@loomwork/middleware 0.0.0-stage → 0.1.0

package/dist/claimCheck.js

@@ -0,0 +1,241 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.streamResult = streamResult;
+exports.isStreamResult = isStreamResult;
+exports.isClaimCheck = isClaimCheck;
+exports.claimCheckMiddleware = claimCheckMiddleware;
+exports.previewDigest = previewDigest;
+exports.resolveClaimCheck = resolveClaimCheck;
+exports.resolveClaimCheckBytes = resolveClaimCheckBytes;
+exports.resolveClaimChecks = resolveClaimChecks;
+const classify_1 = require("@loomwork/classify");
+/** Wrap a byte stream as a tool result; Node `Readable`s satisfy the iterable directly. */
+function streamResult(stream, opts = {}) {
+    return {
+        __loomStreamResult: true,
+        stream,
+        ...(opts.digest !== undefined && { digest: opts.digest }),
+        ...(opts.codec !== undefined && { codec: opts.codec }),
+    };
+}
+function isStreamResult(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        value.__loomStreamResult === true &&
+        typeof value.stream === "object");
+}
+function isClaimCheck(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        value.__loomClaimCheck === true &&
+        typeof value.ref?.__loomContent === "string");
+}
+/**
+ * CC-1 — claim-check middleware on the ADR 0006 seam. Runs only when the effect
+ * actually executes (replayed/completed steps short-circuit upstream), so replay
+ * determinism is automatic: the envelope is the recorded value. Crash-recovery
+ * re-runs re-offload the same bytes to the same content address (`put` is
+ * idempotent by hash), reproducing an identical envelope.
+ *
+ * Results that JSON cannot encode (circular, undefined) pass through untouched —
+ * offload is impossible for what the journal could not record anyway.
+ */
+function claimCheckMiddleware(options) {
+    const cap = options.inlineCapBytes ?? 16 * 1024;
+    const encoder = new TextEncoder();
+    return async (ctx, _input, next) => {
+        const result = await next();
+        const access = { executionId: ctx.executionId, workflowId: ctx.workflowId };
+        if (options.passThrough?.(result, ctx.toolId) === true)
+            return result;
+        // already an envelope (stacked wiring) — never double-wrap; unless envelopes are DATA (ADR 0140 M7)
+        const forged = options.envelopesAreData === true && isClaimCheck(result);
+        if (!forged && isClaimCheck(result))
+            return result;
+        const retain = typeof options.retain === "function" ? options.retain(ctx.toolId) : options.retain === true;
+        // ST-2 — stream-typed result: ALWAYS offloads (a stream is a declared-big
+        // payload), never buffered by the middleware (a counting wrapper is the only
+        // thing between the tool and the store).
+        if (isStreamResult(result)) {
+            if (options.store.putStream === undefined) {
+                throw new TypeError(`claim-check: tool "${ctx.toolId ?? ctx.stepId}" returned a streamed result but the content store does not implement putStream() (ST-1, ADR 0059)`);
+            }
+            let size = 0;
+            const source = result.stream;
+            const counted = (async function* () {
+                for await (const chunk of source) {
+                    size += chunk.byteLength;
+                    yield chunk;
+                }
+            })();
+            let streamedRef;
+            try {
+                streamedRef = await options.store.putStream(counted, access);
+            }
+            finally {
+                // W-audit leak fix: if putStream threw mid-consumption, `counted` is
+                // suspended at a yield and nobody would ever finalize it — resuming it
+                // with a return completion propagates through its for-await to the
+                // SOURCE iterator's return(), closing whatever the tool handed us
+                // (file handle, socket). A no-op when the stream was fully consumed.
+                await counted.return(undefined).then(() => { }, () => { } // the offload is already failing; source cleanup errors don't mask it
+                );
+            }
+            const envelope = {
+                __loomClaimCheck: true,
+                ref: { __loomContent: streamedRef.__loomContent },
+                size,
+                codec: result.codec ?? "bytes",
+                ...(result.digest !== undefined && { digest: result.digest }),
+                ...(retain && { retain: true }),
+            };
+            options.onOffload?.({
+                ...(ctx.toolId !== undefined && { toolId: ctx.toolId }),
+                stepId: ctx.stepId,
+                executionId: ctx.executionId,
+                workflowId: ctx.workflowId,
+                size,
+                contentAddress: streamedRef.__loomContent,
+            });
+            return envelope;
+        }
+        let json;
+        try {
+            json = JSON.stringify(result);
+        }
+        catch {
+            return result;
+        }
+        if (json === undefined)
+            return result;
+        const bytes = encoder.encode(json);
+        // ADR 0140 D11: under `envelopesAreData` a lookalike envelope NESTED anywhere in the result is data
+        // too: the whole result is force-offloaded, so the log never records a tool-authored
+        // `{ __loomClaimCheck, ref, retain }` the sweep or erasure could mistake for one this middleware wrote.
