B,eAAe,CAAC,CAAC;AAEhF;;;;;;;GAOG;AACU,QAAA,KAAK,GAAG,IAAA,yBAAa,EAAc,cAAc,CAAC,CAAC;AAEhE;;;;;;;;GAQG;AACU,QAAA,WAAW,GAAG,IAAA,yBAAa,EAAU,oBAAoB,CAAC,CAAC;AAExE;;;;;;;;;;;;GAYG;AACU,QAAA,YAAY,GAAG,IAAA,yBAAa,EAAQ,qBAAqB,CAAC,CAAC;AAExE;;;;;;;;;;;;;;;GAeG;AACU,QAAA,QAAQ,GAAG,IAAA,yBAAa,EAAsB,iBAAiB,EAAE,IAAI,CAAC,CAAC;AAEpF;;;;;;;;;;;;;;GAcG;AACU,QAAA,WAAW,GAAG,IAAA,yBAAa,EAAW,iBAAiB,CAAC,CAAC;AAEtE;;;;;;;;;;;;;GAaG;AACU,QAAA,cAAc,GAAG,IAAA,yBAAa,EAAc,oBAAoB,CAAC,CAAC;AAE/E;;;;;;;;;;;;;;GAcG;AACU,QAAA,iBAAiB,GAAG,IAAA,yBAAa,EAAiB,uBAAuB,CAAC,CAAC;AAExF;;;;;;;;;;;;;;GAcG;AACU,QAAA,aAAa,GAAG,IAAA,yBAAa,EAAa,mBAAmB,CAAC,CAAC"}

package/dist/create-agent-pool.d.ts

@@ -20,8 +20,14 @@ export interface CreateAgentPoolOpts {
     orchestrate: Orchestrator;
     /** Data access tools (array, createToolkit called internally). Optional — pool degenerates cleanly without tools. */
     tools?: Tool[];
-    /** Terminal tool name — tool must be in the tools array. Pool intercepts and extracts result. */
-    terminalToolName?: string;
+    /**
+     * The tool that ends an agent's turn — `report`, `email`, whatever the
+     * harness designates. Passed by reference; the framework merges it into
+     * the tool set (so its schema reaches the model) and intercepts its
+     * call at the policy layer to extract the `result` arg as the agent's
+     * return value. Omit for pools that end on free-text/stop.
+     */
+    terminal?: Tool;
     /** Max tool-use turns per agent before hard cut. @default 100 */
     maxTurns?: number;
     /** Prune agent branches immediately when they voluntarily return, freeing KV mid-pool. */
@@ -84,9 +90,9 @@ export interface CreateAgentPoolOpts {
  * @example Research harness
  * ```typescript
  * const pool = yield* agentPool({
- *   tools: [delegateTool, ...source.tools, reportTool],
+ *   tools: [delegateTool, ...source.tools],
  *   orchestrate: parallel(questions.map(q => ({ content: q, systemPrompt: RESEARCH_PROMPT }))),
- *   terminalToolName: 'report',
+ *   terminal: reportTool,
  * });
  * ```
  *

package/dist/create-agent-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-agent-pool.d.ts","sourceRoot":"","sources":["../src/create-agent-pool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAQpD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,WAAW,EAAE,YAAY,CAAC;IAC1B,qHAAqH;IACrH,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACf,iGAAiG;IACjG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0FAA0F;IAC1F,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uDAAuD;IACvD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sCAAsC;IACtC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wEAAwE;IACxE,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAiB,SAAS,CAAC,IAAI,EAAE,mBAAmB,GAAG,SAAS,CAAC,eAAe,CAAC,CA+DhF"}
+{"version":3,"file":"create-agent-pool.d.ts","sourceRoot":"","sources":["../src/create-agent-pool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAQpD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,WAAW,EAAE,YAAY,CAAC;IAC1B,qHAAqH;IACrH,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACf;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0FAA0F;IAC1F,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uDAAuD;IACvD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sCAAsC;IACtC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wEAAwE;IACxE,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAiB,SAAS,CAAC,IAAI,EAAE,mBAAmB,GAAG,SAAS,CAAC,eAAe,CAAC,CAgEhF"}

package/dist/create-agent-pool.js

@@ -17,9 +17,9 @@ const agent_pool_1 = require("./agent-pool");
  * @example Research harness
  * ```typescript
  * const pool = yield* agentPool({
- *   tools: [delegateTool, ...source.tools, reportTool],
+ *   tools: [delegateTool, ...source.tools],
  *   orchestrate: parallel(questions.map(q => ({ content: q, systemPrompt: RESEARCH_PROMPT }))),
- *   terminalToolName: 'report',
+ *   terminal: reportTool,
  * });
  * ```
  *
@@ -27,7 +27,7 @@ const agent_pool_1 = require("./agent-pool");
  */
 function* agentPool(opts) {
     const broadcast = yield* context_1.Events.expect();
-    const toolkit = (0, toolkit_1.createToolkit)(opts.tools ?? []);
+    const toolkit = (0, toolkit_1.createToolkit)(opts.tools ?? [], opts.terminal);
     // Warm path priority: explicit parent > session trunk > cold
     const warmParent = opts.parent ?? opts.session?.trunk ?? undefined;
     const sharedMode = opts.systemPrompt !== undefined;
@@ -36,8 +36,9 @@ function* agentPool(opts) {
         systemPrompt: opts.systemPrompt,
         // Only emit tool schemas into the spine header in shared mode; the
         // dispatcher (toolkit.toolMap) is registered on the useAgentPool
-        // below regardless.
-        tools: sharedMode ? opts.tools : undefined,
+        // below regardless. Use the toolkit's merged set so the terminal's
+        // schema rides the spine prefill alongside the capability tools.
+        tools: sharedMode ? toolkit.tools : undefined,
         // Thread enableThinking so the spine header chat-format and the
         // SpineFmt FormatConfig (parser/grammar/triggers) match what the
         // per-agent suffixes get further down. Otherwise a caller passing
@@ -64,7 +65,7 @@ function* agentPool(opts) {
             orchestrate: opts.orchestrate,
             toolsJson: toolkit.toolsJson,
             tools: toolkit.toolMap,
-            terminalToolName: opts.terminalToolName,
+            terminalToolName: toolkit.terminalName,
             pruneOnReturn: opts.pruneOnReturn,
             maxTurns: opts.maxTurns,
             trace: opts.trace,

package/dist/create-agent-pool.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-agent-pool.js","sourceRoot":"","sources":["../src/create-agent-pool.ts"],"names":[],"mappings":";;AAwGA,8BA+DC;AA/JD,uCAAmC;AACnC,uCAA0C;AAC1C,mCAAoC;AACpC,6CAA4C;AAwE5C,+DAA+D;AAE/D;;;;;;;;;;;;;;;;;;GAkBG;AACH,QAAe,CAAC,CAAC,SAAS,CAAC,IAAyB;IAClD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,gBAAM,CAAC,MAAM,EAAE,CAAC;IAEzC,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAEhD,6DAA6D;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,SAAS,CAAC;IAEnE,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC;IAEnD,OAAO,KAAK,CAAC,CAAC,IAAA,iBAAS,EACrB;QACE,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,mEAAmE;QACnE,iEAAiE;QACjE,oBAAoB;QACpB,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC1C,gEAAgE;QAChE,iEAAiE;QACjE,kEAAkE;QAClE,qEAAqE;QACrE,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,EACD,QAAQ,CAAC,EAAE,UAAU;QACnB,8DAA8D;QAC9D,mEAAmE;QACnE,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,EAAE;QACF,qEAAqE;QACrE,sEAAsE;QACtE,sEAAsE;QACtE,4DAA4D;QAC5D,+DAA+D;QAC/D,iEAAiE;QACjE,gEAAgE;QAChE,iCAAiC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAA,yBAAY,EAAC;YAC9B,KAAK;YACL,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,OAAO;YACtB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC,CAAC;QAEH,oEAAoE;QACpE,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"create-agent-pool.js","sourceRoot":"","sources":["../src/create-agent-pool.ts"],"names":[],"mappings":";;AA8GA,8BAgEC;AAtKD,uCAAmC;AACnC,uCAA0C;AAC1C,mCAAoC;AACpC,6CAA4C;AA8E5C,+DAA+D;AAE/D;;;;;;;;;;;;;;;;;;GAkBG;AACH,QAAe,CAAC,CAAC,SAAS,CAAC,IAAyB;IAClD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,gBAAM,CAAC,MAAM,EAAE,CAAC;IAEzC,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE/D,6DAA6D;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,SAAS,CAAC;IAEnE,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC;IAEnD,OAAO,KAAK,CAAC,CAAC,IAAA,iBAAS,EACrB;QACE,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,mEAAmE;QACnE,iEAAiE;QACjE,mEAAmE;QACnE,iEAAiE;QACjE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC7C,gEAAgE;QAChE,iEAAiE;QACjE,kEAAkE;QAClE,qEAAqE;QACrE,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,EACD,QAAQ,CAAC,EAAE,UAAU;QACnB,8DAA8D;QAC9D,mEAAmE;QACnE,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,EAAE;QACF,qEAAqE;QACrE,sEAAsE;QACtE,sEAAsE;QACtE,4DAA4D;QAC5D,+DAA+D;QAC/D,iEAAiE;QACjE,gEAAgE;QAChE,iCAAiC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAA,yBAAY,EAAC;YAC9B,KAAK;YACL,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,OAAO;YACtB,gBAAgB,EAAE,OAAO,CAAC,YAAY;YACtC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC,CAAC;QAEH,oEAAoE;QACpE,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/grant-store.d.ts