+        const nestedForged = options.envelopesAreData === true && json.includes('"__loomClaimCheck"');
+        if (!forged && !nestedForged && bytes.byteLength <= cap)
+            return result;
+        const ref = await options.store.put(bytes, access);
+        const declared = ctx.toolId === undefined ? undefined : options.digests?.[ctx.toolId];
+        const projected = declared !== undefined ? declared(result) : options.defaultDigest?.(result, ctx.toolId);
+        const envelope = {
+            __loomClaimCheck: true,
+            ref: { __loomContent: ref.__loomContent },
+            size: bytes.byteLength,
+            ...(projected !== undefined && { digest: projected }),
+            ...(retain && { retain: true }),
+        };
+        options.onOffload?.({
+            ...(ctx.toolId !== undefined && { toolId: ctx.toolId }),
+            stepId: ctx.stepId,
+            executionId: ctx.executionId,
+            workflowId: ctx.workflowId,
+            size: bytes.byteLength,
+            contentAddress: ref.__loomContent,
+        });
+        // ADR 0085 / 0140 - an offloaded result that carried untrusted content (a tainted top level OR a
+        // nested marker) must not launder it into a clean-looking envelope + digest: the envelope itself is
+        // tainted, so the loop fences it and records the taint (the sweep still finds the inner envelope).
+        let origin;
+        if (json.includes("__loomTainted")) {
+            // Scan the SERIALIZED form (what the log and the prompt hold). A marker that is only text still
+            // taints (fail closed).
+            try {
+                origin = (0, classify_1.nestedTaintOrigin)(JSON.parse(json)) ?? "unknown:taint-marker-in-text";
+            }
+            catch {
+                origin = "unknown:taint-marker-in-text";
+            }
+        }
+        return origin === undefined ? envelope : (0, classify_1.tainted)(envelope, origin);
+    };
+}
+/**
+ * A ready-made `defaultDigest` (CC-2): the first `maxChars` (default 256) characters of the result's
+ * JSON text, so the model sees what an offloaded tool result BEGAN with instead of a bare hash. Pure
+ * and deterministic (a function of the result only). It is NOT a summary: it is a head, and it can cut
+ * a JSON string anywhere.
+ *
+ * Untrusted content is never previewed: a result carrying an ADR 0085 taint marker ANYWHERE (a nested
+ * `{ __loomTainted }` wrapper, such as an A2A reply's `content`) yields no digest at all, because a
+ * digest rides into the model's prompt as ordinary text and would launder the taint. A result JSON cannot
+ * encode yields none either.
+ */
+function previewDigest(maxChars = 256) {
+    return (result) => {
+        let json;
+        try {
+            json = JSON.stringify(result);
+        }
+        catch {
+            return undefined;
+        }
+        if (json === undefined || json.includes('"__loomTainted"'))
+            return undefined;
+        let end = Math.min(maxChars, json.length);
+        // Never end on a lone high surrogate (it would not round-trip through UTF-8).
+        if (end < json.length && end > 0) {
+            const last = json.charCodeAt(end - 1);
+            if (last >= 0xd800 && last <= 0xdbff)
+                end--;
+        }
+        return { preview: json.slice(0, end), ...(end < json.length && { truncated: true }) };
+    };
+}
+/**
+ * CC-4 — resolve an envelope back to its payload, for use OUTSIDE the
+ * determinism boundary (rendering evidence in a UI, exporting a report).
+ * Returns `null` when the bytes were erased/never stored — the store's
+ * null-on-absence contract, surfaced as-is so callers decide loudness.
+ * Flow control must NOT branch on the resolved payload (CC-5 lint).
+ */
+async function resolveClaimCheck(reader, envelope, access) {
+    if (envelope.codec !== undefined && envelope.codec !== "json") {
+        throw new TypeError(`resolveClaimCheck: envelope codec is "${envelope.codec}", not JSON — use resolveClaimCheckBytes for stream-offloaded content`);
+    }
+    const bytes = await reader.get(envelope.ref, access);
+    if (bytes === null)
+        return null;
+    return JSON.parse(new TextDecoder().decode(bytes));
+}
+/**
+ * CC-4 for stream-offloaded content (ST-2): the raw bytes, `null` on absence.
+ * Same boundary rule as {@link resolveClaimCheck}: OUTSIDE the determinism
+ * boundary only.
+ */
+async function resolveClaimCheckBytes(reader, envelope, access) {
+    return reader.get(envelope.ref, access);
+}
+/**
+ * TS-10 (ADR 0062) — the batch twin of {@link resolveClaimCheck}, for
+ * interactive read paths (frozen-snapshot serving: a completed run's envelopes,
+ * one human waiting). One `getMany` round-trip when the reader supports it
+ * (coalesced parallel `get`s otherwise), deduped by content address; results
+ * positionally aligned with `envelopes`, `null` per erased/absent entry.
+ * Same boundary rule: OUTSIDE the determinism boundary only.
+ */
+async function resolveClaimChecks(reader, envelopes, access) {
+    for (const envelope of envelopes) {
+        if (envelope.codec !== undefined && envelope.codec !== "json") {
+            throw new TypeError(`resolveClaimChecks: envelope codec is "${envelope.codec}", not JSON — use resolveClaimCheckBytes for stream-offloaded content`);
+        }
+    }
+    const distinct = new Map();
+    for (const e of envelopes) {
+        if (!distinct.has(e.ref.__loomContent))
+            distinct.set(e.ref.__loomContent, e.ref);
+    }
+    const refs = [...distinct.values()];
+    const fetched = reader.getMany !== undefined
+        ? await reader.getMany(refs, access)
+        : await Promise.all(refs.map((r) => reader.get(r, access)));
+    const byAddress = new Map();
+    refs.forEach((r, i) => byAddress.set(r.__loomContent, fetched[i] ?? null));
+    const decoder = new TextDecoder();
+    return envelopes.map((e) => {
+        const bytes = byAddress.get(e.ref.__loomContent) ?? null;
+        // Decode per-occurrence so callers never alias one parsed object.