@@ -0,0 +1,49 @@
+/**
+ * `GrantStore` — pluggable runtime store for protected-tool grants.
+ *
+ * A **grant** authorizes the current session to invoke a `protected` tool
+ * (see {@link Tool.protected}). The framework's authGuard denies any
+ * protected tool call whose name is not granted. Grants are obtained via
+ * consent — a harness consent prompt, or an app's {@link ConfigFlow}
+ * OAuth-style handoff — and the **credential itself never enters the
+ * model's context**: the model only triggers the call; the runtime holds
+ * the grant and the tool's `execute` uses the underlying secret.
+ *
+ * The interface lives in `@lloyal-labs/lloyal-agents` so the framework
+ * context ({@link GrantStoreCtx}) and app/harness code share one type
+ * without a dependency cycle. The concrete in-memory implementation
+ * (`createGrantStore`) and harness-supplied backends live in rig and
+ * harness packages — mirroring {@link AppConfigStore} /
+ * `createInMemoryConfigStore`.
+ *
+ * **Semantics:**
+ *
+ * - **Binary per tool.** A grant is keyed by tool name; either the session
+ *   holds it or it doesn't. No scopes, no expiry in the base contract —
+ *   richer policies are a harness concern.
+ * - **Fail-closed.** With no grant store on {@link GrantStoreCtx}, no grants
+ *   exist: every protected tool is denied. Open (non-protected) tools are
+ *   unaffected.
+ *
+ * @packageDocumentation
+ * @category Contract
+ */
+import type { Operation } from 'effection';
+/**
+ * Pluggable runtime store of protected-tool grants for a session.
+ *
+ * All methods return `Operation<...>` (Effection generators) so concrete
+ * implementations can perform async IO (reading a secrets backend,
+ * checking a remote authorization service) inside the framework's scope.
+ */
+export interface GrantStore {
+    /** Whether the session currently holds a grant for `toolName`. */
+    has(toolName: string): Operation<boolean>;
+    /** Record consent for `toolName` (the session may now call it). Idempotent. */
+    grant(toolName: string): Operation<void>;
+    /** Revoke a previously-granted tool. Idempotent. */
+    revoke(toolName: string): Operation<void>;
+    /** Snapshot of all granted tool names — the synchronous gate the pool reads. */
+    granted(): Operation<readonly string[]>;
+}
+//# sourceMappingURL=grant-store.d.ts.map

package/dist/grant-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-store.d.ts","sourceRoot":"","sources":["../src/grant-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,kEAAkE;IAClE,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1C,+EAA+E;IAC/E,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,oDAAoD;IACpD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1C,gFAAgF;IAChF,OAAO,IAAI,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CACzC"}

package/dist/grant-store.js

@@ -0,0 +1,33 @@
+"use strict";
+/**
+ * `GrantStore` — pluggable runtime store for protected-tool grants.
+ *
+ * A **grant** authorizes the current session to invoke a `protected` tool
+ * (see {@link Tool.protected}). The framework's authGuard denies any
+ * protected tool call whose name is not granted. Grants are obtained via
+ * consent — a harness consent prompt, or an app's {@link ConfigFlow}
+ * OAuth-style handoff — and the **credential itself never enters the
+ * model's context**: the model only triggers the call; the runtime holds
+ * the grant and the tool's `execute` uses the underlying secret.
+ *
+ * The interface lives in `@lloyal-labs/lloyal-agents` so the framework
+ * context ({@link GrantStoreCtx}) and app/harness code share one type
+ * without a dependency cycle. The concrete in-memory implementation
+ * (`createGrantStore`) and harness-supplied backends live in rig and
+ * harness packages — mirroring {@link AppConfigStore} /
+ * `createInMemoryConfigStore`.
+ *
+ * **Semantics:**
+ *
+ * - **Binary per tool.** A grant is keyed by tool name; either the session
+ *   holds it or it doesn't. No scopes, no expiry in the base contract —
+ *   richer policies are a harness concern.
+ * - **Fail-closed.** With no grant store on {@link GrantStoreCtx}, no grants
+ *   exist: every protected tool is denied. Open (non-protected) tools are
+ *   unaffected.
+ *
+ * @packageDocumentation
+ * @category Contract
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=grant-store.js.map