+        return bytes === null ? null : JSON.parse(decoder.decode(bytes));
+    });
+}
+//# sourceMappingURL=claimCheck.js.map

package/dist/claimCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claimCheck.js","sourceRoot":"","sources":["../src/claimCheck.ts"],"names":[],"mappings":";;AA0FA,oCAUC;AAED,wCAOC;AAED,oCAOC;AAkED,oDA+GC;AAqBD,sCAmBC;AASD,8CAaC;AAOD,wDAMC;AAUD,gDA6BC;AAzZD,iDAAgE;AAyFhE,2FAA2F;AAC3F,SAAgB,YAAY,CAC1B,MAAiC,EACjC,OAA6C,EAAE;IAE/C,OAAO;QACL,kBAAkB,EAAE,IAAI;QACxB,MAAM;QACN,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACzD,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,SAAgB,cAAc,CAAC,KAAc;IAC3C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAA0C,CAAC,kBAAkB,KAAK,IAAI;QACvE,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ,CAC3D,CAAC;AACJ,CAAC;AAED,SAAgB,YAAY,CAAC,KAAc;IACzC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAAwC,CAAC,gBAAgB,KAAK,IAAI;QACnE,OAAQ,KAA+C,CAAC,GAAG,EAAE,aAAa,KAAK,QAAQ,CACxF,CAAC;AACJ,CAAC;AAwDD;;;;;;;;;GASG;AACH,SAAgB,oBAAoB,CAAC,OAA0B;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,GAAG,IAAI,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAoB,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAqB,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;QAC9F,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QACtE,oGAAoG;QACpG,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,KAAK,IAAI,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QACnD,MAAM,MAAM,GACV,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;QAE9F,0EAA0E;QAC1E,6EAA6E;QAC7E,yCAAyC;QACzC,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC1C,MAAM,IAAI,SAAS,CACjB,sBAAsB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,oGAAoG,CACnJ,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,MAAM,OAAO,GAAG,CAAC,KAAK,SAAS,CAAC;gBAC9B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBACjC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;oBACzB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,IAAI,WAAsC,CAAC;YAC3C,IAAI,CAAC;gBACH,WAAW,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/D,CAAC;oBAAS,CAAC;gBACT,qEAAqE;gBACrE,uEAAuE;gBACvE,mEAAmE;gBACnE,kEAAkE;gBAClE,qEAAqE;gBACrE,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAClC,GAAG,EAAE,GAAE,CAAC,EACR,GAAG,EAAE,GAAE,CAAC,CAAC,sEAAsE;iBAChF,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAuB;gBACnC,gBAAgB,EAAE,IAAI;gBACtB,GAAG,EAAE,EAAE,aAAa,EAAE,WAAW,CAAC,aAAa,EAAE;gBACjD,IAAI;gBACJ,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,OAAO;gBAC9B,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC7D,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,IAAa,EAAE,CAAC;aACzC,CAAC;YACF,OAAO,CAAC,SAAS,EAAE,CAAC;gBAClB,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;gBACvD,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,IAAI;gBACJ,cAAc,EAAE,WAAW,CAAC,aAAa;aAC1C,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,IAAI,IAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,oGAAoG;QACpG,qFAAqF;QACrF,wGAAwG;QACxG,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG;YAAE,OAAO,MAAM,CAAC;QAEvE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtF,MAAM,SAAS,GACb,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAuB;YACnC,gBAAgB,EAAE,IAAI;YACtB,GAAG,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE;YACzC,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,IAAa,EAAE,CAAC;SACzC,CAAC;QACF,OAAO,CAAC,SAAS,EAAE,CAAC;YAClB,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;YACvD,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,cAAc,EAAE,GAAG,CAAC,aAAa;SAClC,CAAC,CAAC;QACH,iGAAiG;QACjG,oGAAoG;QACpG,mGAAmG;QACnG,IAAI,MAA0B,CAAC;QAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACnC,gGAAgG;YAChG,wBAAwB;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAA,4BAAiB,EAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,8BAA8B,CAAC;YACjF,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,8BAA8B,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAA,kBAAO,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;GAUG;AACH,SAAgB,aAAa,CAC3B,QAAQ,GAAG,GAAG;IAEd,OAAO,CAAC,MAAM,EAAE,EAAE;QAChB,IAAI,IAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7E,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,8EAA8E;QAC9E,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACtC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;gBAAE,GAAG,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC,EAAE,CAAC;IACjG,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,iBAAiB,CACrC,MAAwB,EACxB,QAA4B,EAC5B,MAAyB;IAEzB,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC9D,MAAM,IAAI,SAAS,CACjB,yCAAyC,QAAQ,CAAC,KAAK,uEAAuE,CAC/H,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAM,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,sBAAsB,CAC1C,MAAwB,EACxB,QAA4B,EAC5B,MAAyB;IAEzB,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,kBAAkB,CACtC,MAAwB,EACxB,SAAwC,EACxC,MAAyB;IAEzB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC9D,MAAM,IAAI,SAAS,CACjB,0CAA0C,QAAQ,CAAC,KAAK,uEAAuE,CAChI,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;QACpC,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IACvD,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACzB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC;QACzD,kEAAkE;QAClE,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAO,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+export { effectTimingMiddleware } from "./profile";