package/dist/grant-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-store.js","sourceRoot":"","sources":["../src/grant-store.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG"}

package/dist/index.d.ts

@@ -1,9 +1,9 @@
-export { Ctx, Store, Events, Trace, TraceParent, ScratchpadParent } from './context';
-export { Tool } from './Tool';
+export { Ctx, Store, Events, Trace, TraceParent, RerankerCtx, AppRegistryCtx, AppConfigStoreCtx, GrantStoreCtx, } from './context';
+export { Tool, ToolRetryError } from './Tool';
 export { Agent } from './Agent';
 export type { AgentStatus, ResultSource, FormatConfig, ToolHistoryEntry } from './Agent';
 export { DefaultAgentPolicy } from './AgentPolicy';
-export type { AgentPolicy, ProduceAction, SettleAction, RecoveryAction, IdleReason, PolicyConfig, ToolGuard, DefaultAgentPolicyOpts } from './AgentPolicy';
+export type { AgentPolicy, ProduceAction, SettleAction, RecoveryAction, ToolRetryAction, IdleReason, PolicyConfig, ToolGuard, DefaultAgentPolicyOpts } from './AgentPolicy';
 export { defaultToolGuards } from './AgentPolicy';
 export { CallingAgent } from './context';
 export { Source, NULL_SCORER } from './source';
@@ -33,4 +33,8 @@ export type { TraceEvent, TraceId } from './trace-types';
 export type { AgentHandle } from './init';
 export type { SpineOptions } from './spine';
 export type { TraceToken, JsonSchema, ToolSchema, ToolContext, PressureThresholds, AgentTaskSpec, AgentPoolOptions, AgentResult, AgentPoolResult, DivergeOptions, DivergeAttempt, DivergeResult, AgentEvent, } from './types';
+export type { App, AppManifest, AppProtocol, AppHints, AppRegistry, AppFactory, AppState, AgentRenderCtx, ExamplesRenderCtx, SkillTemplateFn, ExamplesTemplateFn, ConfigFlow, } from './app-types';
+export type { AppConfigStore } from './app-config';
+export type { GrantStore } from './grant-store';
+export type { Resource, Chunk, ScoredChunk, ScoredResult, Reranker } from './chunk';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC3J,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC/C,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC9C,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACvE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAC/D,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACvF,YAAY,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEjD,YAAY,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACzD,YAAY,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC1C,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,YAAY,EACV,UAAU,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,cAAc,EACd,cAAc,EACd,aAAa,EACb,UAAU,GACX,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,GAAG,EACH,KAAK,EACL,MAAM,EACN,KAAK,EACL,WAAW,EACX,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC5K,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC/C,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC9C,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACvE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAC/D,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACvF,YAAY,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEjD,YAAY,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACzD,YAAY,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC1C,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,YAAY,EACV,UAAU,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,cAAc,EACd,cAAc,EACd,aAAa,EACb,UAAU,GACX,MAAM,SAAS,CAAC;AAEjB,YAAY,EACV,GAAG,EACH,WAAW,EACX,WAAW,EACX,QAAQ,EACR,WAAW,EACX,UAAU,EACV,QAAQ,EACR,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -1,15 