+export type { EffectProfile, EffectProfiler } from "./profile";
+export { retryMiddleware, type RetryOptions } from "./retry";
+export { claimCheckMiddleware, isClaimCheck, isStreamResult, previewDigest, resolveClaimCheck, resolveClaimCheckBytes, resolveClaimChecks, streamResult, type ClaimCheckEnvelope, type ClaimCheckInfo, type ClaimCheckOptions, type ClaimCheckAccess, type ClaimCheckReader, type ClaimCheckStore, type PreviewDigest, type StreamedResult, } from "./claimCheck";
+export { meteringMiddleware, llmUsageTokens, QuotaExceededError, type Budget, type MeterInfo, type MeteringOptions, type Pricing, type ResourceDelta, } from "./metering";
+export { redactionMiddleware, redactOutputFrom, secretOutputPathsByStep, secretRef, isSecretRef, InMemorySecretResolver, type SecretRef, type SecretResolver, type RedactionOptions, } from "./redaction";
+export { nestedBudgetMiddleware, BudgetLedger, type BudgetScope, type NestedBudgetOptions, type ScopeSpend, } from "./nestedBudget";
+export { safetyMiddleware, SafetyViolationError, denyPatterns, piiValidator, schemaValidator, killSwitch, type SafetyPhase, type SafetyCheckInfo, type SafetyVerdict, type SafetyValidator, type SafetyOptions, type SchemaLike, } from "./safety";
+export { estimateTokensByChars, streamTokenBudget } from "./streamTokenBudget";
+export type { StreamTokenBudgetOptions, TokenEstimator } from "./streamTokenBudget";
+export { rateLimitMiddleware, RateLimitExceededError, type RateLimitOptions, type RateLimitScope, } from "./rateLimit";
+export { killSwitchMiddleware, InMemoryKillSwitch, KillSwitchEngagedError, type KillScope, type KillSwitchRegistry, type KillVerdict, } from "./killSwitchRegistry";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnD,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,KAAK,MAAM,EACX,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,OAAO,EACZ,KAAK,aAAa,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,uBAAuB,EACvB,SAAS,EACT,WAAW,EACX,sBAAsB,EACtB,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,UAAU,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,UAAU,EACV,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,UAAU,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,YAAY,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,cAAc,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,WAAW,GACjB,MAAM,sBAAsB,CAAC"}

package/dist/index.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KillSwitchEngagedError = exports.InMemoryKillSwitch = exports.killSwitchMiddleware = exports.RateLimitExceededError = exports.rateLimitMiddleware = exports.streamTokenBudget = exports.estimateTokensByChars = exports.killSwitch = exports.schemaValidator = exports.piiValidator = exports.denyPatterns = exports.SafetyViolationError = exports.safetyMiddleware = exports.BudgetLedger = exports.nestedBudgetMiddleware = exports.InMemorySecretResolver = exports.isSecretRef = exports.secretRef = exports.secretOutputPathsByStep = exports.redactOutputFrom = exports.redactionMiddleware = exports.QuotaExceededError = exports.llmUsageTokens = exports.meteringMiddleware = exports.streamResult = exports.resolveClaimChecks = exports.resolveClaimCheckBytes = exports.resolveClaimCheck = exports.previewDigest = exports.isStreamResult = exports.isClaimCheck = exports.claimCheckMiddleware = exports.retryMiddleware = exports.effectTimingMiddleware = void 0;
+var profile_1 = require("./profile");
+Object.defineProperty(exports, "effectTimingMiddleware", { enumerable: true, get: function () { return profile_1.effectTimingMiddleware; } });
+var retry_1 = require("./retry");
+Object.defineProperty(exports, "retryMiddleware", { enumerable: true, get: function () { return retry_1.retryMiddleware; } });
+var claimCheck_1 = require("./claimCheck");
+Object.defineProperty(exports, "claimCheckMiddleware", { enumerable: true, get: function () { return claimCheck_1.claimCheckMiddleware; } });
+Object.defineProperty(exports, "isClaimCheck", { enumerable: true, get: function () { return claimCheck_1.isClaimCheck; } });
+Object.defineProperty(exports, "isStreamResult", { enumerable: true, get: function () { return claimCheck_1.isStreamResult; } });
+Object.defineProperty(exports, "previewDigest", { enumerable: true, get: function () { return claimCheck_1.previewDigest; } });
+Object.defineProperty(exports, "resolveClaimCheck", { enumerable: true, get: function () { return claimCheck_1.resolveClaimCheck; } });
+Object.defineProperty(exports, "resolveClaimCheckBytes", { enumerable: true, get: function () { return claimCheck_1.resolveClaimCheckBytes; } });
+Object.defineProperty(exports, "resolveClaimChecks", { enumerable: true, get: function () { return claimCheck_1.resolveClaimChecks; } });
+Object.defineProperty(exports, "streamResult", { enumerable: true, get: function () { return claimCheck_1.streamResult; } });
+var metering_1 = require("./metering");
+Object.defineProperty(exports, "meteringMiddleware", { enumerable: true, get: function () { return metering_1.meteringMiddleware; } });
+Object.defineProperty(exports, "llmUsageTokens", { enumerable: true, get: function () { return metering_1.llmUsageTokens; } });
+Object.defineProperty(exports, "QuotaExceededError", { enumerable: true, get: function () { return metering_1.QuotaExceededError; } });
+var redaction_1 = require("./redaction");
+Object.defineProperty(exports, "redactionMiddleware", { enumerable: true, get: function () { return redaction_1.redactionMiddleware; } });
+Object.defineProperty(exports, "redactOutputFrom", { enumerable: true, get: function () { return redaction_1.redactOutputFrom; } });
+Object.defineProperty(exports, "secretOutputPathsByStep", { enumerable: true, get: function () { return redaction_1.secretOutputPathsByStep; } });
+Object.defineProperty(exports, "secretRef", { enumerable: true, get: function () { return redaction_1.secretRef; } });
+Object.defineProperty(exports, "isSecretRef", { enumerable: true, get: function () { return redaction_1.isSecretRef; } });
+Object.defineProperty(exports, "InMemorySecretResolver", { enumerable: true, get: function () { return redaction_1.InMemorySecretResolver; } });
+var nestedBudget_1 = require("./nestedBudget");
+Object.defineProperty(exports, "nestedBudgetMiddleware", { enumerable: true, get: function () { return nestedBudget_1.nestedBudgetMiddleware; } });
+Object.defineProperty(exports, "BudgetLedger", { enumerable: true, get: function () { return nestedBudget_1.BudgetLedger; } });
+var safety_1 = require("./safety");
+Object.defineProperty(exports, "safetyMiddleware", { enumerable: true, get: function () { return safety_1.safetyMiddleware; } });
+Object.defineProperty(exports, "SafetyViolationError", { enumerable: true, get: function () { return safety_1.SafetyViolationError; } });
+Object.defineProperty(exports, "denyPatterns", { enumerable: true, get: function () { return safety_1.denyPatterns; } });
+Object.defineProperty(exports, "piiValidator", { enumerable: true, get: function () { return safety_1.piiValidator; } });
+Object.defineProperty(exports, "schemaValidator", { enumerable: true, get: function () { return safety_1.schemaValidator; } });
+Object.defineProperty(exports, "killSwitch", { enumerable: true, get: function () { return safety_1.killSwitch; } });
+var streamTokenBudget_1 = require("./streamTokenBudget");
+Object.defineProperty(exports, "estimateTokensByChars", { enumerable: true, get: function () { return streamTokenBudget_1.estimateTokensByChars; } });
+Object.defineProperty(exports, "streamTokenBudget", { enumerable: true, get: function () { return streamTokenBudget_1.streamTokenBudget; } });
+var rateLimit_1 = require("./rateLimit");
+Object.defineProperty(exports, "rateLimitMiddleware", { enumerable: true, get: function () { return rateLimit_1.rateLimitMiddleware; } });
+Object.defineProperty(exports, "RateLimitExceededError", { enumerable: true, get: function () { return rateLimit_1.RateLimitExceededError; } });
+var killSwitchRegistry_1 = require("./killSwitchRegistry");
+Object.defineProperty(exports, "killSwitchMiddleware", { enumerable: true, get: function () { return killSwitchRegistry_1.killSwitchMiddleware; } });
+Object.defineProperty(exports, "InMemoryKillSwitch", { enumerable: true, get: function () { return killSwitchRegistry_1.InMemoryKillSwitch; } });
+Object.defineProperty(exports, "KillSwitchEngagedError", { enumerable: true, get: function () { return killSwitchRegistry_1.KillSwitchEngagedError; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,qCAAmD;AAA1C,iHAAA,sBAAsB,OAAA;AAE/B,iCAA6D;AAApD,wGAAA,eAAe,OAAA;AACxB,2CAiBsB;AAhBpB,kHAAA,oBAAoB,OAAA;AACpB,0GAAA,YAAY,OAAA;AACZ,4GAAA,cAAc,OAAA;AACd,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,oHAAA,sBAAsB,OAAA;AACtB,gHAAA,kBAAkB,OAAA;AAClB,0GAAA,YAAY,OAAA;AAUd,uCASoB;AARlB,8GAAA,kBAAkB,OAAA;AAClB,0GAAA,cAAc,OAAA;AACd,8GAAA,kBAAkB,OAAA;AAOpB,yCAUqB;AATnB,gHAAA,mBAAmB,OAAA;AACnB,6GAAA,gBAAgB,OAAA;AAChB,oHAAA,uBAAuB,OAAA;AACvB,sGAAA,SAAS,OAAA;AACT,wGAAA,WAAW,OAAA;AACX,mHAAA,sBAAsB,OAAA;AAKxB,+CAMwB;AALtB,sHAAA,sBAAsB,OAAA;AACtB,4GAAA,YAAY,OAAA;AAKd,mCAakB;AAZhB,0GAAA,gBAAgB,OAAA;AAChB,8GAAA,oBAAoB,OAAA;AACpB,sGAAA,YAAY,OAAA;AACZ,sGAAA,YAAY,OAAA;AACZ,yGAAA,eAAe,OAAA;AACf,oGAAA,UAAU,OAAA;AAQZ,yDAA+E;AAAtE,0HAAA,qBAAqB,OAAA;AAAE,sHAAA,iBAAiB,OAAA;AAEjD,yCAKqB;AAJnB,gHAAA,mBAAmB,OAAA;AACnB,mHAAA,sBAAsB,OAAA;AAIxB,2DAO8B;AAN5B,0HAAA,oBAAoB,OAAA;AACpB,wHAAA,kBAAkB,OAAA;AAClB,4HAAA,sBAAsB,OAAA"}

package/dist/killSwitchRegistry.d.ts

@@ -0,0 +1,74 @@
+import type { EffectContext, EffectMiddleware } from "@loomwork/effect-runtime";
+import { SafetyViolationError } from "./safety";
+export type KillScope = "system" | "tenant" | "workflow";
+/** Why an effect is being refused. */
+export interface KillVerdict {
+    scope: KillScope;
+    /** The tenant / workflow id (absent for `system`). */
+    key?: string;
+    reason: string;
+}
+/**
+ * Where the stop flags live. Return `undefined` to let the effect run. Must be cheap — it is
+ * consulted before EVERY effect — and must fail CLOSED or open as the deployment prefers;
+ * a throw is treated as a refusal (fail closed) by {@link killSwitchMiddleware}.