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.reconstructBranch = exports.extractSpineCheckpoint = exports.extractSpineSeed = exports.dag = exports.fanout = exports.chain = exports.parallel = exports.reduce = exports.renderTemplate = exports.renderPrompt = exports.composePrompt = exports.traceScope = exports.JsonlTraceWriter = exports.NullTraceWriter = exports.withSpine = exports.initAgents = exports.createToolkit = exports.ContextPressure = exports.useAgentPool = exports.diverge = exports.agentPool = exports.agent = exports.useAgent = exports.buildToolResultDelta = exports.buildUserDelta = exports.NULL_SCORER = exports.Source = exports.CallingAgent = exports.defaultToolGuards = exports.DefaultAgentPolicy = exports.Agent = exports.Tool = exports.ScratchpadParent = exports.TraceParent = exports.Trace = exports.Events = exports.Store = exports.Ctx = void 0;
+exports.reconstructBranch = exports.extractSpineCheckpoint = exports.extractSpineSeed = exports.dag = exports.fanout = exports.chain = exports.parallel = exports.reduce = exports.renderTemplate = exports.renderPrompt = exports.composePrompt = exports.traceScope = exports.JsonlTraceWriter = exports.NullTraceWriter = exports.withSpine = exports.initAgents = exports.createToolkit = exports.ContextPressure = exports.useAgentPool = exports.diverge = exports.agentPool = exports.agent = exports.useAgent = exports.buildToolResultDelta = exports.buildUserDelta = exports.NULL_SCORER = exports.Source = exports.CallingAgent = exports.defaultToolGuards = exports.DefaultAgentPolicy = exports.Agent = exports.ToolRetryError = exports.Tool = exports.GrantStoreCtx = exports.AppConfigStoreCtx = exports.AppRegistryCtx = exports.RerankerCtx = exports.TraceParent = exports.Trace = exports.Events = exports.Store = exports.Ctx = void 0;
 var context_1 = require("./context");
 Object.defineProperty(exports, "Ctx", { enumerable: true, get: function () { return context_1.Ctx; } });
 Object.defineProperty(exports, "Store", { enumerable: true, get: function () { return context_1.Store; } });
 Object.defineProperty(exports, "Events", { enumerable: true, get: function () { return context_1.Events; } });
 Object.defineProperty(exports, "Trace", { enumerable: true, get: function () { return context_1.Trace; } });
 Object.defineProperty(exports, "TraceParent", { enumerable: true, get: function () { return context_1.TraceParent; } });
-Object.defineProperty(exports, "ScratchpadParent", { enumerable: true, get: function () { return context_1.ScratchpadParent; } });
+Object.defineProperty(exports, "RerankerCtx", { enumerable: true, get: function () { return context_1.RerankerCtx; } });
+Object.defineProperty(exports, "AppRegistryCtx", { enumerable: true, get: function () { return context_1.AppRegistryCtx; } });
+Object.defineProperty(exports, "AppConfigStoreCtx", { enumerable: true, get: function () { return context_1.AppConfigStoreCtx; } });
+Object.defineProperty(exports, "GrantStoreCtx", { enumerable: true, get: function () { return context_1.GrantStoreCtx; } });
 var Tool_1 = require("./Tool");
 Object.defineProperty(exports, "Tool", { enumerable: true, get: function () { return Tool_1.Tool; } });
+Object.defineProperty(exports, "ToolRetryError", { enumerable: true, get: function () { return Tool_1.ToolRetryError; } });
 var Agent_1 = require("./Agent");
 Object.defineProperty(exports, "Agent", { enumerable: true, get: function () { return Agent_1.Agent; } });
 var AgentPolicy_1 = require("./AgentPolicy");