+ */
+export interface KillSwitchRegistry {
+    /**
+     * Where the stop flags live, DECLARED by the registry. Optional and additive (no SPI version
+     * bump: an absent field changes nothing for any existing registry).
+     *
+     *  - `"process"` — the flags live in this process's memory ({@link InMemoryKillSwitch}); a stop
+     *    issued in another process is invisible here.
+     *  - `"shared"` — the flags live in a store every process reads (a DB row, a feature-flag
+     *    service), so a stop issued anywhere applies here.
+     *
+     * Tooling that runs your effects OUTSIDE the long-running app (`loom resume` / `loom start`)
+     * reads this and is FAIL-CLOSED: only a registry that affirmatively declares `"shared"` is
+     * trusted to carry an operator stop across processes. Absent, or anything else, is treated as
+     * process-local. A wrapper or subclass must re-declare it: forwarding is the wrapper's claim.
+     */
+    readonly scope?: "process" | "shared";
+    check(ctx: EffectContext): KillVerdict | undefined | Promise<KillVerdict | undefined>;
+}
+export declare class KillSwitchEngagedError extends SafetyViolationError {
+    readonly scope: KillScope;
+    readonly key: string | undefined;
+    /** A stop is a decision, not a fault: retrying it just repeats the refusal. */
+    readonly retryable = false;
+    constructor(verdict: KillVerdict);
+}
+/** Single-process registry with the operator-facing admin API. */
+export declare class InMemoryKillSwitch implements KillSwitchRegistry {
+    /** Declares itself process-local (see {@link KillSwitchRegistry.scope}). */
+    readonly scope: "process";
+    private system;
+    private readonly tenants;
+    private readonly workflows;
+    /** Stop every effect in the process. */
+    stopAll(reason?: string): void;
+    resumeAll(): void;
+    /** Stop every effect whose principal chain names `tenant`. */
+    stopTenant(tenant: string, reason?: string): void;
+    resumeTenant(tenant: string): void;
+    /** Stop every effect of one flow (one agent). */
+    stopWorkflow(workflowId: string, reason?: string): void;
+    resumeWorkflow(workflowId: string): void;
+    /** What is currently stopped, for an operator console. */
+    status(): {
+        system?: string;
+        tenants: Record<string, string>;
+        workflows: Record<string, string>;
+    };
+    check(ctx: EffectContext): KillVerdict | undefined;
+}
+/**
+ * Refuse every effect the registry stops. Place it OUTERMOST so a stopped effect never
+ * resolves a secret or spends budget. The refusal is recorded as a durable `SAFETY_BLOCKED`
+ * fact (the same audit list the K6 kill-switch validator writes) and thrown as
+ * {@link KillSwitchEngagedError}, a `SafetyViolationError` carrying `retryable = false`
+ * (which `retryMiddleware`'s default classifier honours), so it fails the step through the
+ * existing path and is not retried.
+ */
+export declare function killSwitchMiddleware(registry: KillSwitchRegistry): EffectMiddleware;
+//# sourceMappingURL=killSwitchRegistry.d.ts.map

package/dist/killSwitchRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"killSwitchRegistry.d.ts","sourceRoot":"","sources":["../src/killSwitchRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAwBhD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEzD,sCAAsC;AACtC,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,SAAS,CAAC;IACjB,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IACtC,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;CACvF;AAED,qBAAa,sBAAuB,SAAQ,oBAAoB;IAC9D,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,SAAS;gBACf,OAAO,EAAE,WAAW;CAUjC;AAED,kEAAkE;AAClE,qBAAa,kBAAmB,YAAW,kBAAkB;IAC3D,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAG,SAAS,CAAU;IACpC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IAEvD,wCAAwC;IACxC,OAAO,CAAC,MAAM,SAAgB,GAAG,IAAI;IAGrC,SAAS,IAAI,IAAI;IAGjB,8DAA8D;IAC9D,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAgB,GAAG,IAAI;IAGxD,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAGlC,iDAAiD;IACjD,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,SAAkB,GAAG,IAAI;IAGhE,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIxC,0DAA0D;IAC1D,MAAM,IAAI;QACR,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACnC;IAQD,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,WAAW,GAAG,SAAS;CAWnD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,gBAAgB,CA2BnF"}

package/dist/killSwitchRegistry.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InMemoryKillSwitch = exports.KillSwitchEngagedError = void 0;
+exports.killSwitchMiddleware = killSwitchMiddleware;
+const safety_1 = require("./safety");
+class KillSwitchEngagedError extends safety_1.SafetyViolationError {
+    scope;
+    key;
+    /** A stop is a decision, not a fault: retrying it just repeats the refusal. */
+    retryable = false;
+    constructor(verdict) {
+        super("kill-switch", `${verdict.scope}${verdict.key !== undefined ? ` "${verdict.key}"` : ""} stopped: ${verdict.reason}`, "kill-switch");
+        this.name = "KillSwitchEngagedError";
+        this.scope = verdict.scope;
+        this.key = verdict.key;
+    }
+}
+exports.KillSwitchEngagedError = KillSwitchEngagedError;
+/** Single-process registry with the operator-facing admin API. */
+class InMemoryKillSwitch {
+    /** Declares itself process-local (see {@link KillSwitchRegistry.scope}). */
+    scope = "process";
+    system;
+    tenants = new Map();
+    workflows = new Map();
+    /** Stop every effect in the process. */
+    stopAll(reason = "system stop") {
+        this.system = reason;
+    }
+    resumeAll() {
+        this.system = undefined;
+    }
+    /** Stop every effect whose principal chain names `tenant`. */
+    stopTenant(tenant, reason = "tenant stop") {
+        this.tenants.set(tenant, reason);
+    }
+    resumeTenant(tenant) {
+        this.tenants.delete(tenant);
+    }
+    /** Stop every effect of one flow (one agent). */
+    stopWorkflow(workflowId, reason = "workflow stop") {
+        this.workflows.set(workflowId, reason);
+    }
+    resumeWorkflow(workflowId) {
+        this.workflows.delete(workflowId);
+    }
+    /** What is currently stopped, for an operator console. */
+    status() {
+        return {
+            ...(this.system !== undefined && { system: this.system }),
+            tenants: Object.fromEntries(this.tenants),
+            workflows: Object.fromEntries(this.workflows),
+        };
+    }
+    check(ctx) {
+        if (this.system !== undefined)
+            return { scope: "system", reason: this.system };
+        const tenant = ctx.principal?.tenant;
+        if (tenant !== undefined) {
+            const reason = this.tenants.get(tenant);
+            if (reason !== undefined)
+                return { scope: "tenant", key: tenant, reason };
+        }
+        const wf = this.workflows.get(ctx.workflowId);
+        if (wf !== undefined)
+            return { scope: "workflow", key: ctx.workflowId, reason: wf };
+        return undefined;
+    }
+}
+exports.InMemoryKillSwitch = InMemoryKillSwitch;
+/**
+ * Refuse every effect the registry stops. Place it OUTERMOST so a stopped effect never
+ * resolves a secret or spends budget. The refusal is recorded as a durable `SAFETY_BLOCKED`
+ * fact (the same audit list the K6 kill-switch validator writes) and thrown as
+ * {@link KillSwitchEngagedError}, a `SafetyViolationError` carrying `retryable = false`
+ * (which `retryMiddleware`'s default classifier honours), so it fails the step through the
+ * existing path and is not retried.
+ */
+function killSwitchMiddleware(registry) {
+    return async (ctx, _input, next) => {
+        let verdict;
+        try {
+            verdict = await registry.check(ctx);
+        }
+        catch (err) {
+            // A registry that cannot answer fails CLOSED: a kill switch that errors open is a
+            // switch that is off exactly when the store it reads is down.
+            verdict = {
+                scope: "system",
+                reason: `kill-switch registry unavailable: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+        if (verdict !== undefined) {
+            ctx.emit("SAFETY_BLOCKED", {
+                stepId: ctx.stepId,
+                validatorId: "kill-switch",
+                phase: "input",
+                reason: verdict.reason,
+                category: "kill-switch",
+                scope: verdict.scope,
+                ...(verdict.key !== undefined && { key: verdict.key }),
+            });
+            throw new KillSwitchEngagedError(verdict);
+        }
+        return next();
+    };
+}
+//# sourceMappingURL=killSwitchRegistry.js.map

package/dist/killSwitchRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"killSwitchRegistry.js","sourceRoot":"","sources":["../src/killSwitchRegistry.ts"],"names":[],"mappings":";;;AA4IA,oDA2BC;AAtKD,qCAAgD;AA0DhD,MAAa,sBAAuB,SAAQ,6BAAoB;IACrD,KAAK,CAAY;IACjB,GAAG,CAAqB;IACjC,+EAA+E;IACtE,SAAS,GAAG,KAAK,CAAC;IAC3B,YAAY,OAAoB;QAC9B,KAAK,CACH,aAAa,EACb,GAAG,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,OAAO,CAAC,MAAM,EAAE,EACpG,aAAa,CACd,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACzB,CAAC;CACF;AAfD,wDAeC;AAED,kEAAkE;AAClE,MAAa,kBAAkB;IAC7B,4EAA4E;IACnE,KAAK,GAAG,SAAkB,CAAC;IAC5B,MAAM,CAAqB;IAClB,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEvD,wCAAwC;IACxC,OAAO,CAAC,MAAM,GAAG,aAAa;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IACD,SAAS;QACP,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;IAC1B,CAAC;IACD,8DAA8D;IAC9D,UAAU,CAAC,MAAc,EAAE,MAAM,GAAG,aAAa;QAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,YAAY,CAAC,MAAc;QACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,iDAAiD;IACjD,YAAY,CAAC,UAAkB,EAAE,MAAM,GAAG,eAAe;QACvD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,cAAc,CAAC,UAAkB;QAC/B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED,0DAA0D;IAC1D,MAAM;QAKJ,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACzD,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;YACzC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAkB;QACtB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC;QACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5E,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACpF,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AArDD,gDAqDC;AAED;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAAC,QAA4B;IAC/D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAoB,EAAE;QACnD,IAAI,OAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,kFAAkF;YAClF,8DAA8D;YAC9D,OAAO,GAAG;gBACR,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAChG,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBACzB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,WAAW,EAAE,aAAa;gBAC1B,KAAK,EAAE,OAAO;gBACd,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,aAAa;gBACvB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;aACvD,CAAC,CAAC;YACH,MAAM,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC"}

package/dist/metering.d.ts

@@ -0,0 +1,81 @@
+import type { EffectMiddleware } from "@loomwork/effect-runtime";
+export interface ResourceDelta {
+    tokens?: number;
+    costUsd?: number;
+    ms?: number;
+    /** Peak resident memory attributable to the effect, in bytes. */
+    memBytes?: number;
+    /** Wall-clock time, in ms (distinct from `ms` when the effect runs off-thread). */
+    wallMs?: number;
+    /** Network bytes transferred by the effect. */
+    netBytes?: number;
+    /**
+     * ADR 0115 — open dimensions (`gpu_seconds`, `credits`), by name. Folded into
+     * `_resources.custom`; the kernel assigns no unit and no price, so converting these to money
+     * is this pricing function's job. At most 32 names, each matching `VOCABULARY_NAME_PATTERN`
+     * (`@loomwork/core`), never a built-in name. A bad name (or value) makes `ctx.emit` throw AFTER the
+     * effect ran, like a built-in ceiling breach.