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,qCAAqF;AAA5E,8FAAA,GAAG,OAAA;AAAE,gGAAA,KAAK,OAAA;AAAE,iGAAA,MAAM,OAAA;AAAE,gGAAA,KAAK,OAAA;AAAE,sGAAA,WAAW,OAAA;AAAE,2GAAA,gBAAgB,OAAA;AACjE,+BAA8B;AAArB,4FAAA,IAAI,OAAA;AACb,iCAAgC;AAAvB,8FAAA,KAAK,OAAA;AAEd,6CAAmD;AAA1C,iHAAA,kBAAkB,OAAA;AAE3B,6CAAkD;AAAzC,gHAAA,iBAAiB,OAAA;AAC1B,qCAAyC;AAAhC,uGAAA,YAAY,OAAA;AACrB,mCAA+C;AAAtC,gGAAA,MAAM,OAAA;AAAE,qGAAA,WAAW,OAAA;AAE5B,wCAAwE;AAA/D,qGAAA,cAAc,OAAA;AAAE,2GAAA,oBAAoB,OAAA;AAC7C,yCAA8C;AAArC,qGAAA,QAAQ,OAAA;AAAE,kGAAA,KAAK,OAAA;AAExB,yDAAgD;AAAvC,8GAAA,SAAS,OAAA;AAElB,qCAAoC;AAA3B,kGAAA,OAAO,OAAA;AAChB,2CAA6D;AAApD,0GAAA,YAAY,OAAA;AAAE,6GAAA,eAAe,OAAA;AACtC,qCAA0C;AAAjC,wGAAA,aAAa,OAAA;AACtB,+BAAoC;AAA3B,kGAAA,UAAU,OAAA;AACnB,iCAAoC;AAA3B,kGAAA,SAAS,OAAA;AAClB,+CAAmE;AAA1D,+GAAA,eAAe,OAAA;AAAE,gHAAA,gBAAgB,OAAA;AAC1C,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,mCAAuE;AAA9D,uGAAA,aAAa,OAAA;AAAE,sGAAA,YAAY,OAAA;AAAE,wGAAA,cAAc,OAAA;AAEpD,6CAAuC;AAA9B,qGAAA,MAAM,OAAA;AACf,iDAA+D;AAAtD,yGAAA,QAAQ,OAAA;AAAE,sGAAA,KAAK,OAAA;AAAE,uGAAA,MAAM,OAAA;AAAE,oGAAA,GAAG,OAAA;AAErC,mCAAuF;AAA9E,0GAAA,gBAAgB,OAAA;AAAE,gHAAA,sBAAsB,OAAA;AAAE,2GAAA,iBAAiB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,qCAUmB;AATjB,8FAAA,GAAG,OAAA;AACH,gGAAA,KAAK,OAAA;AACL,iGAAA,MAAM,OAAA;AACN,gGAAA,KAAK,OAAA;AACL,sGAAA,WAAW,OAAA;AACX,sGAAA,WAAW,OAAA;AACX,yGAAA,cAAc,OAAA;AACd,4GAAA,iBAAiB,OAAA;AACjB,wGAAA,aAAa,OAAA;AAEf,+BAA8C;AAArC,4FAAA,IAAI,OAAA;AAAE,sGAAA,cAAc,OAAA;AAC7B,iCAAgC;AAAvB,8FAAA,KAAK,OAAA;AAEd,6CAAmD;AAA1C,iHAAA,kBAAkB,OAAA;AAE3B,6CAAkD;AAAzC,gHAAA,iBAAiB,OAAA;AAC1B,qCAAyC;AAAhC,uGAAA,YAAY,OAAA;AACrB,mCAA+C;AAAtC,gGAAA,MAAM,OAAA;AAAE,qGAAA,WAAW,OAAA;AAE5B,wCAAwE;AAA/D,qGAAA,cAAc,OAAA;AAAE,2GAAA,oBAAoB,OAAA;AAC7C,yCAA8C;AAArC,qGAAA,QAAQ,OAAA;AAAE,kGAAA,KAAK,OAAA;AAExB,yDAAgD;AAAvC,8GAAA,SAAS,OAAA;AAElB,qCAAoC;AAA3B,kGAAA,OAAO,OAAA;AAChB,2CAA6D;AAApD,0GAAA,YAAY,OAAA;AAAE,6GAAA,eAAe,OAAA;AACtC,qCAA0C;AAAjC,wGAAA,aAAa,OAAA;AACtB,+BAAoC;AAA3B,kGAAA,UAAU,OAAA;AACnB,iCAAoC;AAA3B,kGAAA,SAAS,OAAA;AAClB,+CAAmE;AAA1D,+GAAA,eAAe,OAAA;AAAE,gHAAA,gBAAgB,OAAA;AAC1C,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,mCAAuE;AAA9D,uGAAA,aAAa,OAAA;AAAE,sGAAA,YAAY,OAAA;AAAE,wGAAA,cAAc,OAAA;AAEpD,6CAAuC;AAA9B,qGAAA,MAAM,OAAA;AACf,iDAA+D;AAAtD,yGAAA,QAAQ,OAAA;AAAE,sGAAA,KAAK,OAAA;AAAE,uGAAA,MAAM,OAAA;AAAE,oGAAA,GAAG,OAAA;AAErC,mCAAuF;AAA9E,0GAAA,gBAAgB,OAAA;AAAE,gHAAA,sBAAsB,OAAA;AAAE,2GAAA,iBAAiB,OAAA"}

package/dist/orchestrators.d.ts

@@ -16,6 +16,13 @@ export interface SpawnSpec {
     seed?: number;
     /** Parent branch to fork from. Falls back to ctx.spine. */
     parent?: Branch;
+    /**
+     * Non-enforcing label naming the App this spawn nominally belongs to
+     * Carried for trace attribution (`tool:authReject`) and
+     * harness UI only — tool access is gated by {@link Tool.protected} +
+     * session grants (the authGuard), not by app membership.
+     */
+    assignedApp?: string;
 }
 /**
  * Orchestrator-facing API surface exposed by {@link useAgentPool}.