+     */
+    custom?: Readonly<Record<string, number>>;
+}
+export interface MeterInfo {
+    stepId: string;
+    input: unknown;
+    /** The effect's result — `undefined` when metering an aborted effect (K8). */
+    result: unknown;
+    /** Measured wall-time of the effect, in ms. */
+    ms: number;
+    /**
+     * K8 — true when the effect was severed mid-flight (cancellation/deadline).
+     * The wall-time up to the abort is still metered so cancel-before-completion
+     * cannot evade budgets; pricing may add provider-reported partial usage.
+     */
+    aborted?: boolean;
+}
+/** Compute the resource delta for one effect call — e.g. tokens×rate for an LLM. */
+export type Pricing = (info: MeterInfo) => ResourceDelta;
+export interface Budget {
+    maxTokens?: number;
+    maxCostUsd?: number;
+    maxMemBytes?: number;
+    maxWallMs?: number;
+    maxNetBytes?: number;
+    /**
+     * ADR 0115 — ceilings for open dimensions, by name (`{ gpu_seconds: 60 }`): an execution whose
+     * `_resources.custom[name]` has reached the ceiling has its next effect denied, like every
+     * other dimension. Only enforced where set.
+     */
+    maxCustom?: Readonly<Record<string, number>>;
+}
+/** True when `name` is a built-in metering dimension (never a custom one). */
+export declare function isBuiltinDimension(name: string): boolean;
+/** True when `name` is a valid custom dimension name (pattern shared with the fold's guard). */
+export declare function isCustomDimensionName(name: string): boolean;
+/**
+ * Validate a `Budget.maxCustom` and return a FROZEN shallow copy to enforce against (so a later
+ * mutation of the caller's object cannot smuggle in a built-in name or a bad ceiling). Refuses a
+ * built-in dimension name (use `maxTokens` etc.: a custom ceiling on `tokens` would read
+ * `_resources.custom.tokens`, which nothing meters) and a non-numeric ceiling.
+ */
+export declare function assertMaxCustom(maxCustom: Readonly<Record<string, number>> | undefined): Readonly<Record<string, number>> | undefined;
+/** The first custom ceiling the spend has reached, as a reason — own-property reads only. */
+export declare function overCustomBudget(custom: Readonly<Record<string, number>> | undefined, maxCustom: Readonly<Record<string, number>> | undefined): string | null;
+export interface MeteringOptions {
+    pricing: Pricing;
+    /** When set, an execution over budget has its next effect denied (admission control). */
+    budget?: Budget;
+    /** Injectable clock (defaults to Date.now); only affects the measured `ms`. */
+    clock?: () => number;
+}
+export declare class QuotaExceededError extends Error {
+    readonly reason: string;
+    /** A budget refusal is a decision; retrying repeats it (`retryMiddleware` honours this). */
+    readonly retryable = false;
+    constructor(reason: string);
+}
+/** The RESOURCE_METERED payload for a delta — only dimensions the pricing reported. */
+export declare function meteredPayload(delta: ResourceDelta, ms: number): Record<string, number | Readonly<Record<string, number>>>;
+/** Read token usage from an LlmResponse-shaped result (`{ usage: { inputTokens, outputTokens } }`). */
+export declare function llmUsageTokens(result: unknown): number;
+export declare function meteringMiddleware(options: MeteringOptions): EffectMiddleware;
+//# sourceMappingURL=metering.d.ts.map

package/dist/metering.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metering.d.ts","sourceRoot":"","sources":["../src/metering.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,gBAAgB,EAAoB,MAAM,0BAA0B,CAAC;AAclG,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,CAAC;IAIZ,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,OAAO,CAAC;IAChB,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,oFAAoF;AACpF,MAAM,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,KAAK,aAAa,CAAC;AAEzD,MAAM,WAAW,MAAM;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC9C;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,gGAAgG;AAChG,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,GACtD,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAa9C;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,EACpD,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,GACtD,MAAM,GAAG,IAAI,CAQf;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,yFAAyF;IACzF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4FAA4F;IAC5F,QAAQ,CAAC,SAAS,SAAS;gBACf,MAAM,EAAE,MAAM;CAK3B;AAqBD,uFAAuF;AACvF,wBAAgB,cAAc,CAC5B,KAAK,EAAE,aAAa,EACpB,EAAE,EAAE,MAAM,GACT,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAU3D;AAED,uGAAuG;AACvG,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAKtD;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,gBAAgB,CA8C7E"}